A self-hosted, security compliance platform. For full documentation, visit https://openscm.io.
5.1K
Privacy-first security compliance management — built in Rust.
Unlike traditional compliance tools that collect and centralize sensitive system data, OpenSCM agents execute tests locally and only report PASS, FAIL, or NA — your configuration files, user data, and system details never leave your network.
| Architecture | Tag |
|---|---|
| x86_64 (amd64) | latest, 0.1.7 |
| ARM64 (aarch64) | latest, 0.1.7 |
docker run -d \
--name openscm \
-p 8000:8000 \
-v openscm_config:/etc/openscm \
-v openscm_data:/var/lib/openscm \
openscm/scmserver:latest
Access the dashboard at http://localhost:8000
Default credentials: admin / admin — change immediately after first login.
| Volume | Description |
|---|---|
/etc/openscm | Configuration files and Ed25519 keypair |
/var/lib/openscm | SQLite database |
Important: Always mount these volumes. If the
/etc/openscmvolume is lost all registered agents will need to re-register.
Mount a config file at /etc/openscm/scmserver.config:
[server]
port = "8000"
loglevel = "info"
[database]
path = "/var/lib/openscm/scm.db"
[key]
key_path = "/etc/openscm/keys"
public_key = "scmserver.pub"
private_key = "scmserver.key"
version: '3.8'
services:
openscm:
image: openscm/scmserver:latest
container_name: openscm
restart: unless-stopped
ports:
- "8000:8000"
volumes:
- openscm_data:/var/lib/openscm
- openscm_config:/etc/openscm
volumes:
openscm_data:
openscm_config:
Content type
Image
Digest
sha256:416acbd77…
Size
56.2 MB
Last updated
2 days ago
docker pull openscm/scmserver