From bcd64eeb5c1db018ca6045262963f3fef9381d28 Mon Sep 17 00:00:00 2001 From: Matt Reeves Date: Mon, 20 May 2024 04:47:58 +0000 Subject: [PATCH] Add FAQ --- FAQ.md | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 FAQ.md diff --git a/FAQ.md b/FAQ.md new file mode 100644 index 0000000..3c1ca6c --- /dev/null +++ b/FAQ.md @@ -0,0 +1,9 @@ +## Why not Watchtower, Duin, or Harbormaster? + +While tools like Watchtower, Duin, and Harbormaster offer convenient container update functionalities, they require access to the Docker socket. Providing access to the Docker socket is generally considered a security risk as it grants significant control over the host system. + +If you have ever had watchtower break something you know the annoyance. Also what if the update fails? How are you gonna know if there's breaking changes? After or before breaking a database? + +Harbormaster almost pulls this off, however it requires changing path mappings in order to work, which is a no-go for me. + +This homelab prioritizes security and adopts a more controlled approach to updates by leveraging Drone CI and Renovate bot. This combination allows for automated dependency updates and controlled deployments through a dedicated CI/CD pipeline, ensuring both security and stability. \ No newline at end of file