How do you troubleshoot docker on Centminmod?

• CentOS Version: AlmaLinux 9.7
• Centmin Mod Version Installed:
  140.00beta01

Need urgent help!

I have 2 VPSs with same OS and Centminmod version installed (see above). Both have Docker 29.4.1 installed (via /addons/docker.sh) On VPS A docker apps work just fine, on VPS B docker apps are not accessible inside or outside of server. VPSs are practically identical.

Here is an example: App "Open Notebook" runs fine on VPS A:

---

VPS B result:



Not sure what voodoo magic this is but I need help to troubleshoot this. How do I do that on centminmod?

 

@eva2000 ?

 

it seems like when I csfstop docker apps work/load just fine. when I start csf - apps stop loading as well.

And yes I did ./docker.sh csf-setup and ./docker.sh csf-test
Everything shows as fine.

Also when I do "network diagnostics" via ./docker.sh inspect-logs on both servers, "Chain DOCKER (0 references)" line is missing on a problem server in NAT table Docker rules section:

Code:

=== iptables Docker Rules ===
NAT table Docker rules:
Chain DOCKER (0 references)
num  target     prot opt source               destination

Filter table Docker rules:
Chain DOCKER (0 references)
num  target     prot opt source               destination

But I'm not sure if it helps. How do I make csf play nice with docker?

Update: it seems like if I have my ip whitelisted in /etc/csf/csf.allow everything works, on both servers. If I remove it - it stops working. But how to make it work without whitelisting IP?

 

Code:

Table  Chain            num   pkts bytes target     prot opt in     out     source               destination
No matches found for xx.xx.xx.xx in iptables

IPSET: No matches found for xx.xx.xx.xx


ip6tables:

Table  Chain            num   pkts bytes target     prot opt in     out     source               destination
No matches found for 70.8.174.86 in ip6tables

Yeah, seems like that's the case. If my ip address is not whitelisted, it does not work on any server. As soon as I added it to either server it opens fine on either server.

So what's the way around this without whitelisting IP? If I don't want to use nginx config and just use http://hostname:port