docker
yq is a portable command-line YAML, JSON, XML, CSV and properties processor.
a lightweight and portable command-line YAML, JSON and XML processor. yq uses jq like syntax but works with yaml files as well as json, xml, properties, csv and tsv. It doesn't yet support everything jq does - but it does support the most common operations and functions, and more is being added continuously.
yq is written in go - so you can download a dependency free binary for your platform and you are good to go!
The package manager for Kubernetes Helm is the best way to find, share, and use software built for Kubernetes. What is Helm?
Helm helps you manage Kubernetes applications — Helm Charts helps you define, install, and upgrade even the most complex Kubernetes application.
Charts are easy to create, version, share, and publish — so start using Helm and stop the copy-and-paste madness.
Pelican Panel is a free, open-source game server control panel built for communities, hosts, and self-hosters. It gives users a modern web UI for creating and managing game servers while running each server in an isolated Docker container through Wings.
Related contents:
Modern Docker container monitoring with auto-restart and alerts .
A comprehensive Docker container monitoring and management platform with real-time monitoring, intelligent auto-restart, multi-channel alerting, and complete event logging.
Related contents:
s6 overlay for containers (includes execline, s6-linux-utils & a custom init) s6-overlay is an easy-to-install (just extract a tarball or two!) set of scripts and utilities allowing you to use existing Docker images while using s6 as a pid 1 for your container and process supervisor for your services.
A Terraform provider for managing Docker services.
Manage Docker-hosted resources (such as repositories, teams, organization settings, and more) using Terraform.
Modern Docker Management.
Dockhand is a modern, efficient Docker management application providing real-time container management, Compose stack orchestration, and multi-environment support. All in a lightweight, secure and privacy-focused package.
Related contents:
- Best Self-Hosted Apps of 2025 | The Top New Containers You Should Know @ ServersatHome's YouTube.
- Dockhand Deep Dive: The NEW Docker Management Tool Explained @ DB Tech's YouTube.
- Dockhand: The Easiest Way I’ve Found to Manage and Update Docker Containers @ Lawrence Systems' YouTube.
- Dockhand - The Ultimate Self-Hosted Docker Management Tool @ noted.
- Newsletter du 02 Mars 2026 @ RudeOps :fr:.
- Dockhand: A Smarter, Safer Docker Manager @ Christian Lempa's YouTube.
- I tried Arcane for Docker management, and here's why Dockhand remains my pick @ XDA.
- Portainer to Dockhand: One Container Replaced Several @ DB Tech's YouTube.
Traefik is an open-source Edge Router that makes publishing your services a fun and easy experience. It receives requests on behalf of your system and finds out which components are responsible for handling them.
Easy self-hosting for Docker-based web apps.
ONCE is a platform for installing and managing Docker-based web applications. Its goal is to make self-hosting applications as simple as possible.
As well as simplifying the initial setup, ONCE also provides automatic updates, backups, and system information. It has a TUI interface with a dashboard for monitoring and operating your applications, as well as CLI commands for common operations should you (or your AI agent) prefer that.
ONCE runs on Linux and macOS, and can be used to run applications on a variety of hardware: a physical server, a cloud VPS, a Raspberry Pi, or your laptop, are all suitable.
ONCE comes with a set of 37signals apps built-in, but you can use it to install any compatible Docker image as well.
AI-Powered Docker Security Analyzer. AI-powered Docker security scanner that explains vulnerabilities in plain English.
DockSec is an OWASP Incubator Project that combines traditional Docker security scanners (Trivy, Hadolint, Docker Scout) with AI to provide context-aware security analysis.
Related contents:
Dofigen is a Dockerfile generator using a simplified description in YAML or JSON format. It defines default values and behaviors that simplify the creation of Dockerfiles.
Dofigen is also made to use the Buildkit, which is now the default Docker build engine, optimizations that speed-up the Docker image build by parallelizing the layer builds.
An easy-to-use, instant-on, native container environment
Dagu is a powerful Cron alternative that comes with a Web UI. It allows you to define dependencies between commands as a Directed Acyclic Graph (DAG) in a declarative Writing DAGs. Additionally, Dagu natively supports running Docker containers, making HTTP requests, and executing commands over SSH. Dagu was designed to be easy to use, self-contained, and require no coding, making it ideal for small projects.
Related contents:
Run AI agents from YAML, like containers.
Docker Agent is to AI agents what docker run is to containers. Define an agent in a YAML file, run it with one command, share it through any OCI registry — the same workflow you already use for images.
A docker job scheduler (aka. crontab for docker). Ofelia is a modern and low footprint job scheduler for docker environments, built on Go. Ofelia aims to be a replacement for the old fashioned cron.
Cloud-native high-performance edge/middle/service proxy. Envoy is an open source edge and service proxy, designed for cloud-native applications.
Our mission is to be the trusted cloud native repository for Kubernetes. Harbor is an open source registry that secures artifacts with policies and role-based access control, ensures images are scanned and free from vulnerabilities, and signs images as trusted. Harbor, a CNCF Graduated project, delivers compliance, performance, and interoperability to help you consistently and securely manage artifacts across cloud native compute platforms like Kubernetes and Docker.
Related contents:
Efficient and consistent CI/CD with Kubernetes.
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices. werf is a CNCF Sandbox CLI tool to implement full-cycle CI/CD to Kubernetes easily. werf integrates into your CI system and leverages familiar and reliable technologies, such as Git, Dockerfile, Helm, and Buildah.
A web app to monitor usage of your Docker containers. Includes advanced filters, charts and notifications support (browser and pushover).
Flatcar Container Linux,
A community Linux distribution designed for container workloads, with high security and low maintenance.
Open-Source Self-Hosted Secure Email Gateway. Self-hosted email security, mail server, calendar, contacts, files, groupware — one stack.
Hermes Secure Email Gateway is an open-source Docker Compose stack that combines a hardened anti-spam and anti-malware gateway, a full Dovecot 2.4 mail server, end-to-end encryption, and Nextcloud for files, calendars, and contacts. Deploy it as a gateway in front of Microsoft 365, as a complete mail server, or in hybrid mode.
Manage your docker containers and generate a report to share and compare with other self hosters.
Container Census is a lightweight, Go-powered tool that automatically scans your Docker environment across one or many hosts and gives you a clear, historical view of everything running in your stack.
Related contents:
Build Docker Compose Without the Hassle.
Build, validate, and ship Docker stacks.
Dock-Dploy is a to the point, visual surface for Docker Compose, Pangolin BluePrints, Configs, and Schedulers. Friendly enough for first-timers, fast enough for homelab operators, honest enough for production.
A container-based solution for automating Docker container base image updates.
With watchtower you can update the running version of your containerized app simply by pushing a new image to the Docker Hub or your own image registry. Watchtower will pull down your new image, gracefully shut down your existing container and restart it with the same options that were used when it was deployed initially.
Containerrr's Watchtower fork.
Docker CLI plugin for extended build capabilities with BuildKit
A CLI/TUI that simplifies launching VSCode projects, with a focus on dev containers.
Containerized Learning Environment Ansible-HandsOn is a lightweight local lab environment designed for learning, testing, and mastering Ansible infrastructure automation.
Instead of relying on resource-heavy Virtual Machines (VMs), this project leverages Docker containers to simulate a real-world network infrastructure in seconds.
Minimal CVE Hardened container image collection.
A collection of production-ready container images with minimal CVEs, rebuilt daily using Chainguard's apko and Wolfi packages. By including only required packages, these images maintain a reduced attack surface and typically have zero or near-zero known vulnerabilities.
Related contents:
SOCI Snapshotter is a containerd snapshotter plugin. It enables standard OCI images to be lazily loaded without requiring a build-time conversion step. "SOCI" is short for "Seekable OCI", and is pronounced "so-CHEE".
Related contents:
Docker Update Rollback tool.
A self-hosted watcher for your Docker host — see what's outdated, update it now or on a schedule, and roll back with one click if something breaks.
GlusterFS is a scale-out network-attached storage file system. It has found applications including cloud computing, streaming media services, and content delivery networks. GlusterFS was developed originally by Gluster, Inc. and then by Red Hat, Inc., as a result of Red Hat acquiring Gluster in 2011.
Related contents:
Orchestrate sandboxed coding agents in TypeScript with sandcastle.run().
A TypeScript library for orchestrating AI coding agents in isolated sandboxes.
Docker image & resource cleanup helper, on a schedule!
A sleek, lightweight web interface to automatically clean up Docker resources on a schedule.
A Docker-powered stateless API for PDF files. Gotenberg provides a developer-friendly API to interact with powerful tools like Chromium and LibreOffice for converting numerous document formats (HTML, Markdown, Word, Excel, etc.) into PDF files, and more.
Hundreds of models & providers. One command to find what runs on your hardware.
A terminal tool that right-sizes LLM models to your system's RAM, CPU, and GPU. Detects your hardware, scores each model across quality, speed, fit, and context dimensions, and tells you which ones will actually run well on your machine.
Ships with an interactive TUI (default) and a classic CLI mode. Supports multi-GPU setups, MoE architectures, dynamic quantization selection, speed estimation, and local runtime providers (Ollama, llama.cpp, MLX, Docker Model Runner, LM Studio).
Related contents:
Telegraf is the open source server agent to help you collect metrics from your stacks, sensors, and systems.
Telegraf is a server-based agent for collecting and sending all metrics and events from databases, systems, and IoT sensors. Telegraf is written in Go and compiles into a single binary with no external dependencies, and requires a very minimal memory footprint.
Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source) .
SlimToolkit allows developers to inspect, optimize and debug their containers using its xray, lint, build, debug, run, images, merge, registry, vulnerability (and other) commands. It simplifies and improves your developer experience building, customizing and using containers. It makes your containers better, smaller and more secure while providing advanced visibility and improved usability working with the original and minified containers.
A fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker.
HTTPS-PORTAL is a fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker. By using it, you can run any existing web application over HTTPS, with only one extra line of configuration.
The sysadmin that watches your entire infrastructure 24/7. Monitoring for Proxmox, Docker, Kubernetes, TrueNAS and vSphere.
Pulse brings Proxmox, Docker, Kubernetes, TrueNAS and vSphere into a single self-hosted workspace, with a page for every platform and alerts that tell you the moment something breaks.
Related contents:
Findable, Accessible, Interoperable and Reusable Data. A complete open-source solution for your open and private data needs. French only for the time being, internationalization coming soon.
Analyzes resource usage and performance characteristics of running containers. cAdvisor (Container Advisor) provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container it keeps resource isolation parameters, historical resource usage, histograms of complete historical resource usage and network statistics. This data is exported by container and machine-wide.
A collaborative project for the container ecosystem to assemble container-based systems. Moby is an open-source project created by Docker to enable and accelerate software containerization.
It provides a "Lego set" of toolkit components, the framework for assembling them into custom container-based systems, and a place for all container enthusiasts and professionals to experiment and exchange ideas. Components include container build tools, a container registry, orchestration tools, a runtime and more, and these can be used as building blocks in conjunction with other tools and projects.
Code signing and transparency for containers and binaries. Signing OCI containers (and other artifacts) using Sigstore! Cosign aims to make signatures invisible infrastructure.
Related contents:
Container Updates Status.
VersionVault is a simple dashboard that provides a consolidated view of the update status for your Docker applications. Inspired by WUD (What's Up Docker), but with a different visual representation. I created this because I wanted a single pane of glass to monitor my homelab Docker apps more effectively.
Provides a simple way to run Selenium Grid with Chrome, Firefox, and Edge using Docker, making it easier to perform browser automation
Awesome Docker Compose is your go-to hub for discovering and deploying over 700 popular self-hosted apps effortlessly. Docker Compose, a free and open-source tool, simplifies the process by automatically handling dependencies and services, allowing you to install your favorite apps without the usual hassle.
Security, visibility, and authorization for AI agents
Leash wraps AI coding agents in containers and monitors their activity. You define policies in Cedar; Leash enforces them instantly.
Authorize and monitor your AI agents with policy enforcement, sandboxed execution, and real-time observability—ensuring they operate safely within your defined boundaries.
Simple and Elegant Docker Management UI written in Typescript and SvelteKit.
Lightweight Docker monitoring dashboard with anomaly detection & Telegram alerts. One-liner install, zero config.
Expose your services easily and securely.
This project comes as a pre-built docker image that enables you to easily forward to your websites running at home or otherwise, including free SSL, without having to know too much about Nginx or Letsencrypt.
Related contents:
- NPM Mobile Manager @ GitHub.
- HomeLab SSL certificates for FREE with minimal effort @ Perkelator's YouTube.
- Self-Hosted SSL Simplified: Nginx Proxy Manager @ Lawrence Systems' YouTube.
- The First Services I Always Spin Up in Any Home Lab @ VirtualizationHowto.
- Nginx Proxy Manager - Le reverse proxy que même ma grand-mère pourrait configurer @ Korben :fr:.
A Headless Steam Docker image supporting NVIDIA GPU and accessible via Web UI. Play your games in the browser with audio. Connect another device and use it with Steam Remote Play. Easily deploy a Steam Docker instance in seconds.
Lightweight universal DDNS Updater program. Container to update DNS records periodically with WebUI for many DNS providers. Program to keep DNS A and/or AAAA records updated for multiple DNS providers
Docker backups you can restore.
DockNest backs up your Docker sites, verifies every recovery point, and restores to a separate copy. Self-hosted, open source, and in beta.
This plugin is a small implementation of a fail2ban instance as a middleware plugin for Traefik.
Convert your Docker Compose file to Kubernetes or OpenShift.
Kompose is a conversion tool for Docker Compose to container orchestrators such as Kubernetes (or OpenShift).
Related contents:
A Process Control System. Supervisor is a client/server system that allows its users to monitor and control a number of processes on UNIX-like operating systems.
It shares some of the same goals of programs like launchd, daemontools, and runit. Unlike some of these programs, it is not meant to be run as a substitute for init as “process id 1”. Instead it is meant to be used to control processes related to a project or a customer, and is meant to start like any other program at boot time.
🦎 a tool to build and deploy software on many servers 🦎
Related contents:
- Terraform Provider for Komodo @ GitHub.
- Komodo is a Free, OpenSource Docker Manager with Inbuilt CI/CD - Check It Out! @ Jim's Garage.
- How To: Automate version updates for your self-hosted Docker containers with Gitea, Renovate, and Komodo @ nickcunningh.am.
- Using Komodo to Run Docker Commands from a Web Interface @ Noted.
- FerretDB Was Eating My CPU: Migrating Komodo from SQLite to Postgres @ mauveRANT.
- Renovate + Komodo - Updating at Scale in a Large Homelab @ FoxxMD Blog.
Doco-CD stands for Docker Compose Continuous Deployment and is a lightweight GitOps tool that automatically deploys and updates Docker Compose projects and Swarm stacks via webhooks or polling when a change is pushed to a Git repository.
You can think of it as a simple Portainer or ArgoCD alternative for Docker.
Create DNS records from Docker labels.
Docker DNS Exporter connects to a Docker daemon and periodically checks for containers with labels matching the expected format. Any new records are sent to their configured name server to be served to clients. If a record hasn't been seen for a configurable amount of time, the record gets deleted from the name server it was defined on.