diun

## Overview diun (Docker Image Update Notifier) monitors container image updates on a cron schedule and delivers templated notifications. Powered by https://crazymax.dev/diun/, it supports multiple providers such as Docker, Swarm, and file backends, making it a great fit for Lazycat Cloud automation workflows. **Official Website:** https://github.com/crazy-max/diun **Repository:** https://github.com/lazycatapps/diun.git **⚠️ Prerequisite:** Install and run dockge on the host so that its exposed `docker.sock` can be mounted by this app. ## Usage 1. On startup the app reads `/data/appvar/cloud.lazycat.app.liu.diun/config/config.yaml` (mounted inside the container as `/config/config.yaml`) and schedules scans at a one-minute cadence. 2. Store private registry credentials in `/data/appvar/cloud.lazycat.app.liu.diun/config/.docker/config.json`, following the existing JSON structure. 3. Tag images that should be monitored with the label `diun.enable=true`; diun only watches resources that expose this flag. 4. Restart the service after changes and consult https://crazymax.dev/diun/ for advanced provider and notifier options. ## Key Features - ⏱️ Cron-style scheduling with jitter to avoid thundering herds during large rollouts - 🔎 Multi-provider support spanning Docker, file targets, Kubernetes, and Swarm - 📬 Go template–powered notifications that expose image metadata to custom scripts - 📄 Local SQLite history to track past scans and assist in incident reviews - 🔐 Centralized credential management handled through bind-mounted config and symlinks ## Notes - The default setup expects Docker socket access; ensure the host can pull target images. - Add authentication logic to the notification script when integrating with external services. - There is no graphical user interface; configuration and monitoring are file/log driven.