CornusYour Docker workflow, all the way to Kubernetes

Take workloads from familiar docker compose, docker CLI, and devcontainers straight to Kubernetes.

Quick start

What is Cornus?

CLI reference

View on GitHub

🔨

Build engine + OCI registry

A BuildKit solver embedded in the binary — no separate buildkitd — with docker buildx parity (cache / secret / ssh mounts, named contexts, remote cache), feeding a built-in OCI Distribution v1.1 registry backed by a pluggable content store (filesystem, in-memory, S3, and behind a build tag GCS / Azure Blob). Builds run locally or on a remote server over 9P-on-WebSocket.

cornus build

🚀

Imperative deploy engine

A pluggable deploy backend — dockerhost, native containerd, daemonless bare, Incus application containers, and client-go Kubernetes — behind one interface, with client-local bind mounts, port forwarding, egress control, and a workload-to-workload hub overlay.

Deploy backends

🔁

The opposite of a local bridge

Telepresence, mirrord, and Gefyra run your process on your laptop and fake it into the cluster. Cornus goes the other way: it deploys the real workload into the cluster and brings the cluster back to you — published ports auto-forward to 127.0.0.1, cornus exec / port-forward reach any container port, and *.cornus.internal resolves services by name.

How Cornus differs

🐳

Docker-compatible clients

cornus compose speaks Docker Compose; cornus daemon docker exposes a Docker Engine API proxy so the stock docker CLI and devcontainers drive a remote Cornus server. Devcontainer definitions are read natively.

cornus compose

🔐

Secure & remote by default

Bearer auth (static token / JWT / JWKS), mTLS identity, and per-identity authorization — all opt-in and zero-cost when off. Connection profiles auto-port-forward into a cluster and mint short-lived credentials.

Security & auth

📈

Observable

OpenTelemetry traces, metrics, and logs, plus an optional Prometheus /metrics endpoint — layered on and off without cost when disabled.

Architecture

Pre-1.0

Cornus is under active development and does not yet promise a stable CLI or API. Pin release artifacts and review release notes before upgrading.