# Diun on compute6

Closes the compute6 image-update-visibility gap found in the 2026-06-30 drift audit
(node01/02/media-server already ran Diun; compute6 did not). Mirrors the node01/02
crazymax/diun pattern; watches compute6's ~10 local containers via the docker socket,
notifies the same HA webhook.

Deploys to compute6 at `~/diun/docker-compose.yml`.

**compute6 quirk:** `security_opt: apparmor=unconfined` is REQUIRED here — compute6's
default AppArmor profile blocks the container's docker-socket access (every compute6
container runs unconfined for this reason). Without it Diun logs "permission denied"
on the socket and finds 0 images.