Skip to content

Issue when updating from Version 25.11.29 to 26.1.17 #1416

@edd080

Description

@edd080

Hello there , hope someone can help me out, I have Netalertx installed via docker compose on my raspberrypi. Since Version 25.11.29; everything was working fine. After updating to 26.1.17 the site does not want to come up; I can see the following issues / errors in my docker log :

--> mounts.py

Path | R | W | Mount | RAMDisk | Performance | DataLoss

--------------------------+---+---+-------+---------+-------------+----------

/data | ✅| ✅| ✅ | ➖ | ➖ | ✅

/data/db | ✅| ✅| ✅ | ➖ | ➖ | ✅

/data/config | ✅| ✅| ✅ | ➖ | ➖ | ✅

/tmp/run/tmp | ❌| ❌| ✅ | ✅ | ✅ | ✅

/tmp/api | ❌| ❌| ✅ | ✅ | ✅ | ✅

/tmp/log | ❌| ❌| ✅ | ✅ | ✅ | ✅

/tmp/run | ❌| ❌| ✅ | ✅ | ✅ | ✅

/tmp/nginx/active-config | ❌| ❌| ✅ | ✅ | ✅ | ✅

══════════════════════════════════════════════════════════════════════════════

⚠️ ATTENTION: Configuration issues detected (marked with ❌).

* /tmp/run/tmp error writing, error reading

* /tmp/api error writing, error reading

* /tmp/log error writing, error reading

* /tmp/run error writing, error reading

* /tmp/nginx/active-config error writing, error reading

We recommend starting with the default docker-compose.yml as the

configuration can be quite complex.

Review the documentation for a correct setup:

https://docs.netalertx.com/DOCKER_COMPOSE

https://docs.netalertx.com/docker-troubleshooting/mount-configuration-issues

══════════════════════════════════════════════════════════════════════════════

--> first run config.sh

--> first run db.sh

--> mandatory folders.sh

* Creating NetAlertX log directory.

Warning: Unable to create log directory at /tmp/log (tmpfs not writable with current capabilities).

* Creating NetAlertX API cache.

Warning: Unable to create API cache directory at /tmp/api (tmpfs not writable with current capabilities).

* Creating System services runtime directory.

Warning: Unable to create System services runtime directory at /tmp/run (tmpfs not writable with current capabilities).

* Creating nginx active configuration directory.

Warning: Unable to create nginx active configuration directory at /tmp/nginx/active-config (tmpfs not writable with current capabilities).

* Creating Plugins log.

Warning: Unable to create plugins log directory at /tmp/log/plugins (tmpfs not writable with current capabilities).

* Creating System services run log.

Warning: Unable to create system services run log directory at /tmp/run/logs (tmpfs not writable with current capabilities).

* Creating System services run tmp.

Warning: Unable to create system services run tmp directory at /tmp/run/tmp (tmpfs not writable with current capabilities).

* Creating DB locked log.

Warning: Unable to create DB locked log file at /tmp/log/db_is_locked.log (tmpfs not writable with current capabilities).

* Creating Execution queue log.

Warning: Unable to create execution queue log file at /tmp/log/execution_queue.log (tmpfs not writable with current capabilities).

--> apply conf override.sh

--> writable config.sh

--> nginx config.sh

--> expected user id match.sh

NetAlertX note: current UID 0 GID 0, expected UID 20211 GID 20211

--> host mode network.sh

--> excessive capabilities.sh

--> appliance integrity.sh

══════════════════════════════════════════════════════════════════════════════

⚠️ Warning: Container is running as read-write, not in read-only mode.

Please mount the root filesystem as --read-only or use read_only: true

https://docs.netalertx.com/docker-troubleshooting/read-only-filesystem

══════════════════════════════════════════════════════════════════════════════

--> ports available.sh

Starting /usr/sbin/php-fpm83 -y "/services/config/php/php-fpm.conf" -F (tee stderr to app.php_errors.log)

Starting supercronic --quiet "/services/config/cron/crontab" >>"/tmp/log/cron.log" 2>&1 &

mkdir: can't create directory '/tmp/log': Permission denied

mkdir: can't create directory '/tmp/run': Permission denied

mkdir: can't create directory '/tmp/nginx': Permission denied

/services/start-cron.sh: line 37: /tmp/log/cron.log: Permission denied

/services/scripts/update_vendors.sh: line 28: /tmp/run/tmp/ieee-oui.txt.tmp: Permission denied

Supercronic stopped! (exit 1)

tee: /tmp/log/app.php_errors.log: Permission denied

Service nginx exited with status 1.

php-fpm stopped! (exit 143)

Starting python3 -m server > /tmp/log/stdout.log 2> >(tee /tmp/log/stderr.log >&2)

All services stopped.

this is my following docker compose file :
services:
netalertx:
container_name: netalertx
image: "ghcr.io/jokob-sk/netalertx:latest" # 🆕 Updated image source
logging:
driver: "json-file"
options:
max-file: 15
max-size: 30m
network_mode: "host"
cap_drop: # 🆕 New line
- ALL # 🆕 New line
cap_add: # 🆕 New line
- NET_RAW # 🆕 New line
- NET_ADMIN # 🆕 New line
- NET_BIND_SERVICE # 🆕 New line
restart: unless-stopped
volumes:
# 🆕 NEW MAPPING: All your data is now mapped from ./data to the container's /data
- ./data:/data
# Ensure the timezone is the same as on the server
- /etc/localtime:/etc/localtime:ro
environment:
- TZ=Europe/Malta
- PORT=20211
# 🆕 New "tmpfs" section START 🔽
tmpfs:
# All writable runtime state resides under /tmp
- "/tmp:uid=20211,gid=20211,mode=1700,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
# 🆕 New "tmpfs" section END 🔼

Can anyone help me out please?

Metadata

Metadata

Assignees

No one assigned

    Labels

    documentation 📚Improvements or additions to documentation

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions