Diun

Azure Developer Tools 1 variation

an open source Docker image update notifier: it watches your container image registries and tells you the moment a new version ships, with no notifier credential baked in

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Variations

This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.

ProductCloudOperating systemVersion
Diun on Ubuntu 24.04 LTS Azure Ubuntu 24.04 Standard View · Guide

Overview

Diun (Docker Image Update Notifier) is a lightweight, self hosted daemon that watches container image registries for you and notifies you the moment a watched image gets a new tag or a digest change. Instead of manually checking whether an image you rely on has been updated, or finding out only after something breaks, Diun runs quietly in the background, performs scheduled registry checks, and sends a notification through the channel of your choice, email, chat, a webhook or a simple local log, the instant a new version appears. It is a single small binary with no runtime and no database server to operate, and it can watch images from a static list, a local Docker host, Swarm, Kubernetes or Nomad.

Why the cloudimg image

cloudimg ships Diun as a complete, dependency free appliance rather than a binary you have to wire up yourself: it is installed, configured with a working watch list and running as a managed service within minutes of launch, so you can see it perform a real registry check and fire a real notification event on the very first boot. Security is designed in for a tool that only ever reaches outward: Diun makes outbound registry and notification connections only, nothing listens inbound, so there is no login and no auth surface to lock down in the first place. No notifier credential of any kind is ever baked into the image, the appliance ships with new and updated image events simply logged locally so you can prove it is working immediately, and you add your own email, chat or webhook credential only when and if you choose to. Every instance gets its own first boot setup note with the exact paths and commands you need. The base is fully patched with unattended security updates enabled, and every image comes with a step by step deploy guide tested against the exact build and 24/7 cloudimg support.

Common uses

  • Getting notified the moment a container image you depend on publishes a new version
  • Tracking image drift across a fleet without installing anything on your Docker hosts
  • A lightweight, dependency free update watcher for a homelab or small team registry