no logs in docker?

[Asif Bacchus]

This is probably a stupid question but I’ve been racking my brain nearly 48 hours now. Where are the logs in docker? The container runs perfectly, but I need to diagnose some issues with skipped mails. However, it seems like there are no logs whatsoever.

• docker logs -f shows nothing really, just start-up script output
• there is no log directory created in /var/piler or in etc/piler
• there is mail.log in /var/log
• nothing seems output to stderr or stdout

I’m obviously missing something trivial, right? I’d really appreciate any help here. Version 1.4.4, btw. Thanks.

‌

[Janos SUTO]

Check if rsyslog is running inside the container. If so, then it writes

[Asif Bacchus]

I built the container exactly according to your dockerfile in this repo. rsyslog is not installed so definitely no rsyslog process running in the container. Is there some other way to get the logs from piler? I’d prefer simple stdout or stderr, but I’ll work with anything.

If I installed rsyslog in the container would that fix this issue? If so, just the base package?

Thanks for your help, I appreciate it!

[Janos SUTO]

Yes, just the base package is enough, and be sure to start it when the container is launched. I’ll fix Dockerfile to contain rsyslog daemon.

[Asif Bacchus]

Thank you, sir! Confirmed that #e3189c5 that installs rsyslogd and adds it to the start.sh fixes the logging issue. /var/log/mail.log is now being created.

Two other quick notes since we’re talking about the container:

1. While the dockerfile already installs php8.1-memcached, it seems that one or both of php8.1-memcache and/or php-memcache is also required. I installed both to be safe, but without them the GUI complains about an “undefined Memcache class”.

2. It might be worthwhile including a default ENV RT=0 or ENV RT=1 in the dockerfile just to remind people this is pretty critical to define. I had to read through the start.sh and manticore.conf files to figure out what I was doing wrong. That environment variable is not mentioned anywhere in the docs (that I could find) and without it turning on real time indexing prevents the container from starting (manticore and database errors).

Thanks again for all your help! I really appreciate it.

[Janos SUTO]

I’ve just added a commit to ship a docker-compose file (that includes RT=1) to make it easier to run the containers. Also I’ve fixed the typo for memcached. You don’t need php8.1-memcache, the installed php8.1-memcached is fine.