About

Mon, 01 Jan 0001 00:00:00 +0000

I’m a software engineer at Docker and an open source maintainer focused on Go, containers, build systems, release tooling, and developer workflows that need to hold up under real use, not just look good in a demo.

I’ve been publishing on GitHub for quite some time, and over that time, the work has grown into more than 250 public repositories spanning CLI tools, container images, GitHub Actions, helper libraries, and infrastructure-focused projects. A lot of that work centers on practical infrastructure software: tracking container updates, inspecting images, automating scheduled jobs and DNS changes, and building the kind of release and workflow tooling teams end up relying on every day.

Projects

Mon, 01 Jan 0001 00:00:00 +0000

This is a curated view of the work I maintain and contribute to most often. The full list is larger, but these are the projects people usually land on first.

Featured projects Link to heading

Docker Buildx, Docker’s extended build CLI for BuildKit-based multi-platform image workflows.
Moby BuildKit, container image build engine focused on concurrency, caching, and extensibility.
Diun, container update notifier that watches registries and sends alerts when images change.
Undock, image extraction tool that unpacks container filesystem contents into a local directory.
swarm-cronjob, scheduler that runs time-based jobs on Docker Swarm.
ddns-route53, dynamic DNS updater that keeps Route 53 records in sync with changing IPs.
FTPGrab, scheduled downloader for pulling files from FTP and SFTP servers.
geoip-updater, updater service that refreshes MaxMind GeoIP2 databases on a schedule.
Portapps, framework for distributing portable Windows applications with clean packaging and updates.
WindowsSpyBlocker, privacy tool that blocks Windows telemetry and tracking endpoints.

GitHub Actions Link to heading

Docker Actions Toolkit, shared library code that powers Docker’s GitHub Actions.
Docker Login Action, handles Docker registry authentication in workflows.
Docker Build and Push images Action, runs Buildx builds and publishes container images.
Docker Buildx Bake Action, runs declarative Buildx Bake targets from workflows.
Docker Metadata Action, computes image tags, labels, and annotations.
Docker Setup Buildx Action, installs and configures Docker Buildx builders.
Docker Setup QEMU Action, installs QEMU emulation support for multi-platform builds.
Docker Setup Docker Action, installs and configures Docker Engine on runners.
Docker Setup Compose Action, installs the Docker Compose CLI for workflows.
GoReleaser Action, runs GoReleaser to build and publish releases.
Mage Action, runs Mage targets in GitHub Actions workflows.
Chocolatey Action, installs and runs Chocolatey packages on Windows runners.
Container Scan Action, scans container images for known vulnerabilities.
Docker Status Action, checks Docker service health before or during CI runs.
Dump context Action, prints workflow and runner context for debugging.
GitHub Labeler Action, syncs repository labels from code.
GitHub Pages Action, publishes built content to GitHub Pages.
GitHub Runtime Action, exposes runner runtime details to workflows.
GitHub Status Action, checks GitHub platform status from workflows.
Import GPG Action, imports GPG keys for signing in CI.
UPX Action, compresses build artifacts with UPX.
VirusTotal Action, uploads files for VirusTotal analysis.
Golang CGO Cross Compiler Action, runs xgo for CGO-enabled cross-compilation.

Container images Link to heading

AnonAddy, anonymous email forwarding for self-hosted aliases, packaged as a ready-to-run container image.
LibreNMS, network monitoring software, packaged for containerized deployment with its web and poller stack.
7-Zip, 7-Zip command-line tools, packaged in a minimal container for archive operations.
Alpine S6, Alpine Linux, packaged with s6-overlay as a reusable base image for supervised services.
Fail2ban, intrusion prevention software, packaged as a containerized service for banning abusive hosts.
Flarum, forum software, packaged as an Alpine-based image with the web stack needed to run it.
Linguist, GitHub’s language detection library, packaged as a container for repository analysis tasks.
Matomo, web analytics software, packaged as a container image for self-hosted deployments.
msmtpd, the msmtpd SMTP relay, packaged as a lightweight container for outbound mail delivery.
Nextcloud, self-hosted file sync and collaboration software, packaged as a container image for Alpine-based deployments.
osxcross, macOS cross-compilation toolchain, packaged as a reusable builder image.
Pure-FTPd, FTP server software, packaged with MySQL, PostgreSQL, and LDAP authentication support.
qBittorrent, BitTorrent client software, packaged as a container image for headless and web UI usage.
RRDcached, the RRDtool caching daemon, packaged as a lightweight container service.
rTorrent and ruTorrent, rTorrent with the ruTorrent web UI, bundled into a single containerized deployment.
Samba, SMB file sharing software, packaged as a container for simple network shares.
Unbound, validating recursive DNS resolver software, packaged as a containerized DNS service.

Archived projects Link to heading

Artifactory Cleanup, JFrog Artifactory cleanup tool for removing old artifacts with rule-based retention.
CSGO Server Launcher, server launcher for running Counter-Strike: Global Offensive dedicated instances.
DokuWiki SyntaxHighlighter4 plugin, DokuWiki plugin that adds SyntaxHighlighter 4 code block support.
Cloudflared, container image for running Cloudflared as a DNS-over-HTTPS proxy.
DinD, Docker-in-Docker image for nested Docker and BuildKit workflows.
DokuWiki, container image for running DokuWiki on Alpine Linux.
EJT License Server, container image for the ej-technologies license server.
Firefox Sync Server, container image for Mozilla Firefox Sync Server.
Healthchecks, container image for self-hosting Healthchecks on Alpine Linux.
JetBrains License Server, container image for the JetBrains License Server.
Loop, tiny container that loops forever for testing and dummy service use.
Neard, portable WAMP software stack.
Shodan, container image for running the Shodan CLI.
Spliit, container image for self-hosting Spliit.
Firefox History Merger, Firefox history repair tool for merging places databases and restoring favicons.
Hugo Action, GitHub Action for installing and running Hugo in workflows.
Setup containerd Action, GitHub Action for installing and configuring containerd in workflows.
Git Rewrite Author, Git history rewrite tool for changing author and committer metadata.
GoReleaser XX, cross-compilation helper for GoReleaser and multi-platform builds.
login-servers enhanced, enhanced Adminer login-servers plugin with additional configuration features.
Rocket.Chat AppVeyor, Rocket.Chat integration for AppVeyor build notifications.
Rocket.Chat MicroBadger, Rocket.Chat integration for MicroBadger image notifications.
Rocket.Chat UptimeRobot, Rocket.Chat integration for UptimeRobot alerts.
Rocket.Chat Xray, Rocket.Chat integration for JFrog Xray vulnerability notifications.
Travis wait enhanced, helper for keeping long-running Travis CI jobs alive.
Xcalibur XLS to CSV, converter for turning Xcalibur XLS data frames into CSV files.
yasu, lightweight utility for switching user and group identity in containers.