toshislab/whale-watch repository overview

⁠Whale Watch

An agentless, browser-based workspace for monitoring and operating Docker containers.

Whale Watch provides customizable tabbed stages with real-time widgets for container statistics, logs, status, controls, and interactive terminals. It communicates directly with the Docker Engine API and does not require agents or additional packages inside target containers.

⁠Features

• Customizable tabbed stages and grid layouts
• CPU, memory, network I/O, status, and log widgets
• Container start, stop, and restart controls
• Interactive terminal sessions
• Event-driven container updates without fixed container-list polling
• Persistent stage and widget configuration
• Light and dark themes
• English and Japanese interface
• Optional restriction to selected containers

⁠Quick start

Create a directory for persistent data:

mkdir -p data

Start Whale Watch:

docker run -d \
  --name whale-watch \
  --restart unless-stopped \
  -p 8080:8080 \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v "$(pwd)/data:/usr/local/bin/data" \
  toshislab/whale-watch:dev

Open http://localhost:8080⁠ in your browser.

⁠Restrict target containers

By default, Whale Watch can access every container available through the mounted Docker socket. Use WHALE_WATCH_CONTAINERS to limit the containers exposed in the interface:

docker run -d \
  --name whale-watch \
  --restart unless-stopped \
  -p 8080:8080 \
  -e WHALE_WATCH_CONTAINERS=app,worker \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v "$(pwd)/data:/usr/local/bin/data" \
  toshislab/whale-watch:dev

Container names and IDs can be specified as a comma-separated list.

⁠Persistence

Stage names, widget layouts, target containers, pin states, themes, and other stage settings are stored in:

/usr/local/bin/data/stages.json

Mount /usr/local/bin/data to retain this configuration when the container is replaced or updated.

⁠Update

Pull the dev image:

docker pull toshislab/whale-watch:dev

Replace the running container:

docker stop whale-watch
docker rm whale-watch

Then start it again using the command in the Quick start section.

⁠Security warning

Whale Watch requires access to the Docker socket. Access to this socket is effectively equivalent to administrator access to the Docker host.

The current version does not provide authentication, authorization, TLS, or audit logging. Run it only on a trusted local network and do not expose it directly to the public internet.

⁠Links

• Docker Hub⁠
• GitHub repository⁠
• Japanese documentation⁠

⁠License

Whale Watch is distributed under the MIT License⁠.