With over 32,000 GitHub stars and adoption by DoorDash, Netflix, and Bose, CockroachDB is the distributed SQL database designed to survive disk failures, machine outages, rack losses, and entire datacenter failures while maintaining strongly-consistent ACID transactions with serializable isolation by default. The architecture layers SQL on a transactional key-value store using the Raft consensus protocol for synchronous replication, automatically splitting data into ranges that distribute and rebalance without manual sharding. PostgreSQL wire protocol compatibility means existing drivers, ORMs, and tools including psycopg2, pgx, ActiveRecord, Django ORM, GORM, Hibernate, and Prisma work without modification. Multi-region capabilities include configurable survival goals at region or zone level, table-level locality settings for pinning data to specific geographies for GDPR compliance, and follower reads for low-latency global queries. The built-in DB Console provides cluster overview dashboards, node maps showing geographical distribution, SQL activity pages tracking statement fingerprints, transaction latency percentiles, session details, and real-time metrics for queries per second, storage capacity, and replication status. Change data capture streams row-level changes to Apache Kafka, Google Cloud Pub/Sub, or webhook endpoints for event-driven architectures. Online schema changes execute ALTER TABLE without locking or downtime, and distributed backup supports full and incremental snapshots to S3, GCS, Azure Blob, and NFS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. CockroachDB Software License (source-available).

ManageIQ gives operators one console for every cloud and hypervisor the organization runs, connecting to VMware, OpenStack, AWS, Azure, Google Cloud, Kubernetes, OpenShift, and Nutanix to continuously discover inventory, map relationships, and listen for changes without installing agents. Discovered estates become manageable: operators publish bundles of resources into a self-service catalog that end users order like apps, then govern the full life cycle through policy, compliance, delegated operations, and retirement. SmartState analysis scans the contents of VMs, hosts, and containers agentlessly, even foreign or uncooperative ones, feeding security and compliance policies that flag drift automatically. Utilization metrics reveal idle systems and right-sizing opportunities, with capacity planning and what-if scenarios before hardware purchases. Chargeback and showback assign rates to tenants, group VMs by tag or container images by label, and generate reports in multiple currencies. Embedded Ansible automation executes playbooks for provisioning and remediation, and the Spassky release adds Nutanix and Terraform Enterprise providers on a Rails 7.2 core. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

EveryOS gives the Linux server you already own a desktop it never had: open a browser and your machine greets you with windows you can move, snap, and stack, a dock, virtual desktops, widgets, and a launcher, all remembering exactly how you left them. Your files live in a private home with the usual folders, previews, a text editor, and a trash you can restore from, and plugging in a USB disk makes it appear on the desktop ready to mount. An app store installs self-hosted applications from catalogs and follows each deployment, later offering updates that keep your settings, rollbacks when one goes wrong, and backups of app data. The same workspace watches the machine itself: CPU, memory, disk, and network at a glance, systemd services and logs, available package updates, and a Docker view for containers and Compose projects. A real terminal opens in the browser under your own Linux account, Home Assistant arrives as a panel and desktop widgets with its tokens kept on the server, and an AI assistants app can find or install a local model server such as Ollama and chat with it privately. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your racks of hypervisor hosts become one private cloud with Apache CloudStack, the open-source IaaS platform that deploys and manages large networks of virtual machines behind a single web interface and API. One cloud can mix hypervisors side by side, running KVM, XenServer or XCP-ng, and VMware vSphere clusters under the same control plane, each organized into regions, zones, pods, and clusters that mirror your physical datacenters and racks. Administrators provision instances from templates and ISO images, take volume and VM snapshots on schedules, and migrate running instances between hosts in a cluster without downtime. Built-in networking spans isolated and shared networks, VPCs with tiered virtual routers, load balancers with SSL offloading, VPNs, and firewall rules, all exposed both to admins and to end users through separate, customizable interfaces. Multi-tenancy is native: domains, accounts, usage metering, and resource quotas let providers bill departments or customers for what they consume. The 4.22 LTS release strengthens backup and disaster recovery, adds a CSI driver for CloudStack Kubernetes Service, and streamlines VMware-to-KVM migrations for teams consolidating onto open virtualization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 1,200 GitHub stars, 12,000+ commits, and more than a decade of active development distributed under the AGPL-3.0 license, Cozy Cloud operates as a comprehensive personal data hub that goes far beyond file storage by connecting your documents, contacts, calendars, banking transactions, energy bills, and productivity tools into a single self-hosted platform where no third party profiles you. The cozy-stack Go binary handles file storage, CouchDB document management, job scheduling, app serving, and the REST API in a single process consuming approximately 150MB of RAM idle. Sandboxed konnectors import data from 50+ external services — banks, utility providers, telecom operators, cloud drives — running as isolated jobs via nsjail to prevent untrusted code from accessing other user data. The built-in app store serves web applications in subdomain-isolated environments with Content Security Policy headers, each app communicating exclusively through the documented REST API. Real-time synchronization via PouchDB replication and WebSocket keeps files, contacts, and documents consistent across desktop clients, mobile apps for iOS and Android with automatic photo backup, and the web interface. Security features include automatic Let's Encrypt TLS certificates, Argon2id password hashing, optional TOTP two-factor authentication, and GDPR-compliant data export via the CLI. Each user receives their own isolated instance with independent storage, database, and application configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Eclipse Che spins up complete development environments on Kubernetes from a Devfile in the project repository, so new developers click a factory link and open a browser IDE with dependencies, runtimes, and debugging already configured instead of spending their first day installing toolchains. Each workspace runs as a DevWorkspace custom resource in the user's namespace, making environments API-manageable with kubectl and GitOps tooling alike. Developers choose their editor per workspace, from Visual Studio Code Open Source to JetBrains IDEs via Projector, and the 7.124 release adds Orca, an agent development environment for working alongside AI coding agents. Workspaces carry their own containers for build and run, so code executes in a production-like environment with direct Kubernetes API access from the IDE. Teams standardize stacks as Devfile templates, onboard contributors in minutes, and open a fresh workspace per branch or pull request in a new browser tab. The 7.124 release also builds workspace lifecycle commands into chectl, including SSH connections with port forwarding to desktop editors, and DevWorkspace Operator 1.0 adds optional per-workspace NetworkPolicy isolation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EPL-2.0 licensed.

Somewhere in every organisation there is a folder called FINAL_v2 that nobody dares delete, and Drive from La Suite exists to end that. It gives teams a shared file space where uploads land in organised workspaces, versions stay findable through search, and every file or folder carries its own access list. You preview PDFs, images, audio, and video in the browser, and office documents open for editing through Collabora or OnlyOffice without downloading a thing. Sharing reaches outside the organisation too: invite external partners by link, even without an account, and revoke access the moment a project ends. Uploads pass malware scanning before they touch storage, a trash bin restores accidents, and quotas with usage metrics keep big archives honest. Administrators plug in their own OIDC identity provider, so logins follow the same single sign-on as the rest of the stack, while an embeddable file picker lets other internal apps reuse Drive as their document library. Because the data lives in your own S3-compatible storage, sovereignty requests stop being an argument with a vendor and become a setting. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Used by over 30,000 teams and 650+ enterprise customers managing more than 5.2 million containers, Rancher has earned recognition as a Leader in the Gartner Magic Quadrant for Container Management and the Forrester Wave for Multicloud Container Platforms. The platform provides a single pane of glass for provisioning, upgrading, and securing Kubernetes clusters across Amazon EKS, Google GKE, Microsoft AKS, RKE2, K3s, and any CNCF-conformant distribution. Multi-Cluster Management enables centralized authentication via Active Directory, LDAP, SAML, GitHub, and OpenID Connect with granular role-based access control at the cluster, project, and namespace levels. Fleet, the built-in GitOps engine, delivers continuous deployment across hundreds of clusters simultaneously using Helm charts, Kustomize, or raw YAML manifests from any Git repository. The integrated app catalog provides one-click deployment of Prometheus monitoring, Grafana dashboards, Longhorn persistent storage, Istio service mesh, and hundreds of community Helm charts. Rancher supports air-gapped installations for disconnected environments, CIS benchmark scanning for security compliance, and automated backup and restoration of cluster configurations. The dashboard offers real-time workload monitoring, log aggregation, pod shell access, and namespace-scoped resource quotas. Cluster templates enforce organizational standards through Helm-based provisioning policies that ensure consistent configurations across environments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With nearly 3,000 GitHub stars and 14 releases since its June 2025 launch, Kite delivers a lightweight Kubernetes dashboard that replaces the fragmented workflow of switching between kubectl, Lens, and separate monitoring tools with a unified multi-cluster management platform. The dashboard automatically discovers clusters from kubeconfig files and supports independent Prometheus configurations per cluster, providing real-time CPU, memory, and network charts alongside live pod log streaming with filtering and search. A built-in web terminal opens shells directly into pods and nodes without kubectl port-forward, while the Monaco-based YAML editor offers syntax highlighting and validation for in-place resource editing. The integrated AI agent, powered by OpenAI or Anthropic models via native Go SDK integrations, translates natural language into precise client-go API calls — querying cluster health, analyzing pod logs, scaling deployments, patching resources, and cleaning up failed jobs — all operating strictly within the logged-in user's RBAC permissions. Enterprise governance includes OAuth 2.0 single sign-on, multi-factor authentication, FIDO2 passkeys, granular role-based access control with per-namespace permissions, and comprehensive audit logging. Helm chart management enables browsing, installing, and upgrading releases directly from the UI, while the Docker registry integration provides quick image tag selection. Deploy via a single Docker container with SQLite or use the official OCI Helm chart with PostgreSQL or MySQL for production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

AgentVerse OS turns a single Ubuntu server into a personal cloud with a real desktop in the browser, built for a developer and their AI agents. You work in a windowed desktop with a taskbar, start menu, and widgets for system monitoring, clock, news, weather, and projects, and the same desktop opens from a laptop, tablet, or phone while everything stays on the server. Each project gets an isolated Incus container with Docker inside, its own network and gate, plus VS Code, a terminal, files, and git in the browser. The Agents app runs Claude Code, Codex, Gemini CLI, pi, and Antigravity inside the workspace, with permission prompts you approve from any device, scheduled routines, model menus, conversation search and export, and a ledger of what each session spent. When you close your laptop the agents keep working, and you pick the conversation up later exactly where it stopped. A built-in store merges the Runtipi, Coolify, and Umbrel catalogs into about 945 installable apps with guided setup, credentials shown in the app card, snapshots, and rollback. Projects request capabilities such as storage.s3, llm, or notify instead of hardcoding addresses, scheduled ZFS snapshots feed a restic backup repository, and access arrives only through your Tailscale network with real certificates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A personal cloud does not need the weight of a small enterprise suite, and bewCloud proves it by keeping files, photos, notes, contacts, and calendars in one compact service a single person can run for a whole household. The Files app stores uploads in a plain folder tree on disk, offers public sharing links, optional whole-folder downloads as zip archives, and a WebDAV endpoint that desktop tools can mount. Photos turns that same storage into a browsable gallery, while Notes keeps quick text within reach of every login. Contacts and Calendar speak CardDAV and CalDAV through a bundled Radicale server, so the calendar and address book on a phone or laptop stay in sync without another account anywhere. News collects feeds to read in the browser, and Expenses tracks spending in a small ledger beside everything else. The header shows only the apps you enable, in the order you choose, and companion desktop and mobile apps connect to the same server for people who prefer native sync. Accounts can be protected with multi-factor authentication using TOTP, passkeys, or email codes, and optional single sign-on lets a household sign in through an existing identity provider. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

On a schedule you choose, Pluton backs up your folders to cloud storage and other disks, then lets you verify and restore every snapshot and see exactly what happened in a clean, self-hosted web dashboard. Three copies: every plan writes to a primary storage and can replicate to up to two more, so the 3-2-1 rule is a toggle in the plan wizard rather than a weekend project. Two kinds of media: pair a local disk or mounted drive with Backblaze B2, Cloudflare R2, Google Drive, Dropbox, pCloud, SFTP, S3-compatible buckets, or any of 70+ connectors, and press Verify to test a connection before trusting it. One place to look: the plan page charts file counts and sizes over a selectable range, a health strip colors recent runs, and a live panel counts files, bytes, and time remaining while each mirror initializes and replicates. Zero mysteries: every backup keeps a timestamped event timeline from dry run to pruning, and plan logs filter by level and task, search messages, and download as a file. Schedules run from every few minutes to monthly, including chosen weekdays; retention keeps daily, weekly, and monthly snapshots; and scripts can run before or after a job. Alerts reach you by email, Slack, Discord, or ntfy, and optional two-factor sign-in guards the dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Managing Kubernetes shouldn't require every developer to become a Kubernetes expert — KubeSphere wraps cluster operations, CI/CD, service mesh, and observability into guided web workflows that operations teams configure once and developers consume without kubectl. The LuBan extensible architecture treats each capability as an independently installable extension plugging into a lightweight microkernel: enable DevOps without service mesh, add monitoring without the app store, compose exactly what your organization needs. Multi-cluster management provides a centralized control plane for provisioning and operating clusters across cloud providers, data centers, and edge locations with unified identity and resource quotas. The DevOps extension integrates Jenkins for graphical pipeline creation with S2I and B2I workflows, while Argo CD powers GitOps continuous deployment with real-time sync status. Istio-based service mesh provides traffic management, canary deployments, circuit breaking, and distributed tracing through the console without CLI knowledge. Prometheus monitoring with custom dashboards, Fluentd log collection with multi-tenant search, and alerting via Slack and email complete the observability stack. Multi-tenant workspace hierarchy enforces resource quotas and fine-grained RBAC roles across teams. A built-in Helm-based app store handles lifecycle management across clusters. KubeKey deploys production-grade clusters on bare metal or VMs with air-gapped support. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Webtor turns any magnet link or .torrent file into instant in-browser streaming and direct downloads on your own server, with no desktop torrent client and nothing to install for viewers. Drop in a magnet, an infohash, or a torrent file and the file list appears in seconds; pick a video and it plays in the built-in player while the pieces are still arriving, or take a plain HTTP download link for any single file instead. Whole torrents come down as ZIP or TAR archives generated on the fly with the folder structure preserved, and formats from MKV and MP4 to FLAC and MP3 stream without a separate transcoding step in most cases. Torrents you keep go into a personal library that recognizes movies and series automatically and enriches them with posters and descriptions, and the same library can mount as a network drive over WebDAV or S3 and play on a TV through the Stremio addon. Subtitles are matched from OpenSubtitles inside the player, uploaded tracks are supported, and optional AI translation renders them in your language; a master password locks the instance, the player embeds into other sites through the JavaScript SDK, and a REST API drives everything from your own code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Most file sharing leaves copies lying around forever; Tessera shares things with a built-in goodbye. Drop in a file, a whole folder, a code snippet, or a link and you get back a short code and a URL that anyone can open until it expires or hits the download count you set, at which point it is deleted. Expiry is checked on every request and each retrieval is counted atomically, so a one-time share cannot be raced by two people at once. Passwords can be required before anything is shown, code arrives syntax-highlighted, and images, SVGs, and diagrams preview in the page, with link cards when you paste the URL into chat. Uploads resume after interruptions and stream through the server without ballooning memory at any size. Behind the scenes you choose where bytes live: local disk, S3-compatible storage, Azure Blob, Google Cloud Storage, or WebDAV, several at once, added or retired from the admin panel without a restart. Accounts are optional for a home server, sign-in through OpenID Connect suits a team, and roles with per-account quotas decide who may upload, view everyone's shares, or change settings. Optional malware scanning, anonymous-upload caps, and rate-limited code lookups keep a public instance honest. A CLI and API tokens drive the same endpoints as the web app, so scripts can share and clean up exactly like people. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Tau delivers a complete self-hosted cloud platform where Git is the control plane and WebAssembly is the runtime. The Go binary deploys as interconnected nodes that form a P2P network using libp2p for automatic service discovery, eliminating Kubernetes entirely. Serverless functions compile to WebAssembly for secure multi-tenant execution with automatic horizontal scaling — write in Go, Rust, AssemblyScript, or C and deploy by pushing to Git. Branch-based environments map Git branches to isolated deployments, so staging and production run identical infrastructure from different refs. Static website hosting serves frontends with global distribution and automatic content-addressed deduplication via IPFS-derived storage. The built-in K/V database provides distributed storage with automatic replication across nodes, while object storage handles file management with content addressing. Pub/Sub messaging enables real-time communication between functions and external services including WebSocket support. Spore Drive automates multi-host deployment and rolling updates from a single command across bare metal or VMs running Ubuntu. The Dream CLI provides a complete local development environment that mirrors production exactly — same services, same routing, same deployment flow. Zero-configuration HTTPS provisions TLS certificates automatically for custom domains. The web console at console.taubyte.com provides visual project management, or use the tau CLI for Git-native workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

A CNCF Graduated project with over 23,700 GitHub stars and adoption by organizations including Intuit, Adobe, Capital One, and Red Hat, Argo CD has become the industry standard for GitOps-based Kubernetes deployments since its creation at Intuit in 2018, treating Git repositories as the single source of truth for application configurations and automatically reconciling live cluster state with declared desired state. The platform supports Helm charts including Helm 4, Kustomize overlays, Jsonnet, and plain Kubernetes YAML manifests, rendering templates and applying resources through configurable sync policies with automated or manual reconciliation, pruning of orphaned resources, and self-healing that reverts unauthorized cluster changes. ApplicationSets enable templated generation of applications across multiple clusters, environments, and Git repositories using generators for pull requests, Git directories, cluster lists, and merge strategies. The web UI provides a real-time application topology view with resource health status, sync state indicators, log streaming, and a network view supporting Gateway API and Ingress visualization. Version 3.5 introduced mTLS for internal component communication, graduated user impersonation and source hydrator to beta, added native ApplicationSet management with preview applications in the UI, and delivered source integrity validation. Multi-cluster management deploys applications across development, staging, and production environments from a single Argo CD instance with RBAC, SSO via OIDC and SAML, and audit logging. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

The first container registry to reach CNCF graduated status with over 29,000 GitHub stars since VMware open-sourced it in 2016, Harbor transforms the basic Docker Distribution into a hardened enterprise registry with vulnerability scanning, supply chain signing, multi-datacenter replication, and project-level access control out of the box. Trivy scans every pushed image against the NVD, GitHub Advisory Database, and distribution-specific vulnerability feeds, with scan-on-push policies that block deployment of images exceeding configurable severity thresholds. Artifact signing through Cosign keyless signatures and Notation enforces content trust policies ensuring only cryptographically verified images reach production clusters. Policy-based replication synchronizes images and Helm charts between Harbor instances across multiple datacenters using repository, tag, and label filters with automatic retry and bandwidth throttling — enabling hybrid-cloud and disaster-recovery topologies. The RBAC model isolates projects with per-project quotas, robot accounts for CI/CD automation, webhook notifications, and audit logging that tracks every pull, push, delete, and configuration change. LDAP, Active Directory, and OIDC authentication integrate with existing identity providers, while the proxy cache transparently caches images from Docker Hub, Quay, and other upstream registries to reduce pull latency and rate-limit exposure. The RESTful API with embedded Swagger UI, tag retention policies, garbage collection scheduling, and immutable artifact rules complete the lifecycle management. Deploy via Docker Compose or Helm Chart on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.