YelpArchive/dockersh

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

1274 stars · 79 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

dockersh is a login shell written in Go that places each interactive user into their own individual Docker container when they log in. It can be set as a user's shell in /etc/passwd or used as an ssh ForceCommand, giving per-user isolation on a shared machine via a single ssh daemon.

Use cases

• give multiple ssh users isolated containerized environments on one shared server
• replace per-user sshd-in-container setups with a single ssh port
• use as a login shell in /etc/passwd to sandbox each user
• configure ssh ForceCommand to drop users into their own docker container
• isolate user processes and network stacks with kernel namespaces while persisting home directories

When to choose

• you run a multi-user Linux box and want lightweight per-user isolation without running separate ssh daemons per container
• you want users' home directories mounted from the host so data persists across container restarts
• you need a single ssh entry point that routes each user into their own container

When to avoid

• you need actively maintained software - the project is officially archived and unmaintained
• you need strong security guarantees - the suid binary and privilege-dropping design carry known root-exploitation risk
• you want user namespace hardening or modern Docker isolation features that postdate this tool
• you are not on Linux with Docker available

Facets

cli-tool · maturity abandoned

container-runtime security cli ssh security developer-tools self-hosted cli login-shell docker-containers user-isolation ssh-forcecommand archived go containers linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="YelpArchive/dockersh")