Watchtower — Automated Docker Container Image Updates

What it is

Watchtower is a Docker container that monitors other running containers and automatically updates them when new images are pushed to their registries. It polls container registries at configurable intervals, pulls updated images, and gracefully stops and restarts containers with the same configuration.

Watchtower targets anyone running Docker containers in production or on home servers who wants automatic updates without manual intervention. It handles the entire lifecycle: detect, pull, stop, and restart.

How it saves time or tokens

Manually checking for Docker image updates and redeploying containers is tedious and easy to forget. Watchtower automates this entirely. It preserves container configurations (ports, volumes, environment variables) during updates, so you do not need to re-specify startup parameters. Notifications via email, Slack, or webhooks keep you informed about what was updated and when.

How to use

1. Start Watchtower to monitor all containers:

docker run -d --name watchtower \
  -v /var/run/docker.sock:/var/run/docker.sock \
  containrrr/watchtower --interval 300 --cleanup

1. Or monitor only specific containers by label:

# Add label to containers you want updated
docker run -d --label com.centurylinklabs.watchtower.enable=true my-app

# Run Watchtower with label filter
docker run -d --name watchtower \
  -v /var/run/docker.sock:/var/run/docker.sock \
  containrrr/watchtower --label-enable --interval 300

Example

# docker-compose.yml with Watchtower
services:
  watchtower:
    image: containrrr/watchtower
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    command: --interval 3600 --cleanup --notifications-level info
    restart: unless-stopped

  my-app:
    image: myregistry/my-app:latest
    labels:
      - com.centurylinklabs.watchtower.enable=true
    ports:
      - '8080:8080'
    restart: unless-stopped

Related on TokRepo

• DevOps Tools — Container and infrastructure management tools
• Self-Hosted Tools — Self-hosted infrastructure automation

This tool integrates with standard development workflows and requires minimal configuration to get started. It is available as open-source software with documentation and community support through the official repository. The project follows semantic versioning for stable releases.

For teams evaluating this tool, the key advantage is reducing manual work in repetitive tasks. The automation provided by the built-in features means less custom code to maintain and fewer integration points to manage. This translates directly to lower maintenance costs and faster iteration cycles.

Common pitfalls

• Watchtower requires access to the Docker socket (/var/run/docker.sock), which grants full control over all containers; restrict access and do not expose it on untrusted networks.
• Automatic updates can introduce breaking changes; use specific image tags or a staging environment rather than :latest in production to control when updates apply.
• The --cleanup flag removes old images after updates to prevent disk space buildup; without it, old images accumulate over time.