safe to use watchtower?

[manilx]

Is it safe to use watchtower to auto-update pangolin and the other docker apps?

[hhftechnology]

Using Watchtower to automatically update Docker containers, including critical applications like Pangolin, involves risks and it will break your connection.

Considerations before you use Auto Update any-where .(Never Use)

• Breaking Changes: One of the primary concerns with automated updates is that new versions may introduce breaking changes that could disrupt service. This is particularly critical for critical applications where uptime is essential.
• Lack of Control: Automating updates means you may not have the opportunity to review changelogs or test updates in a staging environment before they are applied. This could lead to unexpected issues in production.
• Trusting the Tool: Watchtower requires access to the Docker socket, which raises security concerns. If there is a vulnerability in Watchtower itself, it could potentially compromise your entire system.

Recommendations for Critical Applications

1. Selective Updates: Consider using Watchtower only for non-critical containers. For critical applications like Pangolin, it may be safer to monitor for updates without applying them automatically. This allows for manual review and testing before deployment.

2. Backup Strategy: Implement a backup strategy to ensure that you can restore services quickly if an update causes issues. Regular backups can mitigate risks associated with automated updates.

3. Alternative Solutions: Explore other tools like Duin, which can notify you of available updates without automatically applying them. This approach allows you to maintain control over when and how updates are implemented.

4. Testing Environment: Always test updates in a staging environment before applying them in production. This practice helps identify potential issues without impacting live services.

[manilx]

Guess in principal you're right. I also use DIUN

[miloschwartz]

Using Watch tower is probably fine, but I would not recommend it right now while Pangolin is in beta and things are changing often. I would say it's safer to manually increase the version in the docker compose one version at a time, and always back up the config folder before performing an update. If you have a back up you can easily roll back to the previous version if something goes critically wrong for your installation.

[manilx]

Thx for the input. Will do as you suggest.