Skip to content

README.md

Latest commit

 

History

History
73 lines (54 loc) · 2.32 KB

README.md

File metadata and controls

73 lines (54 loc) · 2.32 KB

Docker Event Action

Dependabot Updates CodeQL

Monitor Docker container events and perform automated actions when containers start. This daemon can run directly on your Docker host.

For each container that starts, the script:

  • Inspects container metadata and labels.
  • Handles "treasures" encoded in container labels (base64 → JSON) to perform file system operations.
  • Moves or replaces files inside the container root filesystem.
  • Applies firewall rules (iptables) inside the container namespace.
  • Logs container information and optionally executes ctables for further network configuration.

The behavior is fully customizable via container labels, making it easy to extend for your own automation needs.

Features

  • File operations inside container (mv / sed).
  • Dynamic firewall rule injection per container.
  • Supports container metadata labels for structured actions.
  • Logs to console and file (configurable with DEBUG and LOG_FILE).

Quick Install

# Move project to /opt
mv docker-event-action/ /opt/
cd /opt/docker-event-action/

# Install Node.js
curl -fsSL https://deb.nodesource.com/setup_16.x | bash -
apt-get install -y nodejs

# Install ctables helper
install -o root -m 0555 ctables /usr/local/bin/ctables

# Install project dependencies
npm install

# Install and configure PM2 for daemon management
npm install -g pm2
pm2 startup
pm2 start /opt/docker-event-action/docker-events.js

Usage

Containers can include special labels to trigger actions:

dynamic_treasures=true
treasures_0=<base64_json>
player_id=123
team_id=abc

JSON in treasures_* can define:

{
  "fs": {
    "mv": [{"src": "path/in/container", "dest": "new/path"}],
    "sed": [{"file": "file/path", "src": "old", "dest": "new"}]
  },
  "firewall": [
    {"chain": "INPUT", "action": "ACCEPT", "source": "1.2.3.4"}
  ]
}

Logs show container name, PID, applied file/firewall changes, and execution of ctables.