#containers
Wiki 1
- Hardening container images Mike Cardwell rebuilds the PowerDNS Recursor image as two static binaries on scratch, with Landlock, seccomp, daily rebuilds, SBOM, VEX and cosign
Toolbox 2
- Cloud in a Bottle Imbue's open-source personal cloud: rootless sandboxed app containers behind one login, a curated catalog, and a managed tier
- pullrun Runs one OCI image as a runc container, a Firecracker microVM, or an Apple Silicon VM off a content-addressed DAG store