A toolkit to run, read and write docker-compose.yml files with Guix machinery.

slirp4netns provides user-mode networking ("slirp") for unprivileged network namespaces.

containers-storage is a command line tool for manipulating local layer/image/container stores.

This package provides a tool to read and manipulate checkpoint archives as created by Podman, CRI-O and containerd.

This package provides an Advanced multi-layered Unification FilesyStem implementation of the snapshot interface for containerd.

Containerd is a container runtime with an emphasis on simplicity, robustness, and portability. It is available as a daemon, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.

RootlessKit is a Linux-native implementation of "fake root" using (code user_namespaces(7)). It is used to run containers engines as an unprivileged user, known as "Rootless mode".

This package provides an extension overlaybd-snapshotter. It constructs the overlaybd image in OCIv1 tgz format through a tricky method which makes 'overlaybd-snapshotter' adapter for a normal OCIv1 image.

This package provides a replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and brings a configurable DNS server and dynamic port forwarding.

It can be used with QEMU, Hyperkit, Hyper-V and User-Mode Linux.

The binary is called gvproxy.

runc is a command line client for running applications packaged according to the Open Container Initiative (OCI) format and is a compliant implementation of the Open Container Initiative specification.

image is a set of Go libraries aimed at working in various way with containers' images and container image registries. The containers/image library allows application to pull and push images from container image registries, like the docker.io and quay.io registries. It also implements "simple image signing". It's a successor of https://github.com/containers/image project.

umoci is a tool that allows for high-level modification of an Open Container Initiative (OCI) image layout and its tagged images.

Buildah is a command-line tool to build OCI container images. More generally, it can be used to:

• create a working container, either from scratch or using an image as a starting point;

• create an image, either from a working container or via the instructions in a Dockerfile;

• mount a working container's root filesystem for manipulation;

• use the updated contents of a container's root filesystem as a filesystem layer to create a new image.

Podman (the POD MANager) is a tool for managing containers and images, volumes mounted into those containers, and pods made from groups of containers.

Not all commands are working out of the box due to requiring additional binaries to be present in the $PATH.

To get podman compose working, install either podman-compose or docker-compose packages.

To get podman machine working, install qemu-minimal, and openssh packages.

crun is a fast and low-memory footprint Open Container Initiative (OCI) Container Runtime fully written in C.

Accelerated Container Image is an implementation of paper DADI: Block-Level Image Service for Agile and Elastic Application Deployment. USENIX ATC'20.

Catatonit is a simple container init tool developed as a rewrite of initrs in C due to the need for static compilation of Rust binaries with musl. Inspired by other container inits like tini and dumb-init, catatonit focuses on correct signal handling, utilizing signalfd(2) for improved stability. Its main purpose is to support the key usage by docker-init: /dev/init – <your program>, with minimal additional features planned.

passt implements a thin layer between guest and host, that only implements what's strictly needed to pretend processes are running locally. The TCP adaptation doesn't keep per-connection packet buffers, and reflects observed sending windows and acknowledgements between the two sides. This TCP adaptation is needed as passt runs without the CAP_NET_RAW capability: it can't create raw IP sockets on the pod, and therefore needs to map packets at Layer-2 to Layer-4 sockets offered by the host kernel.

Also provides pasta, which similarly to slirp4netns, provides networking to containers by creating a tap interface available to processes in the namespace, and mapping network traffic outside the namespace using native Layer-4 sockets.

This package provides shared common files and common Go code to manage those files in github.com/containers repos.

skopeo is a command line utility providing various operations with container images and container image registries. It can:

1. Copy container images between various containers image stores, converting them as necessary.

2. Convert a Docker schema 2 or schema 1 container image to an OCI image.

3. Inspect a repository on a container registry without needlessly pulling the image.

4. Sign and verify container images.

5. Delete container images from a remote container registry.

oci-image-tool is a collection of tools for working with the OCI image format specification.

This package provides a container image distribution plugin with lazy pulling for Containerd implemented in eStargz - Standard-Compatible Extensions to Tar.gz Layers for Lazy Pulling Container Images.

convmv is a file renamer, that converts between different encodings, e.g. from ISO-8859-1 to UTF-8. It is particularly usefuls for files with names, that display incorrectly.

This project contains an extended "Standard Library" for Coq called coq-std++. The key features are:

• Great number of definitions and lemmas for common data structures such as lists, finite maps, finite sets, and finite multisets.

• Type classes for common notations (like ∅, ∪, and Haskell-style monad notations) so that these can be overloaded for different data structures.

• It uses type classes to keep track of common properties of types, like it having decidable equality or being countable or finite.

• Most data structures are represented in canonical ways so that Leibniz equality can be used as much as possible (for example, for maps we have m1 = m2 iff ∀ i, m1 !! i = m2 !! i). On top of that, the library provides setoid instances for most types and operations.

• Various tactics for common tasks, like an ssreflect inspired done tactic for finishing trivial goals, a simple breadth-first solver naive_solver, an equality simplifier simplify_eq, a solver solve_proper for proving compatibility of functions with respect to relations, and a solver set_solver for goals involving set operations.

• The library is dependency- and axiom-free.