Ouroboros vs Drydock
The original pyouroboros project has been unmaintained since around 2020 (last release: v1.4.3, December 2019). Drydock offers a modern, actively maintained alternative with a full web UI, security scanning, and comprehensive container management.
Feature Comparison
Here's how we compare on the features that matter most.
| Feature | Ouroboros | Drydock |
|---|---|---|
| Project status | Unmaintained (since ~2020) | Actively maintained |
| Language | Python | TypeScript |
| Web UI | None (CLI only) | Full dashboard |
| Auto-update containers | Yes | Yes (optional, monitor-first) |
| Docker Compose updates | No | Yes, pull & recreate |
| Registry support | Docker Hub + private via Docker config | 23 dedicated registry integrations |
| Notifications | Apprise passthrough (150+ platforms via Apprise URLs) | 20 native trigger integrations |
| Security scanning | None | Trivy + SBOM + cosign verification |
| OIDC authentication | None | Authelia, Auth0, Authentik |
| REST API | None | Full REST API |
| Prometheus metrics | Basic (container update counts; official Grafana template available) | Full /metrics endpoint + Grafana template |
| Image backup & rollback | No | Pre-update backup with retention + auto rollback |
| Container grouping | No | Smart stack detection with batch actions |
| Lifecycle hooks | No | Pre/post-update shell commands |
| Webhook API | No | Token-authenticated webhooks for CI/CD |
| Container actions | No | Start/stop/restart from UI/API |
| Distributed agents | No | SSE-based agent architecture |
| Audit log | No | Yes, with REST API |
| Semver-aware updates | No | Yes |
| Digest watching | Yes | Yes |
| Multi-arch (amd64/arm64) | Yes | Yes |
| License | MIT | AGPL-3.0 |
Key Differentiators
What we built that Ouroboros doesn't cover.
Full Web Dashboard
Ouroboros is CLI-only with no built-in UI. Drydock ships with a full web dashboard for browsing containers, viewing update status, triggering actions, and inspecting logs.
Monitor-First Design
Drydock is monitor-first by design — it detects updates and notifies you, with dry-run preview before any changes are applied. Ouroboros auto-pulls and restarts containers with no preview option.
Security Scanning
Drydock integrates Trivy vulnerability scanning, SBOM generation (CycloneDX & SPDX), and cosign image signature verification. Ouroboros has no security scanning.
23 Registry Integrations
Dedicated integrations for Docker Hub, GHCR, ECR, GCR, GAR, GitLab, Quay, Harbor, Artifactory, Nexus, and more — far beyond Ouroboros's Docker-config-based approach.
Rollback & Backup
Pre-update image backups with configurable retention and automatic rollback on health check failure. Ouroboros has no rollback or backup mechanism.
20 Trigger Integrations
Drydock notifies across 17 native channels — Slack, Discord, Telegram, Teams, Matrix, SMTP, MQTT, and more — plus Docker, Docker Compose, and Command actions. Ouroboros delegates notifications to Apprise (any Apprise-compatible URL works), but has no native trigger system — no scheduling, templating, threshold filtering, or batch mode.
Coming from Ouroboros?
Ouroboros hasn't been updated in years. Drydock gives you the same auto-update capability plus a full dashboard, security scanning, rollback, and much more. One Docker command to get started.
$ docker run -d \
--name drydock \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 3000:3000 \
-e DD_ANONYMOUS_AUTH_CONFIRM=true \
codeswhat/drydock # open dashboard — add real auth before exposing thisReady to try Drydock?
No SaaS subscription, no data sent off your host, and we ship updates fast.