Alternatives
Products that do what Sanctum does
Build Docker homelabs the right way — no magic, no lock-in
- 1SV
Sanctum is a small, reviewable, experimental and fully privilege seperated VPN daemon that runs on openbsd linux and macos. It takes privilege separation to the extreme to make sure all assets are isolated and each component is sandboxed with only the permissions they require.
2024 · sanctorum.se
- 2IV
ohai! I've released Lightwhale 3, which is possibly the easiest way to self-host Docker containers. It's a free, immutable Linux system purpose-built to live-boot straight into a working Docker Engine, thereby shortcutting the need for installation, configuration, and maintenance. Its simple design makes it easy to learn, and its low memory footprint should make it especially attractive during these times of RAMageddon. If this has piqued your interest, do check it out, along with its easy-to-follow Getting Started guide. In any event, have a nice day! =)
Apr 2026 · lightwhale.asklandd.dk
- 3
- 4DR
docker-compose is great for single node docker deployments, but it doesn't have a feature that would allow zero downtime deployments. It's not possible to deploy often if your app goes down every time, and using Kubernetes/Nomad/Swarm on a single node is an overkill. I created this Docker plugin to be a drop-in replacement for the restart command in usual docker-compose deployment scripts. It performs a simple rolling deployment of a single service.
2023 · github.com
- 5
- 6
- 7
- 8DC
I've been frustrated with dependency hell and clutter on my VPS from dev, so I built Devbox: a lightweight, open-source CLI tool that spins up isolated development environments using Docker. Each project runs in its own container, but your code stays in simple flat folders on the host machine—no messing with volumes or sync issues. Environments are disposable, so you can nuke and recreate them without losing your work. Key features: - Instant setup: `devbox init my-project` and you're in a fresh env with `devbox shell`. - Configurable via JSON: Define packages, services, and more in a…
Sep 2025 · devbox.ar0.eu
- 9
- 10BY
2017 · github.com
- 11
- 12OT
Hi HN, I’m building Corviont, a self-hosted offline maps appliance (tiles + routing + search) for edge/on-prem devices. Hosted demo (no install): https://demo.corviont.com/ Self-host (Docker Compose repo): https://github.com/corviont/monaco-demo Docs: https://www.corviont.com/docs What’s inside: - Vector tiles served locally (PMTiles) - Routing served locally (Valhalla) - Offline geocoding/search + reverse (SQLite Nominatim-based index) - MapLibre UI wired to the local endpoints After the initial image + data pulls, it runs fully…
Jan 2026 · corviont.com
- 13
- 14AD
Hello HN! We just launched a new feature we built at Depot that accelerates Docker image builds on your local machine in a team environment, and we wanted to share some of the details with you all. The launch blog post: https://depot.dev/blog/local-builds Depot is a hosted container build service - we run fully managed Intel and Arm remote build machines in AWS, with large instance sizes and SSD cache disks. The machines run BuildKit, the build engine that powers Docker, so generally anything you can `docker build`, you can also `depot build`. Most people use Depot in CI,…
2023
- 15DD
Hey y'all, I've been using docker compose a lot in my local network, and managing setup between machines is a bit of a pain in the ass for me. I wanted an easy way to share complex configurations. At the moment most docker compose package management is done by adding a docker-compose.yml to your repo, adding a bunch of setup instructions, and hoping they are well followed. This didn't feel like a smart way to go about it to me. I wanted to create a way to create a complex package, say a series of related or linked services, and provide some meaningful way to have users install it. That's why…
2020
- 16SD
Hey HN! We launched sliplane.io, where deploying Docker containers is super simple and wallet-friendly. With our Pay-per-Server approach, you can host as many containers as you want on each server at a set price - no huge surprise bills, just straightforward Docker hosting. You simply connect your Github repository and we do the rest that you expect from a PaaS, SSL by default, automatic deployments, backups of your storage etc. Pricing starts at 9€/month for 2vCPU, 2GB RAM, 40 GB Disk, 2 TB Egress. Cheers, Jonas
2025 · sliplane.io
- 17BB
This project addresses the inefficiencies of traditional Dockerfile-based container builds where each customization layer creates storage bloat through duplicate dependencies from repeated apt-get install commands, network inefficiency from redundant package downloads across different images, and slow iteration cycles requiring full rebuilds of all previous steps. Our solution enables building minimal base images from scratch using debootstrap that precisely include only required components in the initial build, while allowing creation of specialized variants (Java, Kafka, etc.) from these…
2025 · github.com
- 18RC
Hi HN, this is Cesar and Rodny, developers of an open-source container runtime called Sysbox, and co-founders of a startup called Nestybox (YC S20). We launched on HN almost a year ago and got excellent feedback then (https://news.ycombinator.com/item?id=24084758). Happy to say that over the past year, Sysbox has continued to gain traction, particularly for securing containers in production, CI/CD, and containerized dev environments. We wanted to announce an important new feature: integration between Sysbox and Kubernetes. As a quick refresher, Sysbox is a "runc" that…
2021
- 19KC
We kept hitting the same wall: you clone some arbitrary repo and just want it to run without any configuration work. So we built Keystone, an open source tool that spins up a Modal sandbox, runs Claude Code inside it, and produces a working .devcontainer/ config (Dockerfile, devcontainer.json, test runner) for any git repo. We build on the dev container standard, so the output works with VS Code and GitHub Codespaces out of the box. Main use cases: reproducible dev/CI environments, self-describing repos, and safely sandboxed coding agents. Our goal is to encourage all repos to…
Feb 2026 · github.com
- 20RL
I've been looking for a way to run LLMs safely without needing to approve every command. There are plenty of projects out there that run the agent in docker, but they don't always contain the dependencies that I need. Then it struck me. I already define project dependencies with mise. What if we could build a container on the fly for any project by reading the mise config? I've been using agent-en-place for a couple of weeks now, and it's working great! I'd love to hear what y'all think
Jan 2026 · github.com
- 21HQ
I got tired of libvirt XML and Vagrant's Ruby/reload dance for single-host VM stacks, so I built a compose-style runtime directly on QEMU/KVM. What's there: GPU passthrough as a first-class primitive (VFIO, OVMF, per-instance EFI vars), healthchecks that gate depends_on over SSH, socket-multicast L2 between VMs with no root and no bridge config, cloud-init wired through the YAML, Dockerfile support for provisioning. What it's not: Kubernetes. No clustering, no live migration, no control plane. Single host. Prototype, but I'm running it on real hardware. Curious what breaks for…
Apr 2026 · github.com
- 22SL
Hey everyone! I'm Zevi and I'm sharing a new Docker-for-Desktop Extension that my team built to help dev teams collaborate and review changes faster. Usually it takes a long time for developers to get their changes reviewed since they need to wait for CI builds or staging environments to share their work with the rest of the team. We built this Docker extension to solve that problem. Developers avoid the delays by creating a secure, shareable tunnel to their local environment as soon as their code is ready to be reviewed. Ongoing code changes are also available in real time, without needing…
2023 · hub.docker.com
- 23NA
Hi HN, I've been building Nucleus, a lightweight Linux container runtime focused on two workloads: ephemeral AI-agent sandboxes and declarative NixOS services. It's a single Rust binary, no daemon. It is not a Docker replacement and not a strict subset of Docker either. I dropped the entire image-and-distribution half (no Dockerfile, no layers, no registry, no pull/push, no persistent storage layer) in exchange for going deeper on isolation and reproducibility. The rootfs is either a directory copied into tmpfs (agent mode) or a Nix-built closure mounted read-only (production mode). If…
Jun 2026 · github.com
- 24MZ
Dec 2025 · mushak.sh
Ranked by how close each launch is in meaning, then by votes. Refine with a description →