Directory

Agentless configuration management and orchestration tool that runs YAML playbooks over SSH, with collections for clouds, network gear and applications

Deduplicating backup archiver with compression and authenticated encryption that stores repositories on local disks or remote hosts over SSH

Go web server and reverse proxy that obtains and renews TLS certificates automatically and is configured with a short Caddyfile or a JSON API

Log-scanning intrusion-prevention daemon that temporarily bans IP addresses showing repeated authentication failures by updating firewall rules

Open-source system for scheduling, scaling and operating containerized workloads across a cluster of machines

Nonprofit certificate authority that issues free, automatically renewable TLS certificates through the ACME protocol

Reference implementation of the SSH protocol from the OpenBSD project: remote shell, file transfer, port forwarding, key agent and certificate authority tooling

Community fork of Terraform under the Linux Foundation, keeping the HCL language, provider ecosystem and state model under the MPL-2.0 license

Production process manager for Node.js and other long-running programs with cluster mode, log handling, restart policies and boot-time startup scripts

Daemonless, rootless container engine with a Docker-compatible CLI, companion Buildah and Skopeo tools and a Podman Desktop GUI

Pull-based metrics monitoring system and time-series database with the PromQL query language, service discovery and the Alertmanager component

Command-line program to sync, copy, mount and serve files across dozens of cloud storage providers and protocols, with optional client-side encryption

Encrypted, deduplicating backup program written in Go that stores snapshots in local, SFTP, S3-compatible and many cloud backends

Open-source cluster resource manager and job scheduler for Linux clusters, allocating nodes, launching jobs and managing queues on many HPC systems

Command-line tool that encrypts the values of YAML, JSON, ENV and INI files with age, PGP or cloud KMS keys so secrets can be committed to git

Open-source backend platform built around a dedicated PostgreSQL database with auto-generated APIs, authentication, file storage, realtime subscriptions and edge functions

Open-source scanner that finds known vulnerabilities, misconfigurations, exposed secrets and license issues in container images, file systems, git repositories, IaC and Kubernetes clusters

Minimal, high-speed VPN protocol and implementation built on modern cryptography, included in the Linux kernel and available on macOS, iOS, Windows, Android and BSD