{"id":118,"date":"2026-06-18T20:22:43","date_gmt":"2026-06-18T12:22:43","guid":{"rendered":"http:\/\/www.tantan.ink\/index.php\/2026\/06\/18\/dockhand-%e4%b8%8a%e6%89%8b%ef%bc%9anas-%e7%8e%a9%e5%ae%b6%e7%9a%84%e4%b8%8b%e4%b8%80%e4%bb%a3-docker-%e7%ae%a1%e7%90%86%e9%9d%a2%e6%9d%bf%ef%bc%8cportainer-%e7%bb%88%e4%ba%8e%e6%9c%89%e5%af%b9\/"},"modified":"2026-07-09T19:30:21","modified_gmt":"2026-07-09T11:30:21","slug":"dockhand-%e4%b8%8a%e6%89%8b%ef%bc%9anas-%e7%8e%a9%e5%ae%b6%e7%9a%84%e4%b8%8b%e4%b8%80%e4%bb%a3-docker-%e7%ae%a1%e7%90%86%e9%9d%a2%e6%9d%bf%ef%bc%8cportainer-%e7%bb%88%e4%ba%8e%e6%9c%89%e5%af%b9","status":"publish","type":"post","link":"https:\/\/www.tantan.ink\/index.php\/2026\/06\/18\/dockhand-%e4%b8%8a%e6%89%8b%ef%bc%9anas-%e7%8e%a9%e5%ae%b6%e7%9a%84%e4%b8%8b%e4%b8%80%e4%bb%a3-docker-%e7%ae%a1%e7%90%86%e9%9d%a2%e6%9d%bf%ef%bc%8cportainer-%e7%bb%88%e4%ba%8e%e6%9c%89%e5%af%b9\/","title":{"rendered":"Dockhand\uff1aNAS \u4e0a\u7684 Docker \u7ba1\u7406\u9762\u677f\uff0cPortainer \u6709\u5bf9\u624b\u4e86"},"content":{"rendered":"<p>\u5982\u679c\u4f60\u73a9 NAS \u8d85\u8fc7\u4e24\u5e74\uff0c\u4f60\u7684 Docker \u7ba1\u7406\u5de5\u5177\u5927\u6982\u7387\u662f Portainer\u3002\u754c\u9762\u591f\u7528\u3001Compose \u80fd\u5199\u3001\u6559\u7a0b\u904d\u5730\u90fd\u662f\u2014\u2014\u4f46\u8fd9\u4e24\u5e74\u60c5\u51b5\u53d8\u4e86\u3002Portainer CE \u7684\u66f4\u65b0\u8d8a\u6765\u8d8a\u6162\uff0c\u597d\u7528\u529f\u80fd\u4e00\u4e2a\u63a5\u4e00\u4e2a\u88ab\u5212\u8fdb\u4ed8\u8d39\u7684 Business Edition\uff1aRBAC\u3001Webhook \u81ea\u52a8\u90e8\u7f72\u3001\u6f0f\u6d1e\u626b\u63cf\u2026\u2026\u867d\u7136\u4e2a\u4eba\u7528\u6237 5 \u8282\u70b9\u4ee5\u4e0b BE \u8fd8\u662f\u514d\u8d39\uff0c\u4f46\u90a3\u79cd\u300c\u514d\u8d39\u7248\u88ab\u6545\u610f\u9609\u5272\u300d\u7684\u611f\u89c9\uff0c\u8ba9\u5f88\u591a\u4eba\u5f00\u59cb\u627e\u66ff\u4ee3\u54c1\u3002<\/p>\n<p>\u4eca\u5e74\u5192\u51fa\u6765\u7684 <strong>Dockhand<\/strong>\uff08GitHub: <code>Finsys\/dockhand<\/code>\uff09\u53ef\u80fd\u662f\u76ee\u524d\u6700\u63a5\u8fd1\u300c\u5b8c\u7f8e\u66ff\u4ee3\u300d\u7684\u9009\u62e9\u3002\u5b83\u5728 NAS \u5708\u548c Reddit \u4e0a\u8ba8\u8bba\u5ea6\u5f88\u9ad8\uff0c\u6700\u65b0\u7248 v1.0.34 \u53d1\u5e03\u4e8e 6 \u6708 17 \u65e5\uff0c\u66f4\u65b0\u8282\u594f\u76f8\u5f53\u52e4\u5feb\u3002<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/06\/dockhand-dashboard.webp\" alt=\"Dockhand \u73af\u5883\u603b\u89c8\u4eea\u8868\u76d8\" \/><\/p>\n<h2>Dockhand \u662f\u4ec0\u4e48<\/h2>\n<p>\u4e00\u53e5\u8bdd\uff1a<strong>\u4e00\u4e2a\u73b0\u4ee3\u5316\u7684 Docker \u7ba1\u7406 Web UI\uff0c\u7528\u4e00\u5957\u9762\u677f\u7ba1\u672c\u673a\u548c\u8fdc\u7a0b\u7684\u6240\u6709 Docker \u73af\u5883<\/strong>\u3002<\/p>\n<p>\u51e0\u4e2a\u57fa\u672c\u4e8b\u5b9e\u5148\u6446\u51fa\u6765\uff1a<\/p>\n<ul>\n<li><strong>\u6280\u672f\u6808<\/strong>\uff1a\u524d\u7aef SvelteKit 2 + Svelte 5 + TailwindCSS\uff0c\u540e\u7aef Bun runtime\uff0c\u6570\u636e\u5e93\u9ed8\u8ba4 SQLite\uff08\u53ef\u9009 PostgreSQL\uff09<\/li>\n<li><strong>\u57fa\u7840\u955c\u50cf<\/strong>\uff1a\u81ea\u5df1\u7528 Wolfi \u5305\u4ece\u96f6\u6784\u5efa\uff0c\u4e0d\u662f Alpine\/Ubuntu \u6539\u6539\u5c31\u4e0a\u2014\u2014\u8fd9\u70b9\u5bf9\u5b89\u5168\u6709\u70b9\u8ffd\u6c42\u7684\u4eba\u4f1a\u6bd4\u8f83\u653e\u5fc3<\/li>\n<li><strong>\u6388\u6743<\/strong>\uff1aBSL 1.1\uff08Business Source License\uff09\uff0c\u4e2a\u4eba\u548c\u5185\u90e8\u4f7f\u7528\u514d\u8d39\uff0c\u4e0d\u53ef\u4f5c\u4e3a\u5546\u4e1a SaaS \u5bf9\u5916\u63d0\u4f9b\uff1b2029 \u5e74\u81ea\u52a8\u8f6c\u4e3a Apache 2.0<\/li>\n<li><strong>\u4f01\u4e1a\u7248<\/strong>\uff1a$499\/\u4e3b\u673a\/\u5e74\u7684 SMB \u7248\u52a0 LDAP\/AD\u3001RBAC\uff1b$1499\/\u4e3b\u673a\/\u5e74\u7684 Enterprise \u7248\u52a0\u5408\u89c4\u5ba1\u8ba1\u65e5\u5fd7<\/li>\n<li><strong>\u8d44\u6e90\u5360\u7528<\/strong>\uff1a\u7ea6 200MB \u5185\u5b58\uff0c\u6811\u8393\u6d3e 4 \u80fd\u8dd1<\/li>\n<\/ul>\n<p>Dockhand \u4e0d\u662f\u8981\u505a\u4e00\u4e2a\u300c\u6bd4 Portainer \u4fbf\u5b9c\u300d\u7684\u5e73\u66ff\uff0c\u800c\u662f\u76f4\u63a5\u5728\u4ea7\u54c1\u5c42\u9762\u628a Portainer BE \u7684\u5f88\u591a\u529f\u80fd\u505a\u8fdb\u4e86\u514d\u8d39\u7248\u3002\u4e0b\u9762\u5177\u4f53\u804a\u3002<\/p>\n<h2>\u4e3a\u4ec0\u4e48\u503c\u5f97\u6362<\/h2>\n<h3>1. \u591a\u73af\u5883\u7ba1\u7406\uff1a\u672c\u673a + \u8fdc\u7a0b\u4e00\u628a\u6293<\/h3>\n<p>Portainer \u7ba1\u8fdc\u7a0b Docker \u8981\u914d Edge Agent\uff0c\u4f53\u9a8c\u4e00\u822c\u3002Dockhand \u539f\u751f\u652f\u6301\u4e09\u79cd\u8fde\u63a5\u65b9\u5f0f\uff1a<\/p>\n<ul>\n<li><strong>Unix socket<\/strong>\uff1a\u672c\u673a\u6302\u8f7d <code>\/var\/run\/docker.sock<\/code>\uff0c\u6700\u76f4\u63a5<\/li>\n<li><strong>Docker API over TCP<\/strong>\uff1a\u8fdc\u7a0b daemon \u8d70 TCP + TLS<\/li>\n<li><strong>Hawser Agent<\/strong>\uff1aDockhand \u81ea\u5bb6\u7684\u5f00\u6e90 Go \u4ee3\u7406\uff08GitHub: <code>Finsys\/hawser<\/code>\uff09\uff0c\u9002\u5408 NAT\/\u9632\u706b\u5899\u540e\u9762\u7684\u4e3b\u673a\uff0c\u51fa\u7ad9 WebSocket \u8fde\u63a5\uff0c\u4e0d\u7528\u5f00\u5165\u7ad9\u7aef\u53e3<\/li>\n<\/ul>\n<p>\u4e00\u4e2a\u8d26\u53f7\u4e0b\u53ef\u4ee5\u52a0\u591a\u4e2a Environment\uff0c\u5de6\u4e0a\u89d2\u4e00\u952e\u5207\u6362\uff0c\u8de8\u73af\u5883\u7684\u65e5\u5fd7\u3001\u66f4\u65b0\u3001\u626b\u63cf\u5168\u96c6\u4e2d\u663e\u793a\u3002\u5bf9\u6709\u591a\u53f0 NAS \u6216 Homelab \u591a\u8282\u70b9\u7684\u4eba\u6765\u8bf4\u975e\u5e38\u5b9e\u7528\u3002<\/p>\n<h3>2. Git \u90e8\u7f72 + Webhook\uff1aNAS \u4e0a\u7684\u8ff7\u4f60 GitOps<\/h3>\n<p>\u8fd9\u662f\u8ba9\u6211\u89c9\u5f97\u300c\u7ec8\u4e8e\u6709\u4eba\u505a\u4e86\u300d\u7684\u529f\u80fd\u3002Dockhand \u7684 Stack \u90e8\u7f72\u53ef\u4ee5\u76f4\u63a5\u5403 Git \u4ed3\u5e93\u5730\u5740\uff1a<\/p>\n<ul>\n<li>\u652f\u6301 HTTP\uff08Personal Access Token \/ \u8d26\u53f7\u5bc6\u7801\uff09\u548c SSH\uff08deploy key\uff09\u4e24\u79cd\u8ba4\u8bc1<\/li>\n<li>\u914d\u7f6e Webhook \u4e4b\u540e\uff0cGitHub\/GitLab\/Gitea \u4e0a\u63a8\u9001\u4ee3\u7801\uff0cDockhand \u81ea\u52a8\u62c9\u53d6\u3001\u5957\u7528\u65b0\u7684 compose.yaml\u3001\u6eda\u52a8\u66f4\u65b0\u5bb9\u5668<\/li>\n<li>\u672c\u8d28\u4e0a\u662f\u4e00\u4e2a\u8ff7\u4f60\u7248 Argo CD\u2014\u2014\u6ca1\u6709 K8s \u90a3\u4e48\u91cd\uff0c\u4f46 GitOps \u7684\u6838\u5fc3\u7406\u5ff5\u5b8c\u5168\u5230\u4f4d<\/li>\n<\/ul>\n<p>\u5982\u679c\u4f60\u5df2\u7ecf\u628a Compose \u6587\u4ef6\u653e\u5728 Git \u4ed3\u5e93\u91cc\u7ba1\u7406\uff08\u8fd9\u672c\u6765\u5c31\u662f\u6700\u4f73\u5b9e\u8df5\uff09\uff0c\u8fd9\u4e2a\u529f\u80fd\u662f\u521a\u9700\u3002<\/p>\n<h3>3. Volume \u6587\u4ef6\u6d4f\u89c8\u5668\uff1a\u70b9\u4e00\u4e0b\u5c31\u80fd\u770b\u5377\u5185\u5bb9<\/h3>\n<p>Docker volume \u6700\u5927\u7684\u75db\u70b9\u5c31\u662f\u300c\u6570\u636e\u85cf\u8d77\u6765\u4e86\uff0c\u60f3\u770b\u5f88\u9ebb\u70e6\u300d\u3002\u4f20\u7edf\u505a\u6cd5\u662f SSH \u8fdb\u53bb\uff0c\u624b\u52a8 <code>docker run --rm -v vol:\/x busybox ls \/x<\/code>\uff0c\u6bcf\u6b21\u90fd\u8981\u6572\u4e00\u4e32\u3002<\/p>\n<p>Dockhand \u7684\u505a\u6cd5\u5f88\u806a\u660e\uff1a\u4f60\u5728 UI \u91cc\u70b9\u4e00\u4e0b Volume\uff0c<strong>\u5b83\u4f1a\u81ea\u52a8\u62c9\u4e00\u4e2a\u4e34\u65f6 busybox \u5bb9\u5668\u6302\u4e0a\u8fd9\u4e2a\u5377<\/strong>\uff0c\u8ba9\u4f60\u5728\u6d4f\u89c8\u5668\u91cc\u6d4f\u89c8\u3001\u4e0b\u8f7d\u3001\u4e0a\u4f20\u6587\u4ef6\u3002\u64cd\u4f5c\u5b8c\u5bb9\u5668\u81ea\u52a8\u5220\u9664\uff0c\u4e0d\u7559\u75d5\u8ff9\u3002\u5bf9\u5907\u4efd\u68c0\u67e5\u3001\u8c03\u8bd5\u914d\u7f6e\u6587\u4ef6\u3001\u4e34\u65f6\u6539\u8bbe\u7f6e\u6765\u8bf4\uff0c\u7701\u4e86\u65e0\u6570 SSH \u64cd\u4f5c\u3002<\/p>\n<p>\u8fd9\u4e2a\u529f\u80fd\u76ee\u524d\u5728\u5176\u4ed6\u9762\u677f\u91cc\u6211\u6ca1\u89c1\u8fc7\uff0c\u662f Dockhand \u72ec\u6709\u7684\u4eae\u70b9\u3002<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/06\/dockhand-volumes.webp\" alt=\"Dockhand Volume \u6587\u4ef6\u6d4f\u89c8\u5668\" \/><\/p>\n<h3>4. \u7edf\u4e00\u65e5\u5fd7\u548c\u7ec8\u7aef\uff1a\u4e0d\u7528\u5207\u9875\u4e86<\/h3>\n<p>Portainer \u770b\u65e5\u5fd7\u8981\u8fdb\u5bb9\u5668\u8be6\u60c5\u9875\u518d\u70b9 Logs\uff0c\u67e5\u591a\u4e2a\u5bb9\u5668\u5c31\u5f97\u53cd\u590d\u8df3\u8f6c\u3002Dockhand \u628a\u65e5\u5fd7\u548c\u7ec8\u7aef\u505a\u6210\u4e86\u4fa7\u8fb9\u680f\u5e38\u9a7b\u9762\u677f\uff0c\u50cf VS Code \u7684 Terminal \u90a3\u6837\uff1a<\/p>\n<ul>\n<li>\u6beb\u79d2\u7ea7\u5207\u6362\u5bb9\u5668<\/li>\n<li>\u591a\u6761\u65e5\u5fd7\u6d41\u540c\u65f6\u5f00\u7740<\/li>\n<li>\u5b57\u4f53\u5927\u5c0f\u3001\u6eda\u52a8\u3001\u4e0b\u8f7d\u3001\u590d\u5236\u90fd\u652f\u6301<\/li>\n<li>\u7ec8\u7aef\u53ef\u4ee5\u6307\u5b9a user\u3001\u9884\u8bbe\u547d\u4ee4\uff0c\u6253\u5f00\u76f4\u63a5\u7528<\/li>\n<\/ul>\n<p>\u8fd9\u4e2a\u8bbe\u8ba1\u7ec6\u8282\u770b\u4f3c\u4e0d\u5927\uff0c\u4f46\u7528\u60ef IDE \u7684\u4eba\u4f1a\u89c9\u5f97\u975e\u5e38\u987a\u624b\u3002<\/p>\n<h3>5. \u6f0f\u6d1e\u626b\u63cf + \u5b89\u5168\u66f4\u65b0<\/h3>\n<p>Dockhand \u5185\u7f6e\u4e86 Grype \u548c Trivy \u7684\u6f0f\u6d1e\u626b\u63cf\u2014\u2014\u8fd9\u4e24\u4e2a\u90fd\u662f\u4e1a\u754c\u5e38\u7528\u7684\u5bb9\u5668\u6f0f\u6d1e\u626b\u63cf\u5de5\u5177\u3002\u5728 Settings \u91cc\u70b9\u4e00\u4e0b Pull \u5c31\u80fd\u542f\u7528\uff0c\u4e4b\u540e\u6bcf\u4e2a\u955c\u50cf\u90fd\u4f1a\u663e\u793a CVE \u7ed3\u679c\u3002<\/p>\n<p>\u66f4\u8d34\u5fc3\u7684\u662f\u5b83\u7684\u300c\u5b89\u5168\u62c9\u53d6\u300d\u673a\u5236\uff1a\u81ea\u52a8\u66f4\u65b0\u65f6\uff0c\u65b0\u955c\u50cf\u4f1a\u5148\u62c9\u5230\u4e34\u65f6 tag \u505a\u626b\u63cf\uff0c\u626b\u51fa\u95ee\u9898\u5c31\u5220\u6389\u4e34\u65f6\u955c\u50cf\u3001\u4e0d\u52a8\u6b63\u5728\u8dd1\u7684\u5bb9\u5668\uff0c\u4e0d\u4f1a\u56e0\u4e3a\u76f2\u76ee\u66f4\u65b0\u628a\u670d\u52a1\u641e\u6302\u3002<\/p>\n<p>\u53e6\u5916 Dockhand \u7684\u57fa\u7840\u955c\u50cf\u4ece Wolfi \u5305\u81ea\u5df1\u6784\u5efa\uff0c\u4e0d\u4f9d\u8d56 Alpine\u2014\u2014\u8fd9\u610f\u5473\u7740\u57fa\u7840\u5c42\u7684 CVE \u4f1a\u5c11\u5f88\u591a\u3002<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/06\/dockhand-containers.webp\" alt=\"Dockhand \u5bb9\u5668\u7ba1\u7406\u754c\u9762\" \/><\/p>\n<h2>\u5b89\u88c5\uff1a30 \u79d2\u641e\u5b9a<\/h2>\n<p>\u4e00\u884c\u547d\u4ee4\u5c31\u80fd\u8dd1\u8d77\u6765\uff1a<\/p>\n<pre><code>docker run -d \n  --name dockhand \n  --restart unless-stopped \n  -p 3000:3000 \n  -v \/var\/run\/docker.sock:\/var\/run\/docker.sock \n  -v dockhand_data:\/app\/data \n  fnsys\/dockhand:latest<\/code><\/pre>\n<p>\u7136\u540e\u6d4f\u89c8\u5668\u6253\u5f00 <code>http:\/\/\u4f60\u7684NAS-IP:3000<\/code>\u3002\u63a8\u8350\u7528 docker-compose\uff0c\u65b9\u4fbf\u7ba1\u7406\uff1a<\/p>\n<pre><code>services:\n  dockhand:\n    image: fnsys\/dockhand:latest\n    container_name: dockhand\n    restart: unless-stopped\n    ports:\n      - \"3000:3000\"\n    volumes:\n      - \/var\/run\/docker.sock:\/var\/run\/docker.sock\n      - dockhand_data:\/app\/data\n    environment:\n      - TZ=Asia\/Shanghai\n\nvolumes:\n  dockhand_data:<\/code><\/pre>\n<p>\u955c\u50cf\u652f\u6301 amd64 \u548c arm64 \u591a\u67b6\u6784\uff0c\u7fa4\u6656\u3001\u98de\u725b NAS\u3001\u6781\u7a7a\u95f4\u3001\u6811\u8393\u6d3e\u90fd\u80fd\u76f4\u63a5\u7528\u3002<\/p>\n<h2>\u521d\u6b21\u8bbe\u7f6e\u5fc5\u987b\u6ce8\u610f\u7684\u5b89\u5168\u6b65\u9aa4<\/h2>\n<p>\u88c5\u5b8c\u522b\u6025\u7740\u5230\u5904\u70b9\uff0c<strong>Dockhand \u9ed8\u8ba4\u662f\u300c\u65e0\u7528\u6237\u300d\u72b6\u6001<\/strong>\u2014\u2014\u4efb\u4f55\u80fd\u8bbf\u95ee Web UI \u7684\u4eba\u90fd\u80fd\u64cd\u4f5c\u4f60\u7684 Docker\u3002\u52a1\u5fc5\u6309\u987a\u5e8f\u505a\u8fd9\u51e0\u6b65\uff1a<\/p>\n<ol>\n<li><strong>\u521b\u5efa\u7ba1\u7406\u5458\u8d26\u53f7<\/strong>\uff1aSettings \u2192 Users \u2192 Add user<\/li>\n<li><strong>\u5f00\u542f\u767b\u5f55\u9a8c\u8bc1<\/strong>\uff1aSettings \u2192 Authentication\uff0c\u6253\u5f00 &#8220;Require login&#8221;<\/li>\n<li><strong>\u8bbe\u7f6e\u65f6\u533a<\/strong>\uff1aSettings \u2192 \u6539\u6210 <code>Asia\/Shanghai<\/code><\/li>\n<li><strong>\u5957\u53cd\u5411\u4ee3\u7406<\/strong>\uff1a\u4e0d\u8981\u76f4\u63a5\u628a 3000 \u7aef\u53e3\u66b4\u9732\u5230\u516c\u7f51\uff0c\u7528 Nginx Proxy Manager \/ Caddy \/ Cloudflare Tunnel \u52a0\u4e00\u5c42 HTTPS<\/li>\n<li><strong>\u8003\u8651 socket-proxy<\/strong>\uff1a\u6b63\u5f0f\u673a\u4e0a\u5efa\u8bae\u7528 <code>tecnativa\/docker-socket-proxy<\/code> \u4ee3\u7406 Docker socket\uff0c\u9650\u5236 Dockhand \u80fd\u8c03\u7528\u7684 API \u8303\u56f4<\/li>\n<\/ol>\n<p>Webhook \u7684 token <strong>\u53ea\u4f1a\u663e\u793a\u4e00\u6b21<\/strong>\uff0c\u521b\u5efa Stack \u62ff\u5230 URL \u540e\u5fc5\u987b\u7acb\u523b\u4fdd\u5b58\uff0c\u5fd8\u4e86\u53ea\u80fd\u780d\u6389\u91cd\u5efa\u3002<\/p>\n<h2>\u548c Portainer \u6bd4\u600e\u4e48\u6837<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u529f\u80fd<\/th>\n<th>Dockhand<\/th>\n<th>Portainer CE<\/th>\n<th>Portainer BE<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u5bb9\u5668\/\u6620\u50cf\/\u7f51\u7edc\/\u5377\u7ba1\u7406<\/td>\n<td>\u2705<\/td>\n<td>\u2705<\/td>\n<td>\u2705<\/td>\n<\/tr>\n<tr>\n<td>\u591a\u73af\u5883\u7ba1\u7406<\/td>\n<td>\u2705 (API + Hawser)<\/td>\n<td>\u2705<\/td>\n<td>\u2705 + Edge<\/td>\n<\/tr>\n<tr>\n<td>Git Stack + Webhook<\/td>\n<td>\u2705<\/td>\n<td>\u274c<\/td>\n<td>\u2705<\/td>\n<\/tr>\n<tr>\n<td>\u5168\u57df\u73af\u5883\u53d8\u91cf<\/td>\n<td>\u2705<\/td>\n<td>\u274c<\/td>\n<td>\u2705<\/td>\n<\/tr>\n<tr>\n<td>Volume \u6587\u4ef6\u6d4f\u89c8\u5668<\/td>\n<td>\u2705<\/td>\n<td>\u274c<\/td>\n<td>\u274c<\/td>\n<\/tr>\n<tr>\n<td>\u7edf\u4e00\u65e5\u5fd7\u4fa7\u8fb9\u680f<\/td>\n<td>\u2705<\/td>\n<td>\u274c<\/td>\n<td>\u274c<\/td>\n<\/tr>\n<tr>\n<td>\u6f0f\u6d1e\u626b\u63cf<\/td>\n<td>\u2705 (Grype+Trivy)<\/td>\n<td>\u274c<\/td>\n<td>\u2705<\/td>\n<\/tr>\n<tr>\n<td>RBAC \/ \u5ba1\u8ba1\u65e5\u5fd7<\/td>\n<td>\u4f01\u4e1a\u7248<\/td>\n<td>\u274c<\/td>\n<td>\u2705<\/td>\n<\/tr>\n<tr>\n<td>OIDC \/ SSO<\/td>\n<td>\u2705<\/td>\n<td>\u274c<\/td>\n<td>\u2705<\/td>\n<\/tr>\n<tr>\n<td>\u4e2d\u6587 UI<\/td>\n<td>\u274c<\/td>\n<td>\u2705<\/td>\n<td>\u2705<\/td>\n<\/tr>\n<tr>\n<td>\u6388\u6743<\/td>\n<td>BSL 1.1<\/td>\n<td>zlib<\/td>\n<td>\u5546\u7528<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u7b80\u5355\u8bf4\uff1a<strong>Portainer BE \u7684\u6838\u5fc3\u5356\u70b9\uff08Git Webhook\u3001\u5168\u57df\u53d8\u91cf\u3001\u6f0f\u6d1e\u626b\u63cf\u3001OIDC\uff09\uff0cDockhand \u514d\u8d39\u7248\u5168\u90e8\u7ed9\u4e86<\/strong>\u3002\u800c\u4e14\u8fd8\u591a\u4e86 Volume \u6d4f\u89c8\u5668\u548c\u7edf\u4e00\u65e5\u5fd7\u8fd9\u4e24\u4e2a\u72ec\u5bb6\u529f\u80fd\u3002<\/p>\n<p>\u6700\u5927\u7684\u77ed\u677f\u662f<strong>\u6ca1\u6709\u4e2d\u6587 UI<\/strong>\uff0cGitHub \u4e0a i18n issue \u5df2\u7ecf\u5f00\u4e86\uff0c\u4f46\u77ed\u671f\u5185\u8fd8\u5f97\u5543\u82f1\u6587\u3002\u5982\u679c\u4f60\u5bb6\u91cc\u6709\u5bf9\u82f1\u6587\u4e0d\u719f\u7684\u6210\u5458\u4e5f\u8981\u7528\u9762\u677f\uff0c\u8fd9\u4e00\u70b9\u8981\u8003\u8651\u3002<\/p>\n<h2>\u9002\u5408\u8c01\u7528<\/h2>\n<p><strong>\u9002\u5408<\/strong>\uff1a<\/p>\n<ul>\n<li>\u5bb6\u7528 NAS \u8dd1 10-50 \u4e2a Docker \u5bb9\u5668\uff0c\u5acc Portainer CE \u8d8a\u6765\u8d8a\u9e21\u808b<\/li>\n<li>\u6709\u591a\u53f0\u673a\u5668\u9700\u8981\u7edf\u4e00\u7ba1 Docker\uff08Homelab \u591a\u8282\u70b9\uff09<\/li>\n<li>\u5df2\u7ecf\u5728 Git \u4ed3\u5e93\u91cc\u7ba1 Compose \u6587\u4ef6\uff0c\u60f3\u8bd5\u8bd5\u8f7b\u91cf GitOps<\/li>\n<li>\u60f3\u8981\u6f0f\u6d1e\u626b\u63cf\u4f46\u4e0d\u60f3\u82b1\u94b1\u4e70 Portainer BE<\/li>\n<\/ul>\n<p><strong>\u4e0d\u9002\u5408<\/strong>\uff1a<\/p>\n<ul>\n<li>\u5fc5\u987b\u4e2d\u6587 UI\uff08\u6682\u65f6\u7b49\u7b49 i18n\uff09<\/li>\n<li>\u7528 K8s\/Swarm \u4e3a\u4e3b\u7684\u573a\u666f\uff08Dockhand \u53ea\u7ba1 Docker\uff09<\/li>\n<li>\u60f3\u62ff\u6765\u505a\u4ed8\u8d39 SaaS \u5bf9\u5916\u5356 Docker \u63a7\u5236\u53f0\uff08BSL 1.1 \u4e0d\u5141\u8bb8\uff09<\/li>\n<\/ul>\n<h2>\u603b\u7ed3<\/h2>\n<p>Dockhand \u4e0d\u662f\u9769\u547d\u6027\u7684\u53d1\u660e\uff0c\u5b83\u53ea\u662f\u628a\u8fd9\u51e0\u5e74\u6765\u793e\u533a\u4e00\u76f4\u5728\u558a\u7684\u9700\u6c42\u2014\u2014<strong>Git \u76f4\u63a5\u90e8\u7f72\u3001\u5168\u5c40\u53d8\u91cf\u3001\u5377\u6d4f\u89c8\u3001\u7edf\u4e00\u65e5\u5fd7\u3001\u8de8\u73af\u5883\u7ba1\u7406<\/strong>\u2014\u2014\u4e00\u6b21\u6253\u5305\u7ed9\u4e86\u514d\u8d39\u7528\u6237\u3002\u5728 Portainer CE \u8d8a\u6765\u8d8a\u50cf\u300c\u5546\u4e1a\u7248\u8bd5\u7528\u300d\u7684\u5f53\u4e0b\uff0c\u5b83\u51fa\u73b0\u7684\u65f6\u95f4\u70b9\u521a\u597d\u3002<\/p>\n<p>\u5bf9 NAS \u73a9\u5bb6\u6765\u8bf4\uff0c<strong>\u73b0\u5728\u5c31\u53ef\u4ee5\u628a\u5b83\u8ddf Portainer \u5e76\u884c\u88c5\u4e00\u6bb5\u65f6\u95f4<\/strong>\u8bd5\u624b\u611f\u3002\u6302\u597d\u6570\u636e\u5377\u3001\u522b\u5fd8\u4e86\u5f00\u9a8c\u8bc1\u3001\u5957\u4e2a\u53cd\u4ee3\uff0c\u8fc1\u79fb\u6210\u672c\u51e0\u4e4e\u4e3a\u96f6\u3002BSL 1.1 \u5728\u4e2a\u4eba\u548c\u5185\u90e8\u4f7f\u7528\u4e0a\u5b8c\u5168\u7b49\u540c\u4e8e\u5f00\u6e90\uff0c2029 \u5e74\u81ea\u52a8\u8f6c Apache 2.0 \u4e5f\u662f\u4e00\u4e2a\u5408\u7406\u7684\u957f\u671f\u627f\u8bfa\u3002<\/p>\n<p>\u5b83\u80fd\u4e0d\u80fd\u771f\u6b63\u53d6\u4ee3 Portainer\uff1f\u770b 1.x \u4e4b\u540e\u7684 i18n \u8fdb\u5ea6\u548c\u793e\u533a\u53cd\u9988\u3002\u4f46\u4f5c\u4e3a 2026 \u5e74\u7684\u300cDocker \u9762\u677f\u65b0\u9009\u62e9\u300d\uff0cDockhand \u5df2\u7ecf\u7a33\u5750\u7b2c\u4e00\u68af\u961f\u4e86\u3002<\/p>\n<hr \/>\n<p><strong>\u53c2\u8003\u94fe\u63a5<\/strong>\uff1a<\/p>\n<ul>\n<li>GitHub: <a href=\"https:\/\/github.com\/Finsys\/dockhand\">Finsys\/dockhand<\/a><\/li>\n<li>\u5b98\u7f51: <a href=\"https:\/\/dockhand.pro\">dockhand.pro<\/a><\/li>\n<li>Docker Hub: <a href=\"https:\/\/hub.docker.com\/r\/fnsys\/dockhand\">fnsys\/dockhand<\/a><\/li>\n<li>\u53c2\u8003: <a href=\"https:\/\/www.xda-developers.com\/i-finally-found-the-best-portainer-replacement\/\">XDA Developers \u8bc4\u6d4b<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Portainer CE \u66f4\u65b0\u8d8a\u6765\u8d8a\u6162\uff0c\u597d\u7528\u529f\u80fd\u88ab\u4e0d\u65ad\u5212\u8fdb\u4ed8\u8d39\u7248\u3002Dockhand\u2014\u2014\u4e00\u4e2a\u628a Git Webhook\u3001\u6f0f\u6d1e\u626b\u63cf\u3001Volume \u6d4f\u89c8\u5668\u3001\u7edf\u4e00\u65e5\u5fd7\u5168\u90e8\u514d\u8d39\u7ed9\u7528\u6237\u7684\u65b0\u4e00\u4ee3 Docker \u9762\u677f\uff0c2026 \u5e74 NAS \u73a9\u5bb6\u7684\u65b0\u9009\u62e9\u3002<\/p>\n","protected":false},"author":2,"featured_media":217,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[164],"tags":[17,35,38,18,36,37,16],"class_list":["post-118","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-selfhost","tag-docker","tag-dockhand","tag-gitops","tag-nas","tag-portainer","tag-37","tag-16"],"_links":{"self":[{"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/posts\/118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/comments?post=118"}],"version-history":[{"count":1,"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/posts\/118\/revisions"}],"predecessor-version":[{"id":270,"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/posts\/118\/revisions\/270"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/media\/217"}],"wp:attachment":[{"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/media?parent=118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/categories?post=118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tantan.ink\/index.php\/wp-json\/wp\/v2\/tags?post=118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}