Ouroboros vs Drydock
The original pyouroboros project has been unmaintained since around 2020 (last release: v1.4.3, December 2019). Drydock offers a modern, actively maintained alternative with a full web UI, security scanning, and comprehensive container management.
Feature Comparison
Here's how we compare on the features that matter most.
| Feature | Ouroboros | Drydock |
|---|---|---|
| Project status | Unmaintained (since ~2020) | Actively maintained |
| Language | Python | TypeScript |
| Web UI | None (CLI only) | Full dashboard |
| Auto-update containers | Yes | Yes (optional, monitor-first) |
| Docker Compose updates | No | Yes, pull & recreate |
| Registry support | Docker Hub + private via Docker config | 23 dedicated registry integrations |
| Trigger integrations | Apprise passthrough (150+ platforms via Apprise URLs) | 21 native trigger integrations |
| Security scanning | None | Trivy + SBOM + cosign verification |
| OIDC authentication | None | Authelia, Auth0, Authentik |
| REST API | None | Full REST API |
| Prometheus metrics | Basic (container update counts; official Grafana template available) | Full /metrics endpoint + Grafana template |
| Image backup & rollback | No | Pre-update backup with retention + auto rollback |
| Container grouping | No | Smart stack detection with batch actions |
| Lifecycle hooks | No | Pre/post-update shell commands |
| Webhook API | No | Token-authenticated webhooks for CI/CD |
| Container actions | No | Start/stop/restart from UI/API |
| Distributed agents | No | SSE-based agent architecture |
| Audit log | No | Yes, with REST API |
| Semver-aware updates | No | Yes |
| Digest watching | Yes | Yes |
| Multi-arch (amd64/arm64) | Yes | Yes |
| License | MIT | MIT |
Key Differentiators
What we built that Ouroboros doesn't cover.
Full Web Dashboard
Ouroboros is CLI-only with no built-in UI. Drydock ships with a full web dashboard for browsing containers, viewing update status, triggering actions, and inspecting logs.
Monitor-First Design
Drydock is monitor-first by design — it detects updates and notifies you, with dry-run preview before any changes are applied. Ouroboros auto-pulls and restarts containers with no preview option.
Security Scanning
Drydock integrates Trivy vulnerability scanning, SBOM generation (CycloneDX & SPDX), and cosign image signature verification. Ouroboros has no security scanning.
23 Registry Integrations
Dedicated integrations for Docker Hub, GHCR, ECR, GCR, GAR, GitLab, Quay, Harbor, Artifactory, Nexus, and more — far beyond Ouroboros's Docker-config-based approach.
Rollback & Backup
Pre-update image backups with configurable retention and automatic rollback on health check failure. Ouroboros has no rollback or backup mechanism.
21 Trigger Integrations
Drydock notifies across 17 native channels, Slack, Discord, Telegram, Teams, Matrix, SMTP, MQTT, and more, plus Docker, Docker Compose, Portainer, and Command actions. Ouroboros delegates notifications to Apprise (any Apprise-compatible URL works), but has no native trigger system, no scheduling, templating, threshold filtering, or batch mode.
Coming from Ouroboros?
Ouroboros hasn't been updated in years. Drydock gives you the same auto-update capability plus a full dashboard, security scanning, rollback, and much more. One Docker command to get started.
$ docker run -d \
--name drydock \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 3000:3000 \
-e DD_ANONYMOUS_AUTH_CONFIRM=true \
codeswhat/drydock # open dashboard — add real auth before exposing thisReady to try Drydock?
No SaaS subscription, no data sent off your host, and we ship updates fast.