Blocklists about docker-transmission HOT 11 CLOSED

@sparklyballs found a different way to update the block list, http://blog.shvetsov.com/2010/09/automatically-update-transmission-block.html. So we borrowed the idea. The update script now downloads the url that is stored in the settings.json file, decompresses it, puts it in the right directory and restarts the transmission daemon. No need for authentication or passing cleartext passwords.

from docker-transmission.

Blocklists can be enabled via the webui by clicking the spanner/wrench and navigating to :-

There is also an update button there.

from docker-transmission.

Yes, but that's the problem. It's a manual update. So you have to remember to update it regularly. If you set up the cron job then you don't have to worry about it.

But maybe this should be running in a separate docker container?

from docker-transmission.

the issue with a cron job is user/password for people who have secured their webui as per instructions in our readme.

from docker-transmission.

Could that be passed in as a parameter -e UIADMIN= -e UIPASS= ?

from docker-transmission.

I have a feature branch that is mostly complete for this. The update script is smart enough to look at the settings.json file, for the blocklist-enabled variable to be set to true and optionally uses authentication if rpc-authentication-required is set to true, using 2 environment variables set in the docker configuration. It will be run once a day.

PR should be submitted tomorrow sometime.

from docker-transmission.

i really dislike passing in usernames and passwords through environment variables and try to avoid it all costs.
All it takes is docker inspect <container-name> and it will show the credentials in plain text.

from docker-transmission.

Only other options I see is maybe a file in the /config directory that would contain the username and password. Would that be better?

from docker-transmission.

Genuine question as I am not sure of the security implications, but if someone can run docker inspect on the host don't you have bigger problems then them discovering the password?

from docker-transmission.

from the outside world yes, but not all threats are external.

from docker-transmission.

Thank you @sparklyballs and @phendryx

from docker-transmission.