Help w/Infinitude container config

Apps and Virtualization
1

Can I hear from those who have successfully made an Infinitude container work on their TrueNAS server please? Posting a .yaml file would be nice.

2

tried it with the yaml from their github, adjusted the storage path for a hostpath and got it working, added the code for a portal button and it deployed fine

Edit: before i deployed the app i created a new dataset with the apps preset.

services:
  infinitude:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: infinitude
    environment:
      - PUID=568
      - PGID=568
      - APP_SECRET=Pogotudinal
      - PASS_REQS=300
      - MODE=Production
    hostname: infinitude
    image: nebulous/infinitude:latest
    network_mode: host
    restart: always
    volumes:
      - /mnt/Plugins/test/state:/infinitude/state # adjust /mnt/Plugins/test/state to the hostpath you want to use
x-portals:
  - host: 191.1.1.3 #adjust to your truenas ip
    name: Web UI
    path: /
    port: 3000
    scheme: http
3

Thank you! I got mine working before seeing your reply; nevertheless, I see some interesting stuff in your YAML: What are PUID and PGID? I didn’t need that. Neither did I need the network_mode, nor the volumes.

4

It’s just to let the container run as user apps

5

Thanks. Anyway, here below is my YAML, and let me know if you see anything funny in it please.

services:
  infinitude:
    environment:
      APP_SECRET: some_secret
      MODE: Production
      NVIDIA_VISIBLE_DEVICES: void
      PASS_REQS: '300'
      TZ: America/New_York
    group_add:
      - 568
    hostname: infinitude
    image: nebulous/infinitude:latest
    platform: linux/amd64
    ports:
      - mode: ingress
        protocol: tcp
        published: 3000
        target: 3000
    privileged: False
    pull_policy: missing
    restart: always
    stdin_open: False
    tty: False
x-notes: >
  # iX App


  ## Security


  **Read the following security precautions to ensure that you wish to continue
  using this application.**


  ---


  ### Container: [infinitude]


  #### Running user/group(s)


  - User: unknown

  - Group: unknown

  - Supplementary Groups: apps


  #### Security option [no-new-privileges] is not set


  - Processes can gain additional privileges through setuid/setgid binaries

  - Can potentially allow privilege escalation attacks within the container


  ---


  ## Bug Reports and Feature Requests


  If you find a bug in this app or have an idea for a new feature, please file
  an issue at

  https://github.com/truenas/apps
x-portals:
  - host: 0.0.0.0
    name: Web UI
    path: /
    port: 3000
    scheme: http
6

The only thing i would change is adding an external volume.
If you don’t provide a volume it’ll use iXVolume which may not persist for updates and/or containe restarts and you may loose your config.
Providing a hostpath like in my yaml would persist and if you ever need to reinstall the app, you can simply point it to the exisitng hostpath and wouldn’t loose the config.

1 Like