pbauer/docker-cleaner repository overview

⁠Docker Cleaner 🧹

Clean up unused Docker images — on demand or on a schedule. A single, lightweight, multi-arch image that runs in either of two modes:

• web — a web panel that lists unused images so you can select & delete them, and configure scheduled automatic cleanup.
• console — a headless daemon that periodically cleans images on an interval or cron schedule.

The web panel is bilingual (English / Polish, switcher in the top‑right corner).

⁠Supported tags

• latest — latest build from the main branch
• x.y.z — released versions (e.g. 1.0.0)

Architectures: linux/amd64, linux/arm64

Images are rebuilt on the 1st and 15th of every month to pick up security patches of the base image (Debian, Python).

⁠What's new in 1.0.0

• Security: fixed CVE-2026-54283 and CVE-2026-54282 (Starlette) and CVE-2026-58203 (pydantic-settings); no known vulnerabilities in the Python dependency tree; pip removed from the runtime image.
• Smaller image: unused uvicorn extras (uvloop, httptools, watchfiles, websockets, PyYAML) are no longer installed.
• Updated dependencies: FastAPI 0.143, Starlette 1.8, Uvicorn 0.54, Pydantic 2.14, Docker SDK 7.2.

Full changelog: https://github.com/bauerpawel/docker-cleaner/releases⁠

⁠Quick start

⁠Web panel

docker run -d --name docker-cleaner \
  -p 8080:8080 \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v docker-cleaner-data:/data \
  pbauer/docker-cleaner:latest

Open http://localhost:8080⁠.

⁠Console mode (scheduled, no panel)

docker run -d --name docker-cleaner \
  -e MODE=console \
  -e CLEAN_INTERVAL=24h \
  -e CLEAN_SCOPE=all \
  -e MIN_AGE=168h \
  -v /var/run/docker.sock:/var/run/docker.sock \
  pbauer/docker-cleaner:latest

⁠docker compose

services:
  docker-cleaner:
    image: pbauer/docker-cleaner:latest
    environment:
      MODE: web
    ports:
      - "8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - docker-cleaner-data:/data
    restart: unless-stopped

volumes:
  docker-cleaner-data:

⁠Configuration (environment variables)

In web mode, settings changed in the panel are saved to DATA_DIR/settings.json and override the environment variables after a restart.

⁠What "unused" means

• dangling — images without tags (<none>:<none>), typically leftover layers from rebuilds.
• all — every image not referenced by any container (running or stopped), like docker image prune -a.

⁠Security

The container needs access to the Docker socket (/var/run/docker.sock), which is equivalent to root on the host — run it only in a trusted environment. The panel is open by default; on a shared network enable Basic Auth with WEB_AUTH_ENABLED=true + WEB_AUTH_USER / WEB_AUTH_PASSWORD. Accidental‑deletion guards: the age threshold (MIN_AGE), manual delete confirmation in the panel, and an operation log in DATA_DIR/cleanup.log.

⁠Source & issues

Full documentation, source code and issue tracker: https://github.com/bauerpawel/docker-cleaner⁠