cant make changes about docker-pi-hole

[rdwebdesign]

1. Can you please post the Compose file or docker run command used to start the container?

2. Also, generate a debug log:

   Using the command line (inside the container):

   • use pihole -d command.
   • when asked to upload the log, answer Y.
   • **copy only the token and paste here.

   Using the web interface:

   • click on Tools > Generate Debug Log menu.
   • then mark the second checkbox to upload the log and click on the big button.
   • when finished, copy only the token and paste here.

[yggdrasil75]

version: "3"

# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
services:
  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    # For DHCP it is recommended to remove these ports and instead add: network_mode: "host"
    ports:
      - "192.168.1.36:53:53/tcp"
      - "192.168.1.36:53:53/udp"
      - "67:67/udp" # Only required if you are using Pi-hole as your DHCP server
      - "192.168.1.36:80:80/tcp"
    environment:
      TZ: 'America/Chicago'
      WEBPASSWORD: '***' #'set a secure password here or it will be random'
      PIHOLE_UID: 1000
      PIHOLE_GID: 1000
      WEB_UID: 033
      WEB_GID: 033
    # Volumes store your data between container upgrades
    volumes:
      - './etc-pihole:/etc/pihole'
      - './etc-dnsmasq.d:/etc/dnsmasq.d'
    #   https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
    cap_add:
      - NET_ADMIN # Required if you are using Pi-hole as your DHCP server, else not needed
    restart: unless-stopped

https://tricorder.pi-hole.net/0UwaNUp6/

[yggdrasil75]

I have tried with and without specifying the UID/GIDs.

I have other containers published on ports 53 and 80 using different IP addresses, so those were specified to prevent conflict.

[rdwebdesign]

Your issue is probably related to permissions:

*** [ DIAGNOSING ]: Pi-hole FTL Query Database
-rw-rw-r--+ 1 pihole pihole 556K Feb  6 10:21 /etc/pihole/pihole-FTL.db

*** [ DIAGNOSING ]: Gravity Database
-rw-rw-r--+ 1 pihole pihole 9.3M Feb  6 09:27 /etc/pihole/gravity.db

The + in -rw-rw-r--+ means you have some special permissions set (Access Control List - ACL).

These permissions (set on the host) are probably creating problems inside the container.

As a test, try without volumes.

[yggdrasil75]

https://tricorder.pi-hole.net/VYC6kPbk/

when I comment out the 2 volumes, I get this:
Warning in dnsmasq core:
ignoring query from non-local network 192.168.1.1 (logged only once)
Check out our documentation for further information.

I have only 2 queries logged as opposed to the normal 400+ that the various devices on my network send every few seconds (which I am trying to block with pihole)

[yggdrasil75]

I did chmod 777 and setfacl -b on the entire folder. it works now, but chmod 777 is not practical. just removing all acls didnt fix it, required the 777 as well.
can you send what the permissions should be for the files?

[rdwebdesign]

This is what I have in my container:

root@pihole:/# ls -lah /etc/pihole/
total 264M
drwxrwsr-x 2 pihole pihole 4.0K Feb  6 15:08 .
drwxr-xr-x 1 root   root   4.0K Jan 22 12:22 ..
-rw-r--r-- 1 root   root    65 Sep 12  2022 adlists.list
-rw-r--r-- 1 root   root   737 Sep 12  2022 custom.list
-rw-r--r-- 1 pihole pihole    0 Sep 12  2022 dhcp.leases
-rw-r--r-- 1 root   root   651 Jan 22 12:22 dns-servers.conf
-rw-r--r-- 1 root   root     7 May 30  2023 ftlbranch
-rw-rw-r-- 1 pihole pihole 9.6M Feb  4 03:11 gravity.db
-rw-r--r-- 1 root   pihole  799 May 30  2023 install.log
-rw-r--r-- 1 root   root    65 Feb  4 03:11 local.list
-rw-r--r-- 1 root   root   241 Sep 12  2022 logrotate
-rw-r--r-- 1 pihole pihole 3.0M May 30  2023 macvendor.db
-rw-r--r-- 1 root   root   197 Jan 22 12:22 pihole-FTL.conf
-rw-rw-r-- 1 pihole pihole 239M Feb  6 15:08 pihole-FTL.db
-rw-r--r-- 1 root   root   528 Jan 22 21:21 setupVars.conf
-rw-r--r-- 1 root   root   528 Jan 22 12:22 setupVars.conf.update.bak
-rw-r--r-- 1 root   root   379 Feb  5 17:49 versions

[yggdrasil75]

thank you, I reset permissions to that and it works fine now.