Watchtower-使运行的容器自动更新

Watchtower

• 使用介绍

• Watchtower 本身被打包成一个镜像，因此运行它，使所有的正在运行的容器都会自动更新

root@memoriae-152:~# docker run --rm containrrr/watchtower -h Watchtower automatically updates running Docker containers whenever a new image is released. More information available at https://github.com/containrrr/watchtower/. Usage: watchtower [flags] Flags: -a, --api-version string api version to use by docker client (default "1.25") -c, --cleanup remove previously used images after updating -d, --debug enable debug mode with verbose logging --enable-lifecycle-hooks Enable the execution of commands triggered by pre- and post-update lifecycle hooks -h, --help help for watchtower -H, --host string daemon socket to connect to (default "unix:///var/run/docker.sock") --http-api-metrics Runs Watchtower with the Prometheus metrics API enabled --http-api-token string Sets an authentication token to HTTP API requests. --http-api-update Runs Watchtower in HTTP API mode, so that image updates must to be triggered by a request --include-restarting Will also include restarting containers -S, --include-stopped Will also include created and exited containers -i, --interval int poll interval (in seconds) (default 86400) -e, --label-enable watch containers where the com.centurylinklabs.watchtower.enable label is true -m, --monitor-only Will only monitor for new images, not update the containers --no-color Disable ANSI color escape codes in log output --no-pull do not pull any new images --no-restart do not restart any containers --no-startup-message Prevents watchtower from sending a startup message --notification-email-delay int Delay before sending notifications, expressed in seconds --notification-email-from string Address to send notification emails from --notification-email-server string SMTP server to send notification emails through --notification-email-server-password string SMTP server password for sending notifications --notification-email-server-port int SMTP server port to send notification emails through (default 25) --notification-email-server-tls-skip-verify Controls whether watchtower verifies the SMTP server's certificate chain and host name. Should only be used for testing. --notification-email-server-user string SMTP server user for sending notifications --notification-email-subjecttag string Subject prefix tag for notifications via mail --notification-email-to string Address to send notification emails to --notification-gotify-tls-skip-verify Controls whether watchtower verifies the Gotify server's certificate chain and host name. Should only be used for testing. --notification-gotify-token string The Gotify Application required to query the Gotify API --notification-gotify-url string The Gotify URL to send notifications to --notification-msteams-data The MSTeams notifier will try to extract log entry fields as MSTeams message facts --notification-msteams-hook string The MSTeams WebHook URL to send notifications to --notification-slack-channel string A string which overrides the webhook's default channel. Example: #my-custom-channel --notification-slack-hook-url string The Slack Hook URL to send notifications to --notification-slack-icon-emoji string An emoji code string to use in place of the default icon --notification-slack-icon-url string An icon image URL string to use in place of the default icon --notification-slack-identifier string A string which will be used to identify the messages coming from this watchtower instance (default "watchtower") --notification-template string The shoutrrr text/template for the messages --notification-url stringArray The shoutrrr URL to send notifications to -n, --notifications strings notification types to send (valid: email, slack, msteams, gotify, shoutrrr) --notifications-level string The log level used for sending notifications. Possible values: panic, fatal, error, warn, info or debug (default "info") --remove-volumes remove attached volumes before updating --revive-stopped Will also start stopped containers that were updated, if include-stopped is active --rolling-restart Restart containers one at a time -R, --run-once Run once now and exit -s, --schedule string the cron expression which defines when to update --scope string Defines a monitoring scope for the Watchtower instance. -t, --stop-timeout duration timeout before a container is forcefully stopped (default 10s) -v, --tlsverify use TLS and verify the remote --trace enable trace mode with very verbose logging - caution, exposes credentials --warn-on-head-failure string When to warn about HEAD pull requests failing. Possible values: always, auto or never 

自动清除废旧镜像

# 标签为none的镜像 docker run -d \ --name watchtower \ --restart unless-stopped \ -v /var/run/docker.sock:/var/run/docker.sock \ containrrr/watchtower -c 

选择性自动更新

假设我们只想要更新固定的容器，我们可以把容器名称追加到启动命令后面

docker run -d \ --name watchtower \ --restart unless-stopped \ -v /var/run/docker.sock:/var/run/docker.sock \ containrrr/watchtower -c \ nginx redis #也可以通过变量的方式调用容器名称列表 $(cat ~/.watchtower.list) 

设置自动更新的检查频率

docker run -d \ --name watchtower \ --restart unless-stopped \ -v /var/run/docker.sock:/var/run/docker.sock \ containrrr/watchtower -c \ nginx redis \ --interval 3600 

#如每天凌晨 2 点检查一次更新： docker run -d \ --name watchtower \ --restart unless-stopped \ -v /var/run/docker.sock:/var/run/docker.sock \ containrrr/watchtower -c \ --schedule "0 2 * * * *" 

手动更新

docker run --rm \ -v /var/run/docker.sock:/var/run/docker.sock \ containrrr/watchtower -cR \ user nginx