Global

A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

> Build, run, and share AI agents with a declarative YAML config, rich tool ecosystem, and multi-agent orchestration.

gVisor provides a strong layer of isolation between running applications and the host operating system. It is an application kernel that implements a Linux-like interface. Unlike Linux, it is written in a memory-safe language (Go) and runs in userspace.

An embeddable, portable, branchable virtual machine to safely run Agents locally.

We encourage users to help make these tools better by submitting issues when you find a bug or want a new feature. Check out our contributing overview and developer-specific documentation if you are interested in providing code contributions.

A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image.

Podman (the POD MANager) is a tool for managing containers and images, volumes mounted into those containers, and pods made from groups of containers. Podman runs containers on Linux, but can also be used on Mac and Windows systems using a Podman-managed virtual machine.

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness, and portability.

Jib builds optimized Docker and OCI images for your Java applications without a Docker daemon - and without deep mastery of Docker best-practices. It is available as plugins for Maven and Gradle and as a Java library.

Clair is an open source project for the [static analysis] of vulnerabilities in application containers (currently including [OCI] and [docker]).

Nasiko is a single control-plane process that sits in front of every agent and answers all of that.

Run AI agents on real and isolated machines — own kernel, filesystem, and network — with <100ms boot. Local first, OCI compatible, pure Rust.

CLI tool for spawning and running containers according to the OCI specification

This repository's main product is the Open Source Registry implementation for storing and distributing container images and other content using the OCI Distribution Specification.

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.