Container updates reddit / selfhosted ---------------------------------------------------------------------- TechyRyan33 · 2023-12-14 21:41 Is there a tool that will check for container updates and send a message to a configured notification tool instead of auto updating them? Maybe setting up an ignore list too? Be great if the tool could check multiple docker instances. ---------------------------------------------------------------------- scionae · 2023-12-14 22:01 Whatsupdocker is pretty good ---------------------------------------------------------------------- neulon · 2023-12-14 22:15 You could try Diun maybe ---------------------------------------------------------------------- Sym0n · 2023-12-14 22:22 [dockcheck-web](https://github.com/Palleri/DCW) ---------------------------------------------------------------------- wryterra · 2023-12-14 22:26 \+1 for Diun. I use it for discord notifications but it can do mail, mqtt, gotify, slack, etc. ---------------------------------------------------------------------- clintkev251 · 2023-12-14 22:47 Watchtower can be configured to just emit notifications ---------------------------------------------------------------------- thomasdarko · 2023-12-14 22:58 Yes, diun. ---------------------------------------------------------------------- thekrautboy · 2023-12-14 23:00 Doesnt send notifications iirc. ---------------------------------------------------------------------- thekrautboy · 2023-12-14 23:01 diun is excellent. https://github.com/crazy-max/diun ---------------------------------------------------------------------- Sym0n · 2023-12-14 23:08 [It does, ](https://github.com/Palleri/DCW?tab=readme-ov- file#notifications)via Apprise. ---------------------------------------------------------------------- thekrautboy · 2023-12-14 23:10 Oh neat thanks, i havent looked at DCW in a while, i typically just use the "og" dockcheck. ---------------------------------------------------------------------- Sym0n · 2023-12-14 23:17 I only discovered both of them about 2 hours ago lol. ---------------------------------------------------------------------- thekrautboy · 2023-12-14 23:37 hehe :) ---------------------------------------------------------------------- ThePierrezou · 2023-12-15 00:09 Is it possible to have alerts for CVEs so that I know when I really have to update ? ---------------------------------------------------------------------- TechyRyan33 · 2023-12-15 00:23 Looks like it's compatible list is quite short, maybe they'll open that up sometime ---------------------------------------------------------------------- xardoniak · 2023-12-15 00:26 I host my Compose files in GitHub and use the Renovate bot. It creates pull requests, which I have to approve, when container updates are available ---------------------------------------------------------------------- RyuuPendragon · 2023-12-15 01:50 Compatible list? ---------------------------------------------------------------------- GhoulishPaladin · 2023-12-15 01:52 I'm not sure if it will do this, but maybe try Wazuh? ---------------------------------------------------------------------- GhoulishPaladin · 2023-12-15 01:52 Probably the compatable list of notification endpoints. ---------------------------------------------------------------------- TechyRyan33 · 2023-12-15 01:53 Compatible notification tools ---------------------------------------------------------------------- SleepingProcess · 2023-12-15 02:27 > Is there a tool that will check for container updates Container can't be updated. Container is a local running (or stopped) instance that has been built from image. What you want, is to check for new image and in case remote repository has a new version then notify you and in case you going to update container, you first have to pull remote image, then stop currently running container if it is active, then remove it (container) and then run new image, which in turn will create new container from freshly pulled image. All it can be done in simple script. ---------------------------------------------------------------------- TechyRyan33 · 2023-12-15 02:39 Thanks, Capt ---------------------------------------------------------------------- luftwaffewar · 2023-12-15 02:49 I use shooterr for notifications in watchtower and shooterr has a lot of options! ---------------------------------------------------------------------- Yankluf · 2023-12-15 13:26 I think Ntfy is what you’re looking for, in combination with another tool or command to check the updates (i still don’t know docker enough to recommend you something). Check it out: [Ntfy YouTube Tutorial](https://youtu.be/poDIT2ruQ9M) ---------------------------------------------------------------------- TechyRyan33 · 2023-12-15 13:32 I already have a notification tool, the question was about the docket tool ---------------------------------------------------------------------- GratefulGolfer · 2023-12-15 14:04 It uses Shoutrrr for notifications. Quite a few options https://containrrr.dev/shoutrrr/v0.8/services/overview/ ---------------------------------------------------------------------- SleepingProcess · 2023-12-15 16:11 > Thanks, Capt Sarcasm? I think using correct docker's definition might help when you asking for the a help. ---------------------------------------------------------------------- TechyRyan33 · 2023-12-15 16:52 Nobody else had a problem understanding what I was asking. "Write a script" isn't really a solution. This isn't r/programming. ---------------------------------------------------------------------- SleepingProcess · 2023-12-15 17:44 > Nobody else had a problem understanding what I was asking. Then you and those who don't understand difference between image and container might end up with overfilled disk space because any time you `docker run ...` it creates completely new container from image and all previous versions by default are kept by docker. As about script, - people already advised you a nice tool `watchtower`, so I won't to repeat others, but just pointed out that if you capable to write bash scripts then it can be done in less than hundred lines if you interesting in simplest solution. It literally one query to dockerhub to obtain a token, then pull remote sha hash with curl and compare it with local image hash ``` docker image inspect ${repo}:${tag} --format '{{json .RepoDigests}}' ``` then use `msmtp/mail/ntfy/gotify`... to send notification(s) if hashes doesn't match. But the primary point of my post is: docker container can not be updated, an image - that's what you have to track for update. ---------------------------------------------------------------------- neulon · 2023-12-15 18:08 I think as already mentioned, for CVE / SCA etc... Wazuh is your tool, basically is totally two different things. Container security scanner is not the goal of Diun, but it is notify when an update is available - regardless if this fixes something in regards security aspects, bugs etc... ---------------------------------------------------------------------- xX__M_E_K__Xx · 2023-12-15 21:05 Best service I've found : newreleases.io You can watch any github, any repo, any docker registry... And so much more for updates. Then, you chose your email frequency Then, you choose filters to include /exclude anything you can imagine based on regex patterns or pre-made filters The service sends mails, nothing more, nothing to run, nothing to open. I know the sub I'm posting in, I selfhost every single app I can (30 to this day, and counting) but this is the only service running outside my lan I keep as it's just the best app in this use case. This is my only exception. And they know nothing of you (i use a disposable email for their notifications) ---------------------------------------------------------------------- _Morlack · 2023-12-16 21:08 Put everything in a git repo with a ci and setup renovatebot. ---------------------------------------------------------------------- onedr0p · 2023-12-17 13:19 No need to get hung up on semantics. Containers and Images in reference to OCI are used interchangeably. ---------------------------------------------------------------------- SleepingProcess · 2023-12-17 15:21 > Sometimes Containers and Images in reference to OCI are used interchangeably. By those who don't understand how docker works? May be. Try to create container without an image and come back **please** to share how you did this magic. ---------------------------------------------------------------------- Qsilve · 2023-12-19 15:47 Hey, if you work with k8s I suggest : https://keel.sh/ But if it's more with docker compose or others I suggest : watchtower