init cadvisor

cadvisor/files/ferm.conf.j2

+domain (ip ip6) {
+  table filter {
+    chain INPUT {
+      proto tcp dport (8080) saddr (185.206.209.130 2a06:8187:fb11:1::2:1) ACCEPT;
+    }
+  }
+}

cadvisor/init.sls

+{% set docker = pillar.get('docker', {}) %}
+{% set image = 'google/cadvisor:latest' %}
+
+include:
+  - docker
+
+/etc/ferm/conf.d/40-cadvisor.conf:
+  file.managed:
+    - source: salt://cadvisor/files/ferm.conf.j2
+    - user: root
+    - group: root
+    - mode: 644
+    - makedirs: True
+    - template: jinja
+    - require_in:
+      - file: ferm
+
+docker-image-{{ image }}:
+  docker_image.present:
+    - name: {{ image }}
+    - force: true
+    - require:
+      - pkg: docker
+
+docker-container-cadvisor:
+  docker_container.running:
+    - image: {{ image }}
+    - name: cadvisor
+    - command: all
+    - restart_policy: always
+    - port_bindings:
+      - "8080:8080"
+    - binds:
+      - /:/rootfs:ro
+      - /var/run:/var/run:ro
+      - /sys:/sys:ro
+      - /var/lib/docker/:/var/lib/docker:ro
+      - /dev/disk/:/dev/disk:ro
+    - require:
+      - docker_image: docker-image-{{ image }}
+      - file: /etc/ferm/conf.d/40-cadvisor.conf
+    - watch:
+      - docker_image: docker-image-{{ image }}
+
+prometheus_cadvisor_export:
+  grains.present:
+    - value: {{ grains['fqdn'] }}:8080

docker/init.sls

@@ -72,3 +72,4 @@ include:
   - apt.dependencies
   - docker.images
   - docker.container
+  - cadvisor