napalmyourmom

Members
  • Posts

    20
  • Joined

  • Last visited

Everything posted by napalmyourmom

  1. @bobfromacc0unting You can do the following things in order: 1) In Unraid UI -> Shares -> appdata: make sure "use cache" is set to "prefer" 2) In Unraid UI -> Main -> Array Operation: manually invoke the Mover process and wait for the mover to complete 3) In Unraid UI -> Shares: on "View" column click the folder icon for "appdata" and confirm all appdata contents are only on the cache. "Location" should say "cache" for all entries!!! The purpose of step 1 should be to force any new data for the specified share to be written to the cache disk by default, and moved by the mover to the cache disk if for some reason data was written to the array. You can optionally perform the next step (as I do) to explicitly force your Docker host to use the cache disk when creating appdata paths: Note: be careful with step 5 as it could adversely impact existing docker containers if they are not on the cache (steps 1-3 above). 4) Stop the Array 5) In Unraid UI -> Settings -> Docker: specify "Default appdata storage location" as "/mnt/cache/appdata" 6) Start the Array
  2. @ich777 worldbreaker hit my Valheim container last night and thanks to your backup process I still have my world. Great work on this docker
  3. @phatcat check out linuxserver.io 's SWAG (Secure Web Access Gateway) container. It's a TLS reverse proxy using LetsEncrypt, nginx, a large collection of reverse proxy templates (including guacamole), and some convenient logic to make it about as easy as possible. https://docs.linuxserver.io/general/swag
  4. Guacamole RCE disclosure released yesterday: https://research.checkpoint.com/2020/apache-guacamole-rce/ Exploit demonstrated by Check Point: Successful exploit requires access to the underlying host so not the end of the world. Still worth mentioning though, especially if one has a concern about an internal threat actor.
  5. This use with Windows AD. I'll post my sanitized guacamole.properties this evening. Happy to help any way I can to make this docker better.
  6. Ahh yes your suggestions helped me figure it out. "If the page loads but is just a white screen it has to do with database access problems. Could be extensions or libraries in that case. If that is the problem you might post your catalina.out file." This is exactly what was happening. I found in catalina.out that it was an issue with the user mapping. I had configured LDAP for authentication and mysql for connection definition and management. After the update, database configuration was not updated because I had both opt_ldap and opt_mysql enabled. I had to run the container with only opt_mysql, then recreate it with both enabled again and now it works again as expected. I know I am using the container differently than you had designed it. I appreciate your help it getting it running again.
  7. Feb 01, 2018 9:41:13 PM org.apache.catalina.startup.ClassLoaderFactory validateFile WARNING: Problem with JAR file [/usr/share/tomcat8/lib/commons-dbcp.jar], exists: [false], canRead: [false] Feb 01, 2018 9:41:13 PM org.apache.catalina.startup.ClassLoaderFactory validateFile WARNING: Problem with JAR file [/usr/share/tomcat8/lib/commons-pool.jar], exists: [false], canRead: [false] Feb 01, 2018 9:41:13 PM org.apache.catalina.startup.ClassLoaderFactory validateFile WARNING: Problem with directory [/usr/share/tomcat8/common/classes], exists: [false], isDirectory: [false], canRead: [false] Feb 01, 2018 9:41:13 PM org.apache.catalina.startup.ClassLoaderFactory validateFile WARNING: Problem with directory [/usr/share/tomcat8/common], exists: [false], isDirectory: [false], canRead: [false] Feb 01, 2018 9:41:13 PM org.apache.catalina.startup.ClassLoaderFactory validateFile WARNING: Problem with directory [/usr/share/tomcat8/server/classes], exists: [false], isDirectory: [false], canRead: [false] Feb 01, 2018 9:41:13 PM org.apache.catalina.startup.ClassLoaderFactory validateFile WARNING: Problem with directory [/usr/share/tomcat8/server], exists: [false], isDirectory: [false], canRead: [false] Feb 01, 2018 9:41:13 PM org.apache.catalina.startup.ClassLoaderFactory validateFile WARNING: Problem with directory [/usr/share/tomcat8/shared/classes], exists: [false], isDirectory: [false], canRead: [false] Feb 01, 2018 9:41:13 PM org.apache.catalina.startup.ClassLoaderFactory validateFile WARNING: Problem with directory [/usr/share/tomcat8/shared], exists: [false], isDirectory: [false], canRead: [false] Feb 01, 2018 9:41:14 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Server version: Apache Tomcat/8.0.32 (Ubuntu) Feb 01, 2018 9:41:14 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Server built: Sep 27 2017 21:23:18 UTC Feb 01, 2018 9:41:14 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Server number: 8.0.32.0 Feb 01, 2018 9:41:14 PM org.apache.catalina.startup.VersionLoggerListener log INFO: OS Name: Linux "catalina.out" 609 lines, 72466 characters Thanks for the quick response @Taddeusz. It appears to have partially worked. Now the files in the list above are still missing.
  8. After upgrading the image it appears Tomcat8 fails to start for me: *** Running /etc/my_init.d/firstrun.sh... Using existing properties file. Using existing MySQL extension. Using existing LDAP extension. Removing Duo extension. No permissions changes needed. *** Running /etc/rc.local... * Starting Tomcat servlet engine tomcat8 ...fail! guacd[69]: INFO: Guacamole proxy daemon (guacd) version 0.9.14 started Starting guacd: SUCCESS *** Booting runit daemon... *** Runit started as PID 71 Database exists. Database upgrade not needed. Starting MariaDB... Feb 2 01:41:56 fde73931d74c syslog-ng[81]: syslog-ng starting up; version='3.5.6' 180202 01:41:56 mysqld_safe Logging to '/config/databases/fde73931d74c.err'. 180202 01:41:56 mysqld_safe Starting mysqld daemon with databases from /config/databases catalina.out has a bunch of errors about jar files for Tomcat8 being missing in /usr/share/tomcat8/lib which contains a bunch of symlinks to jar files in /usr/share/java which does not appear to exist within my container. The entire directory just isn't there. Can you guys help? I love this docker btw.
  9. Thanks for your response Taddeusz. I figured out my extension issue... it was unrelated to the container. I did want to share the jar here though... it is a minimalist dark skinned theme using the guac-ext guide here: https://guacamole.incubator.apache.org/doc/gug/guacamole-ext.html Just place the jar in appdata/ApacheGuacamole/guacamole/extensions and recreate the container. This extension only does the following: inject custom css overlay injects 3 custom logo.png files to replace stock guacamole logo on login screen, in the UI, and on browser tab modify the en.json language library to change the application name from "Apache Guacamole" to "" Let me know if you are interested in customizing the skin - I am working on creating a tutorial. generic-customize-extension.jar
  10. I am trying to load a custom jar extension for skinning the login screen. I have added my compiled jar to ApacheGuacamole/guacamole/extensions/ and recreate the docker, yet the extension is ignored. In the logs, I see the LDAP and MySQL extensions applied... I have confirmed the object owner and permissions of the jar file match that of the other jar extensions in the same directory. Is there something I need to do in the docker exec script to ensure it is applied? Should this even be possible with this container? Thanks!
  11. Has anyone got the audiobook functionality working in this docker? I try modifying the config.ini file directly default value: audio_tab = True chagned to audio_tab = 1 I cannot get the audiobook tab to display... Perhaps I am not configuring the docker correctly.
  12. I am interested in setting up logic for a php script to execute every time this particular docker starts, including when it is started, restarted, updated with or without dynamix.docker.manager. I want the docker to wait until certain parameters are returned to start then run through its initialization. Is there a way for me to set this up only for this containers and not for all dockers in my instance? Thanks!
  13. Hello and thank you for an awesome docker image. I have airsonic docker running on my unRAID server with LDAP and externally exposed behind an nginx reverse proxy with letsencrypt. I am trying to frame https://sonic.mydomain.com within https://othersite.mydomain.com with x-frame-options. I have the correct rule on my reverse proxy, but the site still does not render in iframe. Is there a web server in the docker container or a config within airsonic that I need to change to enable rendering in iframe? Thanks in advance for your help.
  14. Thanks for another awesome docker container. I have learned so much about Unraid, Linux, and Docker thanks to your works. Can you tell me how to modify x-frame-options in this container so I can render htpc manager in iframe? I currently have an nginx load balancer that forwards traffic from sub.domain.com to this docker container on non-standard ssl port. I have the pub and priv keys mapped to the docker container and I can navigate to the site over https no problem. I cannot find the web server in the container where I could possibly specify x-frame-options, which I can do with other docker containers which have apache or nginx contained within them, or rely on an external web server. Since my load balancer only forwards traffic at the tcp level and does not terminate ssl, the web service must be on the docker container Thanks in advance for your help! EDIT: Also, I want to specify that I have enabled in the general settings "Allow iFrame" but this refers to allowing iFrame within HTPC Manager so that links to connected web apps render within HTPC Manager. I want to frame HTPC Manager itself into another site.
  15. LinuxServer.IO I love your dockers. Thanks so much for your work. How was the /nextcloud URL base so elegantly taken out in the docker config? I just reverted to installing NextCloud on Ubuntu Server because of the lack of LDAP support in this docker. I am trying to achieve 2 things and I am hoping you all can help: 1) I have a permanent redirect on my nextcloud apache server to forward from / to /nextcloud I accomplished this by adding the following line to my default-ssl.conf fil: RedirectMatch ^/$ /nextcloud/ Now I can access my instance at cloud.mydomain.com which ultimately redirects to https://cloud.mydomain.com/nextcloud When I was using your docker, I could authenticate in the app by simply entering "https://cloud.mydomain.com" but with my above config I must enter the url base in order to log into the app. Not a big deal.... but I am more curious than anything how to configure it the way you did. 2) My current data folder is located at /var/www/nextcloud/data on the local filesystem of the VM. I want to create a symlink in that directory and point to a share on my unraid... but I haven't the slightest idea the best way to accomplish that in Linux. Any assistance with this would be much appreciated. Current config.php, where 192.168.0.205 is the nextcloud ubuntu VM on hyperv and 192.168.0.31 is the mariadb docker on my unraid <?php $CONFIG = array ( 'instanceid' => 'xxxxxxxxxxxx', 'passwordsalt' => 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', 'secret' => 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', 'trusted_domains' => array ( 0 => '192.168.0.205', 1 => 'cloud.mydomain.com', ), 'datadirectory' => '/var/www/nextcloud/data', 'overwrite.cli.url' => 'https://cloud.mydomain.com', 'overwritehost' => 'cloud.mydomain.com', 'overwriteprotocol' => 'https', 'dbtype' => 'mysql', 'version' => '12.0.0.29', 'dbname' => 'nextcloud', 'dbhost' => '192.168.0.31:3306', 'dbport' => '', 'dbtableprefix' => 'oc_', 'dbuser' => 'admin', 'dbpassword' => 'xxxxxxxxxxxxxx', 'installed' => true, ); Also my nginx redirect is identical to yours in the tutorial.
  16. linuxserver.io - thanks so much for your dockers. They are fantastic. TL;DR - I am trying to setup a static return route on my LAN gateway to to the VPN subnet so my LAN devices can access devices on the VPN subnet... which I am fairly certain is my problem. Question - if the OpenVPN-AS docker is on bond0 and shares the IP of the UnRaid server, how do I ensure my static route makes it to the docker? Does my docker need its own unique IP? I previously had OpenVPN-AS virtual appliance running in Hyper-V and moved over to this docker. The install and configuration was fairly straight forward, I just mimicked my prior config and now my clients can connect. It seems I only have unidirectional traffic VPN Subnet --> LAN Subnet: Lan: 10.0.0.0/24 OpenVPN: 10.0.1.0/24 Unraid IP: 10.0.0.31 Docker interface is set to bond0 Server is up and running fine, all proper ports are exposed on my firewall and forwarded to my unraid IP (10.0.0.31) Config in AS Admin should allow all clients (vpn and local) access bidirectionally to all resources on both subnets VPN Clients connect no problem and are assigned VPN IP (10.0.1.x) I am able to access network resources such as file shares, ping LAN IP addresses and hostnames with FQDN, even RDP into LAN boxes LAN devices cannot ping anything on the VPN subnet (connected clients or the VPN default gateway (5310.0.1.161)) I suspect I need to setup a static return route on the LAN default gateway (10.0.0.1) which is running a linux distro. eth0: WAN IP eth1: LAN IP (10.0.0.0/24) I have tried adding the following line to the ip table of 10.0.0.1: route add -net 10.0.1.0 netmask 255.255.255.0 gw 10.0.0.31 dev eth1 but it doesn't seem to work even after restarting the firewall service and reboot the device. Thanks in advance for any help!
  17. Hello, OP, I am wondering how things are going for you on this. I have LGA2011 I7-3820 and am experiencing similar issues. H265 playback is a fail using PMS docker to a 4k TV with the Plex client on "original quality" and transcoding is a total no go. Plus transcoding is not true 4k... I can play 4K content through MPC on a Windows 2016 VM passing through a GTX 1070 but I don't want to run a full blown Windows VM just for media playback... I am about to follow SpaceInvader One's Custom LibreElec tut https://www.youtube.com/watch?v=SMTU7Ufm9Bw with the 1070 passed through, 4 threads, and 4gb DDR3 of ram - and see how that works. Any advice or prior experiences would be greatly appreciated.