containers/container-selinux

Stars
254
Rank 160,264 (Top 4 %)
Language Roff
License
GNU General Publi...
Created over 9 years ago
Updated about 2 months ago

containers/container-selinux

containers

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

SELinux policy files for Container Runtimes

SELinux Policy for Container Runtimes

Blogs on SELinux Policy

Container Labeling
Explains container_t vs container_var_lib_t

container_t versus svirt_lxc_net_t
Clarifys container_t versus svirt_lxc_net_t aliases

SELinux, Podman, and Libvirt
Information regarding SELinux blocking Podman container from talking to Libvirt

Caution Relabeling Volumes with Container Runtimes
Explains effects of relabeling volumes with :Z

Container Domains (Types)
Explanation of SELinux Domain types.

Containers and MLS
Container-selinux policy support of MLS (Multi Level Security).

podman

Podman: A tool for managing OCI containers and pods.

skopeo

Work with remote images registries - retrieving information, images, signing content

buildah

A tool that facilitates building OCI images.

youki

A container runtime written in Rust

podman-compose

a script to run docker-compose.yml using podman

podman-desktop

Podman Desktop is the best free and open source tool to work with Containers and Kubernetes for developers. Get an intuitive and user-friendly interface to effortlessly build, manage, and deploy containers and Kubernetes — all from your desktop.

bubblewrap

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

crun

A fast and lightweight fully featured OCI runtime and C library for running containers

toolbox

Tool for interactive command line environments on Linux

krunvm

Create microVMs from OCI images

libkrun

A dynamic library providing Virtualization-based process isolation capabilities

image

Work with containers' images

bootc

Boot and upgrade via container images

podman-tui

Podman Terminal UI

storage

Container Storage Library

fuse-overlayfs

FUSE implementation for overlayfs

netavark

Container network stack

udica

This repository contains a tool for generating SELinux security profiles for containers

podlet

Generate Podman Quadlet files from a Podman command, compose file, or existing object

composefs

a file system for mounting container images

conmon

An OCI container runtime monitor.

podman-desktop-extension-bootc

Support for bootable OS containers (bootc) and generating disk images

build

another build tool for container images (archived, see https://github.com/rkt/rkt/issues/4024)

quadlet

oci-seccomp-bpf-hook

OCI hook to trace syscalls and generate a seccomp profile

ansible-podman-collections

Repository for Ansible content that can include playbooks, roles, modules, and plugins for use with the Podman tool

gvisor-tap-vsock

A new network stack based on gVisor

podman.io_old

Repository for podman.io website using GitHub Pages.

podman-py

Python bindings for Podman's RESTful API

ramalama

The goal of RamaLama is to make working with AI boring.

oci-spec-rs

OCI Runtime, Image and Distribution Spec in Rust

common

Location for shared common files in github.com/containers repos.

conmon-rs

An OCI container runtime monitor written in Rust

aardvark-dns

Authoritative dns server for A/AAAA container records. Forwards other request to host's /etc/resolv.conf

dnsname

name resolution for containers

podman-desktop-extension-ai-lab

Work with LLMs on a local environment using containers

docker-lvm-plugin

Docker volume plugin for LVM volumes

crun-vm

Run VM disk images using Podman / Docker / Kubernetes.

ocicrypt

Encryption libraries for Encrypted OCI Container images

virtcontainers

A Go package for building hardware virtualized container runtimes

prometheus-podman-exporter

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information.

fetchit

FetchIt is used to manage the life cycle and configuration of Podman containers

containrs

General purpose container library

ai-lab-recipes

Examples for building and running LLM services and applications locally with Podman

bluechi

Bluechi is a systemd service controller intended for multi-node environments with a predefined number of nodes and with a focus on highly regulated ecosystems such as those requiring functional safety.

Demos

Repository is a location of user demos for technologies listed on github.com/containers

libkrunfw

A dynamic library bundling the guest payload consumed by libkrun

omlmd

OCI Artifact for ML model & metadata

shortnames

Shortnames project is collecting registry alias names for shortnames to fully specified container image names.

psgo

A ps(1) AIX-format compatible golang library

nri-plugins

A collection of community maintained NRI plugins

podman.io

The new podman.io design project

libocispec

a C library for accessing OCI runtime and image spec files

tar-diff

python-podman

Python bindings and code examples for using Varlink access to Podman Service

podman-security-bench

initoverlayfs

selinuxd

A daemon that manages SELinux policies on a filesystem

krunkit

Launch configurable virtual machines with libkrun

nydus-storage-plugin

A storage plugin that provided CRI-O/Podman with the ability to lazy mount nydus images.

podman-desktop-swift

appstore

Example directory of Kubernetes YAML and Quadlets tested with Podman

BuildSourceImage

Tool to build a source image based on an existing OCI image

buildah.io

Repository for the buildah.io web site using GitHub Pages.

ansible-podman

Ansible podman is a package to allow ansible playbooks to manage podman containers

oci-fetch

Simple command line tool for fetching the Open Container Initiative image format over various transports.

containertoolbx.org

Website for the Toolbx project

qm

QM is a containerized environment for running Functional Safety qm (Quality Management) software

libhvee

Special purposed library for Windows HyperV control

automation_images

containers-image-proxy-rs

containers-image-proxy-rs

podman-wsl-fedora

Root FS image of Fedora for Podman Machine on Windows

podman-machine-qemu

Qemu build for macOS used by the self-contained `podman machine` installer

podman-bootc

automation

Automation scripts and configurations common across the containers org. repositories

podman-machine-wsl-os

WSL OS Images for Podman Machine 5.x - based on Fedora

oci-umount

docs

Repository for all documentation written about tools hosted at github.com/containers

bootable

netavark-dhcp-proxy-deprecated

DHCP proxy for Netavark

image_build

Monorepo menagerie of container images and associated build automation

podhawk

podman-desktop-catalog

Catalog of extensions of Podman Desktop

validator

podman-machine-cni

arty

Arty is a tool for managing OCI Artifacts on OCI Registries.

ocidir-rs

Low level Rust library for working with OCI (opencontainers) directories

PodmanHello

Podman Hello Image Repository

.github

The README for the containers organization

automation_sandbox

Test-repository for experimenting with in-repo automation tools/settings.

fetchit-desktop-extension

winquit

golang module that supports graceful shutdown of Windows applications

kubensmnt

podman-desktop-extension-layers-explorer

An extension for Podman Desktop to explore files in Images layers

podman-desktop-e2e

Podman desktop e2e tests

podman-desktop-extension-minikube

nri-plugins-operator

luksy

offline encryption/decryption using LUKS formats

release-keys

ContainerPlumbing

Container Plumbing Conference information.