https://heidelsec.de/de/tags/monitoring/Recent content in Monitoring on HeidelSechttps://heidelsec.de/images/og.jpghttps://heidelsec.de/images/og.jpgHugo -- 0.167.0de2026 Datenschutzerklärung - ImpressumThu, 07 Nov 2024 10:30:00 +0100https://heidelsec.de/de/posts/2024-11-07-docker-cadvisor-synology/Thu, 07 Nov 2024 10:30:00 +0100https://heidelsec.de/de/posts/2024-11-07-docker-cadvisor-synology/<h2 id="cadvisor-auf-synology">cAdvisor auf Synology</h2> <p>Die Ausführung von cAdvisor in Docker auf Synology war eine Herausforderung, da es oft nicht startete, obwohl keine Änderungen an den Startoptionen vorgenommen wurden. Das Problem stellte sich als ein Zusammenhang mit den <code>inotify</code>-Einstellungen heraus.</p> <h3 id="das-problem">Das Problem</h3> <p>Beim Ausführen des folgenden Befehls zum Starten von cAdvisor:</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">docker run --name<span class="o">=</span>cadvisor <span class="se">\ </span></span></span><span class="line"><span class="cl"> --volume<span class="o">=</span><span class="s2">&#34;/:/rootfs:ro&#34;</span> <span class="se">\ </span></span></span><span class="line"><span class="cl"> --volume<span class="o">=</span><span class="s2">&#34;/var/run:/var/run:ro&#34;</span> <span class="se">\ </span></span></span><span class="line"><span class="cl"> --volume<span class="o">=</span><span class="s2">&#34;/sys:/sys:ro&#34;</span> <span class="se">\ </span></span></span><span class="line"><span class="cl"> --volume<span class="o">=</span><span class="s2">&#34;/var/packages/ContainerManager/var/docker/:/var/lib/docker:ro&#34;</span> <span class="se">\ </span></span></span><span class="line"><span class="cl"> --security-opt no-new-privileges<span class="o">=</span><span class="nb">true</span> <span class="se">\ </span></span></span><span class="line"><span class="cl"> --restart<span class="o">=</span>on-failure:5 <span class="se">\ </span></span></span><span class="line"><span class="cl"> google/cadvisor:latest --docker_only<span class="o">=</span><span class="nb">true</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yml" data-lang="yml"><span class="line"><span class="cl"><span class="nt">cadvisor</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">image</span><span class="p">:</span><span class="w"> </span><span class="l">gcr.io/cadvisor/cadvisor:latest</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">container_name</span><span class="p">:</span><span class="w"> </span><span class="l">cadvisor</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">read_only</span><span class="p">:</span><span class="w"> </span><span class="kc">true</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">security_opt</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="kc">no</span>-<span class="l">new-privileges=true</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">command</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="s2">&#34;--docker_only=true&#34;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">volumes</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="l">/:/rootfs:ro</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="l">/var/run:/var/run:ro</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="l">/sys:/sys:ro</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="l">/var/packages/ContainerManager/var/docker/:/var/lib/docker:ro</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">restart</span><span class="p">:</span><span class="w"> </span><span class="kc">on</span>-<span class="l">failure:5</span><span class="w"> </span></span></span></code></pre></div><p>trat der folgende Fehler auf:</p>