Shepherd

Shepherd inspects your Docker services, and checks regularly whether a new version of their image is available. It then updates the service automatically.

This unfortunately does not always work reliably for private images (where the registry requires authentication).

stack.yml

version: '3'

services:
  shepherd:
    image: mazzolino/shepherd
    read_only: true
    cap_drop:
      - ALL
    environment:
      TZ: 'Europe/Berlin'
      WITH_REGISTRY_AUTH: 'true'
      SLEEP_TIME: '60m'
      FILTER_SERVICES: 'label=shepherd_autoupdate'
      ROLLBACK_ON_FAILURE: 'true'
      IMAGE_AUTOCLEAN_LIMIT: 3
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    deploy:
      labels:
        shepherd_autoupdate:
      resources:
        limits:
          cpus: '0.1'
          memory: 50M