Armorer – A secure local control plane to sandbox AI agents in Docker
Docker sandboxing for agents when most runners just trust whatever the LLM outputs.
Outbound-only Pilot Agent beats Portainer for NAT traversal without exposing Docker socket.
Homelab operators and small DevOps teams managing Docker Compose across servers
Portainer · Dockge · CapRover
I wasn’t happy with the current available options so I built Sencho. It’s a self-hosted Docker Compose control plane for people managing one machine or a small fleet, without moving to Kubernetes and without exposing the Docker socket over the network.
Connect your remote nodes either by direct authenticated HTTP/WebSocket proxying, or through the outbound-only Pilot Agent. There’s no restriction on the number of nodes you can connect.
Manage the entire compose lifecycle from a central place and most importantly Your compose file are not “captured” and stay on disk as source of truth.
GitHub: https://github.com/Studio-Saelix/sencho
Docs: https://docs.sencho.io
Docker sandboxing for agents when most runners just trust whatever the LLM outputs.
Neon-like branching for self-hosters, but explicitly admits it's not for critical production workloads.
Runs virtual Kubernetes control planes at 2MB each, beating Kind's full node overhead.
GitHub integration fetches migrations without CI/CD job overhead.
Self-hosted alternative to Stripe Minions for teams avoiding cloud-only agents.
Agents install their own sandbox via Docker, solving the dependency hell problem.