Containers using another container as the network fail when network container is updated #1013
Description
Describe the bug
I have a container which is a wireguard VPN client, let’s call it Container_A.
I then have several other containers, Container_B -> F who have their network set to Container -> Container_A.
The problem is when Watchtower updates Container_A, the network is lost for Containers B -> F; you then need to manually recreate the containers in order to set the network again.
I’ve tried to use the com.centurylinklabs.watchtower.depends-on Tag on the B -> F containers, but it didn’t seem to help.
To Reproduce
- Create the main container, such as a wireguard client https://hub.docker.com/r/linuxserver/wireguard
- Set any other containers to have their network set to the main container
- Let watchtower update the main container
- All child containers will no longer have any network.
Expected behavior
Child containers should be recreated with the new main container as the network.
Screenshots
Environment
OS: linux x86_64 Ubuntu 20.04.2 LTS (5.4.0-77-generic)
Docker: 20.10.7 (API: 1.41)
Logs from running watchtower with the --debug option
time="2021-07-04T05:20:20+02:00" level=debug msg="Trying to load authentication credentials." container=/wireguard_client image="ghcr.io/linuxserver/wireguard:latest"
time="2021-07-04T05:20:20+02:00" level=debug msg="No credentials for ghcr.io found" config_file=/config.json
time="2021-07-04T05:20:20+02:00" level=debug msg="Got image name: ghcr.io/linuxserver/wireguard:latest"
time="2021-07-04T05:20:20+02:00" level=debug msg="Checking if pull is needed" container=/wireguard_client image="ghcr.io/linuxserver/wireguard:latest"
time="2021-07-04T05:20:20+02:00" level=debug msg="Building challenge URL" URL="https://ghcr.io/v2/"
time="2021-07-04T05:20:20+02:00" level=debug msg="Got response to challenge request" header="Bearer realm=\"https://ghcr.io/token\",service=\"ghcr.io\",scope=\"repository:user/image:pull\"" status="401 Unauthorized"
time="2021-07-04T05:20:20+02:00" level=debug msg="Checking challenge header content" realm="https://ghcr.io/token" service=ghcr.io
time="2021-07-04T05:20:20+02:00" level=debug msg="Setting scope for auth token" image=ghcr.io/linuxserver/wireguard scope="repository:ghcr.io/linuxserver/wireguard:pull"
time="2021-07-04T05:20:20+02:00" level=debug msg="No credentials found."
time="2021-07-04T05:20:20+02:00" level=debug msg="Parsing image ref" host=ghcr.io image=linuxserver/wireguard normalized="ghcr.io/linuxserver/wireguard:latest" tag=latest
time="2021-07-04T05:20:20+02:00" level=debug msg="Doing a HEAD request to fetch a digest" url="https://ghcr.io/v2/linuxserver/wireguard/manifests/latest"
time="2021-07-04T05:20:21+02:00" level=debug msg="Found a remote digest to compare with" remote="sha256:92896e179190aa6ace42be702860bcd73b858dcb4baaed793a196845a183f475"
time="2021-07-04T05:20:21+02:00" level=debug msg=Comparing local="sha256:860a5a2470e86e7f2811f1b02bc64d5b53d71a3c850dfef7c11dcf0a8d15a2b8" remote="sha256:92896e179190aa6ace42be702860bcd73b858dcb4baaed793a196845a183f475"
time="2021-07-04T05:20:21+02:00" level=debug msg=Comparing local="sha256:860a5a2470e86e7f2811f1b02bc64d5b53d71a3c850dfef7c11dcf0a8d15a2b8" remote="sha256:92896e179190aa6ace42be702860bcd73b858dcb4baaed793a196845a183f475"
time="2021-07-04T05:20:21+02:00" level=debug msg="Digests did not match, doing a pull."
time="2021-07-04T05:20:21+02:00" level=debug msg="Pulling image" container=/wireguard_client image="ghcr.io/linuxserver/wireguard:latest"
time="2021-07-04T05:20:28+02:00" level=info msg="Found new ghcr.io/linuxserver/wireguard:latest image (1de77abee2fc)"
Additional context