watchtower

GitHub issue for podman support, here: https://github.com/containrrr/watchtower/issues/1060

Interesting- my first time reading about Kamal. I personally used watchtower (https://github.com/containrrr/watchtower) to check for and deploy container updates from the GitHub Container Registry and push new images there from Actions. I also used OpenTofu to automate the VPS provisioning in GH Actions. It would be interesting to read about self-hosted/ free monitoring & analytics solutions for this stack.

Related: https://github.com/containrrr/watchtower Polls a docker registry and automatically restarts the container with the same flags that it was started with using the latest image.

> if you're using the docker image, upgrades are a breeze. Just bump the tag on the image, redeploy, and you're done. Or you could just run Watchtower beside it and it will automatically update your docker containers. https://github.com/containrrr/watchtower If you are OK with automated updates.

So i primarily use containers on my local machine walled off from the internet, so it's not a big concern for me. Watchtower [1] is popular among home server users too which automatically updates containers to the latest image. For production uses I think companies generally build their own containers. They would have a common base linux container and build the other containers based off that with a typical CI/CD pipeline. So if glibc is patched, it's probably patched in the base container and the others are then rebuilt. You don't have to patch each container individually, just the base. Once the whole build pipeline is automated its not too hard to add checks for security updates and rebuild when needed. Production also minimizes the scope of containers with nothing installed except what's necessary so they have few dependencies. [1] ht

What do you mean by Watchguard? I did a search but didn't find anything. Did you mean Watchtower maybe? https://github.com/containrrr/watchtower

This is what I'm doing, except that I'm using watchtower + dockerhub + github to automate, work like a charm, cost 60$/year. [watchtower](https://github.com/containrrr/watchtower)

My hosting stack seems to be similar to yours. In addition to the services themselves, I run a watchtower container to check for new images for me, which then notifies me through yet another selfhosted solution: gotify. I have watchtower setup not to automatically recreate the containers (I've been bitten by postgres updates a few times too many). Speaking of Wireguard: I've been looking for a web-based management interface to define Wireguard networks with (using the server it runs on as a sort of central "hun"), but haven't yet found anything I really like and/or found simple enough to use. What does your Wireguard setup look like? Watchtower: https://github.com/containrrr/watchtower Gotify: https://github.com/gotify/server

For me, I don't define any variables via the cli, i put them all in the docker-compose.yml or accompanying .env file, that way it's a simple `docker-compose up` to deploy. Then I can track these files via git, and deploy to remote docker hosts using docker-machine, which effectively sets the DOCKER_HOST env var. While I haven't used it personally, there is [0] Watchtower which aims to automate updating docker containers. [0] https://github.com/containrrr/watchtower

>There aren't many solutions around for automatically pulling and running new images. Isn't that exactly what watchtower does? https://github.com/containrrr/watchtower It works great on my mediacenter server running deluge, plex, sonarr, radarr, jackett and OpenVPN in docker.