Talos Linux

kern is a fast, rootless OCI container runtime, sandbox, and virtual resource runtime distributed as a small static binary without a daemon. It creates kernel-enforced containers from OCI images, using user, PID, mount, network, UTS, and IPC namespaces, overlay or read-only roots, a deny-by-default seccomp allowlist, and cgroup v2 limits; the `--security-profile untrusted` option applies the documented hardened bundle. It can also attach named CPU, memory, disk, and device profiles from `kern.toml` to containers, or apply resource caps directly to host processes with optional Landlock write confinement. The project supports container operations, Dockerfile builds, image pull/push and save/load, stack execution through its own or Docker Compose format, and includes Python and Node SDKs plus an MCP server for agents. Its Rust dependency tree uses libc, while image pulling delegates to system `curl` and `tar`; it runs natively on Linux, requires WSL2 on Windows, and needs a Linux virtual machine on macOS.

Kaneo is an open-source, self-hosted project-management tool for teams, focused on issue management and kanban-style workflows. It is designed as a simpler alternative to more complex project-management platforms, keeping project data on the user's infrastructure. The project can be deployed with the drim command-line tool, Docker Compose, or a Kubernetes Helm chart. Its Docker Compose setup runs Kaneo with PostgreSQL, and the project is distributed under the permissive MIT license.

Kubernetes (K8s) is an open-source container orchestration system hosted by the Cloud Native Computing Foundation. It manages containerized applications across multiple hosts, providing mechanisms for deploying, maintaining, scaling, and scheduling workloads. Applications can be configured with YAML and deployed across hybrid-cloud environments; the platform is also used for production operations involving storage, databases, networking, and security hardening.

MicroCloud is Canonical's open-source platform for deploying lightweight private-cloud clusters on Linux infrastructure. It manages virtual machines and system containers through LXD, distributed storage through MicroCeph, and networking through MicroOVN, with the components automatically configured by the MicroCloud snap. The `microcloud init` command bootstraps a cluster by discovering other servers, prompting for Ceph disks and network settings, and configuring the LXD, Ceph, and OVN clusters. Additional machines join with `microcloud join`; MicroOVN provides the default networking, with Ubuntu Fan available as a fallback. MicroCloud supports command-line management and a web interface, and is intended for small private clouds, hybrid-cloud extensions, edge computing, and test labs. It runs on Ubuntu 22.04 or newer. A single member can be used for testing, while production deployments require at least three members. The project is distributed as a Snap and is developed by Canonical.

Kubernetes The Hard Way is a hands-on tutorial for learning how Kubernetes components fit together by bootstrapping a cluster manually, without automation scripts. It covers provisioning compute resources, creating a certificate authority and TLS credentials, generating authentication and encryption configuration, bootstrapping etcd, the control plane and worker nodes, configuring remote kubectl access, setting up pod network routes, testing the cluster, and cleaning it up. The guide targets a basic cluster with a single control-plane node and two worker nodes on four ARM64 or AMD64 virtual or physical machines. Its README lists Kubernetes, containerd, CNI, and etcd component versions, and states that the resulting cluster is intended for learning rather than production use. The repository is licensed under Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International.