<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Docker on Wilhelm Maritz</title><link>https://wjmaritz.dev/tags/docker/</link><description>Recent content in Docker on Wilhelm Maritz</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Sat, 19 Sep 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://wjmaritz.dev/tags/docker/index.xml" rel="self" type="application/rss+xml"/><item><title>Homepage kept showing My First Group</title><link>https://wjmaritz.dev/posts/homepage-my-first-group/</link><pubDate>Sat, 19 Sep 2026 00:00:00 +0000</pubDate><guid>https://wjmaritz.dev/posts/homepage-my-first-group/</guid><description>&lt;p&gt;The Homepage dashboard on &lt;a href="https://wjmaritz.dev/posts/zimaboard-raid1-rebuild/"&gt;my ZimaBoard&lt;/a&gt; had never been set up. It was still running the example config it ships with: three groups called &amp;ldquo;My First Group&amp;rdquo;, &amp;ldquo;My Second Group&amp;rdquo; and &amp;ldquo;My Third Group&amp;rdquo;, each with one placeholder service pointed at &lt;code&gt;http://localhost/&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;&lt;img src="dashboard-before.png" alt="A Homepage dashboard in its stock state, with three placeholder groups named My First Group, My Second Group and My Third Group, each holding one example service"&gt;&lt;/p&gt;
&lt;p&gt;I wrote five YAML files to replace the examples, got them onto the board, and checked the page source. It still said &amp;ldquo;My First Group&amp;rdquo;.&lt;/p&gt;</description></item><item><title>One character in /etc/shadow locked me out</title><link>https://wjmaritz.dev/posts/shadow-locked-account/</link><pubDate>Sat, 19 Sep 2026 00:00:00 +0000</pubDate><guid>https://wjmaritz.dev/posts/shadow-locked-account/</guid><description>&lt;p&gt;I built a small container to run coding agents on my ZimaBoard, reachable over SSH, key-only, no root login. It is the same box from &lt;a href="https://wjmaritz.dev/posts/tailscale-login-loop/"&gt;the Tailscale login that could never finish&lt;/a&gt;. The first login was refused:&lt;/p&gt;
&lt;div class="highlight"&gt;&lt;pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"&gt;&lt;code class="language-text" data-lang="text"&gt;&lt;span style="display:flex;"&gt;&lt;span&gt;Permission denied (publickey)
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;h2 id="narrowing-it-down"&gt;Narrowing it down&lt;/h2&gt;
&lt;p&gt;An &lt;code&gt;ssh -v&lt;/code&gt; trace showed my machine offering the right key and the server rejecting it, so the fault was inside the container. The sshd config was fine: &lt;code&gt;sshd -T&lt;/code&gt; confirmed &lt;code&gt;PasswordAuthentication no&lt;/code&gt;, &lt;code&gt;PermitRootLogin no&lt;/code&gt; and &lt;code&gt;AllowUsers dev&lt;/code&gt;, all as intended.&lt;/p&gt;</description></item><item><title>The Tailscale login that could never finish</title><link>https://wjmaritz.dev/posts/tailscale-login-loop/</link><pubDate>Sat, 19 Sep 2026 00:00:00 +0000</pubDate><guid>https://wjmaritz.dev/posts/tailscale-login-loop/</guid><description>&lt;p&gt;&lt;code&gt;zimaboard2&lt;/code&gt; appeared in my tailnet, I approved it, and then it sat there: &lt;code&gt;offline, last seen 19m ago&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;I wanted the agent box on &lt;a href="https://wjmaritz.dev/posts/zimaboard-raid1-rebuild/"&gt;the ZimaBoard I rebuilt in January&lt;/a&gt; reachable from a laptop away from home. Tailscale rather than a forwarded port: it only carries traffic addressed to my own devices, so the rest of the LAN and every machine without it installed are untouched. No exit node, no subnet routing. I installed it on the board as a compose app with host networking, so the tailnet address reaches every port the board already publishes.&lt;/p&gt;</description></item></channel></rss>