# Docker

Extensibility-first open-source no-code/low-code platform for business apps

NocoBase is an open-source, self-hosted no-code and low-code platform built around a data-model-driven architecture and plugin-based microkernel. Unlike form-centric no-code tools, it separates data structure from UI, enabling unlimited block types and views per data collection. All functionality is delivered through plugins similar to WordPress. Features include AI Employees for in-app automation, visual workflow builder, RBAC permissions, and automatic REST/GraphQL API generation.

Daemonless container engine — a drop-in Docker alternative that runs rootless.

Podman is a daemonless, open-source container engine developed by Red Hat as a secure alternative to Docker. It can run, build, and manage OCI containers and pods without requiring a daemon process or root privileges. CLI-compatible with Docker commands, making migration seamless.

Container management GUI for Docker and Kubernetes

Portainer is an open-source container management platform with 32K+ GitHub stars providing a web-based GUI for Docker, Docker Swarm, and Kubernetes. Simplifies container operations with visual management of containers, images, volumes, networks, and stacks without CLI expertise. Features user management with RBAC, environment templates, GitOps deployments, and edge computing support. Community Edition is free for up to 5 environments. Business Edition adds governance and support.

Container-native local AI model serving with Podman

RamaLama is an open-source tool that containerizes AI model inference using Podman or Docker, eliminating host system configuration complexity. It auto-detects GPUs (NVIDIA, AMD, Intel, Apple Silicon), pulls models from HuggingFace, Ollama, and OCI registries, and runs them in isolated rootless containers with read-only mounts and network isolation. Developed under the Containers project (Red Hat ecosystem), it brings familiar container workflows to local LLM serving.

Cloud for the new default

Unified cloud platform for deploying web services, static sites, background workers, cron jobs, and managed databases with automatic scaling and zero DevOps. Auto-deploy from Git with preview environments, built-in DDoS protection, free TLS, and global CDN. Native runtimes for Node.js, Python, Go, Rust, Ruby, Elixir plus Docker. Managed PostgreSQL and Redis with daily backups, private networking, and infrastructure-as-code via Blueprints. Modern Heroku alternative with a free tier.

GPU cloud platform for AI training and inference

RunPod is a GPU cloud platform providing on-demand and serverless GPU compute for AI training and inference workloads. It offers NVIDIA A100, H100, and RTX GPUs with per-second billing, serverless inference endpoints with auto-scaling, persistent storage, and Docker-based deployment. Popular with AI developers for its competitive pricing, fast provisioning, and developer-friendly API for deploying ML models at scale.

High-performance S3-compatible object storage built in Rust

RustFS is an open-source distributed object storage system built entirely in Rust, offering 2.3x faster performance than MinIO for small object payloads. It provides full S3 API compatibility, enabling seamless migration from MinIO, Ceph, and AWS S3 with existing SDKs and CLI tools. Released under Apache 2.0 license, it avoids MinIO's restrictive AGPL terms. Features include distributed architecture, erasure coding, WORM compliance, encryption via RustyVault, and a web management console.

Benchmark for evaluating AI coding agents on real GitHub issues

SWE-bench is a benchmark from Princeton NLP that evaluates AI coding agents by testing their ability to resolve real GitHub issues from popular open-source projects. Each task provides an issue description and repository state, and the agent must produce a working patch that passes the project's test suite. With 4,600+ GitHub stars, it has become the standard yardstick for comparing autonomous coding tools like Devin, Claude Code, and OpenHands.

Open-source Firecracker sandboxes for long-running AI agents

Superserve is an open-source sandbox infrastructure layer for AI agents that need durable computers instead of short-lived shells. It runs isolated Firecracker microVMs, supports pause, resume, snapshot, fork, preview URLs, MCP connectivity, SDK/API control, Docker workloads, and self-hosting, while the hosted service adds pay-as-you-go agent sandboxes for teams.

Self-hosted AI accounting for freelancers and small teams

TaxHacker is an open-source, self-hosted AI accounting app that automatically extracts financial data from receipts, invoices, and bank statements using LLMs. It supports 170+ currencies and 14 cryptocurrencies with historical exchange rate conversion, multi-project accounting, and custom AI extraction fields. Works with OpenAI, Gemini, Mistral, or local models via Ollama—deploy with Docker and keep all financial data under your control.

Run and govern MCP servers across desktop, CLI and Kubernetes

Open-source MCP runtime and governance platform that runs servers in isolated containers, curates registries, enforces access policies, and operates gateways across desktop, CLI, and Kubernetes.

Comprehensive open-source vulnerability scanner

Trivy is an open-source vulnerability scanner with 24K+ GitHub stars by Aqua Security that scans container images, file systems, Git repositories, Kubernetes clusters, and IaC configurations for security issues. Detects OS package and language-specific vulnerabilities, misconfigurations, secrets, and license violations in a single tool. Runs as a simple CLI with zero configuration needed. Supports SBOM generation, VEX for vulnerability filtering, and CI/CD integration.

Sandbox any command with file, network, and credential controls

Zerobox is a security-focused command sandboxing tool that isolates command execution with fine-grained controls over file system access, network connectivity, and credential exposure. It wraps any shell command in a secure container that enforces policy restrictions, preventing unauthorized file reads, network calls, or environment variable leaks during execution.

Terminal UI for Docker

Terminal UI for Docker and Docker Compose that provides an interactive dashboard for managing containers, images, volumes, and networks without memorizing CLI commands. Features real-time logs, stats (CPU/memory), container shell access, bulk cleanup of unused resources, and Docker Compose service management. Navigate with keyboard shortcuts in a panel-based layout. By the creator of lazygit. 40K+ GitHub stars. The fastest way to manage Docker from the terminal.