docker_weekly_restart.sh restarts them but never pulls images — remainder is the only update path they have.