Merge pull request #24 from pgollor/pgollor-patch-1
use docker config file for syslogsettings instead of change daemon start script
Dieser Commit ist enthalten in:
Commit
a406ada03a
1 geänderte Dateien mit 19 neuen und 19 gelöschten Zeilen
|
@ -1,4 +1,4 @@
|
||||||
Enable Rsyslog to receive logs on 524/tcp:
|
Enable Rsyslog to receive logs on 524/tcp at `rsyslog.conf`:
|
||||||
|
|
||||||
```
|
```
|
||||||
# This setting depends on your Rsyslog version and configuration format.
|
# This setting depends on your Rsyslog version and configuration format.
|
||||||
|
@ -21,32 +21,32 @@ Restart rsyslog after enabling the TCP listener.
|
||||||
Now setup Docker daemon to start with the syslog driver.
|
Now setup Docker daemon to start with the syslog driver.
|
||||||
This enables the syslog driver for all containers!
|
This enables the syslog driver for all containers!
|
||||||
|
|
||||||
Debian users can change the startup configuration in `/etc/default/docker` while CentOS users find it in `/etc/sysconfig/docker`:
|
Linux users can add or change the configuration in `/etc/docker/daemon.json`. Windows users please have a look at the [docker documentation](https://docs.docker.com/engine/reference/commandline/dockerd//#windows-configuration-file) :
|
||||||
```
|
```
|
||||||
|
{
|
||||||
...
|
...
|
||||||
DOCKER_OPTS="--log-driver=syslog --log-opt syslog-address=tcp://127.0.0.1:524"
|
"log-driver": "syslog",
|
||||||
|
"log-opts": {
|
||||||
|
"syslog-address": "tcp://127.0.0.1:524"
|
||||||
|
}
|
||||||
...
|
...
|
||||||
|
}
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
!!! warning
|
|
||||||
For some reason Ubuntu 16.04 and some, but not all, systemd based distros do not read the defaults file parameters.
|
|
||||||
|
|
||||||
Just run `systemctl edit docker.service` and add the following content to fix it.
|
|
||||||
|
|
||||||
!!! info
|
!!! info
|
||||||
If "systemctl edit" is not available, just copy the content to `/etc/systemd/system/docker.service.d/override.conf`.
|
If you prefere the udp protocol use:
|
||||||
|
|
||||||
The first empty ExecStart parameter is not a mistake.
|
```
|
||||||
|
$ModLoad imudp
|
||||||
```
|
$UDPServerRun 524
|
||||||
[Service]
|
```
|
||||||
EnvironmentFile=/etc/default/docker
|
|
||||||
ExecStart=
|
at `rsyslog.conf` and `"syslog-address": "udp://127.0.0.1:524"` at `daemon.json`.
|
||||||
ExecStart=/usr/bin/docker daemon -H fd:// $DOCKER_OPTS
|
|
||||||
```
|
|
||||||
|
|
||||||
Restart the Docker daemon and run `docker-compose down && docker-compose up -d` to recreate the containers.
|
Restart the Docker daemon and run `docker-compose down && docker-compose up -d` to recreate the containers.
|
||||||
|
|
||||||
|
|
||||||
### Fail2ban
|
### Fail2ban
|
||||||
|
|
||||||
**This is a subsection of "Log to Syslog", which is required for Fail2ban to work.**
|
**This is a subsection of "Log to Syslog", which is required for Fail2ban to work.**
|
||||||
|
|
Laden …
In neuem Issue referenzieren