Podman

pi pod is a self-hosted platform for running pi coding-agent sessions in isolated remote sandboxes called pods. Its command-line client and iOS and Android apps connect to a server that manages pod lifecycles through a REST API, session gateway, lifecycle workers, and Postgres; a native sandbox service runs multiple isolated pods in one container, with pi inside each pod behind a small shim. The CLI can launch and attach to a pod for the current project, while the server uses Zitadel for OIDC identity and stores no passwords. The repository includes a Docker Compose deployment, CLI package, server, sandbox service, mobile apps, and self-hosting tools. It requires a Linux host with Docker Compose, at least 8 GB of RAM, and Node 22.19 or later for the CLI, and is licensed under AGPL-3.0-only.

Devbox is a command-line tool for creating isolated, reproducible development shells. A project's `devbox.json` declares its required operating-system-level packages; Devbox uses Nix to make those tools available through commands such as `devbox shell` and `devbox run`, without installing them into the underlying machine or causing version conflicts between projects. The same environment definition can also be used for a devcontainer, Dockerfile, or remote development environment. Devbox was originally developed by Jetify.

NixOS is a Linux distribution built around the Nix package manager and Nixpkgs. It describes laptops or server fleets through declarative configuration, builds system changes before activation, and stores generations that can be used to roll back to earlier configurations. The Nix ecosystem emphasizes reproducible package builds, isolated dependencies, and upgrades that do not leave packages in an inconsistent state.

Dockge is a self-hosted web manager for Docker Compose stacks. It manages compose.yaml files without taking ownership of them: users can create, edit, start, stop, restart, delete, and update stacks, while continuing to use the files with normal Docker Compose commands. Its interface includes an interactive Compose editor, a web terminal, and real-time pull, startup, shutdown, and terminal output. Multiple-agent support allows stacks on different Docker hosts to be managed from one interface, and a converter turns docker run commands into compose.yaml files. Dockge runs with Docker 20 or newer or Podman on supported Linux distributions, and the repository documents Docker-based installation with a default port of 5001.

kern is a fast, rootless OCI container runtime, sandbox, and virtual resource runtime distributed as a small static binary without a daemon. It creates kernel-enforced containers from OCI images, using user, PID, mount, network, UTS, and IPC namespaces, overlay or read-only roots, a deny-by-default seccomp allowlist, and cgroup v2 limits; the `--security-profile untrusted` option applies the documented hardened bundle. It can also attach named CPU, memory, disk, and device profiles from `kern.toml` to containers, or apply resource caps directly to host processes with optional Landlock write confinement. The project supports container operations, Dockerfile builds, image pull/push and save/load, stack execution through its own or Docker Compose format, and includes Python and Node SDKs plus an MCP server for agents. Its Rust dependency tree uses libc, while image pulling delegates to system `curl` and `tar`; it runs natively on Linux, requires WSL2 on Windows, and needs a Linux virtual machine on macOS.