What are you using to update your Docker images?

  • FrederikNJS@piefed.zip
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 months ago

    https://docs.renovatebot.com/

    All my docker images are in code in Github.

    Renovate makes a PR when there are image or helm chart updates.

    ArgoCD sees the PR merge and applies to Kubernetes.

    For a few special cases I use ArgoCD-image-updater.

    • Bakkoda@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 months ago

      I am really liking komodo so far. I need to understand how the builder works and I think it will be perfect for what I need.

  • Brewchin@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 months ago

    After too many wild rides with Watchtower auto-nuking services, thanks to breaking changes (migrations, DB updates, deployment changes, etc), I switched to What’s Up Docker and pin the version for all of my containers.

    WUD lets me know when something has an update, so I periodically go through their release notes and do the update(s) manually. Usually as simple as read the notes, changes version in compose, down (or pull), then “up -d”. But this approach has saved my bacon multiple times.

    I’ve seen there are other solutions - of varying degrees of promises vs delivery - but most of my stuff is long term and stable. My approach maintains all that.

  • whysofurious@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 months ago

    I generally don’t update automatically, I currently use WUD. It works fine for image checking and notifications and had no need to change it for now, but I am thinking of trying dockhand too.

  • sznowicki@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 months ago

    In reality for me it’s German CERT sending me emails that my n8n is again out of date with tons of CVEs.

  • BlackEco@lemmy.blackeco.com
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 months ago

    I’m thinking of using Dockcheck. It’s not a drop-in replacement for Watchtower, but you probably can wip up a quick systemd service to run it.

  • irmadlad@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 months ago

    Never used it, but TugTainer. I use the fork of Watchtower and run it with '--run-once' '--cleanup'. You can run it and let it update your containers as soon as an update is available, but I just like to run it manually.