Validates syntax, rsyncs code, copies compose files, fixes ownership, restarts containers. Supports --no-restart and per-host targeting.