dockcheck/dockcheck.sh

#!/bin/bash

# Help Function:
Help() {
  echo "Syntax:     dockcheck.sh [OPTION] [part of name to filter]" 
  echo "Example:    dockcheck.sh -a ng"
  echo
  echo "Options:"
  echo "-h     Print this Help."
  echo "-a     Automatic updates, without interaction."
  echo "-n     No updates, only checking availability."
}

while getopts "anh" options; do
  case "${options}" in
    a)
      UpdYes="yes"
      ;;
    n)
      UpdYes="no"
      ;;
    h|*) # help or unknown option:
      Help
      exit 0;;
  esac
done

### Set $1 back to $1 (ignoring the places held by getops)
shift "$((OPTIND-1))"

### Set $1 to a variable for later
SearchName="$1"

### Check if required binary exists in PATH or directory:
if [[ $(builtin type -P "regctl") ]]; then 
  regbin="regctl"
elif [[ -f "./regctl" ]]; then
  regbin="./regctl"
else
  printf "Required dependency 'regctl' missing, do you want it downloaded? y/[n]\n"
  read GetDep
  if [ "$GetDep" != "${GetDep#[Yy]}" ]; then
    ### Check arch:
    case "$(uname --machine)" in
      x86_64|amd64)
        architecture="amd64";;
      arm64|aarch64)
        architecture="arm64";;
      *) echo "Architecture not supported, exiting." ; exit ;;
    esac
    curl -L https://github.com/regclient/regclient/releases/latest/download/regctl-linux-$architecture >./regctl
    chmod 755 ./regctl
    regbin="./regctl"
  else
    printf "Dependency missing, quitting.\n"
    exit
  fi
fi

### Check the image-hash of every running container VS the registry
for i in $(docker ps --filter "name=$SearchName" --format '{{.Names}}') 
do
printf ". "
  RepoUrl=$(docker inspect "$i" --format='{{.Config.Image}}')
  LocalHash=$(docker image inspect "$RepoUrl" --format '{{.RepoDigests}}' | sed -e 's/.*sha256/sha256/' -e 's/\]$//')
  RegHash=$($regbin image digest --list "$RepoUrl" 2>/dev/null)
  # Check if regtcl produces errors - add to GotErrors if so.
  if [ $? -eq 0 ] ; then
    if [[ "$LocalHash" != "$RegHash" ]] ; then
      GotUpdates+=("$i")
    else
      NoUpdates+=("$i")
    fi
  else
    GotErrors+=("$i")
  fi
done

### List what containers got updates or not
if [ -n "$NoUpdates" ] ; then
  printf "\n\033[32;1mContainers on latest version:\033[0m\n"
  printf "%s\n" "${NoUpdates[@]}"
fi
if [ -n "$GotUpdates" ] ; then
  printf "\n\033[31;1mContainers with updates available:\033[0m\n"
  printf "%s\n" "${GotUpdates[@]}"
fi
if [ -n "$GotErrors" ] ; then
  printf "\n\033[33;1mContainers with errors, wont get updated:\033[0m\n"
  printf "%s\n" "${GotErrors[@]}"
fi

### Optionally get updates if there's any 
if [ -n "$GotUpdates" ] ; then
  if [ -z "$UpdYes" ] ; then
  printf "\n\033[36;1mDo you want to update? y/[n]\033[0m\n"
  read UpdYes
  fi
    if [ "$UpdYes" != "${UpdYes#[Yy]}" ] ; then
      for i in "${GotUpdates[@]}"
      do 
        # Check what compose-type is installed:
        if docker compose &> /dev/null ; then DockerBin="docker compose" ; else DockerBin="docker-compose" ; fi
        ContPath=$(docker inspect "$i" --format '{{ index .Config.Labels "com.docker.compose.project.working_dir"}}')
        $DockerBin -f "$ContPath/docker-compose.yml" pull 
        $DockerBin -f "$ContPath/docker-compose.yml" up -d
      done
    else
      printf "\nNo updates installed, exiting.\n"
    fi
else
  printf "\nNo updates available, exiting.\n"
fi