▲ 148 ▼ selfh.st - dockcheck: A CLI Tool for Updating Container Images (selfh.st) submitted 11 months ago by mag37@lemmy.ml to c/selfhosted@lemmy.world 26 comments fedilink hide all child comments I just has the honors of writing a guest article on selfh.st about my ever so slowly evolving project, dockcheck.
[–] tofubl@discuss.tchncs.de 14 points 11 months ago (15 children) Is this a replacement for Watchtower? permalink fedilink source hideshow 15 child comments replies: [–] mag37@lemmy.ml [S] 20 points 11 months ago* (last edited 11 months ago) (3 children) This question is usually asked a lot. This started as a project to prove that you could check for updates without first pulling every new image to compare against, while that's not why it kept get getting traction my original answer to this question still seems true: From Watchtower Docs - Arguments Due to Docker API limitations the latest image will still be pulled from the registry. And: Do not pull new images. When this flag is specified, watchtower will not attempt to pull new images from the registry. Instead it will only monitor the local image cache for changes It's also a different approach. With dockcheck you'd run it and then make the choice what you'll update there and then. Selectively choosing exactly what containers to update at the moment. Or have it completely unattended auto update a selection of images. With the notifications, you can get notified and then have a sitdown and auto-update what you choose. It's just different workflows and options. The upcoming release will also add a new option to backup the image being updated and then autoprune old backups after N days. To allow for easy rollback if a new image breaks. permalink fedilink source parent hideshow 3 child comments replies: [–] tofubl@discuss.tchncs.de 4 points 11 months ago (2 children) Thanks for the detailed explanation. Will try to see how it fits my setup when I get a chance, but I have been wanting to move away from Watchtower as it is no longer maintained. Good to know there is an alternative, and from what you describe I like your approach. Having to opt-out of updates in Watchtower never really sat right with me- Watchtower clutter is okay in compose files that actually want something to do with Watchtower... permalink fedilink source parent hideshow 2 child comments replies: [–] mag37@lemmy.ml [S] 3 points 11 months ago Thank you. I hope you can find some usefulness in it. You can also do things by compose labels. As well as dynamically at runtime. Either interactively or as arguments. permalink fedilink source parent [–] irmadlad@lemmy.world 2 points 11 months ago* (last edited 11 months ago) Watchtower as it is no longer maintained Not to take away anything from the OP, but there is a fork of Watchtower that is maintained and works a lot better than the OG Watchtower. The original Watchtower would screw up the update fairly regularly. So, if you want to just yolo your updates, that'd be the way to go. If you want a bit more control, DockCheck seems to have that covered. It's always good to have choices. https://watchtower.devcdn.net/ permalink fedilink source parent [–] madcaesar@lemmy.world 4 points 11 months ago (10 children) Watchtower hadn't been updated in like 3 years or something. It's a dead project. permalink fedilink source parent hideshow 10 child comments replies: [–] xcjs@programming.dev 2 points 11 months ago There's a maintained fork, fortunately! https://github.com/nicholas-fedor/watchtower permalink fedilink source parent [–] Evotech@lemmy.world 2 points 11 months ago (6 children) What more does it need to do It works prefectly permalink fedilink source parent hideshow 6 child comments replies: [–] madcaesar@lemmy.world 5 points 11 months ago (4 children) Stopped working for me with a recent docker cli update. That's how I even found out it's totally abandoned. I'm not a big fan of running software that has access to the internet once it's abandoned like this. permalink fedilink source parent hideshow 4 child comments replies: [–] xcjs@programming.dev 1 point 11 months ago Sorry for spamming in this thread, but if you rely on Watchtower, there's a maintained fork I recommend: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent [–] Evotech@lemmy.world 0 points 11 months ago* (2 children) Is used by literal millions. I'm sure if there was a security issue or would be reported. Changes for the reason of making changes doesn't make sense either Anyway, I use podman now. It had this functionality built in permalink fedilink source parent hideshow 2 child comments replies: [–] madcaesar@lemmy.world 3 points 11 months ago (1 child) How many people use it makes no difference if there is no devs fixing security bugs. I switched to DIUN, but it doesn't do updates only notifications. That's why I'm excited to look at OP's library. permalink fedilink source parent hideshow 1 child comment replies: [–] Evotech@lemmy.world 0 points 11 months ago* Are there security issues reported? Is open source permalink fedilink source parent [–] xcjs@programming.dev 1 point 11 months ago Not for the latest and future versions of Docker. This fork works, though: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent [–] tofubl@discuss.tchncs.de 1 point 11 months ago (1 child) Your point being that I am not currently using it? Or that I should be looking for alternatives since I am currently using it? permalink fedilink source parent hideshow 1 child comment replies: [–] madcaesar@lemmy.world 0 points 11 months ago I used to use it and switched away because it's not maintained and I had errors with recent docker cli permalink fedilink source parent
[–] mag37@lemmy.ml [S] 20 points 11 months ago* (last edited 11 months ago) (3 children) This question is usually asked a lot. This started as a project to prove that you could check for updates without first pulling every new image to compare against, while that's not why it kept get getting traction my original answer to this question still seems true: From Watchtower Docs - Arguments Due to Docker API limitations the latest image will still be pulled from the registry. And: Do not pull new images. When this flag is specified, watchtower will not attempt to pull new images from the registry. Instead it will only monitor the local image cache for changes It's also a different approach. With dockcheck you'd run it and then make the choice what you'll update there and then. Selectively choosing exactly what containers to update at the moment. Or have it completely unattended auto update a selection of images. With the notifications, you can get notified and then have a sitdown and auto-update what you choose. It's just different workflows and options. The upcoming release will also add a new option to backup the image being updated and then autoprune old backups after N days. To allow for easy rollback if a new image breaks. permalink fedilink source parent hideshow 3 child comments replies: [–] tofubl@discuss.tchncs.de 4 points 11 months ago (2 children) Thanks for the detailed explanation. Will try to see how it fits my setup when I get a chance, but I have been wanting to move away from Watchtower as it is no longer maintained. Good to know there is an alternative, and from what you describe I like your approach. Having to opt-out of updates in Watchtower never really sat right with me- Watchtower clutter is okay in compose files that actually want something to do with Watchtower... permalink fedilink source parent hideshow 2 child comments replies: [–] mag37@lemmy.ml [S] 3 points 11 months ago Thank you. I hope you can find some usefulness in it. You can also do things by compose labels. As well as dynamically at runtime. Either interactively or as arguments. permalink fedilink source parent [–] irmadlad@lemmy.world 2 points 11 months ago* (last edited 11 months ago) Watchtower as it is no longer maintained Not to take away anything from the OP, but there is a fork of Watchtower that is maintained and works a lot better than the OG Watchtower. The original Watchtower would screw up the update fairly regularly. So, if you want to just yolo your updates, that'd be the way to go. If you want a bit more control, DockCheck seems to have that covered. It's always good to have choices. https://watchtower.devcdn.net/ permalink fedilink source parent
[–] tofubl@discuss.tchncs.de 4 points 11 months ago (2 children) Thanks for the detailed explanation. Will try to see how it fits my setup when I get a chance, but I have been wanting to move away from Watchtower as it is no longer maintained. Good to know there is an alternative, and from what you describe I like your approach. Having to opt-out of updates in Watchtower never really sat right with me- Watchtower clutter is okay in compose files that actually want something to do with Watchtower... permalink fedilink source parent hideshow 2 child comments replies: [–] mag37@lemmy.ml [S] 3 points 11 months ago Thank you. I hope you can find some usefulness in it. You can also do things by compose labels. As well as dynamically at runtime. Either interactively or as arguments. permalink fedilink source parent [–] irmadlad@lemmy.world 2 points 11 months ago* (last edited 11 months ago) Watchtower as it is no longer maintained Not to take away anything from the OP, but there is a fork of Watchtower that is maintained and works a lot better than the OG Watchtower. The original Watchtower would screw up the update fairly regularly. So, if you want to just yolo your updates, that'd be the way to go. If you want a bit more control, DockCheck seems to have that covered. It's always good to have choices. https://watchtower.devcdn.net/ permalink fedilink source parent
[–] mag37@lemmy.ml [S] 3 points 11 months ago Thank you. I hope you can find some usefulness in it. You can also do things by compose labels. As well as dynamically at runtime. Either interactively or as arguments. permalink fedilink source parent
[–] irmadlad@lemmy.world 2 points 11 months ago* (last edited 11 months ago) Watchtower as it is no longer maintained Not to take away anything from the OP, but there is a fork of Watchtower that is maintained and works a lot better than the OG Watchtower. The original Watchtower would screw up the update fairly regularly. So, if you want to just yolo your updates, that'd be the way to go. If you want a bit more control, DockCheck seems to have that covered. It's always good to have choices. https://watchtower.devcdn.net/ permalink fedilink source parent
[–] madcaesar@lemmy.world 4 points 11 months ago (10 children) Watchtower hadn't been updated in like 3 years or something. It's a dead project. permalink fedilink source parent hideshow 10 child comments replies: [–] xcjs@programming.dev 2 points 11 months ago There's a maintained fork, fortunately! https://github.com/nicholas-fedor/watchtower permalink fedilink source parent [–] Evotech@lemmy.world 2 points 11 months ago (6 children) What more does it need to do It works prefectly permalink fedilink source parent hideshow 6 child comments replies: [–] madcaesar@lemmy.world 5 points 11 months ago (4 children) Stopped working for me with a recent docker cli update. That's how I even found out it's totally abandoned. I'm not a big fan of running software that has access to the internet once it's abandoned like this. permalink fedilink source parent hideshow 4 child comments replies: [–] xcjs@programming.dev 1 point 11 months ago Sorry for spamming in this thread, but if you rely on Watchtower, there's a maintained fork I recommend: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent [–] Evotech@lemmy.world 0 points 11 months ago* (2 children) Is used by literal millions. I'm sure if there was a security issue or would be reported. Changes for the reason of making changes doesn't make sense either Anyway, I use podman now. It had this functionality built in permalink fedilink source parent hideshow 2 child comments replies: [–] madcaesar@lemmy.world 3 points 11 months ago (1 child) How many people use it makes no difference if there is no devs fixing security bugs. I switched to DIUN, but it doesn't do updates only notifications. That's why I'm excited to look at OP's library. permalink fedilink source parent hideshow 1 child comment replies: [–] Evotech@lemmy.world 0 points 11 months ago* Are there security issues reported? Is open source permalink fedilink source parent [–] xcjs@programming.dev 1 point 11 months ago Not for the latest and future versions of Docker. This fork works, though: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent [–] tofubl@discuss.tchncs.de 1 point 11 months ago (1 child) Your point being that I am not currently using it? Or that I should be looking for alternatives since I am currently using it? permalink fedilink source parent hideshow 1 child comment replies: [–] madcaesar@lemmy.world 0 points 11 months ago I used to use it and switched away because it's not maintained and I had errors with recent docker cli permalink fedilink source parent
[–] xcjs@programming.dev 2 points 11 months ago There's a maintained fork, fortunately! https://github.com/nicholas-fedor/watchtower permalink fedilink source parent
[–] Evotech@lemmy.world 2 points 11 months ago (6 children) What more does it need to do It works prefectly permalink fedilink source parent hideshow 6 child comments replies: [–] madcaesar@lemmy.world 5 points 11 months ago (4 children) Stopped working for me with a recent docker cli update. That's how I even found out it's totally abandoned. I'm not a big fan of running software that has access to the internet once it's abandoned like this. permalink fedilink source parent hideshow 4 child comments replies: [–] xcjs@programming.dev 1 point 11 months ago Sorry for spamming in this thread, but if you rely on Watchtower, there's a maintained fork I recommend: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent [–] Evotech@lemmy.world 0 points 11 months ago* (2 children) Is used by literal millions. I'm sure if there was a security issue or would be reported. Changes for the reason of making changes doesn't make sense either Anyway, I use podman now. It had this functionality built in permalink fedilink source parent hideshow 2 child comments replies: [–] madcaesar@lemmy.world 3 points 11 months ago (1 child) How many people use it makes no difference if there is no devs fixing security bugs. I switched to DIUN, but it doesn't do updates only notifications. That's why I'm excited to look at OP's library. permalink fedilink source parent hideshow 1 child comment replies: [–] Evotech@lemmy.world 0 points 11 months ago* Are there security issues reported? Is open source permalink fedilink source parent [–] xcjs@programming.dev 1 point 11 months ago Not for the latest and future versions of Docker. This fork works, though: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent
[–] madcaesar@lemmy.world 5 points 11 months ago (4 children) Stopped working for me with a recent docker cli update. That's how I even found out it's totally abandoned. I'm not a big fan of running software that has access to the internet once it's abandoned like this. permalink fedilink source parent hideshow 4 child comments replies: [–] xcjs@programming.dev 1 point 11 months ago Sorry for spamming in this thread, but if you rely on Watchtower, there's a maintained fork I recommend: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent [–] Evotech@lemmy.world 0 points 11 months ago* (2 children) Is used by literal millions. I'm sure if there was a security issue or would be reported. Changes for the reason of making changes doesn't make sense either Anyway, I use podman now. It had this functionality built in permalink fedilink source parent hideshow 2 child comments replies: [–] madcaesar@lemmy.world 3 points 11 months ago (1 child) How many people use it makes no difference if there is no devs fixing security bugs. I switched to DIUN, but it doesn't do updates only notifications. That's why I'm excited to look at OP's library. permalink fedilink source parent hideshow 1 child comment replies: [–] Evotech@lemmy.world 0 points 11 months ago* Are there security issues reported? Is open source permalink fedilink source parent
[–] xcjs@programming.dev 1 point 11 months ago Sorry for spamming in this thread, but if you rely on Watchtower, there's a maintained fork I recommend: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent
[–] Evotech@lemmy.world 0 points 11 months ago* (2 children) Is used by literal millions. I'm sure if there was a security issue or would be reported. Changes for the reason of making changes doesn't make sense either Anyway, I use podman now. It had this functionality built in permalink fedilink source parent hideshow 2 child comments replies: [–] madcaesar@lemmy.world 3 points 11 months ago (1 child) How many people use it makes no difference if there is no devs fixing security bugs. I switched to DIUN, but it doesn't do updates only notifications. That's why I'm excited to look at OP's library. permalink fedilink source parent hideshow 1 child comment replies: [–] Evotech@lemmy.world 0 points 11 months ago* Are there security issues reported? Is open source permalink fedilink source parent
[–] madcaesar@lemmy.world 3 points 11 months ago (1 child) How many people use it makes no difference if there is no devs fixing security bugs. I switched to DIUN, but it doesn't do updates only notifications. That's why I'm excited to look at OP's library. permalink fedilink source parent hideshow 1 child comment replies: [–] Evotech@lemmy.world 0 points 11 months ago* Are there security issues reported? Is open source permalink fedilink source parent
[–] Evotech@lemmy.world 0 points 11 months ago* Are there security issues reported? Is open source permalink fedilink source parent
[–] xcjs@programming.dev 1 point 11 months ago Not for the latest and future versions of Docker. This fork works, though: https://github.com/nicholas-fedor/watchtower permalink fedilink source parent
[–] tofubl@discuss.tchncs.de 1 point 11 months ago (1 child) Your point being that I am not currently using it? Or that I should be looking for alternatives since I am currently using it? permalink fedilink source parent hideshow 1 child comment replies: [–] madcaesar@lemmy.world 0 points 11 months ago I used to use it and switched away because it's not maintained and I had errors with recent docker cli permalink fedilink source parent
[–] madcaesar@lemmy.world 0 points 11 months ago I used to use it and switched away because it's not maintained and I had errors with recent docker cli permalink fedilink source parent