Dockhand
FreemiumModern Docker management platform from homelabs to enterprise
AI Summary
Dockhand is a self-hosted Docker management platform that offers a modern alternative to Portainer. The software runs completely locally without cloud dependency, with SQLite as the default database and zero telemetry. It offers three versions: free for homelabs, SMB ($499/host/year) and Enterprise ($1,499/host/year) with RBAC and LDAP integration.
✓ Pros
- +Free for homelabs with full feature set including SSO/OIDC
- +No telemetry, completely self-hosted, works on Raspberry Pi
- +Open Source (BSL 1.1, becomes Apache 2.0 in 2029), full source code available
✗ Cons
- −Relatively new to the market compared to established tools like Portainer
- −Enterprise features like RBAC and LDAP only in paid version
Use Cases
- →Docker container management in homelabs on Raspberry Pi without complexity
- →Git-based stack deployments with automatic synchronization via webhooks
- →Multi-host Docker management across NAT/firewalls with Hawser agent
- →Vulnerability scanning of container images with Grype and Trivy before deployment
Who is it for?
Homelab operators, small to medium-sized development teams and enterprise IT departments seeking a secure, self-hosted Docker management solution without cloud dependency.
Tags
What is Dockhand?
Dockhand is a self-hosted platform for managing Docker containers. It runs entirely locally, stores data in SQLite by default, and sends no telemetry externally. The source code is available under the Business Source License 1.1 and is scheduled to move to Apache 2.0 in 2029. Dockhand positions itself explicitly against cloud-dependent solutions, making data control its core promise.
Core features
- Git-based stack deployments: Stacks can be deployed from Git repositories and automatically synchronised via webhooks.
- Multi-host management via the Hawser agent: The agent enables management of multiple Docker hosts across NAT and firewalls.
- Vulnerability scanning: Container images can be scanned for known vulnerabilities before deployment using Grype or Trivy.
- SSO/OIDC in the free tier: Single sign-on is not a paid feature. It is included in the free homelab tier.
- RBAC and LDAP integration: Role-based access control and directory integration are available from the SMB edition onward ($499 per host per year).
Who is Dockhand for?
Homelab users get the full feature set for free, including SSO. The tool runs on a Raspberry Pi and requires no external dependencies. Anyone currently managing Docker containers via the command line or Compose files will find an interface here that makes oversight easier without requiring a cloud platform.
For small teams coordinating multiple hosts, the Hawser agent becomes relevant. Enterprise teams that need RBAC or LDAP must move to a paid tier. That is a clear boundary in the licensing model.
Context & alternatives
Dockhand competes directly with Portainer, the most established name in the segment. Portainer has existed for years and has a significantly larger community. Dockhand is newer, which shows in a narrower ecosystem and less community-produced documentation.
The key difference lies in how features are packaged. Where Portainer locks SSO and advanced access control behind paid tiers, Dockhand includes SSO/OIDC in the free tier. Anyone who wants OIDC without licensing costs and cares about the absence of telemetry gets both from Dockhand without compromise.
