How to "update" Docker images/container?

    • OMV 4.x
    • Resolved

    This site uses cookies. By continuing to browse this site, you are agreeing to our Cookie Policy.

    • How to "update" Docker images/container?

      Hello,

      I'm very new to docker but since there is no SABnzb anymore I had to deal with the docker plugin. I've read some tutorials on the forum and after some tinkering I finally managed to get a SABnzb container up and running. :)

      Now I see that there is a new version of the SABnzb image but I don't find any information on how to properly "update" an image/container? I just found another thread on this forum where someone else asked the same question and was told to only update when really necessary. :huh: This doesn't answer his (and my) question. So given the situation that a docker image HAS to be updated because of a security vulnerability of the enclosed application - what do I have to do in this situation?

      I had a hard time configuring the container because some paths and variables (inside and outside of the container) are not self explaining. So I don't want to destroy my work accidentally.

      Thanks in advance for your help!
    • macom wrote:

      flvinny521 wrote:

      I don't use it personally
      How do you update your images?
      ( @macom - Forgive me for butting in.)

      I don't auto-update either. I've seen a couple instances of flawed image updates, published by the authors of Dockers. Since I don't want to auto-update my way into a failed Docker, I manually build a new container every time using the older (outside) configuration parameters if they're compatible. (That's another reason to rebuild manually - in some cases older config files and parameters are not usable in newer containers.)

      And a new container build is done on a backup boot drive, so there's a back-out option. :)
      Good backup takes the "drama" out of computing
      ____________________________________
      Primary: OMV 3.0.99, ThinkServer TS140, 12GB ECC, 32GB USB boot, 4TB+4TB zmirror, 3TB client backup.
      Backup: OMV 4.1.9, Acer RC-111, 4GB, 32GB USB boot, 3TB+3TB zmirror, 4TB Rsync'ed disk
      2nd Data Backup: OMV 3.0.99, R-PI 2B, 16GB boot, 4TB WD USB MyPassport - direct connect (no hub)
    • Ok, now I installed Watchtower like described in this video:
      forum.openmediavault.org/index…?postID=177009#post177009

      It works (nice :) ) but per default it leaves the old Images in list. hub.docker.com/r/v2tec/watchtower/ mentions some options, for example --cleanup (for removing old images after updating). I tried to put it into "Extra Arguments" field right in front or behind of -v /var/run/docker.sock:/var/run/docker.sock but I get an error message when I try so save the container. Where do I have to specify those options? :?:

      The post was edited 2 times, last by Mr Smile ().

    • As it appears (with a video on the subject), @TechnoDadLife may have some experience with WatchTower. Perhapes he'll chime in.
      Good backup takes the "drama" out of computing
      ____________________________________
      Primary: OMV 3.0.99, ThinkServer TS140, 12GB ECC, 32GB USB boot, 4TB+4TB zmirror, 3TB client backup.
      Backup: OMV 4.1.9, Acer RC-111, 4GB, 32GB USB boot, 3TB+3TB zmirror, 4TB Rsync'ed disk
      2nd Data Backup: OMV 3.0.99, R-PI 2B, 16GB boot, 4TB WD USB MyPassport - direct connect (no hub)
    • OMV 4.1.11 x64 on a HP T510, 16GB CF as Boot Disk & 32GB SSD 2,5" disk for Data, 4 GB RAM, CPU VIA EDEN X2 U4200 is x64 at 1GHz

      Post: HPT510 SlimNAS ; HOWTO Install Pi-Hole ; HOWTO install MLDonkey ; HOHTO Install ZFS-Plugin ; OMV_OldGUI ; ShellinaBOX ;
      Dockers: MLDonkey ; PiHole ; weTTY
      Videos: @TechnoDadLife
    • macom wrote:

      flvinny521 wrote:

      I don't use it personally
      How do you update your images?

      flmaxey wrote:

      ( @macom - Forgive me for butting in.)
      I don't auto-update either. I've seen a couple instances of flawed image updates, published by the authors of Dockers. Since I don't want to auto-update my way into a failed Docker, I manually build a new container every time using the older (outside) configuration parameters if they're compatible. (That's another reason to rebuild manually - in some cases older config files and parameters are not usable in newer containers.)

      And a new container build is done on a backup boot drive, so there's a back-out option. :)

      Generally, I don't update my containers. I update the applications themselves using the built-in updater from their web UI, but I haven't found it necessary to update the containers. Please correct me if I am at risk by not doing so. For a while, I played around with Watchtower, but it ended up feeling a bit unnecessary so I stopped using it.
    • flvinny521 wrote:

      Generally, I don't update my containers. I update the applications themselves using the built-in updater from their web UI, but I haven't found it necessary to update the containers. Please correct me if I am at risk by not doing so. For a while, I played around with Watchtower, but it ended up feeling a bit unnecessary so I stopped using it.
      The ability to update seems to vary from image to image. Some authors design their containers to be updated internally as you've described. (Plex, Emby and others.) If they're designed for it, generally, authors will state as much on their page in hub.docker.com Others, with less robust designs, "break" if they're updated in the traditional way. (And some authors will caution users not to update/upgrade in the traditional way - that they should install a new Docker image instead.)

      Either way, I view a Docker as a full (but bare bones) working Linux machine installation that happens to be "living" on my OMV boot drive. By extension, the boot drive itself with OMV, plugins, and installed Dockers becomes the baseline install to be maintained. Accordingly, I always backup my boot drive ((2 full USB thumb drive copies in fact)) before I do upgrades to the OS/OMV, Dockers, or major plugins like UrBackup.

      Cautious and Conservative? Absolutely, but it's served me well. :)
      Good backup takes the "drama" out of computing
      ____________________________________
      Primary: OMV 3.0.99, ThinkServer TS140, 12GB ECC, 32GB USB boot, 4TB+4TB zmirror, 3TB client backup.
      Backup: OMV 4.1.9, Acer RC-111, 4GB, 32GB USB boot, 3TB+3TB zmirror, 4TB Rsync'ed disk
      2nd Data Backup: OMV 3.0.99, R-PI 2B, 16GB boot, 4TB WD USB MyPassport - direct connect (no hub)
    • From my experience so far, it seems that i've been able to happily update the apps from within their respective web UIs and that has worked well (Radarr, Sonarr, NZBget etc), but, if i modify any parameters for the docker container, it then has the ability to break the updates and restore the original underlying code, so, probably best to try and update the core container itself whenever you can to save any problems.

      An example, you use the NZBget Linux build, run it, and then find there is an update. You update and all works well. You then need to tweak some intrinsic parts of that container and it reverts back to the previous version. When it then runs, it throws up some errors about commands that are now outdated etc that it reads from the later install.
    • stripealipe wrote:

      From my experience so far, it seems that i've been able to happily update the apps from within their respective web UIs and that has worked well (Radarr, Sonarr, NZBget etc), but, if i modify any parameters for the docker container, it then has the ability to break the updates and restore the original underlying code, so, probably best to try and update the core container itself whenever you can to save any problems.

      An example, you use the NZBget Linux build, run it, and then find there is an update. You update and all works well. You then need to tweak some intrinsic parts of that container and it reverts back to the previous version. When it then runs, it throws up some errors about commands that are now outdated etc that it reads from the later install.
      Those are accurate observations. The Docker image downloaded is the base software or snapshot (depending on how one looks at it) for the creation of a container. The container created from the image can be updated internally to your hearts content, as long as you don't hit the "modify/save" buttons in the Docker GUI which resets parameters, volumes and bind points, ports, etc. That action "modify" creates a new container, from the base image, running the newly entered parameter(s). Thereafter, all modifications, updates, etc., to the original container (that are not mapped outside) are permanently lost.

      Since this is a given, I do very little with a Docker, using the Docker plugin, after a container is up and running correctly. (The old moto applies, "if it works don't fix it".) If I need to do something, I backup the boot drive as a matter of practice before tweaking anything related to a Docker. It's good to be able to back out of a change (with a known working boot drive) in the event of a fat finger error or other unintended consequence.

      @stripealipe , what are you using as a boot drive?
      Good backup takes the "drama" out of computing
      ____________________________________
      Primary: OMV 3.0.99, ThinkServer TS140, 12GB ECC, 32GB USB boot, 4TB+4TB zmirror, 3TB client backup.
      Backup: OMV 4.1.9, Acer RC-111, 4GB, 32GB USB boot, 3TB+3TB zmirror, 4TB Rsync'ed disk
      2nd Data Backup: OMV 3.0.99, R-PI 2B, 16GB boot, 4TB WD USB MyPassport - direct connect (no hub)