Files
PFVCluster/netinfra/netboot-deep-audit.txt
T
mrcharles 53954d8494 docs: lock in storage philosophy and PDM migration capability
Storage philosophy (user directive):
- NVMe/SSD: k8s worker scratch + ultix-streaming (dev workstation
  running "cluster of 1" pre-prod jobs before full k8s deployment)
- Spinning rust: all infrastructure VMs (UCS, netinfra, LibreNMS, SIEM)

Clarified that hosts are standalone but managed via Proxmox Datacenter
Manager (PDM), which supports VM migration between nodes through the
UI -- eliminating the need for manual disk copies in the migration plan.

Updated all migration steps to reference PDM storage migrate instead
of manual cp commands.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
2026-07-27 21:46:48 -05:00

897 lines
40 KiB
Plaintext

This system is the property of Known Element Enterprises LLC.
Authorized uses only. All activity may be monitored and reported.
All activities subject to monitoring/recording/review in real time and/or at a later time.
=== COMPOSE FILES: /root/pihole and /root/NTP ===
--- /root/pihole/docker-compose.yml ---
# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
services:
pihole:
container_name: pihole
image: pihole/pihole:latest
ports:
# DNS Ports
- "53:53/tcp"
- "53:53/udp"
# Default HTTP Port
- "10002:80/tcp"
# Default HTTPs Port. FTL will generate a self-signed certificate
- "10003:443/tcp"
# Uncomment the below if using Pi-hole as your DHCP Server
#- "67:67/udp"
# Uncomment the line below if you are using Pi-hole as your NTP server
#- "123:123/udp"
environment:
# Set the appropriate timezone for your location from
# https://en.wikipedia.org/wiki/List_of_tz_database_time_zones, e.g:
TZ: 'America/Chicago'
# Set a password to access the web interface. Not setting one will result in a random password being assigned
FTLCONF_webserver_api_password: 'REDACTED_PASSWORD'
# If using Docker's default `bridge` network setting the dns listening mode should be set to 'all'
FTLCONF_dns_listeningMode: 'all'
# Volumes store your data between container upgrades
volumes:
# For persisting Pi-hole's databases and common configuration file
- './etc-pihole:/etc/pihole'
# Uncomment the below if you have custom dnsmasq config files that you want to persist. Not needed for most starting fresh with Pi-hole v6. If you're upgrading from v5 you and have used this directory before, you should keep it enabled for the first v6 container start to allow for a complete migration. It can be removed afterwards. Needs environment variable FTLCONF_misc_etc_dnsmasq_d: 'true'
#- './etc-dnsmasq.d:/etc/dnsmasq.d'
cap_add:
# See https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
# Required if you are using Pi-hole as your DHCP server, else not needed
#- NET_ADMIN
# Required if you are using Pi-hole as your NTP client to be able to set the host's system time
#- SYS_TIME
# Optional, if Pi-hole should get some more processing time
- SYS_NICE
restart: always
--- /root/NTP/docker-compose.yml ---
services:
ntp:
image: dockurr/chrony
container_name: tsys-ntp
environment:
NTP_SERVERS: "pool.ntp.org"
ports:
- 100.103.64.82:123:123/udp
restart: always
=== DIR LAYOUT of compose project dirs ===
total 16
drwxr-xr-x 3 root root 4096 Feb 6 18:32 .
drwx------ 10 root root 4096 Apr 5 06:16 ..
-rw-r--r-- 1 root root 2089 Feb 6 18:30 docker-compose.yml
drwxr-xr-x 7 localuser localuser 4096 Jul 27 20:57 etc-pihole
total 12
drwxr-xr-x 2 root root 4096 Jul 2 2025 .
drwx------ 10 root root 4096 Apr 5 06:16 ..
-rw-r--r-- 1 root root 188 Jun 23 2025 docker-compose.yml
total 84
drwx------ 10 root root 4096 Apr 5 06:16 .
drwxr-xr-x 20 root root 4096 Jul 20 17:55 ..
-rw------- 1 root root 4113 Jun 18 2025 .bash_history
-rw-r--r-- 1 root root 571 Apr 10 2021 .bashrc
drwx------ 3 root root 4096 Jun 10 2025 .config
drwxr-xr-x 2 root root 4096 Apr 5 06:16 dhcp
-rw------- 1 root root 2960 Feb 16 19:26 dhcpmigrate
drwxr-xr-x 10 root root 4096 Jul 2 2025 FetchApply
drwx------ 3 root root 4096 Jul 10 2025 .gnupg
-rw------- 1 root root 40 Apr 5 06:15 .lesshst
drwxr-xr-x 2 root root 4096 Jul 2 2025 NTP
drwxr-xr-x 3 root root 4096 Feb 6 18:32 pihole
-rw-r--r-- 1 root root 161 Jul 9 2019 .profile
drwx------ 2 root root 4096 Jun 13 2025 .ssh
drwxr-xr-x 2 root root 4096 Jul 27 09:08 .tmp
-rw------- 1 root root 15370 Apr 5 06:15 .viminfo
-rw-r--r-- 1 root root 180 Jun 17 2025 .wget-hsts
=== SEARCH entire FS for any technitium / dns compose files ===
=== ALL CONTAINERS with compose labels ===
NAMES IMAGE STATUS WDIR=working dir CFG=config files SVC=service
pihole pihole/pihole:latest Up 48 minutes (healthy) WDIR=/root/pihole CFG=/root/pihole/docker-compose.yml SVC=pihole
tsys-ntp dockurr/chrony Up 7 days (healthy) WDIR=/root/NTP CFG=/root/NTP/docker-compose.yml SVC=ntp
=== DOCKER INSPECT pihole + tsys-ntp (and any dns/technitium container) ===
###### /pihole | image=pihole/pihole:latest | proj=pihole ######
[
{
"Id": "1d09249f01b08b0ffea241791a11cb8f4b1f06e0a9e258f23d6a483e0b6cfa82",
"Created": "2026-02-07T00:32:57.4029722Z",
"Path": "start.sh",
"Args": [],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 1222239,
"ExitCode": 0,
"Error": "",
"StartedAt": "2026-07-28T01:57:27.732608642Z",
"FinishedAt": "2026-07-28T01:57:27.095917957Z",
"Health": {
"Status": "healthy",
"FailingStreak": 0,
"Log": [
{
"Start": "2026-07-27T21:43:50.682295418-05:00",
"End": "2026-07-27T21:43:50.921778022-05:00",
"ExitCode": 0,
"Output": "127.0.0.1\n"
},
{
"Start": "2026-07-27T21:44:20.925872245-05:00",
"End": "2026-07-27T21:44:21.170837655-05:00",
"ExitCode": 0,
"Output": "127.0.0.1\n"
},
{
"Start": "2026-07-27T21:44:51.175444367-05:00",
"End": "2026-07-27T21:44:51.416140073-05:00",
"ExitCode": 0,
"Output": "127.0.0.1\n"
},
{
"Start": "2026-07-27T21:45:21.417102671-05:00",
"End": "2026-07-27T21:45:21.689964304-05:00",
"ExitCode": 0,
"Output": "127.0.0.1\n"
},
{
"Start": "2026-07-27T21:45:51.691119192-05:00",
"End": "2026-07-27T21:45:51.945416009-05:00",
"ExitCode": 0,
"Output": "127.0.0.1\n"
}
]
}
},
"Image": "sha256:81365952d1f82f114cea23ef5a2961c73da61ec5dc0e066ee2f625b1eb98854b",
"ResolvConfPath": "/var/lib/docker/containers/1d09249f01b08b0ffea241791a11cb8f4b1f06e0a9e258f23d6a483e0b6cfa82/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/1d09249f01b08b0ffea241791a11cb8f4b1f06e0a9e258f23d6a483e0b6cfa82/hostname",
"HostsPath": "/var/lib/docker/containers/1d09249f01b08b0ffea241791a11cb8f4b1f06e0a9e258f23d6a483e0b6cfa82/hosts",
"LogPath": "/var/lib/docker/containers/1d09249f01b08b0ffea241791a11cb8f4b1f06e0a9e258f23d6a483e0b6cfa82/1d09249f01b08b0ffea241791a11cb8f4b1f06e0a9e258f23d6a483e0b6cfa82-json.log",
"Name": "/pihole",
"RestartCount": 2,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "docker-default",
"ExecIDs": null,
"HostConfig": {
"Binds": [
"/root/pihole/etc-pihole:/etc/pihole:rw"
],
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {}
},
"NetworkMode": "pihole_default",
"PortBindings": {
"443/tcp": [
{
"HostIp": "",
"HostPort": "10003"
}
],
"53/tcp": [
{
"HostIp": "",
"HostPort": "53"
}
],
"53/udp": [
{
"HostIp": "",
"HostPort": "53"
}
],
"80/tcp": [
{
"HostIp": "",
"HostPort": "10002"
}
]
},
"RestartPolicy": {
"Name": "always",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"ConsoleSize": [
0,
0
],
"CapAdd": [
"CAP_SYS_NICE"
],
"CapDrop": null,
"CgroupnsMode": "private",
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": [],
"GroupAdd": null,
"IpcMode": "private",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": null,
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": null,
"DeviceCgroupRules": null,
"DeviceRequests": null,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": null,
"PidsLimit": null,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/acpi",
"/proc/asound",
"/proc/interrupts",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/sched_debug",
"/proc/scsi",
"/proc/timer_list",
"/proc/timer_stats",
"/sys/devices/virtual/powercap",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"ID": "1d09249f01b08b0ffea241791a11cb8f4b1f06e0a9e258f23d6a483e0b6cfa82",
"LowerDir": "/var/lib/docker/overlay2/69d0a802515624c1ced9a0ae9e09ed76f94b3077d3d5628914ccee60941a51ac-init/diff:/var/lib/docker/overlay2/c026d6eb78252f15477a6ed84b76e7855b525a582aafa11ae38d89d932433d9c/diff:/var/lib/docker/overlay2/38b4e9cd3ba8e5a10ee7dffbf21e4e552bc30ca96df4b3fc46532d8c2f4828d0/diff:/var/lib/docker/overlay2/10c7b2bc8ab474a29274b66e94e43e31db3dd248dbe0c8e8f7069e305efc7a41/diff:/var/lib/docker/overlay2/de5840a2fb5aed78f79984d980d59f9e50839ddb792146cc7a33d185b8b3eee2/diff:/var/lib/docker/overlay2/5f0504c14572ef5e745e8b06b8f1b3ce74027bce323b7bd1153c828e0dd97d52/diff:/var/lib/docker/overlay2/7a3eefaaac250fbb5430c567e9d12320c35c5da67ad3f8b7b8a7accccc435f18/diff:/var/lib/docker/overlay2/a6c7374834f19eabf6bd3e36f8ad8f2e20e3cf32c4bfea3133ef432b163dac8b/diff:/var/lib/docker/overlay2/28ffada6ac95ffb6c493b1908d00f9cfa096069fd715fa101b910b628835bed5/diff:/var/lib/docker/overlay2/0e79a525158aef2253d47f7f429c50e48c49fec81329f2be7fc580d906528087/diff:/var/lib/docker/overlay2/7365834c77d4c08772f03b8fc0fa6d21b593d3ac70a9ec66fe77ed403d0ef064/diff:/var/lib/docker/overlay2/4bd0de3b67968b6681a962ee9fb89b6bb09b07e5d2ba0d0f85f0561cd9442d32/diff",
"MergedDir": "/var/lib/docker/overlay2/69d0a802515624c1ced9a0ae9e09ed76f94b3077d3d5628914ccee60941a51ac/merged",
"UpperDir": "/var/lib/docker/overlay2/69d0a802515624c1ced9a0ae9e09ed76f94b3077d3d5628914ccee60941a51ac/diff",
"WorkDir": "/var/lib/docker/overlay2/69d0a802515624c1ced9a0ae9e09ed76f94b3077d3d5628914ccee60941a51ac/work"
},
"Name": "overlay2"
},
"Mounts": [
{
"Type": "bind",
"Source": "/root/pihole/etc-pihole",
"Destination": "/etc/pihole",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
}
],
"Config": {
"Hostname": "1d09249f01b0",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": true,
"AttachStderr": true,
"ExposedPorts": {
"123/udp": {},
"443/tcp": {},
"53/tcp": {},
"53/udp": {},
"67/udp": {},
"80/tcp": {}
},
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"FTLCONF_webserver_api_password=REDACTED_PASSWORD",
"FTLCONF_dns_listeningMode=all",
"TZ=America/Chicago",
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"DNSMASQ_USER=pihole",
"FTL_CMD=no-daemon"
],
"Cmd": null,
"Healthcheck": {
"Test": [
"CMD-SHELL",
"dig -p $(pihole-FTL --config dns.port) +short +norecurse +retry=0 @127.0.0.1 pi.hole || exit 1"
]
},
"Image": "pihole/pihole:latest",
"Volumes": null,
"WorkingDir": "/",
"Entrypoint": [
"start.sh"
],
"Labels": {
"com.docker.compose.config-hash": "60a181f601a1959cb6dda5f5889ff706d9986f7db015664ab40608253b83348e",
"com.docker.compose.container-number": "1",
"com.docker.compose.depends_on": "",
"com.docker.compose.image": "sha256:81365952d1f82f114cea23ef5a2961c73da61ec5dc0e066ee2f625b1eb98854b",
"com.docker.compose.oneoff": "False",
"com.docker.compose.project": "pihole",
"com.docker.compose.project.config_files": "/root/pihole/docker-compose.yml",
"com.docker.compose.project.working_dir": "/root/pihole",
"com.docker.compose.service": "pihole",
"com.docker.compose.version": "5.0.2",
"org.opencontainers.image.created": "2025-06-06T19:35:20.360Z",
"org.opencontainers.image.description": "Pi-hole in a docker container",
"org.opencontainers.image.licenses": "NOASSERTION",
"org.opencontainers.image.revision": "b56e67ef6808de2854d30481ebcd40bcd2b43445",
"org.opencontainers.image.source": "https://github.com/pi-hole/docker-pi-hole",
"org.opencontainers.image.title": "docker-pi-hole",
"org.opencontainers.image.url": "https://github.com/pi-hole/docker-pi-hole",
"org.opencontainers.image.version": "2025.06.1"
}
},
"NetworkSettings": {
"SandboxID": "4c83df12c0f6aa377cdd17640639b35e737eb7530c6798d7b80eb3135dbfbd20",
"SandboxKey": "/var/run/docker/netns/4c83df12c0f6",
"Ports": {
"123/udp": null,
"443/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "10003"
},
{
"HostIp": "::",
"HostPort": "10003"
}
],
"53/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "53"
},
{
"HostIp": "::",
"HostPort": "53"
}
],
"53/udp": [
{
"HostIp": "0.0.0.0",
"HostPort": "53"
},
{
"HostIp": "::",
"HostPort": "53"
}
],
"67/udp": null,
"80/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "10002"
},
{
"HostIp": "::",
"HostPort": "10002"
}
]
},
"Networks": {
"pihole_default": {
"IPAMConfig": null,
"Links": null,
"Aliases": [
"pihole",
"pihole"
],
"DriverOpts": null,
"GwPriority": 0,
"NetworkID": "3d55385c5e7d7d4ca5ddec3f98533d43452cdc2fda68831ac4a16aeb0d42867c",
"EndpointID": "aadb163f607f9247c8ad41f8cadac2282272501c60e3ea7fa31fd2d584271447",
"Gateway": "172.24.0.1",
"IPAddress": "172.24.0.2",
"MacAddress": "7e:48:e2:84:c5:15",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"DNSNames": [
"pihole",
"1d09249f01b0"
]
}
}
}
}
]
###### /tsys-ntp | image=dockurr/chrony | proj=ntp ######
[
{
"Id": "c33ced53142e99743b52fb71e834543017f4312360cfef1fe7fd6857b0676908",
"Created": "2025-06-23T16:51:39.454106229Z",
"Path": "/bin/startup",
"Args": [],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 2109237,
"ExitCode": 0,
"Error": "",
"StartedAt": "2026-07-20T22:55:49.597671587Z",
"FinishedAt": "2026-07-20T22:55:37.650310687Z",
"Health": {
"Status": "healthy",
"FailingStreak": 0,
"Log": [
{
"Start": "2026-07-27T21:44:16.437981113-05:00",
"End": "2026-07-27T21:44:16.501904568-05:00",
"ExitCode": 0,
"Output": "Reference ID : 00000000 ()\nStratum : 0\nRef time (UTC) : Thu Jan 01 00:00:00 1970\nSystem time : 0.525388062 seconds slow of NTP time\nLast offset : +0.000000000 seconds\nRMS offset : 0.000000000 seconds\nFrequency : 0.849 ppm slow\nResidual freq : +0.000 ppm\nSkew : 0.000 ppm\nRoot delay : 1.000000000 seconds\nRoot dispersion : 1.000000000 seconds\nUpdate interval : 0.0 seconds\nLeap status : Not synchronised\n"
},
{
"Start": "2026-07-27T21:44:46.50366458-05:00",
"End": "2026-07-27T21:44:46.566905934-05:00",
"ExitCode": 0,
"Output": "Reference ID : 00000000 ()\nStratum : 0\nRef time (UTC) : Thu Jan 01 00:00:00 1970\nSystem time : 0.525413632 seconds slow of NTP time\nLast offset : +0.000000000 seconds\nRMS offset : 0.000000000 seconds\nFrequency : 0.849 ppm slow\nResidual freq : +0.000 ppm\nSkew : 0.000 ppm\nRoot delay : 1.000000000 seconds\nRoot dispersion : 1.000000000 seconds\nUpdate interval : 0.0 seconds\nLeap status : Not synchronised\n"
},
{
"Start": "2026-07-27T21:45:16.568367435-05:00",
"End": "2026-07-27T21:45:16.632376789-05:00",
"ExitCode": 0,
"Output": "Reference ID : 00000000 ()\nStratum : 0\nRef time (UTC) : Thu Jan 01 00:00:00 1970\nSystem time : 0.525439143 seconds slow of NTP time\nLast offset : +0.000000000 seconds\nRMS offset : 0.000000000 seconds\nFrequency : 0.849 ppm slow\nResidual freq : +0.000 ppm\nSkew : 0.000 ppm\nRoot delay : 1.000000000 seconds\nRoot dispersion : 1.000000000 seconds\nUpdate interval : 0.0 seconds\nLeap status : Not synchronised\n"
},
{
"Start": "2026-07-27T21:45:46.63406538-05:00",
"End": "2026-07-27T21:45:46.695064332-05:00",
"ExitCode": 0,
"Output": "Reference ID : 00000000 ()\nStratum : 0\nRef time (UTC) : Thu Jan 01 00:00:00 1970\nSystem time : 0.525464714 seconds slow of NTP time\nLast offset : +0.000000000 seconds\nRMS offset : 0.000000000 seconds\nFrequency : 0.849 ppm slow\nResidual freq : +0.000 ppm\nSkew : 0.000 ppm\nRoot delay : 1.000000000 seconds\nRoot dispersion : 1.000000000 seconds\nUpdate interval : 0.0 seconds\nLeap status : Not synchronised\n"
},
{
"Start": "2026-07-27T21:46:16.697074212-05:00",
"End": "2026-07-27T21:46:16.763778169-05:00",
"ExitCode": 0,
"Output": "Reference ID : 00000000 ()\nStratum : 0\nRef time (UTC) : Thu Jan 01 00:00:00 1970\nSystem time : 0.525490224 seconds slow of NTP time\nLast offset : +0.000000000 seconds\nRMS offset : 0.000000000 seconds\nFrequency : 0.849 ppm slow\nResidual freq : +0.000 ppm\nSkew : 0.000 ppm\nRoot delay : 1.000000000 seconds\nRoot dispersion : 1.000000000 seconds\nUpdate interval : 0.0 seconds\nLeap status : Not synchronised\n"
}
]
}
},
"Image": "sha256:3b656f2feb55b967a6773337da2f982bc489a463066e2a4d3e82d04e53f13fbc",
"ResolvConfPath": "/var/lib/docker/containers/c33ced53142e99743b52fb71e834543017f4312360cfef1fe7fd6857b0676908/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/c33ced53142e99743b52fb71e834543017f4312360cfef1fe7fd6857b0676908/hostname",
"HostsPath": "/var/lib/docker/containers/c33ced53142e99743b52fb71e834543017f4312360cfef1fe7fd6857b0676908/hosts",
"LogPath": "/var/lib/docker/containers/c33ced53142e99743b52fb71e834543017f4312360cfef1fe7fd6857b0676908/c33ced53142e99743b52fb71e834543017f4312360cfef1fe7fd6857b0676908-json.log",
"Name": "/tsys-ntp",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "docker-default",
"ExecIDs": null,
"HostConfig": {
"Binds": null,
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {}
},
"NetworkMode": "ntp_default",
"PortBindings": {
"123/udp": [
{
"HostIp": "100.103.64.82",
"HostPort": "123"
}
]
},
"RestartPolicy": {
"Name": "always",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"ConsoleSize": [
0,
0
],
"CapAdd": null,
"CapDrop": null,
"CgroupnsMode": "private",
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": [],
"GroupAdd": null,
"IpcMode": "private",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": null,
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": null,
"DeviceCgroupRules": null,
"DeviceRequests": null,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": null,
"PidsLimit": null,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"Mounts": [
{
"Type": "volume",
"Source": "e054c42f042095e22be91432ca87e524fc0ebbc447a800c263c389577e190629",
"Target": "/run/chrony"
},
{
"Type": "volume",
"Source": "8974fb973f2be9c05c1ec6548ffaad0b1caa302972f7567c3fb3a97d59b9076b",
"Target": "/var/lib/chrony"
},
{
"Type": "volume",
"Source": "562da84ce678f8d8b9cc45665099f2562beb4a41c860b5951ef8b88a8f682e41",
"Target": "/etc/chrony"
}
],
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/interrupts",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware",
"/sys/devices/virtual/powercap"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"ID": "c33ced53142e99743b52fb71e834543017f4312360cfef1fe7fd6857b0676908",
"LowerDir": "/var/lib/docker/overlay2/40b6c14e2ca0bdc9b2624ca63e7e7b4ad588098c00e53ebf18b4aac5a132c6db-init/diff:/var/lib/docker/overlay2/6de110c8e8511a542a0541ecba7006ff7fe26ee0e91b738d87fec292a76a5cb1/diff:/var/lib/docker/overlay2/5dc67368f8acabea18fc0be0b07d52e5a82362b5d57119871e3471c509927a73/diff:/var/lib/docker/overlay2/ce6cab3e3329a7148ae6c5e55af761b4b533eac36dcd08cb34d3de88e958d92f/diff",
"MergedDir": "/var/lib/docker/overlay2/40b6c14e2ca0bdc9b2624ca63e7e7b4ad588098c00e53ebf18b4aac5a132c6db/merged",
"UpperDir": "/var/lib/docker/overlay2/40b6c14e2ca0bdc9b2624ca63e7e7b4ad588098c00e53ebf18b4aac5a132c6db/diff",
"WorkDir": "/var/lib/docker/overlay2/40b6c14e2ca0bdc9b2624ca63e7e7b4ad588098c00e53ebf18b4aac5a132c6db/work"
},
"Name": "overlay2"
},
"Mounts": [
{
"Type": "volume",
"Name": "8974fb973f2be9c05c1ec6548ffaad0b1caa302972f7567c3fb3a97d59b9076b",
"Source": "/var/lib/docker/volumes/8974fb973f2be9c05c1ec6548ffaad0b1caa302972f7567c3fb3a97d59b9076b/_data",
"Destination": "/var/lib/chrony",
"Driver": "local",
"Mode": "z",
"RW": true,
"Propagation": ""
},
{
"Type": "volume",
"Name": "562da84ce678f8d8b9cc45665099f2562beb4a41c860b5951ef8b88a8f682e41",
"Source": "/var/lib/docker/volumes/562da84ce678f8d8b9cc45665099f2562beb4a41c860b5951ef8b88a8f682e41/_data",
"Destination": "/etc/chrony",
"Driver": "local",
"Mode": "z",
"RW": true,
"Propagation": ""
},
{
"Type": "volume",
"Name": "e054c42f042095e22be91432ca87e524fc0ebbc447a800c263c389577e190629",
"Source": "/var/lib/docker/volumes/e054c42f042095e22be91432ca87e524fc0ebbc447a800c263c389577e190629/_data",
"Destination": "/run/chrony",
"Driver": "local",
"Mode": "z",
"RW": true,
"Propagation": ""
}
],
"Config": {
"Hostname": "c33ced53142e",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": true,
"AttachStderr": true,
"ExposedPorts": {
"123/udp": {}
},
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"NTP_SERVERS=pool.ntp.org",
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"NTP_DIRECTIVES=ratelimit\\nrtcsync"
],
"Cmd": null,
"Healthcheck": {
"Test": [
"CMD-SHELL",
"chronyc -n tracking || exit 1"
]
},
"Image": "dockurr/chrony",
"Volumes": {
"/etc/chrony": {},
"/run/chrony": {},
"/var/lib/chrony": {}
},
"WorkingDir": "/",
"Entrypoint": [
"/bin/startup"
],
"Labels": {
"com.docker.compose.config-hash": "b9a2451b9ec10e82b113b417df6060f18aab234f117063b84ac7a29455f2feb0",
"com.docker.compose.container-number": "1",
"com.docker.compose.depends_on": "",
"com.docker.compose.image": "sha256:3b656f2feb55b967a6773337da2f982bc489a463066e2a4d3e82d04e53f13fbc",
"com.docker.compose.oneoff": "False",
"com.docker.compose.project": "ntp",
"com.docker.compose.project.config_files": "/root/NTP/docker-compose.yml",
"com.docker.compose.project.working_dir": "/root/NTP",
"com.docker.compose.replace": "61f92d4c43f32567409816af5e3c1c9622aedcb5e35b27b25980282fa3c3e1b3",
"com.docker.compose.service": "ntp",
"com.docker.compose.version": "2.36.2",
"org.opencontainers.image.created": "2025-06-12T01:51:48.447Z",
"org.opencontainers.image.description": "🕒 chronyd NTP server in a Docker container.",
"org.opencontainers.image.licenses": "MIT",
"org.opencontainers.image.revision": "43fb0f2b381bccfef5123971a51baf450ab24464",
"org.opencontainers.image.source": "https://github.com/dockur/chrony",
"org.opencontainers.image.title": "Chrony",
"org.opencontainers.image.url": "https://github.com/dockur/chrony",
"org.opencontainers.image.version": "4.7"
}
},
"NetworkSettings": {
"SandboxID": "ccaa71c75942abc56df6ae1c89a8c2ae91e769ed52eab64635a63f8ee996f782",
"SandboxKey": "/var/run/docker/netns/ccaa71c75942",
"Ports": {},
"Networks": {}
}
}
]
=== PI-HOLE internal config (sudo docker exec, READ-ONLY) ===
-- ls /etc/pihole --
total 2545492
drwxr-xr-x 7 pihole pihole 4096 Jul 27 20:57 .
drwxr-xr-x 1 root root 4096 Feb 6 18:32 ..
-rw-r----- 1 pihole pihole 65 Jun 23 2025 adlists.list
-rw-r----- 1 pihole pihole 44 Jul 27 20:57 cli_pw
drwxr-xr-x 2 pihole pihole 4096 Apr 6 10:07 config_backups
-rw-r----- 1 pihole pihole 0 Jun 18 2025 dhcp.leases
-rw-r----- 1 pihole pihole 5753 Apr 6 10:07 dnsmasq.conf
-rw-r----- 1 pihole pihole 5500928 Jul 26 04:51 gravity.db
drwxr-xr-x 2 pihole pihole 4096 Jul 26 04:51 gravity_backups
-rw-r----- 1 pihole pihole 4751360 Jul 19 04:51 gravity_old.db
drwxr-xr-x 2 pihole pihole 4096 Jun 18 2025 hosts
drwxr-xr-x 2 pihole pihole 4096 Jul 26 04:51 listsCache
-rw-r----- 1 root root 421 Jul 27 20:57 logrotate
drwxr-xr-x 2 pihole pihole 4096 Jun 18 2025 migration_backup
-rw-r----- 1 pihole pihole 2591891456 Jul 27 21:40 pihole-FTL.db
-rw-r----- 1 pihole pihole 32768 Jul 27 21:46 pihole-FTL.db-shm
-rw-r----- 1 pihole pihole 4272472 Jul 27 21:46 pihole-FTL.db-wal
-rw-r----- 1 pihole pihole 55996 Apr 6 10:07 pihole.toml
-rw------- 1 pihole pihole 713 Jun 18 2025 tls.crt
-rw------- 1 pihole pihole 1734 Jun 18 2025 tls.pem
-rw------- 1 pihole pihole 733 Jun 18 2025 tls_ca.crt
-rw-r--r-- 1 pihole pihole 376 Jul 27 20:57 versions
-- ls /etc/dnsmasq.d --
ls: cannot access '/etc/dnsmasq.d': No such file or directory
--- /etc/pihole/setupVars.conf ---
cat: /etc/pihole/setupVars.conf: No such file or directory
--- /etc/pihole/pihole-FTL.conf ---
cat: /etc/pihole/pihole-FTL.conf: No such file or directory
--- /etc/pihole/adlists.list ---
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
--- /etc/pihole/custom.list ---
cat: /etc/pihole/custom.list: No such file or directory
--- /etc/pihole/local.list ---
cat: /etc/pihole/local.list: No such file or directory
--- /etc/pihole/regex.list ---
cat: /etc/pihole/regex.list: No such file or directory
--- /etc/pihole/dhcp.leases ---
--- /etc/pihole/static_ip.conf ---
cat: /etc/pihole/static_ip.conf: No such file or directory
-- /etc/dnsmasq.d/* --
--- /etc/dnsmasq.d/* ---
cat: '/etc/dnsmasq.d/*': No such file or directory
-- pihole version --
Core version is v6.1.2 (Latest: v6.4.3)
Web version is v6.2.1 (Latest: v6.6)
FTL version is v6.2.2 (Latest: v6.7)
-- gravity row counts --
adlist=domainlist=client=group=info=-- adlist addresses --
OCI runtime exec failed: exec failed: unable to start container process: exec: "sqlite3": executable file not found in $PATH
-- domainlist (allow+deny, first 60) --
OCI runtime exec failed: exec failed: unable to start container process: exec: "sqlite3": executable file not found in $PATH
=== CHRONY/NTP container config (tsys-ntp) ===
--- chrony.conf ---
# https://github.com/dockur/chrony
# chrony.conf file generated by startup script
# located at /bin/startup
# time servers provided by NTP_SERVER environment variables.
server pool.ntp.org iburst
driftfile /var/lib/chrony/chrony.drift
makestep 0.1 3
ratelimit
rtcsync
allow all
--- ls /etc ---
total 176
drwxr-xr-x 1 root root 4096 Jun 23 2025 .
drwxr-xr-x 1 root root 4096 Jun 23 2025 ..
-rw-r--r-- 1 root root 21 Jan 8 2025 alpine-release
drwxr-xr-x 1 root root 4096 Jun 12 2025 apk
drwxr-xr-x 2 root root 4096 Jan 8 2025 busybox-paths.d
drwxr-xr-x 2 chrony chrony 4096 Jun 23 2025 chrony
drwxr-xr-x 2 root root 4096 Jan 8 2025 crontabs
-rw-r--r-- 1 root root 89 Jan 4 2025 fstab
-rw-r--r-- 1 root root 530 Jun 12 2025 group
-rw-r--r-- 1 root root 524 Jun 12 2025 group-
-rw-r--r-- 1 root root 13 Jul 20 22:55 hostname
-rw-r--r-- 1 root root 148 Jul 20 22:55 hosts
-rw-r--r-- 1 root root 570 Jan 4 2025 inittab
-rw-r--r-- 1 root root 77 Jan 8 2025 issue
drwxr-xr-x 1 root root 4096 Jun 12 2025 logrotate.d
drwxr-xr-x 2 root root 4096 Jan 8 2025 modprobe.d
-rw-r--r-- 1 root root 15 Jan 4 2025 modules
drwxr-xr-x 2 root root 4096 Jan 8 2025 modules-load.d
-rw-r--r-- 1 root root 284 Jan 4 2025 motd
lrwxrwxrwx 1 root root 12 Jun 23 2025 mtab -> /proc/mounts
drwxr-xr-x 8 root root 4096 Jan 8 2025 network
-rw-r--r-- 1 root root 205 Jan 4 2025 nsswitch.conf
drwxr-xr-x 2 root root 4096 Jan 8 2025 opt
lrwxrwxrwx 1 root root 21 Jan 8 2025 os-release -> ../usr/lib/os-release
-rw-r--r-- 1 root root 756 Jun 12 2025 passwd
-rw-r--r-- 1 root root 702 Jan 4 2025 passwd-
drwxr-xr-x 7 root root 4096 Jan 8 2025 periodic
drwxr-xr-x 2 root root 4096 Jun 12 2025 pkcs11
-rw-r--r-- 1 root root 547 Jan 4 2025 profile
MS Name/IP address Stratum Poll Reach LastRx Last sample
===============================================================================
Reference ID : 00000000 ()
Stratum : 0
Ref time (UTC) : Thu Jan 01 00:00:00 1970
System time : 0.525492370 seconds slow of NTP time
Last offset : +0.000000000 seconds
RMS offset : 0.000000000 seconds
Frequency : 0.849 ppm slow
Residual freq : +0.000 ppm
Skew : 0.000 ppm
Root delay : 1.000000000 seconds
Root dispersion : 1.000000000 seconds
Update interval : 0.0 seconds
Leap status : Not synchronised
-- bare metal ntpsec.conf --
driftfile /var/lib/ntp/ntp.drift
leapfile /usr/share/zoneinfo/leap-seconds.list
server pfvsvrpi.knel.net
restrict 127.0.0.1
restrict ::1
=== TECHNITIUM volumes ===
--- volume dns_tsys-dns-config -> /var/lib/docker/volumes/dns_tsys-dns-config/_data ---
/var/lib/docker/volumes/dns_tsys-dns-config/_data/stats/2025062320.stat
/var/lib/docker/volumes/dns_tsys-dns-config/_data/stats/2025062321.stat
/var/lib/docker/volumes/dns_tsys-dns-config/_data/dns.config
/var/lib/docker/volumes/dns_tsys-dns-config/_data/auth.config
/var/lib/docker/volumes/dns_tsys-dns-config/_data/logs/2025-06-23.log
/var/lib/docker/volumes/dns_tsys-dns-config/_data/scopes/Default.scope
/var/lib/docker/volumes/dns_tsys-dns-config/_data/log.config
/var/lib/docker/volumes/dns_tsys-dns-config/_data/self-signed-cert.pfx
/var/lib/docker/volumes/dns_tsys-dns-config/_data/cache.bin
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/199.86.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/knel.net.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/119.127.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/46.96.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/181.103.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/184.108.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/211.114.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/145.105.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/97.82.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/194.67.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/2.108.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/75.110.100.in-addr.arpa.zone
/var/lib/docker/volumes/dns_tsys-dns-config/_data/zones/64.103.100.in-addr.arpa.zone
-- config dir listing --
-- config.xml --
--- volume dns_tyss-dns-config -> /var/lib/docker/volumes/dns_tyss-dns-config/_data ---
-- config dir listing --
-- config.xml --
=== DONE ===