Solved - Pi-Hole on TrueNAS-21.08-BETA.1

[188pilas]

Hello everyone - I have Pi-Hole docker running on TrueNAS-21.06-BETA.1 but when I upgraded to TrueNAS-21.08-BETA.1 I started to see some errors in Pi-Hole logs.

Using IPv4, ::: Preexisting ad list /etc/pihole/adlists.list detected ((exiting setup_blocklists early)), https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts, sudo: unable to open /etc/sudoers: Permission denied, sudo: no valid sudoers sources found, quitting, sudo: unable to initialize policy plugin, ::: Testing pihole-FTL DNS: [cont-init.d] 20-start.sh: exited 1., [cont-finish.d] executing container finish scripts..., [cont-finish.d] done., [s6-finish] waiting for services.,

I tried the latest nightly update as well and still same error with unable to open /etc/sudoers: Permission denied. I tried using Launch Docker Image option instead of regular docker compose with no custom volume mounts and still same error.

I ended up reverting back to TrueNAS-21.06-BETA.1 and all is working fine again, but curious if anyone had this experience.

PS - I have about 40+ docker services that all worked fine with TrueNAS-21.08-BETA.1 except for pi-hole. I also tried different tags, but still no luck.

Thanks!

 

[morganL]

If no-one responds... please report a bug.

 

[188pilas]

If no-one responds... please report a bug.

K will do thx

 

[truecharts]

We would like to add we also yesterday launched our TrueCharts Pi-Hole App yesterday!
You might want to give that a spin, it shouldn't have the issues you just reported AND allows the use of port 53!

 

[garfunkel]

Actually I have the same problem with the TrueCharts app. I also had the issue with the pihole image from docker hub.

Code:

2021-09-05 16:43:48.717909+00:00[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
2021-09-05 16:43:48.813865+00:00[s6-init] ensuring user provided files have correct perms...exited 0.
2021-09-05 16:43:48.818468+00:00[fix-attrs.d] applying ownership & permissions fixes...
2021-09-05 16:43:48.824895+00:00[fix-attrs.d] 01-resolver-resolv: applying...
2021-09-05 16:43:48.845775+00:00[fix-attrs.d] 01-resolver-resolv: exited 0.
2021-09-05 16:43:48.848743+00:00[fix-attrs.d] done.
2021-09-05 16:43:48.852638+00:00[cont-init.d] executing container initialization scripts...
2021-09-05 16:43:48.858221+00:00[cont-init.d] 20-start.sh: executing...
2021-09-05 16:43:48.958489+00:00::: Starting docker specific checks & setup for docker pihole/pihole
2021-09-05 16:43:48.972026+00:002021-09-05T16:43:48.972026045Z
2021-09-05 16:43:48.972047+00:00 Installing configs from /etc/.pihole...
2021-09-05 16:43:48.973851+00:00 Existing dnsmasq.conf found... it is not a Pi-hole file, leaving alone!
2021-09-05 16:43:48.976556+00:00 Copying 01-pihole.conf to /etc/dnsmasq.d/01-pihole.conf...
[K  [✓] Copying 01-pihole.conf to /etc/dnsmasq.d/01-pihole.conf
2021-09-05 16:43:49.070793+00:00Setting DNS servers based on PIHOLE_DNS_ variable
2021-09-05 16:43:49.074309+00:00::: Pre existing WEBPASSWORD found
2021-09-05 16:43:49.074507+00:00DNSMasq binding to default interface: eth0
2021-09-05 16:43:49.091417+00:00Added ENV to php:
2021-09-05 16:43:49.091993+00:00"PHP_ERROR_LOG" => "/var/log/lighttpd/error.log",
2021-09-05 16:43:49.092008+00:00"ServerIP" => "0.0.0.0",
2021-09-05 16:43:49.092014+00:00"CORS_HOSTS" => "",
2021-09-05 16:43:49.092019+00:00"VIRTUAL_HOST" => "0.0.0.0",
2021-09-05 16:43:49.095855+00:00Using IPv4 and IPv6
2021-09-05 16:43:49.096625+00:00::: Preexisting ad list /etc/pihole/adlists.list detected ((exiting setup_blocklists early))
2021-09-05 16:43:49.097084+00:00https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
2021-09-05 16:43:49.100309+00:00sudo: unable to open /etc/sudoers: Permission denied
2021-09-05 16:43:49.100368+00:00sudo: no valid sudoers sources found, quitting
2021-09-05 16:43:49.100375+00:00sudo: unable to initialize policy plugin
2021-09-05 16:43:49.101104+00:00::: Testing pihole-FTL DNS: [cont-init.d] 20-start.sh: exited 1.
2021-09-05 16:43:49.108442+00:00[cont-finish.d] executing container finish scripts...
2021-09-05 16:43:49.109363+00:00[cont-finish.d] done.
2021-09-05 16:43:49.109738+00:00[s6-finish] waiting for services.
2021-09-05 16:43:49.316646+00:00[s6-finish] sending all processes the TERM signal.

I've tried everything - factory reset, deleted all apps, deleted the entire pool that contained apps. Nothing works.

 

[truecharts]

Actually I have the same problem with the TrueCharts app. I also had the issue with the pihole image from docker hub.

You can request support for TrueCharts on our Discord or Email

 

[188pilas]

I tried the TrueCharts app on the latest nightly and same issue.

Code:

{"log":"[s6-init] making user provided files available at /var/run/s6/etc...exited 0.\n","stream":"stdout","time":"2021-09-06T04:35:45.418967911Z"}
{"log":"[s6-init] ensuring user provided files have correct perms...exited 0.\n","stream":"stdout","time":"2021-09-06T04:35:45.487506194Z"}
{"log":"[fix-attrs.d] applying ownership \u0026 permissions fixes...\n","stream":"stdout","time":"2021-09-06T04:35:45.490063621Z"}
{"log":"[fix-attrs.d] 01-resolver-resolv: applying... \n","stream":"stdout","time":"2021-09-06T04:35:45.494707528Z"}
{"log":"[fix-attrs.d] 01-resolver-resolv: exited 0.\n","stream":"stdout","time":"2021-09-06T04:35:45.505637191Z"}
{"log":"[fix-attrs.d] done.\n","stream":"stdout","time":"2021-09-06T04:35:45.507084596Z"}
{"log":"[cont-init.d] executing container initialization scripts...\n","stream":"stdout","time":"2021-09-06T04:35:45.508963244Z"}
{"log":"[cont-init.d] 20-start.sh: executing... \n","stream":"stdout","time":"2021-09-06T04:35:45.511996243Z"}
{"log":" ::: Starting docker specific checks \u0026 setup for docker pihole/pihole\n","stream":"stdout","time":"2021-09-06T04:35:45.676672124Z"}
{"log":"\n","stream":"stdout","time":"2021-09-06T04:35:45.720430335Z"}
{"log":"   Installing configs from /etc/.pihole...\n","stream":"stdout","time":"2021-09-06T04:35:45.720495318Z"}
{"log":"   Existing dnsmasq.conf found... it is not a Pi-hole file, leaving alone!\n","stream":"stdout","time":"2021-09-06T04:35:45.728559403Z"}
{"log":"   Copying 01-pihole.conf to /etc/dnsmasq.d/01-pihole.conf...\r\u001b[K  [✓] Copying 01-pihole.conf to /etc/dnsmasq.d/01-pihole.conf\n","stream":"stdout","time":"2021-09-06T04:35:45.741565909Z"}
{"log":"Setting DNS servers based on PIHOLE_DNS_ variable\n","stream":"stdout","time":"2021-09-06T04:35:46.196261322Z"}
{"log":"::: Pre existing WEBPASSWORD found\n","stream":"stdout","time":"2021-09-06T04:35:46.207063147Z"}
{"log":"DNSMasq binding to default interface: eth0\n","stream":"stdout","time":"2021-09-06T04:35:46.207661468Z"}
{"log":"Added ENV to php:\n","stream":"stdout","time":"2021-09-06T04:35:46.256020916Z"}
{"log":"\u0009\u0009\u0009\"PHP_ERROR_LOG\" =\u003e \"/var/log/lighttpd/error.log\",\n","stream":"stdout","time":"2021-09-06T04:35:46.257623248Z"}
{"log":"\u0009\u0009\u0009\"ServerIP\" =\u003e \"0.0.0.0\",\n","stream":"stdout","time":"2021-09-06T04:35:46.257677208Z"}
{"log":"\u0009\u0009\u0009\"CORS_HOSTS\" =\u003e \"\",\n","stream":"stdout","time":"2021-09-06T04:35:46.257696783Z"}
{"log":"\u0009\u0009\u0009\"VIRTUAL_HOST\" =\u003e \"0.0.0.0\",\n","stream":"stdout","time":"2021-09-06T04:35:46.257714462Z"}
{"log":"Using IPv4 and IPv6\n","stream":"stdout","time":"2021-09-06T04:35:46.26789973Z"}
{"log":"::: Preexisting ad list /etc/pihole/adlists.list detected ((exiting setup_blocklists early))\n","stream":"stdout","time":"2021-09-06T04:35:46.26997027Z"}
{"log":"https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts\n","stream":"stdout","time":"2021-09-06T04:35:46.271392396Z"}
{"log":"sudo: unable to open /etc/sudoers: Permission denied\n","stream":"stderr","time":"2021-09-06T04:35:46.308822452Z"}
{"log":"sudo: no valid sudoers sources found, quitting\n","stream":"stderr","time":"2021-09-06T04:35:46.308923133Z"}
{"log":"sudo: unable to initialize policy plugin\n","stream":"stderr","time":"2021-09-06T04:35:46.308956665Z"}
{"log":"::: Testing pihole-FTL DNS: [cont-init.d] 20-start.sh: exited 1.\n","stream":"stdout","time":"2021-09-06T04:35:46.311266474Z"}
{"log":"[cont-finish.d] executing container finish scripts...\n","stream":"stdout","time":"2021-09-06T04:35:46.331514708Z"}
{"log":"[cont-finish.d] done.\n","stream":"stdout","time":"2021-09-06T04:35:46.333540711Z"}
{"log":"[s6-finish] waiting for services.\n","stream":"stdout","time":"2021-09-06T04:35:46.334262782Z"}
{"log":"[s6-finish] sending all processes the TERM signal.\n","stream":"stdout","time":"2021-09-06T04:35:46.547161426Z"}
{"log":"[s6-finish] sending all processes the KILL signal and exiting.\n","stream":"stdout","time":"2021-09-06T04:35:49.563660064Z"}

 

[truecharts]

I tried the TrueCharts app on the latest nightly and same issue.

We've looked with the user into this issue, it seems to be quite Pihole or SCALE specific and nothing indicates any issues related to TrueCharts. If you've anything that could indicate the cause of the issue, please feel free to join the support discussion over at our Discord

However, we would like to indicate that we do not support the SCALE nighty builds.

 

[188pilas]

I just wanted to post a thank you for the help from the developers with my issue. It was a user created issue that caused the Pi-Hole to halt at startup.

The ACL was changed on the ix-applications dataset where the docker image was running from and thus causing pi-hole to stop at startup. The issue has been resolved. Thanks again for all the help!

More info on the below threads:

NAS-112181 / 21.10 / Enforce certain properties on ix-applications dataset by sonicaj · Pull Request #7484 · truenas/middleware

This PR adds changes to enforce certain properties on ix-applications dataset otherwise we get behavior which can change and result in wrong permissions and other issues inside containers like bina...

github.com

https://jira.ixsystems.com/browse/NAS-112181

 

[fvargasfrank]

I have the same issue, what do i have to do to fix it ?

 

[188pilas]

I have the same issue, what do i have to do to fix it ?

Double check the permissions on the ix-applications dataset. I accidently changed them to inheret properties from main pool and this was causing the issue.

I am currently on mobile but the jira link also has details about the problem and fix.