CheckOps
Goss
Goss is an Apache-2.0 YAML-based tool for quick server and container validation, checking packages, files, ports, services and HTTP endpoints, with dgoss for Docker images.
Latest public signals
Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.
Introduction
Goss describes itself as quick and easy server testing and validation. You describe the expected state of a system in YAML, such as installed packages, file permissions, listening ports, running services, users or HTTP responses, and goss validate checks it in milliseconds.
A nice touch is goss autoadd, which generates tests from the current state of a machine so you can start from reality and edit. The dgoss wrapper runs the same checks inside a Docker container, and goss serve exposes results as a health endpoint.
In the quality loop Goss is a fast integration check for images and hosts, and can double as a production health check.
The source code is at goss-org/goss on GitHub under the Apache-2.0 licence, with about 6,000 stars; the most recent commit was on 1 November 2026.
Features
- YAML tests: Packages, files, ports, services, users, processes and HTTP.
- Fast: Single Go binary, validation in milliseconds.
- autoadd: Generate tests from the current system.
- dgoss: Test Docker images.
- Health endpoint:
goss servefor monitoring. - Output formats: Documentation, JSON, JUnit, TAP and more.
Pros
- Low ceremony: Very easy to start with.
- Free to use: Open source under the Apache-2.0 licence, so the core tool costs nothing to use.
- Actively maintained: The repository had commits as recent as 1 November 2026.
- Community: About 6,000 GitHub stars.
Cons
- Limited logic: Not a programming framework.
- Linux focus: Best support is for Linux systems.
- 0.x releases: Still pre-1.0.
Usage and Links (Example)
# goss.yaml
port:
tcp:8080: { listening: true }
service:
nginx: { enabled: true, running: true }
http:
http://localhost:8080/health: { status: 200 }
dgoss run -p 8080:8080 myimage:test
Resources:
Pricing
Goss is free and open source under the Apache-2.0 licence.
Recommended for?
- Container image builders wanting quick smoke tests.
- Ops teams validating hosts after provisioning.
Conclusion
Goss is the lightest way to assert that a server or image looks right.
Use it for fast smoke checks and keep heavier frameworks for complex scenarios.
On CheckOps, Goss is filed under the Integration testing and Release & CI gates stages. Related tools listed here include Terratest, Test Kitchen, Molecule, Chef InSpec, terraform-compliance and Container Structure Test. When comparing them, weigh the licence, the languages and platforms each supports, whether it is self-hosted or managed, and how cleanly it slots into your existing CI pipeline. Details on this page were checked against the official website, documentation and repository on 11 November 2026.
Alternatives
Other tools on CheckOps that cover similar ground. Open a page, or compare one with Goss side by side.
TTerratestTerratest is an Apache-2.0 Go library from Gruntwork for writing automated tests that deploy real Terraform, Packer, Docker and Kubernetes infrastructure, validate it and tear it down.Compare with Goss
TTest KitchenTest Kitchen is an Apache-2.0 integration testing harness that converges infrastructure code on isolated platforms such as Docker, Vagrant and cloud VMs, then runs verifiers like InSpec.Compare with Goss
MMoleculeMolecule is an MIT Ansible-native testing framework for roles, playbooks and collections, creating test instances, converging them and running verification and idempotence checks.Compare with Goss
CChef InSpecChef InSpec is an auditing and testing framework with a Ruby-based DSL for checking that servers, containers and cloud resources meet compliance and security requirements.Compare with Goss
Tterraform-complianceterraform-compliance is an MIT, BDD-style test framework that checks Terraform plans against security and compliance rules written in Gherkin.Compare with Goss
CContainer Structure TestContainer Structure Test is an Apache-2.0 tool from Google for validating the structure of container images: commands, file contents, metadata and existence checks defined in YAML.Compare with Goss