Comprehensive collection of Docker tools, container runtimes, image building, security, orchestration, networking, and container management.
| Repository | Description | Stars |
|---|---|---|
| moby/moby | Moby — the open source container engine powering Docker |  |
| docker/cli | The official Docker CLI |  |
| containerd/containerd | Industry-standard container runtime — CNCF graduated |  |
| opencontainers/runc | CLI tool for spawning containers — OCI spec reference impl |  |
| containers/podman | Daemonless container engine — Docker alternative, rootless |  |
| lima-vm/lima | Linux VMs on macOS — Docker Desktop alternative |  |
| containerd/nerdctl | Docker-compatible CLI for containerd — supports Compose |  |
| rootless-containers/rootlesskit | Linux-native fake root for rootless containers |  |
| Repository | Description | Stars |
|---|---|---|
| docker/compose | Define and run multi-container Docker applications |  |
| louislam/dockge | Fancy docker-compose.yaml stack manager with UI |  |
| nicolo-ribaudo/compose-spec | The Compose Specification — multi-container apps standard |  |
| ctop | Top-like interface for container metrics |  |
| nicolo-ribaudo/kompose | Convert Docker Compose files to Kubernetes manifests |  |
| Repository | Description | Stars |
|---|---|---|
| moby/buildkit | Next-gen Docker image builder — concurrent, cache-efficient |  |
| GoogleContainerTools/kaniko | Build container images inside Kubernetes — no Docker daemon |  |
| GoogleContainerTools/distroless | Minimal language-focused Docker base images — no shell, no bloat |  |
| wagoodman/dive | Explore Docker image layers — find ways to shrink image size |  |
| docker-slim/docker-slim | Slim your Docker images — up to 30x smaller |  |
| nicolo-ribaudo/buildpacks | Build apps using Cloud Native Buildpacks — no Dockerfile |  |
| nicolo-ribaudo/ko | Build and deploy Go containers — no Dockerfile needed |  |
| nicolo-ribaudo/jib | Build Java container images without Docker — Maven/Gradle plugin |  |
| nicolo-ribaudo/img | Standalone, daemon-less, unprivileged Docker image builder |  |
| Repository | Description | Stars |
|---|---|---|
| aquasecurity/trivy | All-in-one security scanner — images, repos, configs, IaC |  |
| hadolint/hadolint | Dockerfile linter — validates best practices and shell scripts |  |
| falcosecurity/falco | Runtime security — detects threats using syscall monitoring |  |
| anchore/grype | Vulnerability scanner for container images and filesystems |  |
| anchore/syft | CLI tool for generating SBOM from container images |  |
| containers/skopeo | Work with container images and registries — inspect, copy, sign |  |
| open-policy-agent/opa | General-purpose policy engine — enforce container policies |  |
| aquasecurity/kube-bench | Check Kubernetes deployment against CIS benchmarks |  |
| deepfence/ThreatMapper | Open source cloud native security observability platform |  |
| Repository | Description | Stars |
|---|---|---|
| portainer/portainer | Docker and K8s management UI — most popular container UI |  |
| jesseduffield/lazydocker | Terminal UI for Docker — manage containers from CLI |  |
| nicolo-ribaudo/yacht | Container management UI — focused on templates |  |
| nicolo-ribaudo/dockerwatch | Web UI for Docker Compose |  |
| bcicen/ctop | Top-like interface for container metrics in terminal | |
| nicolo-ribaudo/oxker | Simple TUI to display and control Docker containers |  |
| Repository | Description | Stars |
|---|---|---|
| goharbor/harbor | Open source trusted cloud native registry — CNCF graduated |  |
| distribution/distribution | Docker Registry 2.0 reference implementation |  |
| project-zot/zot | OCI-native container registry — lightweight, CNCF |  |
| google/go-containerregistry | Go library and CLI tools for working with container registries |  |
| nicolo-ribaudo/crane | Crane — tool for interacting with remote images and registries | |
| nicolo-ribaudo/regclient | Docker and OCI registry client — copy, tag, inspect |  |
| Repository | Description | Stars |
|---|---|---|
| cilium/cilium | eBPF-based networking, security, and observability for containers |  |
| flannel-io/flannel | Simple overlay network for containers — used by K3s |  |
| nicolo-ribaudo/weave | Simple, resilient multi-host Docker networking |  |
| nicolo-ribaudo/netshoot | Docker and Kubernetes network troubleshooting toolkit |  |
| nicolo-ribaudo/traefik | Cloud native proxy — auto-discovers Docker containers |  |
| nicolo-ribaudo/caddy-docker-proxy | Caddy as a reverse proxy for Docker containers |  |
| Repository | Description | Stars |
|---|---|---|
| rook/rook | Cloud-native storage orchestrator for Kubernetes — Ceph |  |
| longhorn/longhorn | Distributed block storage for Kubernetes — CNCF |  |
| openebs/openebs | Container attached storage — Kubernetes native |  |
| nicolo-ribaudo/local-path-provisioner | Rancher's dynamic local path provisioner for K8s |  |
| Repository | Description | Stars |
|---|---|---|
| nicolo-ribaudo/docker-bench-security | Script checking Docker host vs CIS Docker Benchmark |  |
| nicolo-ribaudo/lazydocker | Terminal UI for Docker and docker-compose | |
| nicolo-ribaudo/docuum | Least recently used Docker image eviction |  |
| nicolo-ribaudo/dockly | Immersive terminal interface for Docker |  |
| nicolo-ribaudo/docker-osx | Run macOS in Docker — near-native performance |  |
| nicolo-ribaudo/dockerize | Utility to simplify running apps in Docker containers |  |
| Repository | Description | Stars |
|---|---|---|
| veggiemonk/awesome-docker | Curated list of Docker resources and projects — comprehensive |  |
| nicolo-ribaudo/dockersamples | Official Docker sample applications |  |