Name: drydock
Availability: InStock
Author: CodesWhat

What is drydock?

Drydock is a self-hosted platform for monitoring container image updates. It scans 23 different registries to find newer versions of running container images and presents them in a Vue 3 web dashboard. The system can send alerts through 17 notification channels like Slack, Discord, and Telegram, or automatically apply updates using four action types including Docker Compose and Portainer. Security features include Trivy and Grype vulnerability scanning that prevents unsafe deployments, signature verification with cosign, and SBOM generation. It also creates image backups before updates and rolls back automatically if health checks fail. Remote Docker hosts are supported through Portwing agents. Authentication options include OIDC with Authelia, Auth0, and Authentik, plus basic auth and optional anonymous access. The project is MIT licensed with the latest stable version v1.7.0 released in October 2026.

Should you self-host drydock?

drydock scores 53/100 on selfhost.directory (how scoring works) and ranks #13 of 44 in Container Management. It has 271 GitHub stars.

It shipped 3 stable releases in the past year. The latest, v1.7.0, came out on 19 October 2026. New versions land roughly every 2 months.

Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is Other-licensed and written mostly in Typescript.

Its closest alternative on selfhost.directory is dockge (76/100, 24 698 stars). It scores higher overall, so compare the two before you pick. See drydock vs dockge side by side.

Features

17 UI Locales

21 Notification and Action Triggers

23 Registry Providers

Distributed Agents

Docker Compose Updates

Image Backup & Auto Rollback

Lifecycle hooks

Monitor-First Detection

OIDC Authentication

Per-Container Policy

Prometheus Metrics

ReDoS-Immune Regex

REST API & webhooks

Vulnerability Scanning (Update Bouncer)

Web Dashboard

services: drydock: image: codeswhat/drydock depends_on: socket-proxy: condition: service_healthy volumes: - drydock-store:/store environment: - DD_WATCHER_LOCAL_HOST=socket-proxy - DD_WATCHER_LOCAL_PORT=2375 - DD_AUTH_BASIC_ADMIN_USER=admin - "DD_AUTH_BASIC_ADMIN_HASH=" ports: - 3000:3000

socket-proxy: image: tecnativa/docker-socket-proxy volumes: - /var/run/docker.sock:/var/run/docker.sock environment: - CONTAINERS=1 - IMAGES=1 - EVENTS=1 - SERVICES=1 - INFO=1 # Required for daemon identity detection (notification prefixes) # Add POST=1 and NETWORKS=1 for container actions and auto-updates healthcheck: test: wget --spider http://localhost:2375/version || exit 1 interval: 5s timeout: 3s retries: 3 start_period: 5s restart: unless-stopped

volumes: drydock-store: