STARDUSTLC666/dsh-docker
30Last commit Aug 15, 2026
dsh-docker DSH plugin
dsh-docker provides six tools to interact with Docker containers and images through the DSH subprocess service. It uses direct Docker CLI calls with argv arrays to avoid shell injection, and includes an approval gate for container execution. No runtime dependencies beyond Docker.
How to install the dsh-docker DSH plugin
dsh plugin --profile web add @stardustlc/dsh-dockerCopying does not run this command. Review the repository and version before installing the dsh-docker DSH plugin.
dsh-docker DSH plugin data source
dsh-docker DSH plugin snapshot date: Aug 16, 2026
discovered
What the dsh-docker DSH plugin can do
- List containers with status, image, and runtime filters (docker_ps)
- List local images with repository, tag, size, and dangling filter (docker_images)
- View container logs with tail row limit and optional short follow (docker_logs)
- Get detailed container info including image, status, and ports (docker_inspect)
- Execute commands inside a container with approval gate and name validation (docker_exec)
- Start, stop, restart, or remove containers with clear destructive prompts (docker_manage)
Where the dsh-docker DSH plugin fits
- Monitor running containers and their resource usage
- Troubleshoot container issues by inspecting logs and details
- Automate container lifecycle operations in DSH workflows
- Execute diagnostic commands inside containers without manual SSH
- Clean up dangling images and unused containers
Who the dsh-docker DSH plugin is for
- DevOps engineers managing containerized environments
- System administrators who use DSH for infrastructure automation
- Developers who need quick container insights from their DSH agent
dsh-docker DSH plugin limitations
- Requires Docker to be installed and accessible (dockerPath configurable)
- docker_exec defaults to approval gate; in headless mode without approval channel, execution is denied
- Single operation timeout is limited to 5–600 seconds (configurable within 5s–10min)
- Log tail row count limited to 1–2000 lines
- Container name validation only allows [A-Za-z0-9][A-Za-z0-9_.:-]* to prevent injection
dsh-docker DSH plugin: from the repository README
Quoted from the STARDUSTLC666/dsh-docker README, the upstream source of the dsh-docker DSH plugin. Copyright remains with the original authors.
> **你的 agent 会管容器了**：六个工具覆盖容器/镜像列表、日志、详情、容器内执行与生命周期管理。 DSH（DeepSeek Harness）容器管理插件：走官方 subprocess 服务跑 docker CLI，argv 数组无 shell 注入，`docker_exec` 默认审批门，**零运行时依赖**。     [](https://awesome-dsh-plugin.com) ## 安装 ```bash dsh plugin --profile web add @stardustlc/dsh-docker ``` 需要本机装有 Docker（`docker version` 能出结果即可）；不在 PATH 上时用 `dockerPath` 指定。 ## 配置 ```yaml - id: docker name: '@stardustlc/dsh-docker' config: # dockerPath: C:\Program Files\Docker\Docker\resources\bin\docker.exe dockerPath: docker # 可选；也可用环境变量 DSH_DOCKER_PATH timeoutMs: 60000 # 单次操作超时（默认 60 秒，5 秒 - 10 分钟） # execApproval: false # 关闭 docker_exec 审批门（默认 true） ``` ## 工具一览 | 工具 | 作用 | 安全 | | :-- | :-- | :-- | | `docker_ps` | 列出容器（状态/镜像/运行态，可过滤）| — | | `docker_images` | 列出本地镜像（仓库/标签/大小/创建时间，可只看悬空镜像）| — | | `docker_logs` | 查看日志尾部（行数钳制，可短时 follow）| — | | `docker_ins
Read the full READMEThe repository declares no license. Check with the authors before using it.
dsh-docker DSH plugin questions
How do I install dsh-docker?
Run the command `dsh plugin --profile web add @stardustlc/dsh-docker` in your DSH environment. Make sure Docker is installed and accessible via the `docker` command or a custom path.
How can I configure the Docker path if it's not in PATH?
Set the `dockerPath` option in the plugin config, either in your DSH profile's YAML file under `config: dockerPath: <full path>`, or by setting the environment variable `DSH_DOCKER_PATH`. The default is `docker`.
Can I disable the approval gate for docker_exec?
Yes, you can set `execApproval: false` in the plugin config. However, this is not recommended for security reasons. The default is `true`, meaning every execution requires approval.
What containers can I manage with this plugin?
You can manage any Docker container as long as the container name matches the allowed pattern `[A-Za-z0-9][A-Za-z0-9_.:-]*`. The plugin supports listing, inspecting, logging, executing commands, and lifecycle actions (start, stop, restart, remove).
Is there a limit on log lines or execution time?
Yes, the `tail` parameter for logs is limited to 1-2000 lines. Each operation has a timeout configurable between 5 seconds and 10 minutes (default 60 seconds). The follow mode for logs has an additional 30-second limit.