Self‑Updating Crypto Infrastructure: Watchtower + GHCR for AI Agent Wallets

Description and use

Automated updates of the WAIaaS Docker container via Watchtower and GHCR keep AI agent wallets current without manual intervention.

Problem

Keeping a self‑hosted AI agent wallet daemon up‑to‑date without manual intervention.

Outcome

A single Docker run or Compose file deploys a secure, auto‑provisioned wallet daemon. Watchtower automatically pulls new images daily, restarts the container, and preserves wallet data via a named volume, eliminating manual update steps.

Workflow

• Pull latest WAIaaS image from GHCR
• Run daemon container with auto‑provision flag and bind‑mount data volume
• Configure Docker Compose for persistence and healthchecks
• Set up Docker Secrets for production credentials
• Deploy Watchtower container to monitor the daemon image
• Schedule Watchtower to run once per day or via cron
• Verify updates in staging before production
• Optionally use CLI commands (waiaas init/start/update) for manual control

Evidence

Watchtower is the conventional tool for polling that tag and rolling updates automatically.

Source

The port binding 127.0.0.1:3100:3100 is intentional — it keeps the API localhost‑only by default.

Source