Containers
Manage containers: open a shell into them, check for and apply image updates, prefetch autostart images, back them up, view log sizes, and collect resource usage stats.
docker​
Command opens an interactive shell into system or user containers. When the user or container is not given, an interactive fzf picker is shown to select it (press ESC to quit).
To pick a user and then one of their containers:
opencli docker
To pick one of the active containers for a user:
opencli docker <USERNAME>
To open terminal directly in a container for a user:
opencli docker <USERNAME> <container>
Update​
Checks for image updates across root's stack and every non-suspended user's stack (via skopeo), prints what's available, and optionally pulls the new images and recreates the running containers that use an outdated image. Nothing else in a stack is stopped or started. Each image is pulled at most once into the shared image store, so multiple stacks referencing the same image only download it once.
opencli docker-update [IMAGE] [options]
With IMAGE (e.g. shinsenter/php:8.4-fpm) only that image is checked, pulled, and only the running containers that use it are recreated. After a php-fpm container is recreated, the user's webserver is reloaded so it connects to the new container. Containers created depending on the recreated one (e.g. a webserver with depends_on on php-fpm) are recreated with it. Containers that aren't running are left alone and use the new image on their next start.
After pulling an image with PHP in it, the PHP version inside it is checked. If it's older than its branch's latest security release, the image's containers are not recreated and the run is reported as failed, run the command again once the image is rebuilt.
Example output
# opencli docker-update shinsenter/php:8.5-fpm -y
shinsenter/php:8.5-fpm
registry: sha256:9acaa2a26e7aa41cb873c7766fb68b480c18fff118627070c8fee952d3f33f7d
shared store: newer image available, will be pulled
recreate: user: stefan: php-fpm-8.5, then reload its webserver
recreate: user: demo: php-fpm-8.5, then reload its webserver
not running, left alone: user: test: php-fpm-8.5
1 pull(s), 2 container(s) to recreate.
2026-10-21 15:54:07 : === Update run started ===
2026-10-21 15:54:07 : pull shinsenter/php:8.5-fpm into the shared store
2026-10-21 15:54:17 : recreating php-fpm-8.5 for user: stefan
2026-10-21 15:54:30 : reloaded apache (USR1) for user: stefan
2026-10-21 15:54:30 : recreating php-fpm-8.5 for user: demo
2026-10-21 15:54:45 : reloaded apache (USR1) for user: demo
2026-10-21 15:54:45 : === Update run finished ===
Update every PHP version used on the server:
for v in 5.6 7.0 7.1 7.2 7.3 7.4 8.0 8.1 8.2 8.3 8.4 8.5; do
opencli docker-update shinsenter/php:${v}-fpm -y
done
Options:
-y,--yes- apply updates without prompting for confirmation.--dry-run- only check and print available updates, never prompt or apply.
With no options, available updates are printed and confirmation is asked for 10 seconds — if there's no answer in that time, the script exits without changing anything. Every run is logged to /var/log/openpanel/admin/docker/<date>.log.
Autostart​
Prefetches (pulls) container images for services listed as autostart, skipping if free disk space is low.
opencli docker-autostart [-f|--force]
Example output
# opencli docker-autostart
Root disk free is 142GB — proceeding with prefetch.
Autostart services: nginx php-fpm-8.3 mysql
Compose services with images: 24
pull mysql -> docker.io/library/mysql:latest ... OK
pull nginx -> docker.io/library/nginx:latest ... OK
skip openlitespeed (not in autostart)
pull php-fpm-8.3 -> docker.io/shinsenter/php:8.3-fpm ... OK
skip redis (not in autostart)
...
Fixing permissions on /var/lib/containers/shared-storage ...
Done.
Store contents:
REPOSITORY TAG IMAGE ID CREATED SIZE
docker.io/library/mysql latest a1b2c3d4e5f6 2 weeks ago 803 MB
docker.io/library/nginx latest b2c3d4e5f6a7 3 weeks ago 197 MB
docker.io/shinsenter/php 8.3-fpm c3d4e5f6a7b8 5 days ago 512 MB
Shared store disk usage: 1.5G (1.47 GB) at /var/lib/containers/shared-storage
-f,--force- prefetch images even when free disk space is low.
Backup​
Generates a backup for all users. This is the bulk/system-wide counterpart to opencli user-backup, see Users.
opencli docker-backup
Example output
# opencli docker-backup
2026-09-24 02:00:01 : === Backup started at 2026-09-24 02:00:01 ===
2026-09-24 02:00:01 : Fetching list of active users...
2026-09-24 02:00:01 : Found 2 active users to process
2026-09-24 02:00:01 : Processing user: stefan (1/2)
2026-09-24 02:00:01 : Processing user: stefan
2026-09-24 02:00:01 : docker-proxy is ready for context: stefan (after 0s)
2026-09-24 02:00:03 : --- backup container output for user: stefan ---
...
2026-09-24 02:00:40 : --- end of backup container output for user: stefan ---
2026-09-24 02:00:41 : Backup completed for user: stefan (context: stefan) | Time taken: 40s
2026-09-24 02:00:41 : ------------------------------
2026-09-24 02:00:41 : Processing user: demo (2/2)
...
2026-09-24 02:01:15 : Successfully processed all 2 users
2026-09-24 02:01:15 : === Backup finished at 2026-09-24 02:01:15 | Total time: 74s ===
--parallel=N- number of users backed up at the same time. Default is one per 4 CPU cores, at least 1 and at most the number of users.
opencli docker-backup --parallel=4
Example output
# opencli docker-backup --parallel=4
2026-09-24 02:00:01 : === Backup started at 2026-09-24 02:00:01 ===
2026-09-24 02:00:01 : Fetching list of active users...
2026-09-24 02:00:01 : Found 2 active users to process
2026-09-24 02:00:01 : Running up to 2 user backups in parallel
2026-09-24 02:00:01 : Processing user: stefan (1/2)
2026-09-24 02:00:01 : Processing user: demo (2/2)
...
2026-09-24 02:00:45 : Successfully processed all 2 users
2026-09-24 02:00:45 : === Backup finished at 2026-09-24 02:00:45 | Total time: 44s ===
To skip a user, create /home/<context>/backup.off. Everything is logged to /var/log/openpanel/admin/docker-backup.log.
Before backing up a user, a running mysql, mariadb or postgres container that was created before the backup_meta volume was added to the user's docker-compose.yml is recreated once (Recreating mysql for context: stefan to add the backup_meta volume), so its dumps get listed in the archive's backup/00-meta/ folder.
If the backup fails for any user, or the list of active users can't be read from the database, a critical Backup failed notification is added in OpenAdmin with the failed usernames and the log path. Set docker_backup=no in /etc/openpanel/openadmin/config/notifications.ini (or turn off Backup failed under OpenAdmin > Settings > Notifications) to disable it.
logs​
View logs sizes for user and system containers.
# opencli docker-logs
Usage: opencli docker-logs [options]
Options:
<USERNAME> Display log sizes for specified user.
--system Display log sizes just for system containers.
--users Display log sizes just for user containers.
--all Display log sizes for all user and system containers.
Examples:
opencli docker-logs stefan
opencli docker-logs --users
opencli docker-logs --system
opencli docker-logs --all
Collect Stats​
To collect container resource usage information (cpu, ram, i/o) for all users:
opencli docker-collect_stats --all
Example output
# opencli docker-collect_stats --all
{"timestamp":"2026-09-24T10:30:00Z","user":"stefan","uid":1001,"memory":{"total":{"bytes":1073741824,"human":"1.0G"},"used":{"bytes":314572800,"human":"300.0M"},"free":{"bytes":759169024,"human":"724.0M"},"buff_cache":{"bytes":52428800,"human":"50.0M"},"available":{"bytes":759169024,"human":"724.0M"},"usage_pct":29},"cpu":{"usage":{"pct":100,"human":"1.0 cores"},"total":{"pct":4,"human":"0.0 cores"},"server":{"pct":400,"human":"4.0 cores"}},"tasks":{"current":37,"limit":100,"usage_pct":37},"bandwidth":{"limit":{"bits":100000000,"human":"100.0Mbit"},"total_sent":{"bytes":1048576,"human":"8.4Mbit"},"usage_pct":8},"warning":null}
{"timestamp":"2026-09-24T10:30:00Z","user":"demo","uid":1002,"memory":{"total":{"bytes":1073741824,"human":"1.0G"},"used":{"bytes":314572800,"human":"300.0M"},"free":{"bytes":759169024,"human":"724.0M"},"buff_cache":{"bytes":52428800,"human":"50.0M"},"available":{"bytes":759169024,"human":"724.0M"},"usage_pct":29},"cpu":{"usage":{"pct":100,"human":"1.0 cores"},"total":{"pct":4,"human":"0.0 cores"},"server":{"pct":400,"human":"4.0 cores"}},"tasks":{"current":37,"limit":100,"usage_pct":37},"bandwidth":{"limit":{"bits":100000000,"human":"100.0Mbit"},"total_sent":{"bytes":1048576,"human":"8.4Mbit"},"usage_pct":8},"warning":null}
For a single user:
opencli docker-collect_stats <USERNAME>
Example output
# opencli docker-collect_stats stefan
{"timestamp":"2026-09-24T10:30:00Z","user":"stefan","uid":1001,"memory":{"total":{"bytes":1073741824,"human":"1.0G"},"used":{"bytes":314572800,"human":"300.0M"},"free":{"bytes":759169024,"human":"724.0M"},"buff_cache":{"bytes":52428800,"human":"50.0M"},"available":{"bytes":759169024,"human":"724.0M"},"usage_pct":29},"cpu":{"usage":{"pct":100,"human":"1.0 cores"},"total":{"pct":4,"human":"0.0 cores"},"server":{"pct":400,"human":"4.0 cores"}},"tasks":{"current":37,"limit":100,"usage_pct":37},"bandwidth":{"limit":{"bits":100000000,"human":"100.0Mbit"},"total_sent":{"bytes":1048576,"human":"8.4Mbit"},"usage_pct":8},"warning":null}
collect_stats script will also rotate data according to resource_usage_retention setting