multy
sysbox
multy | sysbox | |
---|---|---|
42 | 22 | |
627 | 2,569 | |
0.0% | 2.0% | |
0.0 | 8.7 | |
over 1 year ago | 6 days ago | |
Go | Shell | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
multy
-
Abstraction of Cloud Providers
Multy is an interesting project. Though such a project is bound to suffer from the downsides of all clouds and wont be able to gain from the advantages of a specific cloud service.
- Wrapper for the Terraform's AWS, Azure, and GCP providers
-
Writing an IaC Rosetta Stone
There is already a couple of options
https://github.com/multycloud/multy
But a multicloud wrapper creates a lot of abstractions.
-
Looking to contribute to an open-source project
Hey! If you're looking to expand your backend languages, we're working on Multy - an open source tool to deploy and switch to any cloud. We have a discord server to answer any questions as well and a few good first issues!
-
How to contribute to Open Source?
If you wanna take a look - https://github.com/multycloud/multy. Any contributions are very welcome!
- GitHub - multycloud/multy: Multy - Easily deploy multi cloud infrastructure. Write cloud-agnostic config deployed across multiple clouds
- Show HN: Build for any cloud with the same code
- Golang open-source contribution
- What companies are using golang and have source code in github?
sysbox
-
Podman Desktop: A Free OSS Alternative to Docker Desktop
You are probably referring to Sysbox (https://github.com/nestybox/sysbox), which I believe will meet your requirements (systemd, inner containers, security, etc).
Btw, Sysbox is already supported in Docker-Desktop (business tier only), so you can easily do what you want with this instruction:
$ docker run -it --rm -e SYSBOX_SYSCONT_MODE=TRUE nestybox/ubuntu-focal-systemd-docker:latest bash
Disclaimer: I'm Sysbox's co-creator and currently working for Docker.
- Sysbox: VM-Like Containers
- What companies are using golang and have source code in github?
-
SELinux is unmanageable; just turn it off if it gets in your way
One project in this space that looked quite promising to me is sysbox[0]. I've used them once for a gitlab runner set-up similar to what is described in their blog[1].
It's currently working great and I have not had any major crashes/incidents for at least the past 8 months.
[0]: https://github.com/nestybox/sysbox
[1]: https://blog.nestybox.com/2020/10/21/gitlab-dind.html
-
Jenkins in Docker: Running Docker in a Jenkins container
Today, things are very different. Docker-in-Docker has a more secure and safe approach with rootless containers and freemium tools like sysbox. Tools like sysbox let you run Docker-in-Docker without the -privileged flag and optimizes specific scenarios, like running multiple nodes of a Kubernetes cluster as ordinary containers.
-
Run untrusted code in sandbox
Right now I am going with sysbox rootless containers. https://github.com/nestybox/sysbox
-
Real-world stories of how we’ve compromised CI/CD pipelines
We’ve been using Sysbox (https://github.com/nestybox/sysbox) for our Buildkite based CI/CD setup, allows docker-in-docker without privileged containers. Paired with careful IAM/STS design we’ve ended up with isolated job containers with their own IAM roles limited to least-privilege.
-
Individual Docker Desktops vs hosting on a server?
A good alternative to the VM approach is to use Kubernetes + Sysbox (a next-gen "runc", free, open-source).
- Sysbox now works on K8s v1.21
-
Does running a container with privileged mode turn on allow code to escape into the Host ?
But nowadays there is an option to run such software in containers securely. It's called Sysbox, and it's a new "runc" (the piece of software that creates the containers). I am one of the developers, so I am biased, but I think you'll find it helpful.
What are some alternatives?
cloudy - A tool for managing production-grade cloud clusters, infrastructure as code (IaC)
kata-containers - Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/
yor - Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
containerd - An open and reliable container runtime
gatus - ⛑ Automated developer-oriented status page
dind - Docker in Docker
anteon - Anteon (formerly Ddosify) - Effortless Kubernetes Monitoring and Performance Testing. Available on CLI, Self-Hosted, and Cloud
gvisor - Application Kernel for Containers
backend - A REST web-service sample project written in Golang using go-fiber, GORM and PostgreSQL
gatekeeper - 🐊 Gatekeeper - Policy Controller for Kubernetes
keploy - Test generation for Developers. Generate tests and stubs for your application that actually work!
snekbox - Easy, safe evaluation of arbitrary Python code