Sn3akyP3t3

Members
  • Posts

    83
  • Joined

Converted

  • Gender
    Undisclosed
  • Location
    Earth
  • Personal Text
    Intentionally left blank

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

Sn3akyP3t3's Achievements

Rookie

Rookie (2/14)

9

Reputation

  1. Went through a diagnostic log after being anonymized by the UnRaid server and found some areas that were not anonymized that I thought should and some that clearly are just missing coverage. The following are generically not anonymized: Hostname/ServerName WORKGROUP The following files had sections not anonymized
  2. I think I narrowed down the problem to "custom networks" and I did eventually mount and load all containers from the original docker image, but I don't understand how or why it is working now if that is the correct root cause. To start with I decided to update to 6.12.9 from 6.12.8. Immediately after the update I saw on the web Docker tab "Docker Service Failed to Start". I checked the logs and saw a lot of this repeating endlessly: I figured that the update must have done something bad so I tried to downgrade back to 6.12.8, but the issue with Docker unable to start persisted. I don't know what to make of that. Only that the trigger seems to have been the update. After reading up on possible failures I figured perhaps there was a problem with I/O. The cache drive where the appdata is stored and the docker.img is loading from had only around 50% utilization so it wasn't out of space. I didn't see any OOM exceptions. I figured maybe then the docker.img file was corrupt or out of room. I grew the Docker image size from 200GB to 400GB without remembering that I can't reduce it once going up (will have to revisit that later). I mounted the array to start Docker again and got the same error. Next I set the vDisk type from btrfs to xfs and UnRaid created a different filename so the old was remained preserved. I rebooted and found docker could mount and I was able to install apps, but as expected there were no docker custom networks. I shutdown docker and restored the vDisk back to btrfs. From here I figured there must be something to do with networking. I had been using a static IP up until now with static DNS set in UnRaid network config, but I figured maybe I botched that so I had my router setup with a static route for the MAC of the UnRAID eth0 connection and that seems to preserve the need for the static IP. I also had set the box to use VLAN, but never got around to putting that into effect so I disabled that. Starting docker with that change did nothing. I figured then something might be editable with the Docker config itself so I started playing with networking settings from there alone. Turns out that changing this To This was the only necessary hat trick required. I truly don't understand why, because when I started up Docker after that and checked for the docker custom networks listing, "docker network ls", they were all there. A log snippet showed one error, then rode on some degree of success. Its been running happily now for hours, but I think this is a dangerous state to operate in for me since I don't want to lose the custom network settings. A logging snippet of that said success: Mar 30 14:21:15 FakeServerName emhttpd: shcmd (1199): /etc/rc.d/rc.docker start Mar 30 14:21:15 FakeServerName root: starting dockerd ... Mar 30 14:21:15 FakeServerName unraid-api[7190]: ⚠️ Caught exception: connect ECONNREFUSED /var/run/docker.sock Mar 30 14:21:15 FakeServerName unraid-api[7190]: ⚠️ UNRAID API crashed with exit code 1 Mar 30 14:21:15 FakeServerName avahi-daemon[7169]: Service "FakeServerName" (/services/ssh.service) successfully established. Mar 30 14:21:15 FakeServerName avahi-daemon[7169]: Service "FakeServerName" (/services/smb.service) successfully established. Mar 30 14:21:15 FakeServerName avahi-daemon[7169]: Service "FakeServerName" (/services/sftp-ssh.service) successfully established. Mar 30 14:21:21 FakeServerName unraid-api[7697]: ✔️ UNRAID API started successfully! Mar 30 14:21:36 FakeServerName nmbd[7060]: [2024/03/30 14:21:36.755237, 0] ../../source3/nmbd/nmbd_become_lmb.c:398(become_local_master_stage2) Mar 30 14:21:36 FakeServerName nmbd[7060]: ***** Mar 30 14:21:36 FakeServerName nmbd[7060]: Mar 30 14:21:36 FakeServerName nmbd[7060]: Samba name server FakeServerName is now a local master browser for workgroup FAKEWORKGROUP on subnet 10.10.8.130 Mar 30 14:21:36 FakeServerName nmbd[7060]: Mar 30 14:21:36 FakeServerName nmbd[7060]: ***** Mar 30 14:22:01 FakeServerName kernel: docker0: port 1(vethb1f1076) entered blocking state Mar 30 14:22:01 FakeServerName kernel: docker0: port 1(vethb1f1076) entered disabled state Mar 30 14:22:01 FakeServerName kernel: device vethb1f1076 entered promiscuous mode Mar 30 14:22:04 FakeServerName kernel: eth0: renamed from veth71d8bae Mar 30 14:22:04 FakeServerName kernel: IPv6: ADDRCONF(NETDEV_CHANGE): vethb1f1076: link becomes ready Mar 30 14:22:04 FakeServerName kernel: docker0: port 1(vethb1f1076) entered blocking state Mar 30 14:22:04 FakeServerName kernel: docker0: port 1(vethb1f1076) entered forwarding state Mar 30 14:22:04 FakeServerName kernel: IPv6: ADDRCONF(NETDEV_CHANGE): docker0: link becomes ready Mar 30 14:22:09 FakeServerName kernel: br-659b348d1ec9: port 1(veth8cc6977) entered blocking state Mar 30 14:22:09 FakeServerName kernel: br-659b348d1ec9: port 1(veth8cc6977) entered disabled state Mar 30 14:22:09 FakeServerName kernel: device veth8cc6977 entered promiscuous mode Mar 30 14:22:09 FakeServerName kernel: br-659b348d1ec9: port 1(veth8cc6977) entered blocking state Mar 30 14:22:09 FakeServerName kernel: br-659b348d1ec9: port 1(veth8cc6977) entered forwarding state Mar 30 14:22:09 FakeServerName kernel: br-659b348d1ec9: port 1(veth8cc6977) entered disabled state Mar 30 14:22:14 FakeServerName kernel: eth0: renamed from veth90def87 Before I signed off that this was the only setting needed to flip I recreated the blocker with the same UnRAID API crashing behavior just by flipping this back: and just as before flipping it back to No allowed me to bring Docker back online with all those custom networks still readily available. At the first occurrence of success I decided to re-apply the upgrade again back to 6.12.9. I flipped the "Preserve user defined networks" a handful of times because I couldn't believe what I was observing and thought maybe I had done something more significant that I had forgotten, but nope. It was that simple. The logs may be confusing when observing the errors coming and going at the trailing end. (This would be the definition of madness I guess.) Just in case asked, yes, I am using those custom docker networks. They're not vestigial. fakeservername-diagnostics-20240330-1733.zip
  3. I don't think I have a silver bullet solution to your particular problem, but I do believe you can benefit from some trial and error with suggested settings and revisit your current setup if you wish to apply another layer to what you have which might actually solve your issue. So I was getting similar symptoms you described with and I'm not exactly sure what the cause or fix was, but I suspected it had to do with TLS error that was showing itself in the Gitea logs. I don't know what I changed that fixed the problem, but this is what I did along the way so pick at it for details and see if one or more helps you: Settings in Gitea's App.ini need tweaking or triple checking: PROTOCOL must match what you're doing in the reverse proxy DOMAIN, SSH_DOMAIN, and ROOT_URL also must agree with the reverse proxy config I downgraded TLS for now since there was talk about it being a culprit: SSL_MIN_VERSION = TLSv1.0 Also downgraded minimum on Cloudflare to TLSv1.0 which may not be applicable to you. Above and beyond, but set FILE_MAX_SIZE to something high-ish like 512. (located under [repository.upload]) Triple check your reverse proxy config. Adopt SWAG docker container and/or view this mighty fine template and conform it to your environment. Walkthrough the guide from Cloudflare for setting with GitLab. Note the comments at the bottom of that page for dealing with push/pull over SSH. This might be a good use-case for routing it through Cloudflare Zero Trust. Combine the previous guide from Cloudflare with the IBRACORP guide for setting up a Cloudflare Tunnel. NOTE: I found this guide invaluable in getting things setup right.
  4. If the Web UI isn't going to cut it for you then perhaps you can find the better solution being modification of the properties and/or json config files directly. https://minecraft.fandom.com/wiki/Server.properties
  5. Any chance Python can be updated to mainstream 3.11 since it has a ton of speed improvements among other things. Also, Python 3.12 will be available Oct. 2023 with another set of speed improvements so I'll likely request that be targeted as well when that time comes. Thanks for this plugin. I use it with local Docker containers for automatons requiring Python. I may migrate to Automation Studio in the future, but for now I'm loving how this adds value.
  6. Support link to join Discord appears to be broken.
  7. I have impeccable timing! I'm just researching dashboard technologies and wanted to know what made this one tick, but of course its currently in some sort of limbo state. The link way at the bottom was what got me the information I was seeking:
  8. Trouble with multiplayer realms seems to come and go with MC updates with some fixes server side and some client side. Playing local LAN multiplayer is how its done in my house and there hasn't been any noticeable lag with 1.19 as others appear to be reporting. We are keeping view distance at or around 10 which has helped keep some lag noted with the release of 1.18 down, but takes away from enjoyment of exploring across the surface campaigns which we have learned to plan for and temporarily increase viewing distance to at or around 12 during those campaigns taking the punch for lag during that time.
  9. Yay! Wild Update dropped! https://www.minecraft.net/en-us/article/the-wild-update-out-today-java
  10. I saw no response to this and just wanted to point out many years later that there is no Help provided for the Verification tasks section.
  11. MVP Request I like that I can re-order Docker applications on the Docker Tab to tailor desired visible order. However, searching for them by name is tedious sometimes. I suggest adding a built-in filter on the Docker page to filter out or put into focus the desired Docker container(s) that match the search criteria. The text should match with partial search as well as full text match. Add-On Request As an extension to my previous suggestion to add filter/search capabilities on the Docker Tab this is an enhancement to that. Please see the other request for full context. I didn't want to submit these together in order to avoid confusion and reduce Minimum Viable Product development stalling. I'm very forgetful and struggle with remembering specific details like exact names of products and tools. However, I can remember very definitive descriptive words about said product/tool with a high degree of accuracy. I suggest adding a tagging mechanism to Docker containers to allow for use of these key words. Those key words can then be used in the previously described filter/search suggestion. If you need a loose example of how this could work please check out Firefox bookmarks. They're called Tags and can be used to search in the Awesome Bar of Firefox. Folks that may be familiar with Microsoft ADOS (A.K.A. TFS) may be familiar with the concept of filters using tags. If not, here's some details on how it works https://docs.microsoft.com/en-us/azure/devops/boards/backlogs/filter-backlogs-boards-plans
  12. In regards to the recent zero day log4j exploit found in Minecraft. The client (old and new) is patched automatically when running the launcher so the only remaining thing to do is to ensure you're running MC server 1.18.1 to be fully patched. If you choose to run an older version of MC server you're going to need to add an extra flag in the startup config as per https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition Happy safe and secure gaming!
  13. Heads up to anyone with public facing Java MC servers hosted out there! Got a vulnerability that any script kiddie out there can do in their sleep that's about as severe as it can get (full server control)! Shut them down and apply the mitigation until a patch is rolled! Do it right meow! Full details and code example: https://www.lunasec.io/docs/blog/log4j-zero-day/ Borrowed explanation from MCEdit Discord
  14. I don't have any immediate need or desire to play around with running a modded server, but in the coming month I probably will give it a shot just for sake of learning and seeing how bad resource consumption really is with some modded servers. Also providing support in MC forums is somewhat necessary when mod questions come up so it would be helpful to have a test server available on demand. I recommend you review some of the key points mentioned in this video: being careful of course not to walk away with everything he says in that video pertains to this server install! What I think you need to scrape from that video is mostly the steps needed to prepare a modded server to that folder he sets up on his desktop and move any necessary files over to the UnRaid folder where your server is running from. The last piece i don't know how to solve yet is the Forge launch. He runs a .bat file to kick it off, but perhaps you can read that and extract the flags used from there to use in a docker config in the Extra Parameters section.
  15. MC Bedrock doesn't really support the same mods mechanism that Java uses. I believe they call them add-ons. So the phone install process seems similar to the desktop process, but the difference seems to be who do you trust more/less. You can pick sources from the Google Play store, but if you don't trust that option there's plenty of alternatives such as this: This won't help you with the phone situation, but seems straight forward for desktop playing.