0
0
Fork 0
mirror of https://github.com/netdata/netdata.git synced 2025-04-28 06:32:30 +00:00

add /var/log mount to docker ()

* expand Privileges/Mounts by default

* add /var/log mount to docker readme

* add /var/log mount to deploy.yaml
This commit is contained in:
Ilya Mashchenko 2023-11-28 18:26:52 +02:00 committed by GitHub
parent f6d9792fe8
commit 8b84673250
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 24 additions and 9 deletions
integrations
packaging/docker

View file

@ -255,6 +255,7 @@
-v /proc:/host/proc:ro \ -v /proc:/host/proc:ro \
-v /sys:/host/sys:ro \ -v /sys:/host/sys:ro \
-v /etc/os-release:/host/etc/os-release:ro \ -v /etc/os-release:/host/etc/os-release:ro \
-v /var/log:/host/var/log:ro \
-v /var/run/docker.sock:/var/run/docker.sock:ro \ -v /var/run/docker.sock:/var/run/docker.sock:ro \
--restart unless-stopped \ --restart unless-stopped \
--cap-add SYS_PTRACE \ --cap-add SYS_PTRACE \
@ -280,6 +281,7 @@
-v /proc:/host/proc:ro \ -v /proc:/host/proc:ro \
-v /sys:/host/sys:ro \ -v /sys:/host/sys:ro \
-v /etc/os-release:/host/etc/os-release:ro \ -v /etc/os-release:/host/etc/os-release:ro \
-v /var/log:/host/var/log:ro \
-v /var/run/docker.sock:/var/run/docker.sock:ro \ -v /var/run/docker.sock:/var/run/docker.sock:ro \
--restart unless-stopped \ --restart unless-stopped \
--cap-add SYS_PTRACE \ --cap-add SYS_PTRACE \
@ -318,6 +320,7 @@
- /proc:/host/proc:ro - /proc:/host/proc:ro
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /var/log:/host/var/log:ro
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
{% if $showClaimingOptions %} {% if $showClaimingOptions %}
environment: environment:
@ -354,6 +357,7 @@
- /proc:/host/proc:ro - /proc:/host/proc:ro
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /var/log:/host/var/log:ro
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
{% if $showClaimingOptions %} {% if $showClaimingOptions %}
environment: environment:
@ -391,6 +395,7 @@
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /etc/hostname:/etc/hostname:ro - /etc/hostname:/etc/hostname:ro
- /var/log:/host/var/log:ro
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
{% if $showClaimingOptions %} {% if $showClaimingOptions %}
environment: environment:
@ -430,6 +435,7 @@
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /etc/hostname:/etc/hostname:ro - /etc/hostname:/etc/hostname:ro
- /var/log:/host/var/log:ro
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
{% if $showClaimingOptions %} {% if $showClaimingOptions %}
environment: environment:

View file

@ -21,7 +21,7 @@ The Netdata container requires different privileges and mounts to provide functi
Netdata installed on the host. Below you can find a list of Netdata components that need these privileges and mounts, Netdata installed on the host. Below you can find a list of Netdata components that need these privileges and mounts,
along with their descriptions. along with their descriptions.
<details> <details open>
<summary>Privileges</summary> <summary>Privileges</summary>
| Component | Privileges | Description | | Component | Privileges | Description |
@ -33,16 +33,18 @@ along with their descriptions.
</details> </details>
<details> <details open>
<summary>Mounts</summary> <summary>Mounts</summary>
| Component | Mounts | Description | | Component | Mounts | Description |
|:--------------:|:--------------------------:|-------------------------------------------------------------------------------------------------------------------------------------| |:----------------------:|:--------------------------:|--------------------------------------------------------------------------------------------------------------------------------------------|
| netdata | /etc/os-release | Host info detection. | | netdata | /etc/os-release | Host info detection. |
| cgroups.plugin | /sys, /var/run/docker.sock | Docker containers monitoring and name resolution. | | cgroups.plugin | /sys, /var/run/docker.sock | Docker containers monitoring and name resolution. |
| go.d.plugin | /var/run/docker.sock | Docker Engine and containers monitoring. See [docker](https://github.com/netdata/go.d.plugin/tree/master/modules/docker) collector. | | go.d.plugin | /var/run/docker.sock | Docker Engine and containers monitoring. See [docker](https://github.com/netdata/go.d.plugin/tree/master/modules/docker#readme) collector. |
| apps.plugin | /etc/passwd, /etc/group | Monitoring of host system resource usage by each user and user group. | | go.d.plugin | /var/log | Web servers logs tailing. See [weblog](https://github.com/netdata/go.d.plugin/tree/master/modules/weblog#readme) collector. |
| proc.plugin | /proc | Host system monitoring (CPU, memory, network interfaces, disks, etc.). | | apps.plugin | /etc/passwd, /etc/group | Monitoring of host system resource usage by each user and user group. |
| proc.plugin | /proc | Host system monitoring (CPU, memory, network interfaces, disks, etc.). |
| systemd-journal.plugin | /var/log | Viewing, exploring and analyzing systemd journal logs. |
</details> </details>
@ -73,6 +75,7 @@ docker run -d --name=netdata \
-v /proc:/host/proc:ro \ -v /proc:/host/proc:ro \
-v /sys:/host/sys:ro \ -v /sys:/host/sys:ro \
-v /etc/os-release:/host/etc/os-release:ro \ -v /etc/os-release:/host/etc/os-release:ro \
-v /var/log:/host/var/log:ro \
-v /var/run/docker.sock:/var/run/docker.sock:ro \ -v /var/run/docker.sock:/var/run/docker.sock:ro \
--restart unless-stopped \ --restart unless-stopped \
--cap-add SYS_PTRACE \ --cap-add SYS_PTRACE \
@ -113,6 +116,7 @@ services:
- /proc:/host/proc:ro - /proc:/host/proc:ro
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /var/log:/host/var/log:ro
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
volumes: volumes:
@ -159,6 +163,7 @@ docker run -d --name=netdata \
-v /proc:/host/proc:ro \ -v /proc:/host/proc:ro \
-v /sys:/host/sys:ro \ -v /sys:/host/sys:ro \
-v /etc/os-release:/host/etc/os-release:ro \ -v /etc/os-release:/host/etc/os-release:ro \
-v /var/log:/host/var/log:ro \
-v /var/run/docker.sock:/var/run/docker.sock:ro \ -v /var/run/docker.sock:/var/run/docker.sock:ro \
--restart unless-stopped \ --restart unless-stopped \
--cap-add SYS_PTRACE \ --cap-add SYS_PTRACE \
@ -199,6 +204,7 @@ services:
- /proc:/host/proc:ro - /proc:/host/proc:ro
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /var/log:/host/var/log:ro
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
volumes: volumes:
@ -269,6 +275,7 @@ services:
- /proc:/host/proc:ro - /proc:/host/proc:ro
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /var/log:/host/var/log:ro
- /var/run/docker.sock:/var/run/docker.sock:ro - /var/run/docker.sock:/var/run/docker.sock:ro
volumes: volumes:
caddy_data: caddy_data:
@ -319,6 +326,7 @@ services:
- /proc:/host/proc:ro - /proc:/host/proc:ro
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /var/log:/host/var/log:ro
environment: environment:
- DOCKER_HOST=localhost:2375 - DOCKER_HOST=localhost:2375
proxy: proxy:
@ -365,6 +373,7 @@ services:
- /proc:/host/proc:ro - /proc:/host/proc:ro
- /sys:/host/sys:ro - /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro - /etc/os-release:/host/etc/os-release:ro
- /var/log:/host/var/log:ro
environment: environment:
- DOCKER_HOST=localhost:2375 - DOCKER_HOST=localhost:2375
cetusguard: cetusguard: