Modmanager
Container
This container needs special attention. Please check https://hub.docker.com/r/linuxserver/modmanager for details.
Image details
Configuration
TypeContainerlinuxlinuxserver/modmanager:latest80:80/tcp/config : /srv/lsio/modmanager/configPUID=1000PGID=1000TZ=Etc/UTCunless-stoppedTemplate by technorabilia
Notes
Ensure to create the following volume directories on the host file system, or modify the paths in the volume mapping section under the advanced options below, as needed.
mkdir -p /srv/lsio/modmanager/config
Standalone Install
Select an install method, to see config/commands for deploying Modmanager
Install on Portainer
Import all app templates into your Portainer instance, for easy 1-click deploys
- Ensure both Docker and Portainer are installed, and up-to-date
- Log into your Portainer web UI
- Under Settings → App Templates, paste the below URL
- Head to Home → App Templates, and the list of apps will show up
- Select Modmanager, fill in any config options, and hit Deploy
Template Import URL
https://raw.githubusercontent.com/Lissy93/portainer-templates/main/templates.json
Show Me
More install options in our documentation.

The LinuxServer.io team brings you another container release.
Find us at:
- Blog - all the things you can do with our containers including How-To guides, opinions and much more!
- Discord - realtime support / chat with the community and the team.
- Discourse - post on our community forum.
- GitHub - view the source for all of our repositories.
- Open Collective - please consider helping us by either donating or contributing to our budget
linuxserver/modmanager
Modmanager is a centralised tool for downloading and updating docker mods for all your other Linuxserver containers.

Supported Architectures
We utilise the docker manifest for multi-platform awareness. More information is available from docker here and our announcement here.Simply pulling
lscr.io/linuxserver/modmanager:latest should retrieve the correct image for your arch, but you can also pull specific arch images via tags.The architectures supported by this image are:
| Architecture | Available | Tag |
|---|---|---|
| x86-64 | ✅ | amd64-\ |
| arm64 | ✅ | arm64v8-\ |
Application Setup
You can specify mods to download via theDOCKER_MODS environment variable like any other container, or allow discovery through docker by mounting the docker socket into the container (or configuring a suitable alternative endpoint via the built-in DOCKER_HOST environment variable). Whichever option you choose the appropriate DOCKER_MODS environment variable must still be present on the containers that need to install them.The Modmanager container will download all needed mods on startup and then check for updates every 6 hours; if you're using docker discovery it will automatically pick up any new mods.
You can then mount your
/modcache path into any other Linuxserver container and they will pull their mods from there rather than downloading them each time.If a mod requires additional packages to be installed, each container will still need to download them each time it is recreated.
Note that the Modmanager container itself does not support applying mods or custom files/services.
Modmanager is only supported for use with Linuxserver images built after 2025-01-01, while it may work with 3rd party containers using our images as a base we will not provide support for them.
Security considerations
Mappingdocker.sock is a potential security liability because docker has root access on the host and any process that has full access to docker.sock would therefore also have root access on the host. The docker API has no built-in way to set limitations on access, however, you can use a proxy for docker.sock via a solution like our docker socket proxy, which adds the ability to limit API access to specific endpoints.Multiple Hosts
>!NOTE >Make sure you fully understand what you're doing before you try and set this up as there are lots of ways it can go wrong if you're just guessing.Modmanager can query & download mods for remote hosts, as well as the one on which it is installed. At a very basic level if you're just using the
DOCKER_MODS env and not docker discovery, simply mount the /modcache folder on your remote host(s), ensuring it is mapped for all participating containers.If you are using docker discovery, our only supported means for connecting to remote hosts is our socket proxy container. Run an instance on each remote host:
>!WARNING >DO NOT expose a socket proxy to your LAN if it allows any write operations (
POST=1, ALLOW_RESTART=1, etc) or exposes any API elements that are not absolutely necessary. NEVER expose a socket proxy to your WAN.modmanager-dockerproxy:
image: lscr.io/linuxserver/socket-proxy:latest
container_name: modmanager-dockerproxy
environment:
- CONTAINERS=1
- POST=0
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
tmpfs:
- /run
ports:
- 2375:2375
restart: unless-stopped
read_only: trueAnd then add it to the
DOCKER_MODS_EXTRA_HOSTS env using the full protocol and port, separating multiple servers with a pipe (|), e.g.- DOCKER_MODS_EXTRA_HOSTS=tcp://host1.example.com:2375|tcp://host2.example.com:2375|tcp://192.168.0.5:2375As above you will need to mount the
/modcache folder on your remote host(s), ensuring it is mapped for all participating containers.Usage
To help you get started creating a container from this image you can either use docker compose or the docker cli.>!NOTE >Unless a parameter is flaged as 'optional', it is mandatory and a value must be provided.
docker compose (recommended, click here for more info)
---
services:
modmanager:
image: lscr.io/linuxserver/modmanager:latest
container_name: modmanager
environment:
- DOCKER_MODS= `#optional`
- DOCKER_HOST= `#optional`
- DOCKER_MODS_EXTRA_HOSTS= `#optional`
volumes:
- /path/to/modcache:/modcache
- /var/run/docker.sock:/var/run/docker.sock:ro `#optional`
restart: unless-stoppeddocker cli (click here for more info)
docker run -d \
--name=modmanager \
-e DOCKER_MODS= `#optional` \
-e DOCKER_HOST= `#optional` \
-e DOCKER_MODS_EXTRA_HOSTS= `#optional` \
-v /path/to/modcache:/modcache \
-v /var/run/docker.sock:/var/run/docker.sock:ro `#optional` \
--restart unless-stopped \
lscr.io/linuxserver/modmanager:latestParameters
Containers are configured using parameters passed at runtime (such as those above). These parameters are separated by a colon and indicate<external>:<internal> respectively. For example, -p 8080:80 would expose port 80 from inside the container to be accessible from the host's IP on port 8080 outside the container.| Parameter | Function |
|---|---|
-e DOCKERMODS= | Pipe-delimited (\</td><td>) list of mods to download |
-e DOCKERHOST= | Specify the docker endpoint to use if not using the docker.sock |
-e DOCKERMODSEXTRAHOSTS= | Pipe-delimited (\</td><td>) list of additional hosts to query & download mods for. See app setup section for details. |
-v /modcache | Modmanager mod storage. |
-v /var/run/docker.sock:ro | Mount the host docker socket into the container. |
Support Info
- Shell access whilst the container is running:
docker exec -it modmanager /bin/sh- To monitor the logs of the container in realtime:
docker logs -f modmanager- Container version number:
docker inspect -f '{{ index .Config.Labels "build_version" }}' modmanager- Image version number:
docker inspect -f '{{ index .Config.Labels "build_version" }}' lscr.io/linuxserver/modmanager:latestUpdating Info
Most of our images are static, versioned, and require an image update and container recreation to update the app inside. With some exceptions (noted in the relevant readme.md), we do not recommend or support updating apps inside the container. Please consult the Application Setup section above to see if it is recommended for the image.Below are the instructions for updating containers:
Via Docker Compose
- Update images:
```bash docker compose pull ```
Single image:
```bash docker compose pull modmanager ```
- Update containers:
```bash docker compose up -d ```
Single container:
```bash docker compose up -d modmanager ```
- You can also remove the old dangling images:
docker image pruneVia Docker Run
- Update the image:
docker pull lscr.io/linuxserver/modmanager:latest- Stop the running container:
docker stop modmanager- Delete the container:
docker rm modmanager- You can also remove the old dangling images:
docker image pruneImage Update Notifications - Diun (Docker Image Update Notifier)
>!TIP >We recommend Diun for update notifications. Other tools that automatically update containers unattended are not recommended or supported.Building locally
If you want to make local modifications to these images for development purposes or just to customize the logic:git clone https://github.com/linuxserver/docker-modmanager.git
cd docker-modmanager
docker build \
--no-cache \
--pull \
-t lscr.io/linuxserver/modmanager:latest .The ARM variants can be built on x8664 hardware and vice versa using
lscr.io/linuxserver/docker-qemu-staticdocker run --rm --privileged lscr.io/linuxserver/docker-qemu-static --resetOnce registered you can define the dockerfile to use with
-f Dockerfile.aarch64.Versions
- 05.07.26: - Rebase to Alpine 3.24.
- 28.12.25: - Rebase to Alpine 3.23.
- 05.07.25: - Rebase to Alpine 3.22.
- 05.01.25: - Support multiple hosts.
- 22.12.24: - Initial Release.
Serve Modmanager on your own domain behind Caddy, Nginx or Traefik. Fill in your domain and copy the result. It's a starting point, some apps need their own base URL or extra headers set too.
Proxying modmanager.example.com to http://Modmanager:80
Add this to your Caddyfile
modmanager.example.com {
reverse_proxy http://Modmanager:80
}Check the logs first
Nine times out of ten the logs tell you exactly what went wrong.
- In Portainer, go to Containers, click the container, then Logs. Or run
docker logs Modmanager - Exit codes help too:
137means killed, usually out of memory.126or127means the command inside the image is broken.
Port already in use
If deployment fails with "Bind for 0.0.0.0:80 failed: port is already allocated", something else on your server is using that port.
- Find what's using it:
sudo ss -tlnp | grep :80 - Stop the other service, or pick a different host port. In
80:80only the left number is yours to change, the right one belongs to the app.
Running but the page won't load
The container is up but nothing appears in your browser.
- Use your server's real IP:
http://your-server-ip:80. The 0.0.0.0 link Portainer shows isn't a real address. - Give it a minute after first deploy, Modmanager can take a while to initialise.
- Make sure your firewall allows the port, e.g.
sudo ufw allow 80
Permission denied on volumes
If the logs show "permission denied", the app can't write to its data folder on the host.
- Fix the ownership:
sudo chown -R 1000:1000 /srv/lsio/modmanager/config - Or set the
PUIDandPGIDvariables (defaults 1000:1000) to match your own user, found withid $USER
Image won't pull
Test the pull directly on the host: docker pull linuxserver/modmanager:latest
- "manifest unknown" means the tag no longer exists. This template uses
latest, so try pinning a specific version instead. - "toomanyrequests" is the Docker Hub rate limit. Log in with
docker loginto raise it. - "no space left on device" means a full disk. Reclaim space with
docker system prune
"exec format error"
This means the image was built for a different CPU architecture than your server.
- This image supports:
amd64, arm64 - Check yours with
uname -m: x86_64 is amd64, aarch64 is arm64. Raspberry Pi and other ARM boards are the usual culprits.
Container keeps restarting
The unless-stopped restart policy relaunches the app after every crash, so the real error can scroll past.
- Check the logs right after a restart, the last few lines before it died are the useful ones.
- Get the exit code with
docker inspect Modmanager --format '{{.State.ExitCode}}' - Still stuck? Redeploy once with the restart policy set to
noso the failure stays visible.
Raise an issue
Found something which isn't working as it should? Here's how to report it.
- Bug within the app: Open an issue within Modmanager's repo
- Template not working: Open an issue on technorabilia/portainer-templates
- This website not working: Open an issue on lissy93/portainer-templates
A single container
Modmanager runs as one container, the simplest kind of app here. Just the one image to pull and nothing else wired up alongside it.
The app image
An image is the app packed up ready to go, everything Modmanager needs bundled into one download. This template pulls linuxserver/modmanager:latest, which Docker fetches once (about 22 MB) and then starts your own copy from.
Where the image comes from
Docker pulls its images from registries, public libraries of ready-built apps. Modmanager's comes from Docker Hub, published by linuxserver.
Version tags
The bit after the colon in the image name is the version tag. Here it's latest, which always points at the newest build, so a redeploy can bump you to a newer release without you asking. Pin a specific tag if you would rather stay on one version.
Which machines it runs on
Every image is built for particular CPU types. This one ships for amd64, arm64, so it runs on both regular x86 servers and ARM boards like a Raspberry Pi.
Ports
A port is the door the app answers on. A mapping like 80:80 means it's reachable on port 80 of your server, where the left number is yours to change and the right one belongs to the app. Once it's running, open http://your-server-ip:80 in a browser. It opens:
80:80, likely the web interface
Volumes
A volume is where Modmanager keeps its files so they survive an update or a restart. Without one, anything it saves would sit inside the container and vanish the moment it's recreated. This template mounts:
/configfrom/srv/lsio/modmanager/configon the host
Environment variables
Environment variables are the settings you hand over when you deploy, things like a password or a timezone. Modmanager takes 3 of them, all with defaults you can leave alone or tweak:
PUID, defaults to1000. Run 'id [USER]' for the owner of the host volume directories to get the UID to use here.PGID, defaults to1000. Run 'id [USER]' for the owner of the host volume directories to get the GID to use here.TZ, defaults toEtc/UTC. Specify a timezone to use, see this list.
Restart policy
The restart policy here is unless-stopped, so Docker restarts Modmanager after a crash or reboot, but leaves it off when you stop it on purpose. You can change this on the deploy screen. The choices are no (never restart), on-failure (only after a crash), unless-stopped (restart unless you stop it), and always (bring it back no matter what).
Users and permissions
The PUID and PGID settings tell it which user and group to act as on your host. Point them at your own account (find yours with id $USER) so the files it writes into your mounted folders come out owned by you rather than root.
Networking
Nothing custom is set, so Modmanager sits on Docker's default bridge network: its own private space that reaches the outside world only through the ports it publishes.
Container name
Once it's deployed, Portainer names the container Modmanager. That's what you'll spot in the containers list and use in commands like docker logs Modmanager.
Platform
The platform is linux, the kind of system the container is built to run on. Docker and Portainer handle this on a normal Linux server.
Portainer app templates
Zooming out, this whole page comes from a Portainer app template: a short recipe telling Portainer how to set Modmanager up. Add the template list to Portainer once, then deploying Modmanager is a click rather than a wall of config.