Finsys/dockhand
Dockhand
Dockhand is a multi-host Docker manager and container management interface used to control the lifecycle of containers, images, volumes, and networks. It functions as a Docker Compose orchestrator and GitOps deployment tool, enabling the synchronization of application stacks directly from remote Git repositories.
The project distinguishes itself as an enterprise Docker access controller, providing role-based access control and identity verification through OIDC, LDAP, and multi-factor authentication. It secures sensitive data using AES-256-GCM encryption for credentials at rest and handles native TLS termination for its interface and API.
The platform covers a broad range of operational capabilities, including real-time resource monitoring, log streaming, and image vulnerability scanning. It provides tools for remote Docker orchestration via sockets or TCP, as well as interactive web-based terminals and visual filesystem browsers for managing container data.
Automation is handled through scheduled image updates, maintenance tasks, and webhook-driven deployment triggers.
Features
- Docker Socket Orchestrators - Manages container lifecycles across multiple remote hosts by connecting via Docker sockets or TCP.
- Docker Container Orchestrators - Provides a comprehensive visual interface for managing the full lifecycle, deployment, and monitoring of Docker containers across multiple hosts.
- GitOps Deployment Management - Automates container updates and stack deployments by synchronizing with remote Git repositories and webhooks.
- Compose Orchestrators - Orchestrates multi-container applications using Docker Compose YAML configurations.
- Container Lifecycle Management - Provides a full interface to start, stop, restart, and remove containers with advanced configuration.
- Container Monitoring - Tracks real-time CPU and memory usage and streams logs from containers across multiple environments.
- Git-Based Deployment - Provides automated deployment of application stacks by synchronizing configuration directly from version control repositories.
- Git-Based Deployment Automations - Automates container deployments by polling Git repositories for changes and triggering updates.
- GitOps Workflows - Automates the deployment of Docker Compose stacks by synchronizing application configurations directly from Git repositories.
- Administrative Access Control - Acts as an administration layer providing RBAC, OIDC, LDAP authentication, and encrypted secret injection.
- Credential Encryption - Protects registry passwords and SSH keys using AES-256-GCM authenticated encryption at rest.
- Encrypted Secret Management - Securely stores sensitive environment variables in an encrypted database and injects them into containers at runtime.
- LDAP Authentication - Integrates with centralized LDAP or Active Directory servers for enterprise user authentication.
- Multi-Factor Authentication - Protects local user accounts by requiring a second authentication factor via TOTP tokens.
- Role-Based Access Control - Implements role-based access control integrated with OIDC and LDAP for managing infrastructure tool permissions.
- Single Sign-On Integrations - Enables single sign-on for application access using OpenID Connect identity providers.
- Container Host Connections - Enables management of environments across different machines using local sockets, direct TCP, or specialized agents.
- Web-Based Terminals - Provides interactive, browser-based shell access to running containers via websockets.
- Automated Container Image Updaters - Checks for new image versions on a schedule and automatically redeploys containers to keep software current.
- Container Configuration Templates - Uses reusable configuration templates to maintain consistency across different container deployments.
- Registry Discovery - Provides a visual browser to discover and search for available images within configured registries.
- Docker Engine Automations - Offers a REST API for the programmatic management of containers, networks, and stacks.
- Template-Based Deployment - Ensures consistent deployments by mapping predefined catalog variables into Docker Compose specifications.
- Webhook Deployment Listeners - Automates stack synchronization and redeployment using HTTP POST webhook events from external services.
- Container Image Vulnerability Scanners - Integrates with vulnerability scanners to analyze container images for known CVEs before deployment.
- Audit Logging Systems - Maintains a comprehensive audit trail of all actions performed across connected Docker environments for security compliance.
- Container Log Streamers - Displays real-time container output with ANSI color support for debugging and observability.
- Compute Usage Metrics - Provides real-time tracking of CPU, memory, and disk consumption for running containers.
- Real-Time Server Activity Monitors - Tracks all container events across environments in real-time via a centralized activity log.
- Container Shell Sessions - Provides a web-based terminal that pipes shell sessions through WebSockets for interactive container command execution.
- Docker - Listed in the “Docker 工具” section of the Great Open Source Project awesome list.
