@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+
+- **Ports** tab: listening TCP/UDP sockets on the host (`ss -tulpn`), sorted by port with IPv4/IPv6 rows merged, showing the owning process and PID
+- Free a port from the popup: `docker stop` for ports published by a running container, `kill -TERM` (or `-KILL` via **Force**) for any other process, both behind a confirmation row
+
 ## [0.2.0] - 2026-07-25
 
 ### Added
 
@@ -19,7 +19,7 @@ path = "src/main.rs"
 required-features = ["applet"]
 
 [dependencies]
-tokio = { version = "1", features = ["process", "rt"] }
+tokio = { version = "1", features = ["process", "rt", "time"] }
 libcosmic = { git = "https://github.com/pop-os/libcosmic.git", optional = true, features = [
     "applet",
     "tokio",
 
@@ -6,6 +6,7 @@ COSMIC panel applet for **Pop!_OS**: manage Docker containers from the panel —
 
 - **Pop!_OS 24.04+** (or another distro with COSMIC panel)
 - **Docker** CLI (`docker` in `PATH`, daemon running, user in `docker` group or rootless Docker)
+- `ss` from **iproute2** and `kill` from **procps** — both preinstalled on Pop!_OS; required by the **Ports** tab
 - Rust 1.93 or newer (edition 2024; required by `libcosmic`)
 - System libraries for building `libcosmic`:
 
@@ -74,9 +75,10 @@ flatpak-builder --user --install --force-clean build-dir \
 
 In the popup:
 
-- Tabs: **Containers**, **Images**, **Volumes**, **Settings**
+- Tabs: **Containers**, **Images**, **Volumes**, **Ports**, **Settings**
 - **Containers**: grouped by Compose project, **hide stopped** filter (hide icon), collapse groups, icon actions (play / stop / reload / delete), published ports and live CPU / RAM usage (`docker stats`)
 - **Images** / **Volumes**: list with delete (`docker rmi` / `docker volume rm`)
+- **Ports**: every listening TCP/UDP socket on the host (`ss -tulpn`), sorted by port, IPv4/IPv6 rows merged. A port published by a running container is freed with `docker stop`; any other socket is freed by signalling its process — **Kill** sends `SIGTERM`, **Force** sends `SIGKILL`. Sockets owned by another user (root) show no PID and no action, because `ss` cannot reveal their process
 - **Clean** (broom icon, top right): prunes the active tab — stopped containers, unused images (`-a`), or unused volumes; asks for confirmation and reports reclaimed space
 - **Settings**: panel running-count font size (10–28 pt), live preview; saved to `$XDG_CONFIG_HOME/io.github.vaulttec_dev.CosmicContainers/settings.conf` (migrated automatically from `~/.config/linux-pop-extension/` when present)
 - Auto-refresh every 5 seconds (panel count + open popup)
 
@@ -12,7 +12,7 @@ use cosmic::iced::window;
 use cosmic::iced::window::Id;
 use cosmic_containers::{
     ContainerGroup, ContainerStats, ContainerSummary, ImageSummary, POLL_INTERVAL_SECS, PopupTab,
-    UserSettings, VolumeSummary, group_containers, running_count, settings,
+    PortEntry, UserSettings, VolumeSummary, group_containers, running_count, settings,
 };
 
 pub use popup::POPUP_HEIGHT;
@@ -26,12 +26,20 @@ pub enum PendingRemove {
     Volume(String),
 }
 
+/// Process awaiting kill confirmation in the ports tab.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct PendingKill {
+    pub pid: u32,
+    pub label: String,
+}
+
 /// Per-tab zero-based page index for paginated list tabs.
 #[derive(Clone, Copy, Debug, Default, PartialEq, Eq)]
 pub(super) struct TabPages {
     pub(super) containers: usize,
     pub(super) images: usize,
     pub(super) volumes: usize,
+    pub(super) ports: usize,
 }
 
 impl TabPages {
@@ -40,6 +48,7 @@ impl TabPages {
             PopupTab::Containers => Some(&mut self.containers),
             PopupTab::Images => Some(&mut self.images),
             PopupTab::Volumes => Some(&mut self.volumes),
+            PopupTab::Ports => Some(&mut self.ports),
             PopupTab::Settings => None,
         }
     }
@@ -55,10 +64,12 @@ pub struct App {
     pub(super) groups: Vec<ContainerGroup>,
     pub(super) image_list: Vec<ImageSummary>,
     pub(super) volume_list: Vec<VolumeSummary>,
+    pub(super) port_list: Vec<PortEntry>,
     pub(super) container_stats: HashMap<String, ContainerStats>,
     pub(super) collapsed_groups: HashSet<String>,
     pub(super) tab_pages: TabPages,
     pub(super) pending_remove: Option<PendingRemove>,
+    pub(super) pending_kill: Option<PendingKill>,
     pub(super) pending_prune: bool,
     pub(super) notice: Option<String>,
     pub(super) loading: bool,
@@ -79,6 +90,10 @@ pub enum Message {
     RequestRemove(PendingRemove),
     ConfirmRemove,
     CancelRemove,
+    RequestKill(PendingKill),
+    ConfirmKill { force: bool },
+    CancelKill,
+    StopContainerPort(String),
     RequestPrune,
     ConfirmPrune,
     CancelPrune,
@@ -96,6 +111,10 @@ pub enum Message {
         result: Result<Vec<VolumeSummary>, String>,
         silent: bool,
     },
+    PortsLoaded {
+        result: Result<Vec<PortEntry>, String>,
+        silent: bool,
+    },
     Start(String),
     Stop(String),
     Restart(String),
@@ -124,14 +143,22 @@ impl App {
         })
     }
 
+    /// Rows a paginated tab currently holds (`None` for tabs without a list).
+    pub(super) fn tab_item_count(&self, tab: PopupTab) -> Option<usize> {
+        match tab {
+            PopupTab::Containers => Some(self.container_row_count()),
+            PopupTab::Images => Some(self.image_list.len()),
+            PopupTab::Volumes => Some(self.volume_list.len()),
+            PopupTab::Ports => Some(self.port_list.len()),
+            PopupTab::Settings => None,
+        }
+    }
+
     pub(super) fn clamp_tab_page(&mut self, tab: PopupTab) {
         use cosmic_containers::{LIST_PAGE_SIZE, clamp_page, total_pages};
 
-        let item_count = match tab {
-            PopupTab::Containers => self.container_row_count(),
-            PopupTab::Images => self.image_list.len(),
-            PopupTab::Volumes => self.volume_list.len(),
-            PopupTab::Settings => return,
+        let Some(item_count) = self.tab_item_count(tab) else {
+            return;
         };
         let total = total_pages(item_count, LIST_PAGE_SIZE);
         let Some(page) = self.tab_pages.page_mut(tab) else {
@@ -209,6 +236,35 @@ impl App {
         }
     }
 
+    pub(super) fn apply_ports(&mut self, result: Result<Vec<PortEntry>, String>, silent: bool) {
+        if !silent {
+            self.loading = false;
+        }
+        match result {
+            Ok(port_list) => {
+                self.port_list = port_list;
+                self.clamp_tab_page(PopupTab::Ports);
+                if self.active_tab == PopupTab::Ports {
+                    self.error = None;
+                }
+            }
+            Err(err) => {
+                if self.active_tab == PopupTab::Ports {
+                    self.error = Some(err);
+                }
+            }
+        }
+    }
+
+    /// Running container publishing `port`, if any (`docker-proxy` hides the real owner).
+    pub(super) fn container_for_port(&self, port: u16) -> Option<&str> {
+        self.containers
+            .iter()
+            .filter(|container| container.is_running())
+            .find(|container| container.publishes_host_port(port))
+            .map(|container| container.name.as_str())
+    }
+
     pub(super) fn apply_stats(&mut self, result: Result<Vec<ContainerStats>, String>) {
         // Resource usage is supplementary: a failing `docker stats` must not mask the list.
         self.container_stats = match result {
@@ -229,7 +285,7 @@ impl App {
     }
 
     pub(super) fn fetch_tab_task(tab: PopupTab, silent: bool) -> Task<Message> {
-        use cosmic_containers::services::{docker, images, volumes};
+        use cosmic_containers::services::{docker, images, ports, volumes};
 
         match tab {
             PopupTab::Containers => Task::perform(docker::list_containers(), move |result| {
@@ -241,6 +297,9 @@ impl App {
             PopupTab::Volumes => Task::perform(volumes::list_volumes(), move |result| {
                 cosmic::Action::App(Message::VolumesLoaded { result, silent })
             }),
+            PopupTab::Ports => Task::perform(ports::list_ports(), move |result| {
+                cosmic::Action::App(Message::PortsLoaded { result, silent })
+            }),
             PopupTab::Settings => Task::none(),
         }
     }
 
@@ -1,6 +1,7 @@
 mod containers;
 mod images_tab;
 mod layout;
+mod ports_tab;
 mod settings_tab;
 mod volumes_tab;
 mod widgets;
@@ -53,6 +54,7 @@ pub(super) fn popup_view(state: &App) -> Element<'_, cosmic::Action<Message>> {
         PopupTab::Containers => containers::containers_tab(state),
         PopupTab::Images => images_tab::images_tab(state),
         PopupTab::Volumes => volumes_tab::volumes_tab(state),
+        PopupTab::Ports => ports_tab::ports_tab(state),
         PopupTab::Settings => settings_tab::settings_tab(state),
     };
     content = content.push(
@@ -89,6 +91,7 @@ fn header_bar<'a>(state: &'a App) -> Element<'a, Message> {
         tab_button("Containers", PopupTab::Containers, state.active_tab),
         tab_button("Images", PopupTab::Images, state.active_tab),
         tab_button("Volumes", PopupTab::Volumes, state.active_tab),
+        tab_button("Ports", PopupTab::Ports, state.active_tab),
         tab_button("Settings", PopupTab::Settings, state.active_tab),
         widget::text("").width(Length::Fill),
         toolbar,
 
@@ -212,6 +212,30 @@ pub(super) fn remove_confirm_row<'a>(prompt: String) -> Element<'a, Message> {
     .into()
 }
 
+/// Kill prompt with both signals: `Kill` sends SIGTERM, `Force` sends SIGKILL.
+pub(super) fn kill_confirm_row<'a>(prompt: String) -> Element<'a, Message> {
+    widget::container(
+        widget::row![
+            widget::text(prompt)
+                .width(Length::FillPortion(FILL_PORTION_PROMPT))
+                .size(FONT_PRIMARY),
+            widget::button::destructive("Kill")
+                .on_press(Message::ConfirmKill { force: false })
+                .padding(PAD_CONFIRM_BUTTON),
+            widget::button::destructive("Force")
+                .on_press(Message::ConfirmKill { force: true })
+                .padding(PAD_CONFIRM_BUTTON),
+            widget::button::text("No")
+                .on_press(Message::CancelKill)
+                .padding(PAD_CONFIRM_BUTTON),
+        ]
+        .align_y(Alignment::Center)
+        .spacing(SPACING_SM),
+    )
+    .padding(PAD_LIST_ROW)
+    .into()
+}
+
 pub(super) fn prune_confirm_row<'a>(prompt: &'static str) -> Element<'a, Message> {
     widget::container(
         widget::row![