Deckhand

Local-first Docker and Kubernetes desktop app for macOS and Linux.

Tauri 2 shell · Adobe Spectrum UI · Go sidecar for Docker, Compose, Kubernetes, Helm, and Linux Firecracker microVMs.

Features

• Docker — dashboard, containers (logs / TTY / stats / mounts / debug shell), images (browse / Hub search), volumes (browse / clone / export), networks, Compose (per-service actions), builds (Buildx), disk prune, Docker contexts, diagnose
• Kubernetes — contexts, namespaces, pods, deployments, services, ingresses, configmaps, secrets (redacted), nodes, events, jobs, Helm
• Enterprise-lite — local audit log, secret redaction, confirm-before-prune, proxy-aware diagnose
• Domains — optional *.deckhand.local reverse proxy to published container ports
• Engine modes — attach (host Docker) or embed scaffold (see docs/embed-runtime.md)
• MicroVMs — Firecracker process + API integration on Linux when KVM + firecracker are present
• CLI — go run ./sidecar/cmd/deckhand -- status|diagnose|…

Quick start

bun install
bun run dev

See docs/development.md for prerequisites, split-process workflows, and packaging.

Downloads

Pre-release builds: GitHub Releases.

macOS Apple Silicon DMGs are ad-hoc signed (not notarized). After install, if macOS blocks the app, right-click → Open, or:

xattr -cr /Applications/Deckhand.app

Docs

Doc	Description
Architecture	How the UI, Tauri, and sidecar fit together
Development	Setup, scripts, packaging
Sidecar API	Localhost HTTP API
Embed runtime	Attach vs embed / VirtioFS plan
Supply chain	Audit, SBOM, signing notes
Brand	Mark, wordmark, icons (bun run icons)

Architecture (sketch)

UI (Spectrum / React) → HTTP localhost → Go sidecar → Docker / kubeconfig / Helm / Firecracker
                              ↑
                         Tauri 2 (spawn + tray)

License

MIT — see LICENSE.

Not affiliated with the maritime Deckhand logbook product.