Awesome Lists

Wrappers

• Awesome Linux Container

Building Images

Builder

• BuildKit - Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit.
• essex - Boilerplate for Docker Based Projects: Essex is a CLI utility written in bash to quickly setup clean and consistent Docker projects with Makefile driven workflows.
• HPC Container Maker - Generates Dockerfiles from a high level Python recipe, including building blocks for High-Performance Computing components.
• img - Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
• DockerSlim
• apko - Declarative OCI image builder from apk packages; reproducible by design.
• ko - Build and deploy Go applications as container images without a Dockerfile.
• nix2container - Build OCI images with Nix without docker load round-trips.

Developer Workflow

API Client

• contajners - An idiomatic, data-driven, REPL friendly Clojure client for OCI container engines.

Wrappers

• subuser - Makes it easy to securely and portably run graphical desktop applications in Docker.
• udocker - A tool to execute simple docker containers in batch or interactive systems without root privileges.

Engine & Runtime

• lxc - LXC - Linux Containers.
• Mocker - Docker-compatible container CLI for macOS, built on Apple's Containerization framework.
• colima - Container runtimes on macOS (and Linux) with minimal setup.
• containerd - An open and reliable container runtime.
• gVisor - Application Kernel for Containers.
• runc - CLI tool for spawning and running containers according to the OCI specification.
• youki - Container runtime written in Rust, implementing the OCI runtime specification.

Image Lifecycle

Image Scanning & SBOM

• Clair - Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers.
• Syft - CLI tool and library for generating a Software Bill of Materials (SBOM) from container images and filesystems.
• Trivy - Aqua Security's open source simple and comprehensive vulnerability scanner for containers (suitable for CI).
• Grype - A vulnerability scanner for container images, filesystems and SBOMs.

Registry

• Harbor
• kontain.me - On-demand container image registry that builds and serves images when they are pulled.

In-Container Tooling

Wrappers

• dockerize - Utility to simplify running applications in docker containers.
• cdebug - Swiss-army knife for debugging running containers via ephemeral sidecars; works with Docker, containerd, and Kubernetes.

Networking & Proxies

Networking

• netshoot - The netshoot container has a powerful set of networking tools to help troubleshoot Docker networking issues.

Observability

Reverse Proxy

• Docker-Sentinel - Automated container updates with per-container policies, rollback safety, and a real-time web dashboard.

Official Projects

• Moby

Running Containers

Composition

• ctk - Visual composer for container based workloads.
• kompose - Go from Docker Compose to Kubernetes.

Deployment & Platforms

• SwarmManagement - Swarm Management is a python application, installed with pip. The application makes it easy to manage a Docker Swarm by configuring a single yaml file describing which stacks to deploy, and which networks, configs or secrets to create.
• caprover - [Previously known as CaptainDuckDuck] Automated Scalable Webserver Package (automated Docker+nginx) - Heroku on Steroids.
• Dokku - Docker powered mini-Heroku that helps you build and manage the lifecycle of applications.
• Tsuru - Tsuru is an extensible and open source Platform as a Service software.
• OpenRun - Builds, deploys, proxies, authenticates and auto-pauses web apps with Docker or Kubernetes.

Orchestration

• Kubernetes - Open source orchestration system for Docker containers by Google.
• Rancher - An open source project that provides a complete platform for operating Docker in production.

Security

Reverse Proxy

• Deepfence Threat Mapper - Powerful runtime vulnerability scanner for kubernetes, virtual machines and serverless.
• Sysdig Falco - Sysdig Falco is an open source container security monitor. It can monitor application, container, host, and network activity and alert on unauthorized activity.

Storage & Data

Reverse Proxy

• REX-Ray

User Interfaces

Desktop

• Stevedore - Good Docker Desktop replacement for Windows. Both Linux and Windows Containers are supported. slonopotamus.
• Gantry (Desktop) - Native macOS app (SwiftUI, no Electron) for managing and monitoring Docker hosts, local and over SSH: fleet dashboard, live logs and stats, exec terminal, file browser, and a bundled MCP server for AI agents.

Terminal

• dockly - An interactive shell UI for managing Docker containers.
• docker pushrm - A Docker CLI plugin that lets you push the README.md file from the current directory to Docker Hub. Also supports Quay and Harbor.
• DockTUI - Fast, zero-dependency terminal dashboard for Docker and Compose.
• bosun - A keyboard-driven terminal UI for Docker with compose project grouping, live logs, stats, and shell access.

Web

• Container Web TTY - Connect your containers via a web-tty.
• Arcane - An easy and modern Docker management platform, built with everybody in mind.
• DockScope - Visualizes Docker containers in a 3D dependency graph with live metrics, logs, and an in-browser terminal.

Where to Start

Wrappers

• Docker Curriculum