EXTENSIONS

Snyk Container Images — container image scanning and vulnerability data

cAdvisor container metrics for swamp — deploy a cAdvisor container over SSH,

Cloudflare containers infrastructure models

Lifecycle management for a Colima VM (macOS container runtime, https://github.com/abiosoft/colima) via the local colima CLI: start and provision, stop, restart, delete, sync VM status, and exec commands inside the VM. One model instance targets one Colima profile.

Container and VM lifecycle for an Incus daemon via the local incus CLI: launch, start, stop, restart, and delete instances, and sync a full inventory. Targets the local daemon or any configured remote, scoped to an Incus project.

Tracks a Docker Compose project's structure (services, volumes, networks) and flexible key/value configuration as swamp-managed data. Data-only — pair it with @keeb/docker/compose for actual lifecycle execution. Every parameter, service field, and volume/network option is validated against the official compose-spec JSON Schema before it's written, so typos and malformed values are rejected at write time rather than surfacing later as a broken `docker compose` run. Ships with a bundled schema snapshot so it works fully offline out of the box; run the updateSchema method on an instance to refresh it from the canonical compose-spec repository when you need a newer field.

Manage a Scaleway Serverless Container — sync state, create, update, delete, and redeploy a container, and discover containers and namespaces in a region, via the Serverless Containers API with X-Auth-Token auth.

Manage Docker Engine and Docker Compose lifecycle on remote hosts over SSH, including install, build, run, inspect, exec, and compose service operations.

Keep :latest-tagged (and untagged) services in local or SSH-reachable docker compose projects up to date. Compares each running container's image digest against the registry (docker buildx imagetools) so already-current services are left untouched, then pulls and recreates only stale ones with a health-gate. Dry-run by default. Supports sudo-prefixed docker and per-host SSH config.

AppJail jail lifecycle and inventory via SSH on FreeBSD — sync, makejail, ociRun, start, stop, destroy, jexec, logs

Portainer API wrapper — snapshot endpoints/containers/stacks across every docker host, and drive container actions (start/stop/restart/kill/pause/unpause) plus image pulls from swamp workflows.

Local Docker image smoke testing for swamp: build image matrices, run containers, poll health checks, capture logs, and clean up.