-
-
Notifications
You must be signed in to change notification settings - Fork 372
Description
Hello there , hope someone can help me out, I have Netalertx installed via docker compose on my raspberrypi. Since Version 25.11.29; everything was working fine. After updating to 26.1.17 the site does not want to come up; I can see the following issues / errors in my docker log :
--> mounts.py
Path | R | W | Mount | RAMDisk | Performance | DataLoss
--------------------------+---+---+-------+---------+-------------+----------
/data | ✅| ✅| ✅ | ➖ | ➖ | ✅
/data/db | ✅| ✅| ✅ | ➖ | ➖ | ✅
/data/config | ✅| ✅| ✅ | ➖ | ➖ | ✅
/tmp/run/tmp | ❌| ❌| ✅ | ✅ | ✅ | ✅
/tmp/api | ❌| ❌| ✅ | ✅ | ✅ | ✅
/tmp/log | ❌| ❌| ✅ | ✅ | ✅ | ✅
/tmp/run | ❌| ❌| ✅ | ✅ | ✅ | ✅
/tmp/nginx/active-config | ❌| ❌| ✅ | ✅ | ✅ | ✅
══════════════════════════════════════════════════════════════════════════════
* /tmp/run/tmp error writing, error reading
* /tmp/api error writing, error reading
* /tmp/log error writing, error reading
* /tmp/run error writing, error reading
* /tmp/nginx/active-config error writing, error reading
We recommend starting with the default docker-compose.yml as the
configuration can be quite complex.
Review the documentation for a correct setup:
https://docs.netalertx.com/DOCKER_COMPOSE
https://docs.netalertx.com/docker-troubleshooting/mount-configuration-issues
══════════════════════════════════════════════════════════════════════════════
--> first run config.sh
--> first run db.sh
--> mandatory folders.sh
* Creating NetAlertX log directory.
Warning: Unable to create log directory at /tmp/log (tmpfs not writable with current capabilities).
* Creating NetAlertX API cache.
Warning: Unable to create API cache directory at /tmp/api (tmpfs not writable with current capabilities).
* Creating System services runtime directory.
Warning: Unable to create System services runtime directory at /tmp/run (tmpfs not writable with current capabilities).
* Creating nginx active configuration directory.
Warning: Unable to create nginx active configuration directory at /tmp/nginx/active-config (tmpfs not writable with current capabilities).
* Creating Plugins log.
Warning: Unable to create plugins log directory at /tmp/log/plugins (tmpfs not writable with current capabilities).
* Creating System services run log.
Warning: Unable to create system services run log directory at /tmp/run/logs (tmpfs not writable with current capabilities).
* Creating System services run tmp.
Warning: Unable to create system services run tmp directory at /tmp/run/tmp (tmpfs not writable with current capabilities).
* Creating DB locked log.
Warning: Unable to create DB locked log file at /tmp/log/db_is_locked.log (tmpfs not writable with current capabilities).
* Creating Execution queue log.
Warning: Unable to create execution queue log file at /tmp/log/execution_queue.log (tmpfs not writable with current capabilities).
--> apply conf override.sh
--> writable config.sh
--> nginx config.sh
--> expected user id match.sh
NetAlertX note: current UID 0 GID 0, expected UID 20211 GID 20211
--> host mode network.sh
--> excessive capabilities.sh
--> appliance integrity.sh
══════════════════════════════════════════════════════════════════════════════
Please mount the root filesystem as --read-only or use read_only: true
https://docs.netalertx.com/docker-troubleshooting/read-only-filesystem
══════════════════════════════════════════════════════════════════════════════
--> ports available.sh
Starting /usr/sbin/php-fpm83 -y "/services/config/php/php-fpm.conf" -F (tee stderr to app.php_errors.log)
Starting supercronic --quiet "/services/config/cron/crontab" >>"/tmp/log/cron.log" 2>&1 &
mkdir: can't create directory '/tmp/log': Permission denied
mkdir: can't create directory '/tmp/run': Permission denied
mkdir: can't create directory '/tmp/nginx': Permission denied
/services/start-cron.sh: line 37: /tmp/log/cron.log: Permission denied
/services/scripts/update_vendors.sh: line 28: /tmp/run/tmp/ieee-oui.txt.tmp: Permission denied
Supercronic stopped! (exit 1)
tee: /tmp/log/app.php_errors.log: Permission denied
Service nginx exited with status 1.
php-fpm stopped! (exit 143)
Starting python3 -m server > /tmp/log/stdout.log 2> >(tee /tmp/log/stderr.log >&2)
All services stopped.
this is my following docker compose file :
services:
netalertx:
container_name: netalertx
image: "ghcr.io/jokob-sk/netalertx:latest" # 🆕 Updated image source
logging:
driver: "json-file"
options:
max-file: 15
max-size: 30m
network_mode: "host"
cap_drop: # 🆕 New line
- ALL # 🆕 New line
cap_add: # 🆕 New line
- NET_RAW # 🆕 New line
- NET_ADMIN # 🆕 New line
- NET_BIND_SERVICE # 🆕 New line
restart: unless-stopped
volumes:
# 🆕 NEW MAPPING: All your data is now mapped from ./data to the container's /data
- ./data:/data
# Ensure the timezone is the same as on the server
- /etc/localtime:/etc/localtime:ro
environment:
- TZ=Europe/Malta
- PORT=20211
# 🆕 New "tmpfs" section START 🔽
tmpfs:
# All writable runtime state resides under /tmp
- "/tmp:uid=20211,gid=20211,mode=1700,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
# 🆕 New "tmpfs" section END 🔼
Can anyone help me out please?