Akihiro Suda

alcless. 🍺 Alcoholless: lightweight security sandbox for Homebrew, AI agents, etc. on macOS

lsf. Linux Subsystem for FreeBSD (😈 on 🐧)

issues-docker. :whale: Docker Issues and Tips (aufs/overlay/btrfs..)

gomodjail. [Experimental] jail for Go modules

containerized-systemd. Dockerfile examples for containerized systemd (mainly for test environments)

go-netfilter-queue. Go bindings for libnetfilter_queue (Forked from openshift/geard)

apt-transport-oci. OCI transport plugin for apt-get (i.e., apt-get over ghcr.io)

buildbench. benchmark tool for Docker, BuildKit, img, Buildah, and Kaniko

aspectgo. Aspect-Oriented Programming framework for Go

vexllm. silence negligible CVE alerts using LLM

myaot. Succeeded by https://github.com/yomaytk/elfconv

clone3-workaround. Workaround for running ubuntu:21.10, fedora:35, and other glibc >= 2.34 distros on Docker <= 20.10.9

gosocialcheck. social reputation checker for Go modules

filegrain. transport-agnostic, fine-grained content-addressable container image layout

instance-per-pod. Create a dedicated IaaS instance per Pod to mitigate container breakout (including CPU vulnerabilities depending on the instance type)

nac. Not A Container, for macOS

go-dag. Minimalistic DAG utility with concurrent scheduler

AkihiroSuda. Profile page for https://github.com/AkihiroSuda

yamlctl. An experimental tool to modify YAMLs without losing (most of) comment lines.

moby-snapshot. Binary snapshot of Moby (irregularly updated)

ntimes. :watch: time(1) with average time, flaky rate, .. [Deprecated in favor of hyperfine]

awesome-swarm. [OUTDATED] :whale: :whale: :whale: A curated list of Swarm (Docker >=1.12) resources and projects

go-replay. record-less semi-deterministic replayer for Go programs

passt-mirror. Mirror of https://passt.top/passt/ . Pull requests are not accepted here.

cni-isolation. CNI Bridge Isolation Plugin (Merged into the firewall plugin v1.1.0)

buildkit_poc. temp buildkit playground

go-wrap-to-percent-w. convert `Wrap(err, "foo")` to `Errorf("foo: %w", err)`

runc. runc container cli tools

boot2docker. Lightweight Linux for Docker

multidocker. :whale: :whale: :whale: Multiple Docker daemons on a single machine

usernetes. Moby (aka Docker) & Kubernetes, installable under $HOME, without the root privileges

critest-rootless-cgroup2. critest example (rootless+cgroup2)

repro-sources-list.sh. Configures `/etc/apt/sources.list` and similar files for installing packages from a snapshot.

lkl-docker. Dockerfile

docker-library-official-images. Primary source of truth for the Docker "Official Images" program

WasmEdge. WasmEdge is a lightweight, high-performance, and extensible WebAssembly runtime for cloud native, edge, and decentralized applications. It powers serverless apps, embedded functions, microservices, smart contracts, and IoT devices.