unbound-docker VS docker-radarr

version: "3" # More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/ networks: dns_net: driver: bridge ipam: config: - subnet: 10.2.0.0/24 services: pihole: depends_on: [unbound] container_name: pihole image: pihole/pihole:latest hostname: pihole networks: dns_net: ipv4_address: 10.2.0.100 ports: - "5335:53/tcp" - "5335:53/udp" - "7000:80/tcp" environment: TZ: ${TZ} WEBPASSWORD: ${PWD} FTLCONF_LOCAL_IPV4: ${HOST_IP} # Set to server's LAN IP, used by web block modes. PIHOLE_DNS_: 10.2.0.200 # Upstream DNS server(s) for Pi-hole to forward queries to, separated by a semicolon DNSMASQ_LISTENING: all # "Listen on all interfaces, permit all origins" # Volumes store your data between container upgrades volumes: - /var/lib/docker/volumes/pihole/etc-pihole:/etc/pihole - /var/lib/docker/volumes/pihole/etc-dnsmasq.d:/etc/dnsmasq.d healthcheck: disable: true restart: unless-stopped unbound: # https://github.com/MatthewVance/unbound-docker container_name: unbound image: mvance/unbound:latest hostname: unbound networks: dns_net: ipv4_address: 10.2.0.200 ports: - "${HOST_IP}:53:53/udp" - "${HOST_IP}:53:53/tcp" healthcheck: disable: true restart: unless-stopped

I'm not an unbound expert, but as far as I understand MatthewVance's image, unbound is already configured properly: https://github.com/MatthewVance/unbound-docker/blob/master/1.17.1/data/unbound.sh. I didn't want to go into detail how pi-hole or unbound works, since I think there is enough documentation on that.

I am successfully running pihole on a different machine, but am planning to migrate to a new docker host. I figured this would be a good time to configure pihole with unbound. I am attempting to run unbound in a docker container running on Opensuse leap and I am using this docker image.

You can also use Unbound for recursive DNS in a docker container: https://github.com/MatthewVance/unbound-docker

https://github.com/MatthewVance/unbound-docker/blob/master/1.14.0/data/unbound.sh

# https://github.com/MatthewVance/unbound-docker unbound: container_name: unbound environment: PGID: $PGID PUID: $PUID TZ: $TZ image: mvance/unbound networks: smarthome: ipv4_address: 172.18.0.6 restart: always

# https://github.com/linuxserver/docker-radarr radarr: image: lscr.io/linuxserver/radarr:latest container_name: radarr environment: - PUID=13003 - PGID=13000 - UMASK=002 - TZ=${TIMEZONE} volumes: - ${ROOT_DIR}/docker/sonarr-config:/config - ${ROOT_DIR}/data:/data ports: - 7878:7878 restart: unless-stopped

https://www.linuxserver.io/ generally has some good examples of docs for docker images. https://github.com/linuxserver/docker-radarr and the corresponding https://hub.docker.com/r/linuxserver/radarr are a good example.

After all this, there were still some permission issues (eg. as mentioned here: https://github.com/linuxserver/docker-radarr/issues/30) but setting the appropriate UMASK/PUID/GUID appears to have fixed it. This was a bit of trial and error, but what's in my Docker Compose works for me.

{ "AppArmorProfile": "", "Args": [], "Config": { "AttachStderr": true, "AttachStdin": true, "AttachStdout": true, "Cmd": null, "Domainname": "", "Entrypoint": [ "/init" ], "Env": [ "PUID=999", "PGID=999", "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "HOME=/root", "LANGUAGE=en_US.UTF-8", "LANG=en_US.UTF-8", "TERM=xterm", "XDG_CONFIG_HOME=/config/xdg" ], "ExposedPorts": { "7878/tcp": {} }, "Hostname": "f9b680778e37", "Image": "lscr.io/linuxserver/radarr:latest", "Labels": { "build_version": "Linuxserver.io version:- 4.0.5.5981-ls133 Build-date:- 2022-03-05T05:01:12+01:00", "maintainer": "thelamer", "org.opencontainers.image.authors": "linuxserver.io", "org.opencontainers.image.created": "2022-03-05T05:01:12+01:00", "org.opencontainers.image.description": "[Radarr](https://github.com/Radarr/Radarr) - A fork of Sonarr to work with movies à la Couchpotato. ", "org.opencontainers.image.documentation": "https://docs.linuxserver.io/images/docker-radarr", "org.opencontainers.image.licenses": "GPL-3.0-only", "org.opencontainers.image.ref.name": "9d1b08089543412b9392f2f1e87df5937ea855d2", "org.opencontainers.image.revision": "9d1b08089543412b9392f2f1e87df5937ea855d2", "org.opencontainers.image.source": "https://github.com/linuxserver/docker-radarr", "org.opencontainers.image.title": "Radarr", "org.opencontainers.image.url": "https://github.com/linuxserver/docker-radarr/packages", "org.opencontainers.image.vendor": "linuxserver.io", "org.opencontainers.image.version": "4.0.5.5981-ls133" }, "OnBuild": null, "OpenStdin": true, "StdinOnce": true, "Tty": true, "User": "", "Volumes": { "/config": {}, "/downloads": {}, "/etc/localtime": {}, "/movies": {}, "/shared": {} }, "WorkingDir": "" }, "Created": "2022-03-11T18:20:26.19706909Z", "Driver": "btrfs", "ExecIDs": null, "GraphDriver": { "Data": null, "Name": "btrfs" }, "HostConfig": { "AutoRemove": false, "Binds": [ "/share/Data/media/movies:/movies", "/share/Data:/shared", "/share/Data/downloads/.config:/config", "/share/Data/downloads:/downloads", "/etc/localtime:/etc/localtime:ro" ], "BlkioDeviceReadBps": null, "BlkioDeviceReadIOps": null, "BlkioDeviceWriteBps": null, "BlkioDeviceWriteIOps": null, "BlkioWeight": 0, "BlkioWeightDevice": [], "CapAdd": [ "AUDIT_WRITE", "CHOWN", "DAC_OVERRIDE", "FOWNER", "FSETID", "KILL", "MKNOD", "NET_BIND_SERVICE", "NET_RAW", "SETFCAP", "SETGID", "SETPCAP", "SETUID", "SYS_CHROOT" ], "CapDrop": [ "AUDIT_CONTROL", "BLOCK_SUSPEND", "DAC_READ_SEARCH", "IPC_LOCK", "IPC_OWNER", "LEASE", "LINUX_IMMUTABLE", "MAC_ADMIN", "MAC_OVERRIDE", "NET_ADMIN", "NET_BROADCAST", "SYSLOG", "SYS_ADMIN", "SYS_BOOT", "SYS_MODULE", "SYS_NICE", "SYS_PACCT", "SYS_PTRACE", "SYS_RAWIO", "SYS_RESOURCE", "SYS_TIME", "SYS_TTY_CONFIG", "WAKE_ALARM" ], "Cgroup": "", "CgroupParent": "", "CgroupnsMode": "host", "ConsoleSize": [ 0, 0 ], "ContainerIDFile": "", "CpuCount": 0, "CpuPercent": 0, "CpuPeriod": 0, "CpuQuota": 0, "CpuRealtimePeriod": 0, "CpuRealtimeRuntime": 0, "CpuShares": 0, "CpusetCpus": "", "CpusetMems": "", "DeviceCgroupRules": null, "DeviceRequests": null, "Devices": [], "Dns": [], "DnsOptions": [], "DnsSearch": [], "ExtraHosts": [], "GroupAdd": null, "IOMaximumBandwidth": 0, "IOMaximumIOps": 0, "IpcMode": "private", "Isolation": "", "KernelMemory": 0, "KernelMemoryTCP": 0, "Links": null, "LogConfig": { "Config": {}, "Type": "json-file" }, "MaskedPaths": [ "/proc/asound", "/proc/acpi", "/proc/kcore", "/proc/keys", "/proc/latency_stats", "/proc/timer_list", "/proc/timer_stats", "/proc/sched_debug", "/proc/scsi", "/sys/firmware" ], "Memory": 0, "MemoryReservation": 0, "MemorySwap": 0, "MemorySwappiness": null, "NanoCpus": 0, "NetworkMode": "bridge", "OomKillDisable": false, "OomScoreAdj": 0, "PidMode": "", "PidsLimit": null, "PortBindings": { "7878/tcp": [ { "HostIp": "", "HostPort": "17878" } ] }, "Privileged": false, "PublishAllPorts": false, "ReadonlyPaths": [ "/proc/bus", "/proc/fs", "/proc/irq", "/proc/sys", "/proc/sysrq-trigger" ], "ReadonlyRootfs": false, "RestartPolicy": { "MaximumRetryCount": 0, "Name": "unless-stopped" }, "Runtime": "runc", "SecurityOpt": null, "ShmSize": 67108864, "UTSMode": "", "Ulimits": null, "UsernsMode": "", "VolumeDriver": "", "VolumesFrom": null }, "HostnamePath": "/volume1/.@plugins/AppCentral/docker-ce/docker_lib/containers/77cef6fd87c9be15132552c519f0f1acc24240fb6ea195e75769958db207ca9a/hostname", "HostsPath": "/volume1/.@plugins/AppCentral/docker-ce/docker_lib/containers/77cef6fd87c9be15132552c519f0f1acc24240fb6ea195e75769958db207ca9a/hosts", "Id": "77cef6fd87c9be15132552c519f0f1acc24240fb6ea195e75769958db207ca9a", "Image": "sha256:028dd147feca4a87899c98f8cf08a73523d920fb78e01e39405f40098f3cc696", "LogPath": "/volume1/.@plugins/AppCentral/docker-ce/docker_lib/containers/77cef6fd87c9be15132552c519f0f1acc24240fb6ea195e75769958db207ca9a/77cef6fd87c9be15132552c519f0f1acc24240fb6ea195e75769958db207ca9a-json.log", "MountLabel": "", "Mounts": [ { "Destination": "/downloads", "Mode": "", "Propagation": "rprivate", "RW": true, "Source": "/share/Data/downloads", "Type": "bind" }, { "Destination": "/etc/localtime", "Mode": "ro", "Propagation": "rprivate", "RW": false, "Source": "/etc/localtime", "Type": "bind" }, { "Destination": "/movies", "Mode": "", "Propagation": "rprivate", "RW": true, "Source": "/share/Data/media/movies", "Type": "bind" }, { "Destination": "/shared", "Mode": "", "Propagation": "rprivate", "RW": true, "Source": "/share/Data", "Type": "bind" }, { "Destination": "/config", "Mode": "", "Propagation": "rprivate", "RW": true, "Source": "/share/Data/downloads/.config", "Type": "bind" } ], "Name": "/Radarr", "NetworkSettings": { "Bridge": "", "EndpointID": "76cd5371490e3bcb3f558aa59b842357581050075daa59957778c0de57208bd6", "Gateway": "172.17.0.1", "GlobalIPv6Address": "", "GlobalIPv6PrefixLen": 0, "HairpinMode": false, "IPAddress": "172.17.0.3", "IPPrefixLen": 16, "IPv6Gateway": "", "LinkLocalIPv6Address": "", "LinkLocalIPv6PrefixLen": 0, "MacAddress": "02:42:ac:11:00:03", "Networks": { "bridge": { "Aliases": null, "DriverOpts": null, "EndpointID": "76cd5371490e3bcb3f558aa59b842357581050075daa59957778c0de57208bd6", "Gateway": "172.17.0.1", "GlobalIPv6Address": "", "GlobalIPv6PrefixLen": 0, "IPAMConfig": {}, "IPAddress": "172.17.0.3", "IPPrefixLen": 16, "IPv6Gateway": "", "Links": null, "MacAddress": "02:42:ac:11:00:03", "NetworkID": "fb477246253bd2671a590289ecc73e3cf4c8882836c48423ec711a3c50cc90a8" } }, "Ports": { "7878/tcp": [ { "HostIp": "0.0.0.0", "HostPort": "17878" }, { "HostIp": "::", "HostPort": "17878" } ] }, "SandboxID": "abb752788bfab311d032f1da5b4ec8897b35e6f4be4a27ec7dfa66a60b23229e", "SandboxKey": "/var/run/docker/netns/abb752788bfa", "SecondaryIPAddresses": null, "SecondaryIPv6Addresses": null }, "Path": "/init", "Platform": "linux", "Portainer": { "ResourceControl": { "Id": 59, "ResourceId": "77cef6fd87c9be15132552c519f0f1acc24240fb6ea195e75769958db207ca9a", "SubResourceIds": [], "Type": 1, "UserAccesses": [], "TeamAccesses": [], "Public": false, "AdministratorsOnly": true, "System": false } }, "ProcessLabel": "", "ResolvConfPath": "/volume1/.@plugins/AppCentral/docker-ce/docker_lib/containers/77cef6fd87c9be15132552c519f0f1acc24240fb6ea195e75769958db207ca9a/resolv.conf", "RestartCount": 0, "State": { "Dead": false, "Error": "", "ExitCode": 0, "FinishedAt": "0001-01-01T00:00:00Z", "OOMKilled": false, "Paused": false, "Pid": 32095, "Restarting": false, "Running": true, "StartedAt": "2022-03-11T18:21:54.75609455Z", "Status": "running" } }

Looks like the reverse proxy address redirects to the local address after the 4.0.4.5922-ls130 update. It does this on Chrome and Edge.

# https://github.com/linuxserver/docker-radarr radarr4k: container_name: radarr4k environment: PGID: $PLEX_PGID PUID: $PLEX_PUID TZ: $TZ image: ghcr.io/linuxserver/radarr networks: smarthome: ipv4_address: 172.18.0.14 restart: always volumes: - $USERDIR2/radarr4k:/config - $STORAGE/4K_HDR_Movies:/movies - $DOWNLOAD/radarrFourk:/downloads

Radarr for movies

I just installed Radarr in docker, and am trying to set set it up. I used the linuxserver image, and make the movies directory /mnt/disk1 (my smb share for media is mounted there). If I go to Settings>Media Management>Add root folder, and go into my movies folder (as a test I left some movies in there and they showed up correctly), I should be able to press the ok button and it should add the directory. But, it doesn't. It just closes the 'file browser' window and the directory I just pointed to doesn't show under Root Folders.