Jump to content

primeval_god

Community Developer
 View Profile  See their activity

  • Posts

    857

  • Joined

  • Last visited

  • Days Won

    2

 Content Type 

Everything posted by primeval_god

  1. primeval_god
    In 6.10.1+ the dockerman icon caching mechanism does not work correctly for icons specified by the net.unraid.docker.icon container label on containers without a dockerman template. For containers created with this label outside of dockerman the caching mechanism initially downloads and displays the correct icon. If the icon url is changed however the new icon is never downloaded because the old icon remains cached and there is no mechanism in place for invalidating the icon in the absence of a dockerman template. This issue was discovered by others including those using the compose plugin. Since I have not seen this raised in the Bug Reports section yet I am posting this as a bug report in addition to my proposed fix here https://github.com/limetech/webgui/pull/1146.
  2. primeval_god
    The webui portion of this plugin is designed only to show compose stacks created and launched via the webui. I think your issue specifically is that you are launching the stack differently than the plugin does. The plugin uses something like docker compose up -f docker.compose.yml -f <possibly other compose files> -p <projectname> Where project name is a sanitized version of the stack name assigned in the webui. The project name is what the plugin uses to match against and display the status of stacks.
  3. primeval_god
    @hasown@NAS A new version is available with an updated version of compose.
  4. primeval_god
    Reason: I would prefer to restrict access to the unRAID webUI to only one of my Ethernet adapters and use ports 80 and 443 on the other adapters for hosting docker applications. Previously i was using the hidden BIND_MGT setting to restrict the WebUI to eth0. However it appears that functionality has been removed in 6.10 per the latest in the discussion here I would like to request a new mechanism, preferably not hidden this time, to support this use case.
  5. primeval_god
    So just to clarify are you saying this is a bug or that the ability to bind the webui to a single IP address with this mechanism is no longer a feature?
  6. primeval_god
    I love the idea of having a locked release announcement thread! I would like to see this paradigm extended to the threads in the Announcements category of the forum as well, though maybe with a link to a discussion thread in that case (see here). This makes it much easier to get notifications when something is announced or updated rather than whenever someone posts a comment about the announcement.
  7. primeval_god
    Yeah its been a while since i updated the opening post (not sure many people read it anyway). If there are any security issues or important bug fixes in the packages i include feel free to bring them to my attention and i will try to patch them asap. Otherwise the answer is probably sporadically or when i remember to check my dependencies. For this last release I forgot, I will try to get an update out soon.
  8. primeval_god
    A new version of the plugin is available. This version allows choosing alternate project directories for storing more complex docker stacks. This version also implements functionality for managing webui and icon labels for unRAID webui integration.
  9. primeval_god
    What directory is it writing the tmp files to? Not sure if it is the correct way to fix it but you can mount a tmpfs directory to your container so that the files are not written into the docker filesystem. In the extra parameters section you can add something like --mount type=tmpfs,destination=/tmp
  10. primeval_god
    With that you should be able to identify which container is growing in size. From there its a matter of determining why the application in the container is writing data to a directory inside the container rather than a bind-mounted host directory.
  11. primeval_god
    Run the following command in your terminal. docker ps --size It should list all of your containers along with their size (both the read only image size and the writeable layer size). See https://docs.docker.com/engine/reference/commandline/ps/ for specifics.
  12. primeval_god
    I dont really know all that much about macvlan networks but this sounds like the same issue as @Kilrah has.
  13. primeval_god
    This is normal. The unRAID web ui will not properly show the update status of containers created via compose. For any container created with compose the update status displayed in the webui is meaningless. The compose plugin run compose up on startup and compose stop on shutdown. What do your network configurations look like in your compose files?
  14. primeval_god
    Indeed, the compose file you attached uses volumes to store data instead of bind mounts (host directories). You will want to remove the 'volumes' section at the bottom and then replace each volume name in the rest of the file with a host path. This volumes: - mosquitto-conf:/mosquitto/config - mosquitto-data:/mosquitto/data becomes something like volumes: - /mnt/user/appdata/mosquitto/config:/mosquitto/config - /mnt/cache/appdata/mosquitto/data:/mosquitto/data
  15. primeval_god
    See here https://docs.docker.com/storage/bind-mounts/#use-a-bind-mount-with-compose volumes: - type: bind source: /mnt/user/appdata/myapp target: /folder/in/container
  16. primeval_god
    If the containers are on the same custom bridge network (not the default bridge) then you should be able to use the container name as the database host. Custom bridge networks have an internal DNS mapping for each container so containers can reference each other by name.
  17. primeval_god
    Many containers available in User Applications (and many found in the wild) have environmental variables like PUID and PGID that allow you to specify the user and group that the app in the container runs under. Match those to nobody:users on the unRAID host. It will not survive reboot. You would have to use a user script or go file mod to make that change on every boot. unRAID is not really designed with security at the forefront. Its inclusion of docker is more aimed at providing simple to install apps rather than hosting internet facing services. If security of your hosted apps is your primary concern i would recommend running a VM with a more general os and run your secure docker services on that.
  18. primeval_god
    You should not install things directly on the unRAID host, and this is one of the reasons why. Use a docker container instead https://hub.docker.com/r/linuxserver/ffmpeg. Your script can launch the ffmpeg container just as easily as it could launch a native app.
  19. primeval_god
    Try docker compose instead of docker-compose
  20. primeval_god
    The point is that unRAID doesnt use file permissions the way general purpose linux does. The users you create in unRAID only exist from the perspective of share level network security. Under the hood linux users and groups are not really used to control file access. Applications that run directly on unRAID run as root, applications in containers are expected to have their container permissions mapped to nobody:users on the unraid host and only be given bind mounts to the specific directories need as a means of controlling what they can access.
  21. primeval_god
    Another possible piece of the puzzle i am running netdata/netdata:v1.28.0
  22. primeval_god
    Also in case you werent aware when two containers are connected to the same custom bridge they have a DNS mapping for each other matching their container name.
  23. primeval_god
    Interesting I have both as well as SYS_PTRACE, though i am not 100% sure if extra parameters is where i had them as i switched netdata to compose a while ago. Also not sure if it makes a difference but i dont have my netdata container connected to the Host network. Its on a custom bridge with a port mapping for 19999.
  24. primeval_god
    Try adding the following to the extra parameters field of your netdata container. --pid=host --cap-add SYS_SYS_ADMIN
  25. primeval_god
    Try Netdata
×
×
  • Create New...