To do this, I have a Raspberry PI4 on which I have Docker running with Portainer
Question 1:
Following the basic installation, I got a Docker error message:
Error response from daemon: unknown log opt ‹ max-size › for journald log driver
This is related to the parameter –log-opt max-size=10m \
So I did the installation without this parameter, but has anyone else had this bug??
Question 2:
Is it mandatory to put the following line:
–privileged \
I read in an ANSSI prescription that it was necessary to avoid giving too many rights to the container with this option…
Question 3:
I have a container (AdguardHome) that uses port 80 and therefore the Gladys container refuses to start… reason (in the logs…) port in use…
I stopped AdguardHome for a while and Gladys is accessible but can we change Gladys’s port 80???
Finally, I conclude with:
a big bravo for this application
a big thank you to everyone for your insights
Question 1:
If you go through Portainer, it’s possible that this option is managed by Portainer. Others can surely answer this question better than me, so I don’t have the answer
Question 2:
ANSSI sets conditions for special cases. For example, a web server with a classic website should not be allowed to access everything, so no privileged access. However, for home automation, it is necessary. Your Docker needs to access other Docker containers, access the machine, read the USB, etc. It’s necessary.
However, it’s true that it’s good practice not to do this if you don’t need it
Question 3:
Yes, you can
Gladys exposes its port 80, but the machine can very well bind a port, for example: -p 8080:80. Here you associate port 8080 of your Raspberry Pi with port 80 of the Docker