WatchTower ECR

A docker image based on containrrr/watchtower for use with AWS ECR.

Usage

Run the container with the following command:

docker run -d \
  --name watchtower \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -e "AWS_ACCESS_KEY_ID=<ACCESS_KEY_ID>" \
  -e "AWS_SECRET_ACCESS_KEY=<SECRET_ACCESS_KEY>" \
  ottolini/watchtower-ecr:latest --interval 300 --cleanup

If you prefer, you can use the docker-compose.yml

version: '3.6'
services:
  my-service:
    image: <id>.dkr.ecr.<region>.amazonaws.com/my-image:latest
  watchtower:
    image: ottolini/watchtower-ecr:latest
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      AWS_ACCESS_KEY_ID: <ACCESS_KEY_ID>
      AWS_SECRET_ACCESS_KEY: <SECRET_ACCESS_KEY>
    command: --interval 300 --cleanup

Both the single docker run and docker-compose can have the default config.json overridden to use a different authentication method for ECR. Refer to https://github.com/awslabs/amazon-ecr-credential-helper#aws-credentials for more info about it. What you need to add is a new volume that map an existing config.json over the default one:

  - /path/to/docker-config.json:/config.json