Telepresence

Docker Hardened Image

Telepresence connects a local development machine to a remote Kubernetes cluster, so you can run and debug one service locally while it talks to the rest of the cluster. This image is the client, used as the daemon container for telepresence connect --docker.

Nominatim

Docker Hardened Image

Nominatim is the OpenStreetMap geocoding service for searching and reverse-searching places.

Typesense

Docker Hardened Image

Typesense is an open-source, typo-tolerant search engine with an HTTP API.

KAI GPU Fractioning MPS Daemon

Docker Hardened Image

Runs and supervises the NVIDIA MPS control daemon with GPU memory accounting on each GPU node.

KAI GPU Fractioning Metrics Daemon

Docker Hardened Image

Exports per-pod GPU memory and utilization metrics for fractionally shared GPUs.

Kubernetes Reflector

Docker Hardened Image

A Kubernetes controller that copies Secrets and ConfigMaps into other namespaces and keeps the copies in sync.

Renovate

Docker Hardened Image

Renovate scans repositories and proposes dependency updates. This image runs the Renovate CLI.

Vaultwarden

Docker Hardened Image

Unofficial Bitwarden-compatible server written in Rust, with the web vault included.

GitLab Operator

Docker Hardened Image

GitLab Operator is a Kubernetes operator that deploys and manages the full lifecycle of GitLab instances on Kubernetes and OpenShift using the GitLab Helm chart.

Forklift Operator Bundle

Docker Hardened Image

OLM operator bundle image carrying the Forklift (Migration Toolkit for Virtualization) operator manifests and metadata.

RabbitMQ Messaging Topology Operator

Docker Hardened Image

Kubernetes operator that declares RabbitMQ vhosts, queues, exchanges, users, and policies as custom resources.

Dev Containers Base

Docker Hardened Image

A minimal base image for development containers, with a non-root vscode user, sudo, git, zsh and the common tooling IDEs expect.

Apollo MCP Server

Docker Hardened Image

Apollo MCP Server exposes a GraphQL API to AI agents over the Model Context Protocol — serving GraphQL operations from local files, a persisted-query manifest, or an Apollo GraphOS graph as MCP tools, with optional schema introspection and search, over stdio or streamable HTTP.

Google CAS Issuer for cert-manager

Docker Hardened Image

cert-manager external issuer that signs certificates with Google Cloud Certificate Authority Service

Claude Code

Docker Hardened Image

Anthropic Claude Code agent on Docker Hardened Images for Docker Sandboxes

Grafana PDC Agent

Docker Hardened Image

Private Datasource Connect agent that opens a reverse SSH tunnel so Grafana Cloud can query data sources on a private network.

Codex

Docker Hardened Image

OpenAI Codex CLI on Docker Hardened Images for Docker Sandboxes