DOCKER

Every container,
one panel.

Start, stop, restart, exec into, and tail logs of every Docker container across your fleet — without SSH. Per-container CPU / memory / network metrics.

cloudnan.com / dashboard / docker

Docker

web-01.cloudnan.dev · 5 containers, 12 images

ContainerStatusCPUMemory

app-prod
cloudnan/app:1.42.0
running4.2%512 MB / 2 GB
postgres
postgres:16-alpine
running12.8%1.2 GB / 4 GB
redis
redis:7-alpine
running0.4%64 MB / 256 MB
nginx-proxy
nginx:1.27-alpine
running0.8%32 MB / 128 MB
queue-worker
cloudnan/worker:1.42.0
restarting——

How it works

What happens under the hood.

01
Agent talks to the Docker socket
Read-only by default; writes gate on RBAC permission.
02
Containers stream live
List, inspect, see status / health / restart count. Filter by image, label, or state.
03
Logs + exec
Tail logs in the browser, exec into running containers from the panel terminal.
04
Restart / stop / pause
One-click lifecycle control with audit logging. Bulk actions across multiple containers.
05
Images, volumes, networks
Manage every Docker primitive. Prune unused, inspect, create.
06
Per-container stats
CPU / memory / network breakdown sourced from cgroups, refreshed on the same cadence as host metrics.

What you get

The capabilities that ship.

Container lifecycle

Start / stop / restart / pause / kill — buttons in the panel, audit-logged.

Live logs

Streaming container logs in the browser. Search, filter by stream, copy to clipboard.

Exec terminal

Drop into a running container without SSH-then-docker-exec. Browser-native.

Images

List, pull, prune, inspect. See disk usage per image, layer breakdown.

Networks

List, create, inspect Docker networks. See which containers are attached.

Volumes

List, inspect, prune. See which containers mount each volume + total size.

FAQ

Common questions.

Does it work with Docker Compose?

You can apply existing compose stacks (managed externally) and the panel sees their containers. Native compose orchestration is on the roadmap.

What about Podman / rootless Docker?

Standard Docker socket is supported today. Podman support requires the panel to detect the alternate socket — currently in beta.

Is there a security risk exposing Docker control to the panel?

The agent owns the socket; nothing else. Permissions are RBAC-gated; restart actions are audit-logged. mTLS protects the channel from the agent to the control plane.

Related capabilities

Fleet Monitoring

Per-container metrics live alongside host metrics.

Read

AI Operations Assistant

Ask: "why is the postgres container OOM-killing?"

Read

Drift Detection

Watches container images + tags for unauthorized changes.

Read