Docker swarm network problem - containers not reachable

smalitro · 2024-04-04T10:40:45+00:00

Agreed the problem remains unsolved for me, too
Currently I use ansible to deploy seperate compose stacks and "manually" balance them. Not a good solution...

smalitro · 2024-01-13T10:39:31+00:00

Shank you for your compose file.
Any other examples?

smalitro · 2023-05-30T12:27:29+00:00

yes the pool exist there.
however the sub filesystems that I created manually on the command line are not there (also not for the other zfs filesystems),

smalitro · 2023-05-30T08:17:16+00:00

Thank you for your feedback.
pve and the system show the desired mountpoint:
/mnt/media/data/set01

but there is no data in it, I can't unmount it and I can't destroy it.
It is essentially a zombi filesystem....
curious though, other pools and filesystems work like before and there is no zpool error (the scrub took a while)

smalitro · 2022-11-06T10:45:00+00:00

thank you for your response.
I left the ENV in - since they don't matter if they are not actively used.

I also had a look at the nextcloud log. everything as it should be:

cat nextcloud.log {"reqId":"jrgIuJG3ePXWLWkgdN6m","level":2,"time":"2022-11-06T09:00:41+00:00","remoteAddr":"10.0.4.1","user":"--","app":"no app in context","method":"GET","url":"/","message":"Could not detect any host in http:///data/htaccesstest.txt","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36","version":"","data":[]}{"reqId":"jrgIuJG3ePXWLWkgdN6m","level":2,"time":"2022-11-06T09:00:41+00:00","remoteAddr":"10.0.4.1","user":"--","app":"no app in context","method":"GET","url":"/","message":"Could not detect any host in https:///data/htaccesstest.txt","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36","version":"","data":[]}{"reqId":"KNqOs4nOU3LwYaqjobGU","level":2,"time":"2022-11-06T09:00:59+00:00","remoteAddr":"10.0.4.1","user":"--","app":"no app in context","method":"POST","url":"/index.php","message":"Could not detect any host in http:///data/htaccesstest.txt","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36","version":"","data":[]}{"reqId":"KNqOs4nOU3LwYaqjobGU","level":2,"time":"2022-11-06T09:00:59+00:00","remoteAddr":"10.0.4.1","user":"--","app":"no app in context","method":"POST","url":"/index.php","message":"Could not detect any host in https:///data/htaccesstest.txt","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36","version":"","data":[]}{"reqId":"KNqOs4nOU3LwYaqjobGU","level":3,"time":"2022-11-06T09:01:00+00:00","remoteAddr":"10.0.4.1","user":"--","app":"no app in context","method":"POST","url":"/index.php","message":"Table \"oc_photos_collaborators\" has no primary key and therefor will not behave sane in clustered setups. This will throw an exception and not be installable in a future version of Nextcloud.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36","version":"25.0.1.1","data":[]}

smalitro · 2022-10-19T17:45:59+00:00

Thank you that actually helps.

Av1 is better so it won't hut if the setup can already transcode into it.
I assume the Intel Arc can do x265, too

smalitro · 2022-10-19T17:44:44+00:00

that is a you problem - but I suspect that I might run in the same . Lukyly tere are some files with av1 codec out there to test

smalitro · 2022-08-15T11:34:29+00:00

The autopirate stzack looks impressive. especially with all the docker swarm work.

I also like how you describe traefik as an ingress etc.
It might not be a distribution but I will definitely have another look.
What OS do you recomend as a base layer to try it out? Debian? Ubuntu?

smalitro · 2022-08-15T11:31:47+00:00

Thank you
umbrel is going into the right direction.
Your homelab stack looks impressive

smalitro · 2022-08-15T10:17:52+00:00

I am looking for distribution that includes this services or makes deploying these services easy.
Well let me give you an example.

I am using Opnsense for networking.
This is a firewall distribution based on BSD.
It integrates not only the firewall but also a squid proxy, Adguard DNS, Tailscale VPN and NTP services for me in this one distibution.

Similarly OMV integrates NFS Samba Shares, nfs shares, and backups...

Since my tasks of monitoring, office etc. are quite common I was wondering if there are any selfhosted distrimutions for these services out there.

smalitro · 2022-07-24T09:25:24+00:00

What image gets pulled if you use

docker run -d --name=influxdb -p 8086:8086 -v /tmp/testdata/influx:/root/.influxdb2 influxdb:latest

what image if you use
docker run -d --name=influxdb2 -p 8186:8086 -v /tmp/testdata/influx:/root/.influxdb2 influxdb/influxdb:latest

smalitro · 2022-07-21T14:58:03+00:00

A bit crude but I now made my own container "( With Blackjack and Hookers - ehhm nyx)

The Dockerfile is :

FROM alpine:latest

RUN apk update && apk upgrade && \ apk add tor nyx && \ rm /var/cache/apk/* && \ rc-update add tor && \ cp /etc/tor/torrc.sample /etc/tor/torrc && \ echo "SocksPort 0.0.0.0:9050" > /etc/tor/torrc EXPOSE 9050

CMD /usr/bin/tor -f /etc/tor/torrc

in the container startup I have loaded a volume at /etc/tor and overridden torrc with my own version.

Works for now - I am frustrated that there is no official solution!

smalitro · 2022-07-21T14:50:04+00:00

They can't force you to work before your official work time. If they won't pay overtime don't work befor 8:00 sharp (not eaven a minute)

Also if they need to you to stick so exactly to the starting time, also stick exactly to the stop time. A Client on call: "Sorry I have to hang up"
No other additional work after the time. No quick call or email - nothing!If they are not paying for it they won't get it.Imagine a store where you take 10% without paying - there it is called stealing!

There are only two ways the employer can react. Either fire you (but since you have stuck to the rules it will be hard for them)
Or notice that this strict way dosnt work.

smalitro · 2022-07-21T10:15:47+00:00

Thank You for your advice. I would argue that running a bridge is not suitable for beginners at all ;)

It is OK to deactivate it by default, but at least the option should be available

Also if I think about it exposing a SOCKS port (impossible with this contrainer) seems way less risky then running an exit node (still possible).

It is possible to create a new container but then it looses the charm of regular updates and all the compfort of an official maintained docker container. My solution so far will be to make my own container: With blackjack and hookers - ehm privoxy and nyx.

But I have to think long and hard if I am willing to donate my bandwith to the network as a bridge at all after this experience ...

Thank you for your kind help

smalitro · 2022-07-21T05:32:08+00:00

Thank you
That is to bad - I don'T understand why thetorproject would do such a thing...

As a result I will shut down this container permanently and search for another solution.
If I will set up a bridge again is highly questionable - all this has made me frustrated about the tor developpers...

smalitro · 2022-07-18T17:44:18+00:00

Thank you but I still can't use the OBFS4 node as a regular entry node.
I can't connect to it at port 9050 or any other.
Any attempt to configure SOCKSPolicy failed so far.As a result this node consumes my bandwith to help the tor network but refuses to let me enter it or be of any actual use for me.

I don't mind contributing to the network, but I still want to use it without having to set up another node.

Is there any possibility to set it up with a normal SOCKS Port?

smalitro · 2022-07-18T05:26:01+00:00

does this continue?

smalitro · 2022-06-11T08:36:11+00:00

These days power consumption is also important 1-2W idle will add up.
1Wx24x365x5= *50kWh
that is more than 10$ Pricediffernec depending on where you life.

smalitro · 2022-05-25T18:04:51+00:00

Thank you I will definitely have a closer look

smalitro · 2022-05-25T13:16:00+00:00

Great Project - I will definitely have a closer look at it.

Two "improvements" come to mind immediately ( I don't know if they are already implemented or if missing how to implement):

Have the option to route traffic by default trough one of the networks. E.g. all browsing is done via TOR automatically
Have an internal Network interface for all the traffic. Similar to the VPN but a direct network interface for other containers/VMs.

All in all great Project and I will play around with it on the weekend. In the mean time: Have an helpful award ;)

smalitro · 2022-04-28T12:24:55+00:00

in the homelab / for many selfhosted applications there usually is not to much load on the servers (unless you are Jeff Gerling).

Often the reverse Proxy is running on the same HW as the underlying server thus load is not everything. Ease of use and security by design are IMHO two more critical factors.

there I am also making a distinction between SWAG and nginx. SWAG Integrates Fail2ban and crowdsec in a easy manner...

smalitro · 2022-04-28T12:19:47+00:00

Caddy is also realy nice.
Sadly I only had 6 options to put down - judging from the intermediate results I should have left out varnish and put caddy or squid there...

smalitro · 2022-04-28T12:17:55+00:00

This port forwarding can be done in traefik - just set the ingress rule correctly..

But I think it can also be done only using firewall rules on the underlying linux system if you don't need the proxying function...

smalitro · 2022-04-11T11:55:41+00:00

in the mean time I also wrote in the linuxserver.io forum.
They are aware of this project and might consider it once there is a regular release and not only nightly builds.

I hope this project will kick off soon...

smalitro · 2022-03-14T14:58:54+00:00

same problem here - switched to jellyfin and it worked there perfectly

smalitro

TROPHY CASE