Multi-host fleet
Remote agents connect outbound via mTLS — no inbound ports needed. Fan-out views across hosts, per-host metrics, automatic agent upgrade.
A single-binary Docker management platform with multi-host orchestration, smart scaling, stack migration, and full RBAC — all included, all free.
get.dockmesh.dev | bash curl -fsSL https://get.dockmesh.dev | bash Everything included
RBAC, SSO, multi-host, auto-scaling, migration — every feature is in the single binary. No tiers, no feature gates, no trial limits.
Remote agents connect outbound via mTLS — no inbound ports needed. Fan-out views across hosts, per-host metrics, automatic agent upgrade.
CPU/memory thresholds with safety checks for stateful services and port conflicts.
Your compose.yaml lives on disk, Dockmesh reads it. Import directly from a docker run command.
Move a stack between hosts with pre-flight checks, volume transfer, health verification, and automatic rollback on failure.
RBAC, OIDC SSO, TOTP 2FA, tamper-proof audit log.
Scheduled, age-encrypted backups to any of five target types.
Runs where you run
Zero runtime dependencies. A single static binary that boots on any recent Linux kernel with Docker 20.10+.
linux/amd64 · linux/arm64 · linux/armv7 · ~15 MB · glibc or musl
The honest comparison
Compared against the closest peers: Portainer CE/BE (feature-richer commercial alternative) and Dockge (simpler OSS compose manager).
| Feature | | Portainer CE | Portainer BE | Dockge |
|---|---|---|---|---|
| Compose-native | Included | Yes | Yes | Yes |
| Multi-Host Management | Included | Yes | Yes | — |
| Custom RBAC Roles | Included | — | Paid tier | — |
| SSO / OIDC | Included | — | Paid tier | — |
| Two-Factor Auth | Included | — | Yes | Yes |
| Service Scaling | Auto + Manual | — | — | — |
| Stack Migration | Included | — | — | — |
| Host Drain | Included | — | — | — |
| NAS/SFTP/WebDAV Backup | Included | — | — | — |
| Audit Log (tamper-proof) | Hash chain | — | Paid tier | — |
| Vulnerability Scanning | Grype | — | Paid tier | — |
| Embedded Reverse Proxy | Caddy | — | — | — |
| Single Binary | ~15 MB | — | — | Yes |
| Total cost | $0 forever | Free limited | from $150/yr per 3 nodes | $0 simpler scope |
Pricing reflects publicly listed plans at time of writing. Verify current pricing on vendor sites.
Here's honest guidance on when Dockmesh isn't the right fit.
Best-in-class Kubernetes management. If your workload is on K8s (or you want it there), Rancher is the right call. Dockmesh is for Docker + Compose fleets without the K8s overhead.
A self-hosted Heroku. Git-push-to-deploy, preview environments, managed databases. Great for deploying apps. Dockmesh is for managing Docker fleets.
Heroku-style single-host platforms. Great for one-box deployments. Dockmesh is a better fit when you manage multiple hosts with full fleet operations.
Getting started
Single binary or Docker image. No external database, no config files required.
Open the web UI, paste a compose.yaml, and deploy. Or import from a docker run command.
Add remote hosts via outbound mTLS. Fan-out stacks, migrate between hosts, enable auto-scaling.
Why open-source
The full source is on GitHub under AGPL-3.0. Read every line before you run it.
Your compose.yaml files live on your filesystem. Stop using Dockmesh and everything keeps working.
Dockmesh doesn't collect usage data. Air-gapped deployments work out of the box.
Questions on GitHub Discussions — other users help too, and answers stay searchable. Bugs on GitHub Issues. No enterprise sales team.
Frequently asked
Free to install. Free to scale. Free forever.