admin
c9de193a9d
Docker always creates a fresh tmpfs at /dev, silently dropping any /dev:/dev bind mount. Block devices must be accessed via /host-dev where the host /dev is actually mounted. Changes: - docker-compose.yml: /dev:/dev → /dev:/host-dev:rw - safety.go: add HostDevPath constant + HostDevicePath() helper - format_linux.go: all device ops (stat, sfdisk, partprobe, mkfs.ext4, blkid) use HostDevicePath() to resolve /dev/sdb → /host-dev/sdb - safety_linux.go: IsSystemDisk() stats device via /host-dev - scan_linux.go: enrichWithBlkid() probes each partition individually via /host-dev/sdXN instead of batch blkid -o export (which can't find devices when /dev is Docker's minimal tmpfs) Fixes "stat /dev/sdb: no such file or directory" in FormatAndMount. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
66 lines
2.6 KiB
YAML
66 lines
2.6 KiB
YAML
# =============================================================================
|
|
# felhom-controller Docker Compose
|
|
# This is deployed as an infrastructure component alongside Traefik/Cloudflared
|
|
# =============================================================================
|
|
|
|
services:
|
|
felhom-controller:
|
|
image: gitea.dooplex.hu/admin/felhom-controller:latest
|
|
container_name: felhom-controller
|
|
restart: unless-stopped
|
|
privileged: true # Required for disk operations (mkfs, mount, sfdisk)
|
|
ports:
|
|
- "8080:8080"
|
|
volumes:
|
|
# Docker socket — required for compose operations + DB dumps (docker exec)
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
# Controller config
|
|
- /opt/docker/felhom-controller/controller.yaml:/opt/docker/felhom-controller/controller.yaml:ro
|
|
# Controller persistent data (sessions, restic cache, restic password)
|
|
- controller-data:/opt/docker/felhom-controller/data
|
|
# Stack compose files (read + write for git sync)
|
|
- /opt/docker/stacks:/opt/docker/stacks
|
|
# Backup directories (restic repo + db dumps)
|
|
- /srv/backups:/srv/backups
|
|
# All external storage — /mnt/* for multi-storage + restore
|
|
- /mnt:/mnt:rw
|
|
# Host /sys — for CPU temperature reading (read-only)
|
|
- /sys:/host/sys:ro
|
|
# Host OS info — for monitoring page system info
|
|
- /etc/os-release:/host/etc/os-release:ro
|
|
# Host hostname — for monitoring page (os.Hostname() returns container ID)
|
|
- /etc/hostname:/host/etc/hostname:ro
|
|
# Block devices — mounted at /host-dev (can't override Docker's /dev tmpfs)
|
|
- /dev:/host-dev:rw
|
|
# Host fstab — UUID-based mount persistence (mounted as /host-fstab inside container)
|
|
- /etc/fstab:/host-fstab
|
|
# udev metadata — for blkid/lsblk device model info
|
|
- /run/udev:/run/udev:ro
|
|
environment:
|
|
- TZ=Europe/Budapest
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.controller.rule=Host(`felhom.${DOMAIN}`)"
|
|
- "traefik.http.routers.controller.entrypoints=websecure"
|
|
- "traefik.http.routers.controller.tls=true"
|
|
- "traefik.http.services.controller.loadbalancer.server.port=8080"
|
|
- "traefik.docker.network=traefik-public"
|
|
# Health check labels for monitoring
|
|
- "felhom.managed=true"
|
|
- "felhom.component=controller"
|
|
networks:
|
|
- traefik-public
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:8080/api/health"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
start_period: 10s
|
|
retries: 3
|
|
|
|
volumes:
|
|
controller-data:
|
|
|
|
networks:
|
|
traefik-public:
|
|
external: true
|