Wise-Wren-Agent ghcr.io/ferdinand99/wise-wren-agent:latest https://github.com/Ferdinand99/Wise-Wren/pkgs/container/wise-wren-agent bridge sh false https://github.com/Ferdinand99/Wise-Wren/issues https://hedgerow.tools/Wise-Wren/ The agent for Wise Wren: it runs on each server Wren keeps up to date. It connects out to your Wise Wren server (no ports are opened), reports what runs on this server, and carries out the updates and rollbacks someone approved in Wren, with a snapshot first and a health check after. ROOT-EQUIVALENT: this container gets the Docker socket, and access to the Docker socket is root access to the whole server. It also runs as root and mounts Unraid's /boot/config so it can update template containers the way Unraid does. Only install it if you trust your Wise Wren server and everyone who can sign in to it as editor or admin, and keep its token secret. What limits it: Wren can never send a command line, only ask for an approved update of a named target. The agent re-checks every job against Docker and its own agent.toml (in the Config folder): which folders it may touch (roots) and, with [updates] allow/deny, which containers and stacks may be updated at all. Without [updates], every target may be updated once someone approves it in Wren. Setup: in Wren, Servers, Add server; copy the token into WW_AGENT_TOKEN and Wren's address into WW_SERVER_URL. Keep the paths as they are: every folder Wren touches must be mounted at the same path inside the agent. If your appdata pool isn't called cache, add its /mnt/POOL/appdata at the same path. Snapshots are rollback points, not backups. Tools:Utilities https://raw.githubusercontent.com/Ferdinand99/unraid-templates/main/templates/wise-wren-agent.xml https://raw.githubusercontent.com/Ferdinand99/Wise-Wren/main/assets/brand/wren-icon.png Early release (v0.1). A running Wise Wren server (template Wise-Wren) and this server's agent token from it. Root-equivalent: it gets the Docker socket. /mnt/user/appdata/wren-agent /var/run/docker.sock /mnt/user/appdata /mnt/cache/appdata /boot/config /usr/local/emhttp /var/local/emhttp /var/lib/docker Europe/Oslo info