Diun vs Drydock
Diun (Docker Image Update Notifier) is a lightweight notification tool. Drydock builds on the same monitoring concept but adds a full web UI, auto-updates, security scanning, and comprehensive container management capabilities.
Feature Comparison
Here's how we compare on the features that matter most.
| Feature | Diun | Drydock |
|---|---|---|
| Project status | Actively maintained | Actively maintained |
| Language | Go | TypeScript |
| Web UI | None (CLI / daemon) | Full dashboard |
| Auto-update containers | No (notify only) | Yes (optional) |
| Docker Compose updates | No | Yes, pull & recreate |
| Registry support | Docker Hub + private via Docker config | 23 dedicated registry integrations |
| Notifications | 17 services | 20 native trigger integrations |
| Security scanning | None | Trivy + SBOM + cosign verification |
| OIDC authentication | None | Authelia, Auth0, Authentik |
| REST API | None (gRPC CLI only) | Full REST API |
| Prometheus metrics | Yes (since v4.32.0) | Full /metrics endpoint + Grafana template |
| MQTT / Home Assistant | Yes | Yes |
| Image backup & rollback | No | Pre-update backup with retention + auto rollback |
| Container grouping | No | Smart stack detection with batch actions |
| Lifecycle hooks | No | Pre/post-update shell commands |
| Webhook API | No | Token-authenticated webhooks for CI/CD |
| Container actions | No | Start/stop/restart from UI/API |
| Distributed agents | No (one instance per host) | SSE-based agent architecture |
| Kubernetes support | Yes | Planned (v2.0.0) |
| Semver-aware updates | Yes | Yes |
| Audit log | No | Yes, with REST API |
| License | MIT | AGPL-3.0 |
Key Differentiators
What we built that Diun doesn't cover.
Full Web Dashboard
Diun is a CLI daemon with no built-in UI. Drydock provides a full web dashboard for browsing containers, viewing update status, triggering actions, and inspecting logs — all from the browser.
Auto-Update Containers
Diun is notification-only — it tells you about updates but can't apply them. Drydock can monitor and notify, but also optionally pull images and recreate containers via Docker Compose.
Security Scanning
Drydock integrates Trivy vulnerability scanning, SBOM generation (CycloneDX & SPDX), and cosign signature verification. Diun has no security scanning capabilities.
23 Registry Integrations
Drydock has dedicated integrations for Docker Hub, GHCR, ECR, GCR, GAR, GitLab, Quay, Harbor, Artifactory, Nexus, and more. Diun relies on Docker credential configuration.
Rollback & Backup
Pre-update image backups with configurable retention and automatic rollback on health check failure. Diun can't update containers, so rollback isn't applicable.
Audit Trail & Observability
Drydock ships a full audit log with REST API and a Prometheus /metrics endpoint with Grafana dashboard template. Diun added a basic /metrics endpoint in v4.32.0 but has no audit trail or Grafana integration.
Coming from Diun?
If you're using Diun for notifications, Drydock can do the same — plus give you a full dashboard, auto-updates, security scanning, and container management. One Docker command to get started.
$ docker run -d \
--name drydock \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 3000:3000 \
-e DD_ANONYMOUS_AUTH_CONFIRM=true \
codeswhat/drydock # open dashboard — add real auth before exposing thisReady to try Drydock?
No SaaS subscription, no data sent off your host, and we ship updates fast.