Skip to content

What's Up Docker

Container image update notifier.

Runtime Container (Docker Swarm)
Tier Experimental
Node swarm-media
Image getwud/wud:8.3.0
URL https://whatsupdocker.lab.riversfamily.uk
Auth Forward-auth (authentik@swarm) — no native OIDC
Source ansible/stacks/experimental/whatsupdocker/

Volumes

Volume Path Backing Contents
(bind, read-only) /var/run/docker.sock Host Read-only access to the Docker API to inspect running images for updates
store /store Local WUD's own state

Secrets

None.

Gotchas

  • The only service in the whole stack (besides Traefik) that mounts the host Docker socket. Read-only, but still a host-integration point worth being aware of when reasoning about the container's blast radius if compromised.