Filipp Frizzy 2018-06-07 16:53:02 +00:00 committed by GitHub
parent 39577b0195
commit e722d3be7e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 1 deletions

View File

@ -143,6 +143,8 @@ Railcar is a rust implementation of the opencontainers initiative's runtime spec
Kata Containers is a new open source project building extremely lightweight virtual machines that seamlessly plug into the containers ecosystem.
* [plash](https://github.com/ihucos/plash/)
Lightweight, rootless containers.
* [runv](https://github.com/hyperhq/runv)
Hypervisor-based (KVM, Xen, QEMU) Runtime for OCI. Security by isolation.
## Sandboxes
@ -187,9 +189,11 @@ A tool for analyzing and comparing container images.
* [buildah](https://github.com/projectatomic/buildah)
A tool which facilitates building OCI container images.
* [skopeo](https://github.com/projectatomic/skopeo)
Work with remote images registries - retrieving information, images, signing content
Work with remote images registries - retrieving information, images, signing content.
* [img](https://github.com/jessfraz/img)
Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
* [dgr](https://github.com/blablacar/dgr)
Command line utility designed to build and to configure at runtime App Containers Images (ACI) and App Container Pods (POD) based on convention over configuration.
## Dashboard
@ -223,6 +227,8 @@ Security by segmentation for Docker and Kubernetes.
Quick and Easy server testing/validation.
* [sockguard](https://github.com/buildkite/sockguard)
A proxy for docker.sock that enforces access control and isolated privileges.
* [gvisor](https://github.com/google/gvisor)
gVisor is a user-space kernel, written in Go, that implements a substantial portion of the Linux system surface. It includes an Open Container Initiative (OCI) runtime called runsc that provides an isolation boundary between the application and the host kernel. The runsc runtime integrates with Docker and Kubernetes, making it simple to run sandboxed containers.
### Links