Multi-host fleet
Remote agents connect outbound via mTLS — no inbound ports needed. Fan-out views across hosts, per-host metrics, automatic agent upgrade.
A single-binary Docker management platform with multi-host orchestration, smart scaling, stack migration, and full RBAC — all included, all free.
get.dockmesh.dev | bash curl -fsSL https://get.dockmesh.dev | sudo bash RBAC, SSO, multi-host, auto-scaling, migration — every feature is in the single binary. No tiers, no feature gates, no trial limits.
Remote agents connect outbound via mTLS — no inbound ports needed. Fan-out views across hosts, per-host metrics, automatic agent upgrade.
CPU/memory thresholds with safety checks for stateful services and port conflicts.
Your compose.yaml lives on disk, dockmesh reads it. Import directly from a docker run command.
Move a stack between hosts with pre-flight checks, volume transfer, health verification, and automatic rollback on failure.
RBAC, OIDC SSO, TOTP 2FA, tamper-proof audit log.
Scheduled, age-encrypted backups to any of five target types.
Zero runtime dependencies. A single static binary that boots on any recent Linux kernel with Docker 20.10+.
linux/amd64 · linux/arm64 · darwin/amd64 · darwin/arm64 | ~40 MB | glibc or musl | checksums: SHA-256
Compared against the closest peers: Portainer CE/BE (feature-richer commercial alternative) and Dockge (simpler OSS Compose manager).
| Feature | dockmesh | Portainer CE | Portainer BE | Dockge |
|---|---|---|---|---|
| Compose-native | Included | Yes | Yes | Yes |
| Multi-host management | Included | Yes | Yes | — |
| Custom RBAC roles | Included | — | $ Paid tier | — |
| SSO / OIDC | Included | — | $ Paid tier | — |
| Two-factor auth | Included | — | Yes | Yes |
| Service scaling | Auto + Manual | — | — | — |
| Stack migration | Included | — | — | — |
| Host drain | Included | — | — | — |
| SMB/SFTP/WebDAV/S3 backup | Included | — | — | — |
| Audit log (tamper-proof) | Hash chain | — | $ Paid tier | — |
| Vulnerability scanning | Grype | — | $ Paid tier | — |
| Embedded reverse proxy | Caddy | — | — | — |
| Single binary | ~40 MB | — | — | Yes |
| Total cost | $0 forever | Free (limited) | from $150/yr per 3 nodes | $0 (simpler scope) |
† Pricing reflects publicly listed plans at time of writing. Verify current pricing on vendor sites.
Single binary or Docker image. No external database, no config files required.
Open the web UI, paste a compose.yaml, and deploy. Or import from a docker run command.
Add remote hosts via outbound mTLS. Fan-out stacks, migrate between hosts, enable auto-scaling.
The full source is on GitHub under AGPL-3.0. Read every line before you run it.
Your compose.yaml files live on your filesystem. Stop using dockmesh and everything keeps working.
dockmesh doesn't collect usage data. Air-gapped deployments work out of the box.
Questions on GitHub Discussions — other users help too, and answers stay searchable. Bugs on GitHub Issues. No enterprise sales team.
Free to install. Free to scale. Free forever.