Small, focused modules
Each module has its own go.mod and its own release tags, so you only pull in the
dependencies you use.
All modules are pre-1.0 and may change between releases
Arcane Go Modules
Reusable Go modules for Docker tooling, root-confined filesystems, streaming, and system probes.
Modules
Section titled “Modules”kitShared helpers for normalization, paths, registries, mapping, and shutdown signals.
acfsRoot-confined filesystem operations with atomic writes and a JSON CLI.
dockerDocker Engine helpers for Compose labels, mounts, networks, exec, and logs.
docker/compatContainer create and inspect that work on older Docker daemons and Podman.
docker/convertTurn docker run commands into Compose YAML.
buildsBuildKit image builds through the local Docker daemon or Depot.
updaterDocker auto-update orchestration with Compose and self-update support.
streamsJSON-lines fan-in, event buses, log broadcasting, and stats history.
sys/bytesByte capacities that parse and print like common Linux tools.
sys/cgroupcgroup v1/v2 limit detection and container identity.
sys/cryptoAES-256-GCM string encryption with key rotation.
Design principles
Section titled “Design principles”Adapter-driven
Services such as the updater and the build engine ship working Docker-backed defaults. The host application replaces only the parts it owns.
Safe by default
Filesystem writes are atomic and confined to a root, and inputs are validated before anything touches Docker.
Standard library first
Small modules such as sys/bytes and acfs/atomic depend only on the standard library.