Closed Kris0x0000 closed 2 months ago
What do you have in - ./zbx_env/etc/zabbix/apache.conf:/etc/zabbix/apache.conf?
What do you have in - ./zbx_env/etc/zabbix/apache.conf:/etc/zabbix/apache.conf?
./zbx_env/etc/zabbix/apache.conf :
<VirtualHost *:8080>
DocumentRoot /usr/share/zabbix/
ServerName zabbix
DirectoryIndex index.php
AddType application/x-httpd-php .php .php3 .php4 .php5 .phtml
AddType application/x-httpd-php-source .phps
<Directory "/usr/share/zabbix">
Options FollowSymLinks
AllowOverride None
Require all granted
</Directory>
<Directory "/usr/share/zabbix/conf">
Require all denied
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
<Directory "/usr/share/zabbix/app">
Require all denied
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
<Directory "/usr/share/zabbix/include">
Require all denied
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
<Directory "/usr/share/zabbix/local">
Require all denied
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
<Directory "/usr/share/zabbix/locale">
Require all denied
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
<Directory "/usr/share/zabbix/vendor">
Require all denied
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
</VirtualHost>
Looks like some network issue. Do you see your request in the http access log? Maybe it is better to use podman instead of docker on Rocky 8?
Hi, finally I was able to resolve the issue. The resolution was to change subnet for zbx_net_frontend for any other than 172.16.238.0/24. It looks like there was same orphaned network interfaces in the system. Even though they were not listed by "docker networks ls" they were still in the system "ip a".
changed from this:
networks:
zbx_net_frontend:
driver: bridge
driver_opts:
com.docker.network.enable_ipv6: "true"
ipam:
driver: default
config:
- subnet: 172.16.238.0/24
zbx_net_backend:
driver: bridge
driver_opts:
com.docker.network.enable_ipv6: "true"
internal: true
ipam:
driver: default
config:
- subnet: 172.16.239.0/24
to this:
networks:
zbx_net_frontend:
driver: bridge
driver_opts:
com.docker.network.enable_ipv6: "true"
ipam:
driver: default
config:
- subnet: 172.16.233.0/24
zbx_net_backend:
driver: bridge
driver_opts:
com.docker.network.enable_ipv6: "true"
internal: true
ipam:
driver: default
config:
- subnet: 172.16.239.0/24
ip a | grep -C2 "172.16.238."
4: br-1ee8472c9885: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:ff:54:35:92 brd ff:ff:ff:ff:ff:ff
inet 172.16.238.1/24 brd 172.16.238.255 scope global br-1ee8472c9885
valid_lft forever preferred_lft forever
5: br-24974ef4178c: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
--
805: br-7d1c7e8f727f: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:cf:fc:ea:16 brd ff:ff:ff:ff:ff:ff
inet 172.16.238.1/24 brd 172.16.238.255 scope global br-7d1c7e8f727f
valid_lft forever preferred_lft forever
inet6 fe80::42:cfff:fefc:ea16/64 scope link
Great! But strange that you are able to create multiple networks with the same IP ranges.
I'm using dockerized zabbix 5.0. It've worked fine until in-place upgrade from Centos7 to Rocky linux 8. Now it works only from inside of the zabbix-web-apache-mysql container. From the docker host it has no connection.
curl from the web container:
curl from the docker host:
lsof -Pi
docker ps | grep zabbix
firewall-cmd --zone=docker --list-all
docker-compose.yaml: