Globals update settings vs individual containers

[wsw70]

I am pretty sure I saw that somewhere in the documentation but could not find it anymore.

The dozzle container (just an example - this is the case for all containers) updates on its own because the global setting is "auto":

When looking at its details, though, it is set to "manual":

I am a bit confused by the cascading overwrites: doker label vs individual setting in the web UI vs global setting. Which one wins?
If I wanted to have dozzle being upgraded manually, where would I need to set it? Would that be reflected on the Web UI (like it is now, but with the "incorrect" setting?)

[Will-Luck]

Good catch, and you've actually found a display bug here.

The precedence order is:

1. Web UI override (set per-container in the detail page) - highest priority
2. Docker label (sentinel.policy: auto/manual/pinned)
3. :latest auto-policy (if enabled in settings and the image uses :latest or no tag)
4. Global default - lowest priority

What you're seeing: Your Dozzle container has no sentinel.policy Docker label and no per-container override in the web UI. The updater correctly falls back to your global default ("auto"), so it updates automatically. However, the container detail page has a bug where it shows "manual" as a hard-coded fallback instead of showing your actual global default. So the display is wrong, but the behaviour is correct.

I'll fix that display bug so the detail view accurately reflects the effective policy and its source (e.g. "auto (from global default)").

To answer your question directly: if you want Dozzle to be manually updated, the easiest way is to set it in the container detail page in the web UI. That creates a per-container override that takes priority over everything else. You could also add sentinel.policy: manual as a Docker label, but the UI override is simpler.

[Will-Luck]

The display bug mentioned above has been fixed in v2.9.1 (#57, PR #61).

Containers without a sentinel.policy Docker label or per-container override will now correctly show your global default policy (e.g. "auto") instead of incorrectly showing "manual".

The precedence chain displayed in the UI now matches what the engine actually does:

1. Per-container override (set via the detail page dropdown)
2. Docker label (sentinel.policy)
3. Global default (Settings > General > Default Policy)