Mick Pollard

network-management. Home network management: Mikrotik rb5009 router (IaC) + Omada controller (OC200)

bootc-jetson. Bootable containers for the NVIDIA Jetson platform

homelab. GitOps-managed homelab using Kubernetes (Talos), ArgoCD, and Terraform for infrastructure as code.

ubuntu-bootc. Ubuntu Bootc experiment with composefs-native backend

ODS. Turn your PC, Mac, or Linux box into an AI server. LLM inference, chat UI, voice, agents, workflows, RAG, and image generation.

cosmic-build-meta. Build metadata for building the COSMIC desktop stack using BuildStream

fedora-atomic-desktops-sealed. Sealed bootable container images for the Fedora Atomic Desktops (Work in progress, unofficial development images)

smolvm. Portable, lightweight, self-contained virtual machines.

bootc-foundry. Base bootc containers for image builder

github-workflow-container-lifecycle.

go-modern-guidelines.

homelab. Personal Homelab

intuneme. intune with nspawn

snosi. A bootable container image build system using mkosi for creating Debian-based bootable containers and system extensions (sysexts).

bootc-man. bootc-man: Build, test, and verify bootc images with a single CLI

instruqt. All lab.redhat.com Instruqt code is stored here.

rhel-bootc-workstation. Dockerfile

cuckoo-iso-builder. Shell

bootc-isos. Shell

community. Sysexts built from various sources from the community

chunkah. An OCI building tool for content-based layers

greenboot-rs. Rust rewrite of greenboot

fedora. Sysexts built from Fedora packages

finpilot. Build your own custom Bluefin

debian-bootc-core. Debian Bootc compatible base image

cek. Explore the (overlay) filesystem and layers of OCI container images, without running them.

kde-bootc. Dockerfile

image-builder-cli. Building operating system artifacts (disk images, ISOs, etc.)

rpmrepo. RPM Repository Snapshot Management

blueberry. :blueberries: A light-weight server OS for aarch64-SBC's like the Raspberry Pi

zariux. Zariux OS

kaiserschmarrn. Tasty server image, built with Fedora Bootc and included cloud init support. Wozwa.

HeliumOS. Shell

bootc-live. Booting a live system from a bootc (bootable containers) image.

snow-bootc. Deprecated

nbc. NBC is not bootc

carinata. Bootc image for running on Lima

redhat-image-mode-demo. Repository to showcase RHEL Image mode

k0snode-bootc. A bootc system image built on Fedora that provides an immutable operating system designed to run k0s Kubernetes nodes. This project leverages bootc for OS deployment and updates, offering a secure and reliable foundation for running Kubernetes workloads with minimal maintenance overhead.

pcp. Performance Co-Pilot

greenboot. Generic Health Checking Framework for systemd

LocksmithUSB. An immutable distro(based on Fedora bootc) designed to be put on a USB drive and booted anywhere to provide some useful tools to repair broken systems.

wolfifin. Building Bluefin with Wolfi

bcvk. Rust

homebrew-bcvk. Packaging for BCVK

atomic-desktop. Shell

bootc-images. Bootc Image examples

below. A time traveling resource monitor for modern Linux systems

bazaar. New App Store for GNOME

flightctl. Flight Control aims to provide simple, scalable, and secure management of edge devices and applications. Users declare the operating system version, host configuration, and set of applications they want to run on an individual device or a whole fleet of devices, and Flight Control rolls out the target configuration to devices.

fips-validator. Go

ubuntu-bootc. Ubuntu Bootc experiment with composefs-native backend (moved to bootcrew/mono)

cayo. Just

debian-bootc. Debian Bootc experiment with composefs native backend (moved to bootcrew/mono)

arch-bootc. Arch Linux with Bootc composefs-native backend (moved to bootcrew/mono)

oats. OpenTelemetry Acceptance Tests (OATs), or OATs for short, is a test framework for OpenTelemetry.

linux-network-performance-parameters. Learn where some of the network sysctl variables fit into the Linux/Kernel network flow. Translations: 🇷🇺

aurora-corporate-edition. Aurora compatible with a corporate world

fedora-bootc-workstation. Dockerfile

containerfiles. Containerfiles including AI, game servers, bootc and even a rickroll.

blue95. A desktop for your childhood home's computer room

mini-rack. Miniature rack builds, for portable or compact Homelabs.

sig-livemedia. AlmaLinux SIG/Live-media

main. CentOS Stream-based base image

ccos. a CentOS-based CoreOS-style bootc image

verms-os. My custom build of Fedora Silverblue

gitlabform. 🏗 Specialized configuration as a code tool for GitLab

bluefin-lts. Bluefin LTS, built on CentOS with bootc

bootc-appliance. HTML

fedora-bootc-gitops. Dockerfile

atomic-setup. My personal Atomic Desktop setup using bootc technology.

scripts-mikrotik. A set of scripts and Taskfile to build and manage RouterOS configuration scripts for mulitple routers and switches, including support for configuration storage in Vault.

slides. Terminal based presentation tool

reveal.js-docker. Docker images providing easier to use, opinionated reveal.js web apps - web-based slides/presentations

bootc. Welcome to the atomic future of Linux

toolkit. Ansible Content Collection for common network functions like dynamic documentation

sshamble. SSHamble: Unexpected Exposures in SSH

bluefusion. A Fedora Silverblue image that adds RPM Fusion with media codecs and integrates both Homebrew and Nix

build-container-installer. Creates an ISO for installing a container image as an OS

hyprland-atomic. Hyprland atomic desktop

fedora-kinoite. Custom Fedora Kinoite images with some overlayed packages

turnk8s. HCL

eevans-infra. Code for managing my homelab/self-hosting infrastructure

bootc. Boot and upgrade via container images

centos-bootc. Create and maintain base bootable container images from Fedora ELN and CentOS Stream packages

podman-bootc.

image-template. Build your own custom Universal Blue Image!

ostree-quarks. YA Fedora OCI spin

bootc-image-builder. A container for deploying bootable container images.

os. Shell

wayblue. Fedora Atomic images for wayland compositors

main-bootc. [WIP] OCI base images of Fedora Atomic Desktop using Bootc

proxmox-cloud-controller-manager. Kubernetes cloud controller manager for Proxmox

proxmox-csi-plugin. Proxmox CSI Plugin

home-server. Proxmox homeserver IaC configuration

kubemox. Proxmox operator for Kubernetes to manage Proxmox resources.

cluster-api-provider-proxmox. Cluster API provider implementation for Proxmox VE

cluster-api-provider-proxmox. Cluster API Provider for Proxmox VE (CAPMOX)

Proxmox. Proxmox VE Helper-Scripts

terragrunt-gcp-example. HCL

bitkey. Bitkey is a self-custody bitcoin wallet with an app, hardware, and recovery tools.

automation-platform. Automation Platform is an unofficial, open-source build of well know IaC platform.

toolboxes. Centralized repository of containers designed for Toolbox/Distrobox

ublue-custom. Custom Fedora immutable desktop images with unfiltered Flathub, distrobox, automatic updates, and drivers (nvidia and xbox)

ostree-pitti-workstation. Obsolete, superseded by https://github.com/martinpitt/workstation-bootc

desktop-configuration. My personal laptop configuration for work and play.

secureblue. A security-focused desktop and server linux operating system.

Essential8-SDLC. Software supply chain and the Essential 8 - How to evolve Essential 8 for the modern world

examples. Example code and files from "Prometheus: Up and Running, 2e edition"

prometheus-pve-exporter. Exposes information gathered from Proxmox VE cluster for use by the Prometheus monitoring system

custom-toolboxes. a set of customized base toolbox containers using a directory structure that makes them simple to modify

grafana-dashboards-kubernetes. A set of modern Grafana dashboards for Kubernetes.

spring-boot-observability. Observe Spring Boot app with three pillars of observability: Traces (Tempo), Metrics (Prometheus), Logs (Loki) on Grafana through OpenTelemetry and OpenMetrics.

grafana-dashboards. grafana dashboards

tanzu-dev-portal. Content for Tanzu dev portal

images. Community maintained container images to use with toolbx and distrobox

school-of-sre. At LinkedIn, we are using this curriculum for onboarding our entry-level talents into the SRE role.

assessment-ie3. Our Infra Engineer 3 assessment

burnernote. Burner Note is a free, ad-free and open source tool for securely sending text based notes that are encrypted and self destruct once read.

message-burner. Secure one-time private messages that get destroyed upon reading. Made with the Nette framework. See here: https://burner.matronator.cz

terraform-proxmox-cloud-init-vm. Terraform module that creates a cloud-init enabled VM in Proxmox.

proxmox-operator. Go

curriculum. 📚Open Source Curriculum for CNCF Certification Courses

computer-science. 🎓 Path to a free self-taught education in Computer Science!

sway-setup. sway experimental configuration (it's an experiment since it's not a daily driver - many things just suck)

sway-systemd. Systemd integration for Sway session

ansible-role-k3s. Ansible role for deploying k3s cluster

homelab. A collection of resources that help spin up a home lab environment, or at least how I do it

ssh-audit. SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

buildkit-cli-for-kubectl. BuildKit CLI for kubectl is a tool for building container images with your Kubernetes cluster

arc42-template. arc42 - the template for software architecture documentation and communication

xpid. Linux Process Discovery. C Library, Go bindings, Runtime.

routeros-scanner. Tool to scan for RouterOS (Mikrotik) forensic artifacts and vulnerabilities.

Grafana-Mikrotik. 🔰 Grafana dashboard for Mikrotik/routerOS [Prometheus, SNMP]

vmtop. Real-time monitoring of KVM/Qemu VMs

ansible-role-korora. Manage, tweak and customise Fedora Workstation with Ansible (and apply Korora settings by default).

ansible-collection-kubernetes. Ansible collection for deploying Kubernetes

xpra. Persistent remote applications for X11; screen sharing for X11, MacOS and MSWindows.

kics. Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

elemental-toolkit. :snowflake: The toolkit to build, ship and maintain cloud-init driven Linux derivatives based on container images

suse-at-home. Shell

excalidraw. Virtual whiteboard for sketching hand-drawn like diagrams

PowerDNS-Admin. A PowerDNS web interface with advanced features

kairos. The immutable Linux meta-distribution for edge Kubernetes.

ipxe-boot-server. Step by step guide for how to build your own PXE boot server supporting both legacy BIOS and EFI hardare

pixie. PXE server with embedded TFTP, HTTP and iPXE ROMs

skeleton-ansible-role. Skeleton for use with ansible-galaxy to create a new ansible role.

homelab. Fully automated homelab from empty disk to running services with a single command.

libvirt-k8s-provisioner. Automate your k8s installation

my-backup-plan. How I back up all my data.

theme.sh. A script which lets you set your $terminal theme.

podman-gitlab-runner. Use Podman as a custom executor for your Gitlab CI

ansible-wtf. collection of playbooks that produce interesting results

manjaro-playbook. Manjaro/Arch Linux Ansible provision playbook

routeros-configure. Configure a Router-OS mikrotik device for L2 switching.

descheduler. Descheduler for Kubernetes

smashing. The exceptionally handsome dashboard framework in Ruby and Coffeescript.

routeros-scripts. a collection of scripts for MikroTik RouterOS

ceph-ansible. Ansible playbooks to deploy Ceph, the distributed filesystem.

homelab. Monorepo for my personal homelab

cal.diy. Scheduling infrastructure for absolutely everyone.

ansible_aio_ee. All-in-one execution environment for Ansible Controller / AWX

multi-yubikey-helper. Same Subkeys, Many Yubikeys...

transformative. IndieWeb personal website software.

ansible-collection-cluster_manager. Ansible collection for managing virtualized clusters based on libvirt

custom-linux-iso-builder. Tool for customizing Linux Installation ISO images

bigspring-light-hugo. Bigspring is a Hugo startup theme. It has a clean, minimal, fresh UI.

tflint. A Pluggable Terraform Linter

infracost. Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!

cloud-custodian. Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

trivy. Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

vscode-tfsec. vscode extension for tfsec

cloud-security-remediation-guides. Security Remediation Guides

tfsec. Tfsec is now part of Trivy

cloudsploit. Cloud Security Posture Management (CSPM)

hugo-goa. Simple Minimalistic Theme for Hugo

aws-inventory. AWS Inventory in a single HTML file using JS AWS-SDK & Bootstrap

awesome-ecs. A curated list of awesome ECS guides, development tools, and resources

django-ecs-terraform. Deploying Django to AWS ECS with Terraform

heimdall2. Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.

aws-foundations-cis-baseline. InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark

ansible-role-awsvault. Ansible role for aws-vault. Available on Ansible Galaxy.

sail. Docker files for running a basic Laravel application.

terraform-aws-secure-baseline. Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

awesome-tf. Curated list of resources on HashiCorp's Terraform and OpenTofu

terraform-aws-nomad. A Terraform Module for how to run Nomad on AWS using Terraform and Packer

hello-infra-draft. Experimenting with a "Hello, World" infrastructure story

Engineering-Playbook. Repository of documentation on how we do Software Engineering at TrussWorks.

terraform-layout-example. Example of a Truss Terraform project

rspec-terraspace. Terraspace RSpec support

modules.tf-demo. Real modules.tf demo (updated May 2021)

ansible-role-terragrunt. Ansible role for install terragrunt on a large number of OS

ansible-role-hashicorp. Install HashiCorp products using packages.

linux-workstation-playbook. Linux workstation machine setup and configuration.

terragrunt-github-actions-aws-ecs. Adopt Terraform to auto-provision infrastructure, and GitHub Flow to continuously test and deploy code – See full article

internet-monitoring. Monitor your network and internet speed with Docker & Prometheus

awesome-macos. A curated list of awesome software for Apple's macOS.

Mycodo. An environmental monitoring and regulation system

awesome-compose. Awesome Docker Compose samples

curriculum. The open curriculum for learning web development