My Docker Stack

finity · February 22, 2018, 11:10pm

It was a heck of a try:

2018-02-22 18:08:48 ERROR (MainThread) [homeassistant.config] Invalid config for [http]: not a file for dictionary value @ data[‘http’][‘ssl_certificate’]. Got ‘/certs/live/mydomain.duckdns.org/fullchain1.pem’
not a file for dictionary value @ data[‘http’][‘ssl_key’]. Got ‘/certs/live/mydomain.duckdns.org/privkey1.pem’.

flamingm0e · February 22, 2018, 11:29pm

And inside the home assistant docker container /certs/live/mydomain.duckdns.org/ exists?

finity · February 22, 2018, 11:32pm

yup

[screenshot removed]

finity · February 22, 2018, 11:35pm

and just to be sure, i enter the container by:

sudo docker exec -it home-assistant /bin/bash

correct?

flamingm0e · February 22, 2018, 11:42pm

Are you using Portainer? It’s got a GUI for it.

finity · February 22, 2018, 11:47pm

i have it installed but i’m not accessing the container with it.

I looked around in it and can’t find the equivalent information in the GUI page for the container

kwetiaw · February 23, 2018, 12:15am

i recently moved from venv to docker on my raspi3. works well except the SSL certs issue that I can see few other have the same problem.

how do you plan to upgrade your HASS? do you destroy the container and recreate? or update HASS within the container?
also, i made changes to the original container, such as ability to shutdown another linux computer, that requires generating ssh key and transfer it across the other linux computer. any suggestion what to do so that I dont have to keep generating keys everytime i destory and create new container?

Thanks!

flamingm0e · February 23, 2018, 12:34am

There’s a GUI to console in.

It’s a container. You don’t modify the contents of the container. To update you just docker-compose down docker-compose pull docker-compose up -d.

If you aren’t running docker compose, just docker kill, docker rm, docker pull homeassistant/hhome-assistant, and the docker command you used to create it

flamingm0e · February 23, 2018, 12:34am

Never modify the container. Use bind mounts

mconway · February 23, 2018, 3:53am

I had run HA in a container for a while before Tradfri came out, then it wasn’t working so I had moved away from it. This post inspired me to get everything working in containers again. Everything is back up, but 2 of my scripts are nonfunctional. Does anyone have experience with the following:

Using GIT to pull configs from a docker container? (configs are committed to repo, then pulled down with a script through HASS)
Upgrade the HASS container from a script triggered within HASS? (This might be impossible. not sure)

flamingm0e · February 23, 2018, 4:25am

This can be a little tricky but you can do this with a combo. Ha-dockermon combined with a docker container that is mounted to the same volume bind mount as your ha config. So a single docker container that does a git pull, and call the start/restart of that script from home assistant with ha-dockermon switch.

Maybe a script that SSHes into the host itself, does a docker pull, then automates the docker kill, rm, and start?

TheAK · February 23, 2018, 6:11am

You might be able to control the Hass Docker container with something like this:

github.com

philhawthorne/ha-dockermon/blob/master/readme.md

HA Dockermon
============

[![Docker Pulls](https://img.shields.io/docker/pulls/philhawthorne/ha-dockermon.svg)](https://dockerhub.com/philhawthorne/ha-dockermon) [![Build Status](https://travis-ci.org/philhawthorne/ha-dockermon.svg?branch=master)](https://travis-ci.org/philhawthorne/ha-dockermon) [![license](https://img.shields.io/github/license/philhawthorne/ha-dockermon.svg)](https://dockerhub.com/philhawthorne/ha-dockermon)

[![Buy me a coffee][buymeacoffee-icon]][buymeacoffee]


This is a simple Node service which checks the status of a Docker Container and returns a RESTful response. It can also be used to issue `start` `stop` `pause` `unpause` and `restart` commands. The primary purpose of this service is to interface with [Home Assistant](https://home-assistant.io) on a [Synology NAS](http://amzn.to/2FAC28A).

## Supported Features
As of this release, you can:

* Get the status of a container (running, stopped, paused).
* Start, stop, pause, or unpause a container by issuing a `POST` request.
* Start, stop, pause, or unpause a container by issuing a `GET` requst.
* Restart a container by making a `GET` request to a URL for the container (details below).
* Execute commands inside a container using the `/exec` endpoint of a container.

## Getting Started

This file has been truncated. show original

Or, like @flamingm0e said, just use a shell_command in hass that SSHes into the host and automates the update process.

kwetiaw · February 23, 2018, 10:46am

yep i got that, I have -v bind mounts to host directory where HASS config are stored. However, to allow the container to shutdown/suspend another computer, you need to allow the container (HASS within the container) to be able to connect via ssh to a linux machine and execute a command remotely.

do you have this kind of setup by any chance? Here’s the link to Wake On Lan page that also shows a guide on how to suspend a linux machine - https://home-assistant.io/components/switch.wake_on_lan/

cheers

cnf · February 23, 2018, 11:05am

For anyone interested, i also have a Rancher setup for home-assistant:

finity · February 23, 2018, 11:45am

yay!

I finally got it!

Here is the config that worked:

http:
  api_password: !secret http_password
  server_port: 8124
  base_url: mydomain.duckdns.org:8124
  ssl_certificate: /config/certs/live/mydomain.duckdns.org/fullchain.pem
  ssl_key: /config/certs/live/mydoman.duckdns.org/privkey.pem

notice the slight difference by adding the /config/… at the beginning of the path.

kwetiaw · February 23, 2018, 11:48am

interesting, might give it a try and report back.

Corey_Johnson · February 23, 2018, 2:04pm

What does it do?

flamingm0e · February 23, 2018, 2:08pm

That makes no sense whatsoever.

This is from an earlier attempt when you mounted the wrong location…

cnf · February 23, 2018, 2:16pm

If you run https://www.rancher.com as your docker manager, you can import the catalogue, and run home-assistant and some dependant services with a single click.

If you don’t run rancher, it is useless to you

finity · February 23, 2018, 2:38pm

It’s using the /docker/ha-config/certs directory from the try before that one when i used:

I don’t know why it worked.

I’m just happy it did.

It’s just unfortunate that one success brings the next challenge because now the ssl-cert-check command i use doesn’t find the new certs because the command is being run from inside the HA container on a command installed outside the container on the host. or at least that’s why I’m thinking it doesn’t work. i really have no idea…