Dockhand

Screenshot

About Dockhand

Dockhand is a Docker management application built for real-time container control, Compose stack orchestration, and managing multiple local or remote Docker hosts from one interface. It offers a visual Compose editor, a graph-based stack editor for services/networks/secrets, an interactive in-browser terminal with live log streaming, and a file browser for inspecting, uploading, and downloading files inside containers or volumes. Stacks can be deployed straight from Git repositories with webhook-triggered auto-sync, and scheduled cron-style jobs handle pruning, updates, and cleanup. Image management includes layer inspection and built-in vulnerability scanning via Grype and Trivy, plus an activity log that audits every action across environments. Authentication supports SSO via OIDC and local users, with optional role-based access control on the Enterprise tier. Dockhand runs on a custom-built OS layer assembled from Wolfi packages via apko, with a SvelteKit/Svelte 5 frontend, a Bun-based backend, and SQLite or PostgreSQL storage through Drizzle ORM.

Key Features

• Real-time container start/stop/restart monitoring and control
• Visual Compose editor and graph-based stack editor
• Git-based stack deployment with webhooks and auto-sync
• Multi-environment management for local and remote Docker hosts
• Interactive terminal with live log streaming
• Container and volume file browser (browse, edit, upload, download)
• Image layer inspection with Grype and Trivy vulnerability scanning
• SSO via OIDC, local users, and optional RBAC (Enterprise)
• Scheduled automation for pruning, updates, and cleanup
• Cross-environment activity/audit log

Useful Links