mirror of
https://github.com/jokob-sk/NetAlertX.git
synced 2026-04-03 00:31:35 -07:00
DOCS: new URL https://docs.netalertx.com/
Signed-off-by: jokob-sk <jokob.sk@gmail.com>
This commit is contained in:
@@ -90,7 +90,7 @@ has_cap 7 || missing_admin="${missing_admin} SETUID"
|
||||
if [ -n "${missing_admin}" ]; then
|
||||
printf "%sSecurity context: Operational capabilities (%s) not granted.%s\n" "${GREY}" "${missing_admin# }" "${RESET}"
|
||||
if echo "${missing_admin}" | grep -q "CHOWN"; then
|
||||
printf "%sSee https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/missing-capabilities.md%s\n" "${GREY}" "${RESET}"
|
||||
printf "%sSee https://docs.netalertx.com/docker-troubleshooting/missing-capabilities%s\n" "${GREY}" "${RESET}"
|
||||
fi
|
||||
fi
|
||||
|
||||
@@ -107,7 +107,7 @@ if [ "${storage_driver}" = "aufs" ] && [ "${runtime_uid}" -ne 0 ]; then
|
||||
nbtscan fail when NetAlertX runs as a non-root PUID.
|
||||
|
||||
Set PUID=0 on AUFS hosts for full functionality:
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/aufs-capabilities.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/aufs-capabilities
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
printf "%s" "${RESET}"
|
||||
|
||||
@@ -257,8 +257,8 @@ def print_warning_message(results: list[MountCheckResult]):
|
||||
"\n We recommend starting with the default docker-compose.yml as the\n"
|
||||
" configuration can be quite complex.\n\n"
|
||||
" Review the documentation for a correct setup:\n"
|
||||
" https://github.com/jokob-sk/NetAlertX/blob/main/docs/DOCKER_COMPOSE.md\n"
|
||||
" https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/mount-configuration-issues.md\n"
|
||||
" https://docs.netalertx.com/DOCKER_COMPOSE\n"
|
||||
" https://docs.netalertx.com/docker-troubleshooting/mount-configuration-issues\n"
|
||||
"══════════════════════════════════════════════════════════════════════════════\n"
|
||||
)
|
||||
|
||||
|
||||
@@ -25,7 +25,7 @@ if [ ! -d "${NETALERTX_DB}" ]; then
|
||||
A database directory is required for proper operation, however there appear to be
|
||||
insufficient permissions on this mount or it is otherwise inaccessible.
|
||||
|
||||
More info: https://github.com/jokob-sk/NetAlertX/blob/main/docs/FILE_PERMISSIONS.md
|
||||
More info: https://docs.netalertx.com/FILE_PERMISSIONS
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
>&2 printf "%s" "${RESET}"
|
||||
|
||||
@@ -34,7 +34,7 @@ for path in $READ_WRITE_PATHS; do
|
||||
The required path "${path}" could not be found. The application
|
||||
cannot start without its complete directory structure.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/file-permissions.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/file-permissions
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
>&2 printf "%s" "${RESET}"
|
||||
@@ -49,7 +49,7 @@ EOF
|
||||
This prevents NetAlertX from reading the configuration and indicates a
|
||||
permissions or mount issue — often seen when running with custom UID/GID.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/file-permissions.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/file-permissions
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
>&2 printf "%s" "${RESET}"
|
||||
@@ -63,7 +63,7 @@ EOF
|
||||
The application cannot read from "${path}". This will cause
|
||||
unpredictable errors. Please correct the file system permissions.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/file-permissions.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/file-permissions
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
>&2 printf "%s" "${RESET}"
|
||||
@@ -80,7 +80,7 @@ EOF
|
||||
To fix this automatically, restart the container with root privileges
|
||||
(e.g., remove the "user:" directive in your Docker Compose file).
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/file-permissions.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/file-permissions
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
>&2 printf "%s" "${RESET}"
|
||||
|
||||
@@ -27,7 +27,7 @@ if [ ! -d "${CONF_ACTIVE_DIR}" ]; then
|
||||
--mount type=bind,src=/path/on/host,dst=${CONF_ACTIVE_DIR}
|
||||
and ensure it is owned by the netalertx user (20211:20211) with 700 perms.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/nginx-configuration-mount.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/nginx-configuration-mount
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
>&2 printf "%s" "${RESET}"
|
||||
@@ -49,7 +49,7 @@ if ! ( : >"${TMP_FILE}" ) 2>/dev/null; then
|
||||
find ${CONF_ACTIVE_DIR} -type d -exec chmod 700 {} +
|
||||
find ${CONF_ACTIVE_DIR} -type f -exec chmod 600 {} +
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/nginx-configuration-mount.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/nginx-configuration-mount
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
>&2 printf "%s" "${RESET}"
|
||||
|
||||
@@ -59,7 +59,7 @@ RESET=$(printf '\033[0m')
|
||||
docker run --network=host --cap-add=NET_RAW --cap-add=NET_ADMIN --cap-add=NET_BIND_SERVICE
|
||||
or set "network_mode: host" in docker-compose.yml.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/network-mode.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/network-mode
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
>&2 printf "%s" "${RESET}"
|
||||
|
||||
@@ -12,7 +12,7 @@ if [ "${NETALERTX_DEBUG}" = "1" ]; then
|
||||
fi
|
||||
|
||||
# Get bounding capabilities from /proc/self/status (what can be acquired)
|
||||
BND_HEX=$(grep '^CapBnd:' /proc/self/status 2>/dev/null | awk '{print $2}' | tr -d '\t')
|
||||
BND_HEX=$(grep '^CapBnd:' /proc/self/status 2>/dev/null | awk '{print $2}' | tr -d '\t')
|
||||
|
||||
if [ -z "$BND_HEX" ]; then
|
||||
exit 0
|
||||
@@ -32,10 +32,10 @@ if [ "$EXTRA" -ne 0 ]; then
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
⚠️ Warning: Excessive capabilities detected (bounding caps: 0x$BND_HEX).
|
||||
|
||||
Only CHOWN, SETGID, SETUID, NET_ADMIN, NET_BIND_SERVICE, and NET_RAW are
|
||||
Only CHOWN, SETGID, SETUID, NET_ADMIN, NET_BIND_SERVICE, and NET_RAW are
|
||||
required in this container. Please remove unnecessary capabilities.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/excessive-capabilities.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/excessive-capabilities
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
fi
|
||||
|
||||
@@ -15,7 +15,7 @@ if ! awk '$2 == "/" && $4 ~ /ro/ {found=1} END {exit !found}' /proc/mounts; then
|
||||
⚠️ Warning: Container is running as read-write, not in read-only mode.
|
||||
|
||||
Please mount the root filesystem as --read-only or use read_only: true
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/read-only-filesystem.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/read-only-filesystem
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
|
||||
|
||||
@@ -22,7 +22,7 @@ if [ "${PORT_APP}" -eq "${PORT_GQL}" ]; then
|
||||
The Application port (\$PORT) and the GraphQL API port (\$GRAPHQL_PORT)
|
||||
are configured to use the same port. This will cause a conflict.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/port-conflicts.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/port-conflicts
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
fi
|
||||
@@ -53,7 +53,7 @@ if echo "$LISTENING_PORTS" | grep -q ":${PORT_APP}$"; then
|
||||
|
||||
The main application (defined by \$PORT) may fail to start.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/port-conflicts.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/port-conflicts
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
fi
|
||||
@@ -67,7 +67,7 @@ if echo "$LISTENING_PORTS" | grep -q ":${PORT_GQL}$"; then
|
||||
The GraphQL API (defined by \$APP_CONF_OVERRIDE or \$GRAPHQL_PORT)
|
||||
may fail to start.
|
||||
|
||||
https://github.com/jokob-sk/NetAlertX/blob/main/docs/docker-troubleshooting/port-conflicts.md
|
||||
https://docs.netalertx.com/docker-troubleshooting/port-conflicts
|
||||
══════════════════════════════════════════════════════════════════════════════
|
||||
EOF
|
||||
fi
|
||||
Reference in New Issue
Block a user