Application
The version of the application inside the image, read from the image itself: its environment or its org.opencontainers.image.version label. It is informative.
In ProxMenux Monitor
OCI manager Apps~6 min
A container installed by OCI manager Apps appears in VMs & LXCs like any other LXC. Its modal reads the installation record: application and image versions, new images, console output and terminal.
The record is the source
OCI manager Apps knows what it installed and where it came from. The Monitor reads that installation record instead of probing the container, so the data is the same whether the container is running or stopped.
| Tab | What changes for an OCI container |
|---|---|
| Status | A Watchdog switch under Start at boot: the application is started again when it stops on its own |
| App | The application is identified from the record, and updates are tracked by image |
| Updates | The image is updated or the application modified, with the same flow as the OCI menu |
| Mounts | Container disks and host directories, with their usage |
| Logs | Only for OCI containers: the console output of the application |
App
The App tab offers the installed application as a detection, with the name, logo, port and scheme of the record. Registering it opens the editor with the method OCI image (installed by ProxMenux), which needs no configuration.
Image
The build date and digest of the installed image. The update is decided here: the installed digest is compared with the one the registry publishes today for the same tag.
- When the registry publishes a new digest, the card shows New image with its date and digest, even if the application version inside did not change: a rebuild on an updated base is an update.
- When the digests match, the card reads Version.
- The card links to the repository of the image: its GitHub project, or its Docker Hub page for an official image.
- The access link uses the LAN address of the container, also for the main member of a multi-container application, which has a second address on its private network.
- The button Refresh data reads the record and the registry again. The options to search for applications or register another one are not offered: the container holds exactly the application of its record.
The check runs once a day with the update checks of the Monitor, and Refresh data runs it at once. A new image is sent as a notification through the channels configured in Notifications. The update is applied from the Updates tab.
Updates
For a container installed by OCI manager Apps the Updates tab shows the application with its installed image and, when the registry publishes one, the new image, in the same format as any other application. The package and application updaters of an ordinary LXC do not appear.
| Button | What it opens |
|---|---|
| Update | The update of Manage installed OCI applications for this container, in the Monitor terminal. It can run whether or not there is a new image; with none, nothing is changed. In a multi-container application it updates every member. |
| Modify | The editor of the application (resources, network, paths and GPU). In a multi-container application it adds or removes the extra paths and devices of the application container and, in Immich, changes what runs recognition. |
| Recover | Replaces Update when an operation on the container was interrupted, and opens its recovery. |
| Recover (restored container) | Shown for a container restored from a backup that has no contract on this host, under Restored OCI application. Opens the recovery in the Monitor terminal; Update and Modify appear once it is registered. |
External changes, host directories and multi-container applications are handled as in the OCI menu. In a multi-container application, the buttons and the options appear only on the main container; the other members show their image, a note that they are updated from the main container and a button that opens it. When the terminal closes, the image, the record and the mounts are read again.
| Option | Behaviour |
|---|---|
| Keep the backup taken before updating | Every update backs up the container to restore it if the update fails. With this option that same backup is kept in the chosen storage and appears among the backups of the CT; on Proxmox Backup Server a backup is written before the update. |
| Scheduled updates | The image is updated at the chosen time only when the registry publishes a new one, and optionally only once it is 1, 3, 7 or 14 days old. A container with changes made outside ProxMenux is skipped and reported. |
Logs
The Logs tab appears only for containers installed by OCI manager Apps, between Mounts and Backups. It shows the standard output and error of the main process of the image, the same output docker logs shows for a Docker container.
- The output is kept on the host in
/var/log/proxmenux/oci/VMID.console.log(mode 0600), from the first start and across restarts, so it can be read with the container stopped. - The file is rotated at 10 MB, keeping three compressed copies (
/etc/logrotate.d/proxmenux-oci). - Each start of the container is marked in the output. The tab shows the output since the last start by default; Full history also shows the previous ones.
- When the application is removed, its output is removed with it.
- The last 100, 500 or 1000 lines are shown. While the container runs, new lines are followed live; scrolling up pauses the follow, and Follow resumes it.
- A filter shows only the lines that contain a text, and Download saves the lines loaded.
- Colour codes are removed and a line that a progress bar redraws is shown in its final state.
- The tab reads the file on every open; it is not cached.
First-start credentials
Images that print a generated password on their first start leave it in this output, as
docker logs does. The installer reads it from there to show it in its summary.
Proxmox VE console
An OCI image runs its own process as PID 1 and no login service, so the default console of an LXC would open a terminal nothing answers on. Containers installed by OCI manager Apps are created with cmode: shell: the Proxmox VE console opens a shell with lxc-attach, the equivalent of docker exec, with the running application untouched.
- The shell is the one
/etc/passwdgives to root in the image. An image whose root has no shell, or ships none, keeps the default console. - The shell is root inside the container, without a password. Who can open it is decided by the
VM.Consolepermission of Proxmox VE. - The terminal of the Monitor enters the container with
pct enter, which works the same way.
Mounts
The Mounts tab lists the container disks and host directories of the container. The usage of a container disk on block storage such as LVM-thin is read from the filesystem of the disk, which is mounted only inside the container.