# container

Open-source microVMs for secure serverless and AI agent sandboxing

Firecracker is an open-source virtual machine monitor that creates lightweight microVMs with sub-150ms cold starts, originally built by AWS for Lambda and Fargate. With 28,000+ GitHub stars, it provides kernel-level isolation for running untrusted code safely and powers the sandboxing infrastructure behind AI coding agents like Devin and E2B.

Local microVM sandboxes for AI agent code execution

Microsandbox provides hardware-level isolated sandboxes for AI agents to execute code safely on local machines. Using microVMs with sub-200ms boot times, it offers stronger isolation than Docker containers while remaining lightweight enough for development workstations. OCI-compatible with support for Python and Node.js runtimes. Apache-2.0 licensed with 5,000+ GitHub stars.

Daemonless container engine — a drop-in Docker alternative that runs rootless.

Podman is a daemonless, open-source container engine developed by Red Hat as a secure alternative to Docker. It can run, build, and manage OCI containers and pods without requiring a daemon process or root privileges. CLI-compatible with Docker commands, making migration seamless.

Your CI/CD scripts as code. Consistent, reproducible builds.

Open-source API documentation framework that generates interactive docs from OpenAPI, AsyncAPI, and GraphQL specs. Features a modern UI with try-it-now testing, code samples, and customizable theming. Supports multiple API standards in a single portal, making it ideal for organizations with diverse API ecosystems that need a unified, professional documentation experience.

Programmable CI/CD engine that runs your pipelines in containers

Fast, modern API client and testing tool designed as a lightweight alternative to Postman. Clean interface for REST, GraphQL, and gRPC requests with environment management and collections. Open-source with 80k+ GitHub stars, Bruno stores collections as files in your git repo, making API testing artifacts version-controlled and team-shareable by default.

Container orchestration at scale

GitHub's built-in CI/CD platform that automates workflows directly from your repository. YAML-based configuration with a massive marketplace of community actions. Free for public repos and generous free tier for private repos. The default CI/CD choice for GitHub-hosted projects, offering seamless integration with pull requests, issues, and the broader GitHub ecosystem.

Cloud platform for app deployment

Self-hosted CI/CD platform with GitLab-native integration for the full DevOps lifecycle. Pipeline-as-code with YAML, built-in container registry, security scanning, and deployment environments. Particularly strong for teams using GitLab as their complete DevOps platform, offering deep integration between code review, CI/CD, and deployment tracking in a single unified interface.

Build, share, and run containers

Industry-standard container platform for building, shipping, and running applications in isolated, reproducible environments. Package apps with all dependencies into portable containers using Dockerfiles and images. Docker Compose orchestrates multi-container applications. Docker Hub hosts millions of pre-built images. Docker Desktop provides GUI management on Mac/Windows. Essential for local development, CI/CD, and production deployments. The foundation of modern containerized infrastructure.