IronBeardKnight

So no luck on this front I feel like i have tried everything and this container is just broken. if I go local navigation I get this https crap even after allowing insecure in chrome flags and even enabling insecure auth in the .json file. Then to get around this I pushed local dns record to traefik with no middleware so its basically untouched apart from encrypting into ssl, and after adding trusted proxy and trusted device ip's and domain names I get this device signature crap I have tried clearing every known cache and cookie, tried a new browser and even incognito mode but nothing works I get stuck at either of these two being https or device signature. I never thought this would be so hard to setup I mean I have heard people complain about its security levels but I have not even gotten it to work, seems like the best security level is already baked in (Not Working) I would greatly appreciate any further guidance on this matter team otherwise I think it will just be binned and ill try another project

Thank you very much FlynDice I will give it another shot when I get home after work

I cannot seem to get this container to work properly, I have tried to get this working with local ollama container through enviroment variables but that did not work so tried running stock with gateway token and then running command for setup wizard after that adding in allowed proxies and domains which I added the local ip and also the domain that is being used through traefik to have it running as ssl encrypted to get passed the ssl warning on the dashboard but I just cannot get through to the dashboard at all even using the token id in the url path connect button does nothing at all. Also the container is acting very very slow in terms of the setup wizard via cli. if someone has gotten openclaw with ollama locally working I would love a config file and story of how you have set yours up, much appreciated in advance. Cheers team.

I don't believe that any of the power settings are actually working now since unraid has a native power profile changer it seems. Is there any way to disable the native power changer as its very primitive compared to this plugin and its ability to schedule and limit clock speed in power savings mode which now also seems to be missing. since unraid did this my power consumption has increased by over 100w now that I cannot clock limit of a night

@KluthR It looks like the grouping function isn't working correclty, When I double click it does not show me a list to select from.

Has anyone actually gotten Netbird to work at all in a secure way? Hosting a Coturn server with ports open is kind of counter intuitive imo unless there is a way to sit it behind something like cloudflare tunnel and traefik. I would love if someone could point me in direction of a guide of sorts as I have authentik configured for the dashboard but after that point the managment.json and the coturn.conf file have me stumped. The docker version seems to have ./configure.sh which does it all for you apparently is that not a thing in unraid?

Thank you for the reply on this one appreciate it. My setup is a little different than yours in that I'm using authentik and want to use authentik but everything sitting behind traefik and I"m finding it hard in my brain to convert your guide to my needs is all. I have managed to have the json recognized by the container but the log output is very strange as in it looks to have returned some html data and the container just stops.

I have to say guys I'm super lost trying to set this up with anything other than keycloak as the different docker containers make it quite confusing to push through traefik not to mention that the management container does not generate the managment.json file at all it just creates a folder I seem to get nothing but some type of html error in the logs from the managment container. When I try pass env variables like the normal container would take and then pass to the setup.env it does nothing and to be honest configuring the managment.json manually is confusing to say the least when trying to figure out I have tried following your guide to the best of my ability but but it leaves quite a bit to be desired as the coturn container also does not generate a config sample file so you have to get it from the git repo. Feeling more than a bit lost to be honest with these containers. Would love to see a youtube video on someone setting it up or something especially with Authentik

Hi @jimrummy101, First of all Thank you so much for creating these containers. After trying for days to get a tailscale client even as a exit node the way I need it using headscale and having both of them communicating in docker I had just about given up trying to get it to behave like I wanted on unraid as client communication seemed to be not working at all even though they where connected to the management server headscale. I cam across netbird and although I haven't yet gotten it working for the below questions and reasons (if you you could entertain me it would be appreciated) as long as it can do split dns tunneling I'm hoping it will prove more promising as a solution. I am NOT trying to use this solution to access my unraid server directly but more it as a standalone container that would then sit inside a vlan which is firewall segregated with only holes to game servers allowed as I would then have my trusted friends able to play on my servers and I don't have to expose my game servers and ip directly to the public as you cannot mask your ip to game servers (dockized) easily or effectively without spending money. Think of it like a secure gaming lan setup that allows only specific games to travers the wireguard network and there other traffic does not go through my network keeping them private and my bandwidth in tact in case they do downloading etc. I'm currently finding like headscale and tailscale solution I attempted above does not have enough information unfortunately. Even I struggle and i have been doing unraid, docker and vms for over 10 years it feels like. Explanations as to why at lease i'm a little confused: . why coturn is needed (not what it is as thats easy enough to find https://www.youtube.com/watch?v=4dLJmZOcWFc), if you should self host coturn, how to secure coturn if possible or if its better to have coturn sitting in a dmz or vps somewhere offsite. . why keycloak is even needed and or if you can just exclude keycloakl from the docker variables and the json and sit the ui behind Authelia / Authentic instead for those that find oauth2 or oidc difficult to understand this one may be a little harder to explain without partially explaining Authelia/Authentic etc workings. . what specificly do these things even mean: NETBIRD_AUTH_AUDIENCE="<OAUTH_CLIENT_ID>" NETBIRD_AUTH_CLIENT_ID="<OAUTH_CLIENT_ID>" NETBIRD_AUTH_CLIENT_SECRET="<OAUTH_CLIENT_SECRET>" Explaining like you would to a 6 year old in descriptions to the individual paths and variables will upskill the wider user base much faster than fumbling through documentation that wasn't initially designed for unraid or docker or relies on other software specificly. Just some suggestions from someone that has what feels like wasted days on this solution of both and never turned up with a working solution. Now for some of my own questions Could you please advise if your able to take the docker client you made and segrigate it with its own ip in a vlan not using host for the network type? Very much appreciate for your time on this in advance.

Hey guys having this issue trying to get the container started have used the documentation and template to get the xml with MySQL db backend also using ChatGPT for some rough Gutenberg and having no luck as I keep getting the below. text error warn system array login at java.base/jdk.internal.util.xml.impl.Parser.ent(Parser.java:1994) at java.base/jdk.internal.util.xml.impl.Parser.step(Parser.java:471) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:477) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:411) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:374) at java.base/jdk.internal.util.xml.impl.SAXParserImpl.parse(SAXParserImpl.java:97) at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:83) ... 19 more 2024-02-23 22:53:04 ERROR: Main method error - - SAXParseException (... < Config:46 < <gener:-1 < *:-1 < ... < Main:116 < ...) Exception in thread "main" java.lang.RuntimeException: com.google.inject.CreationException: Unable to create injector, see the following errors: 1) [Guice/ErrorInjectingConstructor]: RuntimeException: Configuration file is not a valid XML document at Config.<init>(Config.java:42) at MainModule.configure(MainModule.java:116) while locating Config Learn more: https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR 1 error ====================== Full classname legend: ====================== Config: "org.traccar.config.Config" MainModule: "org.traccar.MainModule" ======================== End of classname legend: ======================== at org.traccar.Main.run(Main.java:146) at org.traccar.Main.main(Main.java:110) Caused by: com.google.inject.CreationException: Unable to create injector, see the following errors: 1) [Guice/ErrorInjectingConstructor]: RuntimeException: Configuration file is not a valid XML document at Config.<init>(Config.java:42) at MainModule.configure(MainModule.java:116) while locating Config Learn more: https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR 1 error ====================== Full classname legend: ====================== Config: "org.traccar.config.Config" MainModule: "org.traccar.MainModule" ======================== End of classname legend: ======================== at com.google.inject.internal.Errors.throwCreationExceptionIfErrorsExist(Errors.java:589) at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:190) at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:113) at com.google.inject.Guice.createInjector(Guice.java:87) at com.google.inject.Guice.createInjector(Guice.java:69) at com.google.inject.Guice.createInjector(Guice.java:59) at org.traccar.Main.run(Main.java:116) ... 1 more Caused by: java.lang.RuntimeException: Configuration file is not a valid XML document at org.traccar.config.Config.<init>(Config.java:64) at org.traccar.config.Config$$FastClassByGuice$$9a3fc4.GUICE$TRAMPOLINE(<generated>) at org.traccar.config.Config$$FastClassByGuice$$9a3fc4.apply(<generated>) at com.google.inject.internal.DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82) at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:114) at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:91) at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300) at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40) at com.google.inject.internal.SingletonScope$1.get(SingletonScope.java:169) at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45) at com.google.inject.internal.InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213) at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186) ... 6 more Caused by: java.util.InvalidPropertiesFormatException: jdk.internal.org.xml.sax.SAXParseException; at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:85) at java.base/java.util.Properties.loadFromXML(Properties.java:986) at org.traccar.config.Config.<init>(Config.java:46) ... 17 more Caused by: jdk.internal.org.xml.sax.SAXParseException; at java.base/jdk.internal.util.xml.impl.ParserSAX.panic(ParserSAX.java:652) at java.base/jdk.internal.util.xml.impl.Parser.ent(Parser.java:1994) at java.base/jdk.internal.util.xml.impl.Parser.step(Parser.java:471) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:477) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:411) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:374) at java.base/jdk.internal.util.xml.impl.SAXParserImpl.parse(SAXParserImpl.java:97) at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:83) ... 19 more

Hey guys having this issue trying to get the container started have used the documentation and template to get the xml with MySQL db backend also using ChatGPT for some rough Gutenberg and having no luck as I keep getting the below. text error warn system array login at java.base/jdk.internal.util.xml.impl.Parser.ent(Parser.java:1994) at java.base/jdk.internal.util.xml.impl.Parser.step(Parser.java:471) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:477) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:411) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:374) at java.base/jdk.internal.util.xml.impl.SAXParserImpl.parse(SAXParserImpl.java:97) at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:83) ... 19 more 2024-02-23 22:53:04 ERROR: Main method error - - SAXParseException (... < Config:46 < <gener:-1 < *:-1 < ... < Main:116 < ...) Exception in thread "main" java.lang.RuntimeException: com.google.inject.CreationException: Unable to create injector, see the following errors: 1) [Guice/ErrorInjectingConstructor]: RuntimeException: Configuration file is not a valid XML document at Config.<init>(Config.java:42) at MainModule.configure(MainModule.java:116) while locating Config Learn more: https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR 1 error ====================== Full classname legend: ====================== Config: "org.traccar.config.Config" MainModule: "org.traccar.MainModule" ======================== End of classname legend: ======================== at org.traccar.Main.run(Main.java:146) at org.traccar.Main.main(Main.java:110) Caused by: com.google.inject.CreationException: Unable to create injector, see the following errors: 1) [Guice/ErrorInjectingConstructor]: RuntimeException: Configuration file is not a valid XML document at Config.<init>(Config.java:42) at MainModule.configure(MainModule.java:116) while locating Config Learn more: https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR 1 error ====================== Full classname legend: ====================== Config: "org.traccar.config.Config" MainModule: "org.traccar.MainModule" ======================== End of classname legend: ======================== at com.google.inject.internal.Errors.throwCreationExceptionIfErrorsExist(Errors.java:589) at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:190) at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:113) at com.google.inject.Guice.createInjector(Guice.java:87) at com.google.inject.Guice.createInjector(Guice.java:69) at com.google.inject.Guice.createInjector(Guice.java:59) at org.traccar.Main.run(Main.java:116) ... 1 more Caused by: java.lang.RuntimeException: Configuration file is not a valid XML document at org.traccar.config.Config.<init>(Config.java:64) at org.traccar.config.Config$$FastClassByGuice$$9a3fc4.GUICE$TRAMPOLINE(<generated>) at org.traccar.config.Config$$FastClassByGuice$$9a3fc4.apply(<generated>) at com.google.inject.internal.DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82) at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:114) at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:91) at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300) at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40) at com.google.inject.internal.SingletonScope$1.get(SingletonScope.java:169) at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45) at com.google.inject.internal.InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213) at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186) ... 6 more Caused by: java.util.InvalidPropertiesFormatException: jdk.internal.org.xml.sax.SAXParseException; at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:85) at java.base/java.util.Properties.loadFromXML(Properties.java:986) at org.traccar.config.Config.<init>(Config.java:46) ... 17 more Caused by: jdk.internal.org.xml.sax.SAXParseException; at java.base/jdk.internal.util.xml.impl.ParserSAX.panic(ParserSAX.java:652) at java.base/jdk.internal.util.xml.impl.Parser.ent(Parser.java:1994) at java.base/jdk.internal.util.xml.impl.Parser.step(Parser.java:471) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:477) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:411) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:374) at java.base/jdk.internal.util.xml.impl.SAXParserImpl.parse(SAXParserImpl.java:97) at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:83) ... 19 more

As very long user of unraid and someone who has brought on many customers with home servers I think its great your looking at ways to bring money back into your company to increase your feature profile and the stability of the product. I don't however believe that charging customers for security updates of which many are in fact bug fixes should be in any part of an update or subscription based model and that to me should be simply protested out of existence, however if your introducing a completely now way of doing security or an implementation that increases security giving features and benefits not just fixing the bugs you missed in your previous release then this may be ok. Example: Ok to pay: Introduced new version of docker and have take some of those features and created new unraid unique features NOT OK TO PAY The community has raised an issue with the you that for example the docker driver your using has been implemented incorrectly and to fix it you should make a default config change. That in my opinion is not something you should be allowed to charge your community for. We as Unraiders never want to be put in a position where we feel like we are being charged to be the beta testers for your product. A very clear and in dept explanation per update is going to have to be given in your change logs to justify update price but charging a heavy fee for something like a docker or some other third party applications hard work is not something ill ever pay for and would probably end up moving to a different software. In this example I understand that work may need to be done to integrate with a new system but for me to pay for it I would like to know what I'm truly paying for. In a digital world where security is of upmost importance and I think if your going to truly tackle security issues and even ones other third party companies or containers that have been neglected for so long and you can justify that then sure the price may be right. I personally would love to seen docker image inspection features like what wiz or Prisma do obviously not as advanced but stuff that lets me know if the dockers i'm running are vulnerable or have out of date libraries being used or trigger CVE's and give me a runtime option to fix these issues. That is the type of security features I expect to see for upgrade prices not just other peoples hard work. Otherwise where this goes remains to be seen and I can only hope this leads a product I love to even greater heights.

anyone have any information on enabling cuda on the new version just being released as it appears that they have gotten rid of any inkling that the separate tensort models are still needed or not. I have just added the additional variable to the container for "cuda" to be added however not sure its actually doing anything. As the immich documentation only pertaining to running it normally through docker i'm not sure if I should need to map the docker config files to my local system in unraid so I can persistently edit them in accordance with immich documentation. Any information for fellow immich users is greatly appreciated as its a fantastic application.

Yes

Hopefully now with significant investment ZFS will get its pool expansion issues finally polished off soon

yeah one of the reasons I switched back. when the bug is fixed I may look again in future but have wasted enough time transferring files around already on this. Appreciate the reply mate.

NVME CACHE I transferred from btrfs to zfs and have had a very noticeable decrease in write speed before and after memory cache has been filled not only that but the ram being used as a cache makes me nerves even though I have a ups and ecc memory, I have noticed that my duel nvme raid1 in zfs cache pool gets full 7000mbps read but only 1500mbps max write which is a far cry from what it should be when using zfs. I will be swtich my appdata pools back to btrfs as it has nearly all the same features as zfs but is much faster from my tests. The only thing that is missing to take advantage of the btrfs is the nice gui plugin and scripts that have been done to deal with snapshots which i'm sure someone could manage to bang up pretty quick using existing zfs scripts and plugins. Its important to note here that my main nvme cache pool was both raid1 in btrfs and zfs local to that file system type of raid1 obviously. ARRAY I also started doing some of my array drives to single disk zfs as per spaceinvadors videos as the array parity and expansion abilities would be handled by unraid which is where I noticed the biggest downside to me personally which was that zfs single disk unlike any zpools is obviously missing a lot of features but more so is very heavily impacted write performance and you still only get single disk read speed obviously once the ram cache was exhausted. I noticed 65% degrading in write speed to the zfs single drive. I did a lot of research into BTRFS vs ZFS and have decided to migrate all my drives and cache to BTRFS and let unraid handle parity much the same as the way spaceinvader is doing zfs but this way I don't see the performance impact I was seeing in zfs and should still be able to do all the same snapshot shifting and replication that zfs does. Doing it this way I avoid the dreaded unstable btrfs local file system raid 5/6 and I get nearly all the same features as ZFS but without the speed bug issues in Unraid. DISCLAIMER I'm sure ZFS is very fast when it comes to an actual zpool and not on a single disk drives situation but it also very much feels like zfs is a deep storage only file system and not really molded for an active so to speak array. Given my testing all my cache pools and the drives within them will be btrfs raid 1 or 0 ( Raid 1 giving you active bitrot protection) and my Array will be Unraid handled parity with individual BTRFS files system single disks Hope this helps others in some way to avoid days of data transfer only to realis the pitfalls.

NVME CACHE I transferred from btrfs to zfs and have had a very noticeable decrease in write speed before and after memory cache has been filled not only that but the ram being used as a cache makes me nerves even though I have a ups and ecc memory, I have noticed that my duel nvme raid1 in zfs cache pool gets full 7000mbps read but only 1500mbps max write which is a far cry from what it should be when using zfs. I will be swtich my appdata pools back to btrfs as it has nearly all the same features as zfs but is much faster from my tests. The only thing that is missing to take advantage of the btrfs is the nice gui plugin and scripts that have been done to deal with snapshots which i'm sure someone could manage to bang up pretty quick using existing zfs scripts and plugins. Its important to note here that my main nvme cache pool was both raid1 in btrfs and zfs local to that file system type of raid1 obviously. ARRAY I also started doing some of my array drives to single disk zfs as per spaceinvadors videos as the array parity and expansion abilities would be handled by unraid which is where I noticed the biggest downside to me personally which was that zfs single disk unlike any zpools is obviously missing a lot of features but more so is very heavily impacted write performance and you still only get single disk read speed obviously once the ram cache was exhausted. I noticed 65% degrading in write speed to the zfs single drive. I did a lot of research into BTRFS vs ZFS and have decided to migrate all my drives and cache to BTRFS and let unraid handle parity much the same as the way spaceinvader is doing zfs but this way I don't see the performance impact I was seeing in zfs and should still be able to do all the same snapshot shifting and replication that zfs does. Doing it this way I avoid the dreaded unstable btrfs local file system raid 5/6 and I get nearly all the same features as ZFS but without the speed bug issues in Unraid. DISCLAIMER I'm sure ZFS is very fast when it comes to an actual zpool and not on a single disk drives situation but it also very much feels like zfs is a deep storage only file system and not really molded for an active so to speak array. Given my testing all my cache pools and the drives within them will be btrfs raid 1 or 0 ( Raid 1 giving you active bitrot protection) and my Array will be Unraid handled parity with individual BTRFS files system single disks Hope this helps others in some way to avoid days of data transfer only to realis the pitfalls.

Hey guys having major issues with the mover process. it seems to keep hanging and the only thing I can see in its logging is "move: stat: cannot statx xxxxxxxxxx cannot be found" it would apprear that after a while the "find" process then disappears for from the open files plugin but the move button is still grayed out. Mover seems to be a pretty buggy. I have been struggling to move everything off my cache drives to change them out with the mover and have had to resort to doing it manually as the mover keeps stalling or getting hung up on something. No disc activity or cache activity happens This does not seem to directly related to any particular type of file or file in general as it has happened or stalled on quite a number of different appdata files/ folders. I'm happy to help out trying to improve the mover however I am limited time wise.

While this may be true for cache > array but what about array > cache would it still be the same limitation if the share is spread over multiple drives?

For those of you that have setup the script to go with the ClamAV container but have noticed little to no activity coming from it when running "Docker Stats" this may be the fix to your issue. I don't believe that the container is setup to do a scan on startup so you may have to trigger it by adding this line to the scripts as seen below in the screen shot. I have also figured out how to get multithreading working although be warned when using multi you may want to schedual it for when your not using your server as it can be quite CPU and RAM hungry. Some thoughts for you before you proceed with multithreaded scans are to put a memory limit on your docker through extra parameters. Multi Thread: exec('docker exec ClamAV sh -c "find /scan -type f -print0 | xargs -0 -P $(nproc) clamscan"'); Single Thread: exec('docker exec ClamAV sh -c "clamscan"');

Has anyone able to guide through this issue or even get this docker container working on unraid. Trying to use my primary/only gpu but none of the display options seem to work.

Hi guys, I can see others have posted about a similar issue but I cannot seem to find where the solution may have been posted. I cannot seem to get past this error. @Josh.5 any advise mate is greatly appreciated and for others that may also be getting this as well.

Hello, Perhaps I can provide an explanation of where you going wrong. you have not actually provided a path properly to a list of directories you want skipped. To be clear Ignore file types and Ignore files / folders listed inside of text file are not related they are individual settings and can be used independently. Please see below the examples: