So recently been spending time configuring my selfhosted services with notifications usint ntfy. I've added ntfy to report status on containers and my system using Beszel. However, only 12 out of my 44 containers seem to have healthcheck "enabled" or built in as a feature. So im now wondering what is considered best practice for monitoring the uptime/health of my containers. I am already using uptimekuma, with the "docker container" option for each of my containers i deem necessary to monitor, i do not monitor all 44 of them πŸ˜…

So I'm left with these questions;

  1. How do you notify yourself about the status of a container?
  2. Is there a "quick" way to know if a container has healthcheck as a feature.
  3. Does healthcheck feature simply depend on the developer of each app, or the person building the container?
  4. Is it better to simply monitor the http(s) request to each service? (I believe this in my case would make Caddy a single point of failure for this kind of monitor).

Thanks for any input!

all 36 comments

sorted by: hot top controversial new old
[–] 9 points 10 months ago (3 children)

I use uptimekuma with notifications through home assistant. I get notifications on my phone and watch. I had notifications set up to go to a room on my matrix homeserver but recently migrated it and don’t feel like messing with the room.

  • source
  • hideshow 3 child comments
  • [–] [S] 0 points 10 months ago (2 children)

    I assume you then also use apprise as middleman here or?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 8 points 10 months ago*
    1. I don't, in general all of them are restarted automatically. I have monitoring configured for services, not containers themselves.
    2. Yes, looking at the original Dockerfile/Containerfile if they have HEALTHCHECK keyword you can assume that they do something.
    3. Person building the container, often it doesn't make sense to create a healthcheck at all. Some times healthcheck feature is provided by application as well, it still needs to be part of the containerfile.
    4. Better to monitor your service (application+db+proxy+queue+whatever), not containers in isolation.
  • source
  • [–] 5 points 10 months ago (5 children)

    i just let kubernetes handle it for me. k3s specifically.

  • source
  • hideshow 5 child comments
  • [–] [S] 2 points 10 months ago (4 children)

    Maybe a transition to a cluster homelab should be the goal of 2026, would be fun.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 10 months ago (3 children)

    maybe! three raspis and k3s have served me mostly well for years, tho with usb/sata adapters cuz the microsd was getting rather unreliable after awhile

  • source
  • parent
  • hideshow 3 child comments
  • [–] [S] 1 point 10 months ago (2 children)

    Nice one that, fortunately i just rebuilt my server with an i5-12400 new fancy case amd slowly transitioning to an all in ssd build! I would probably lean towards a singlenode cluster using Talos.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 10 months ago (1 child)

    I haven't heard of Talos before, sounds like it's not fully open source?

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 2 points 10 months ago*

    Talos is really awesome, its a minimal OS strictly built to run kubernetes. We use it at work and its running in production for a lot of people. Its extremely minimal and can only be used via its own api, talosctl command. Its minimalism makes it great for security and less resource heavy than alternatives.

    Check this out for a quick' funny taste of why one should consider using Talos >>

    [60sec video from Sidero Labs, creators of Talos] https://www.youtube.com/watch?v=UiJYaU16rYU

    Talos is under MPL 2.0, afaik that is open-source.

  • source
  • parent
  • [–] 4 points 10 months ago (1 child)
    1. Some kind of monitoring software, like the Grafana stack. I like email and Discord notifications.
    2. The Dockerfile will have a HEALTHCHECK statement, but in my experience this is pretty rare. Most of the time I set up a health check in the docker compose file or I extended the Dockerfile and add my own. You sometimes need to add a tool (like curl) to do the health check anyway.
    3. It's a feature of the container, but the app needs to support some way of signaling "health", such as through a web API.
    4. It depends on your needs. You can do all of the above. You can do so-called black box monitoring where you're just monitoring whether your webapp is up or down. Easy. However, for a business you may want to know about problems before they happen, so you add white box monitoring for sub-components (database, services), timing, error counts, etc.

    To add to that: health checks in Docker containers are mostly for self-healing purposes. Think about a system where you have a web app running in many separate containers across some number of nodes. You want to know if one container has become too slow or non-responsive so you can restart it before the rest of the containers are overwhelmed, causing more serious downtime. So, a health check allows Docker to restart the container without manual intervention. You can configure it to give up if it restarts too many times, and then you would have other systems (like a load balancer) to direct traffic away from the failed subsystems.

    It's useful to remember that containers are "cattle not pets", so a restart or shutdown of a container is a "business as usual" event and things should continue to run in a distributed system.

  • source
  • hideshow 1 child comment
  • [–] 4 points 10 months ago* (1 child)
    docker inspect --format='{{json .State.Health}}' <container_name>
    

    HEALTHCHECK is part of the Dockerfile syntax and ought to be supported by all your container runtimes

    https://docs.docker.com/reference/dockerfile/#healthcheck

    You could extend all the dockerfiles that don’t have a health check to implement this feature with whatever health check makes sense for the application, even if for now it’s just a curl of an endpoint.

  • source
  • hideshow 1 child comment
  • [–] 3 points 10 months ago

    You can read the Dockerfile for the HEALTHCHECK clause however not all have it as it's been introduced in later docker versions.

    You can also write your own using things like curl.

  • source
  • 2, no, just check the docs.

    3, yup

    You can make your own health checks in docker compose, so for instance, I had etcd running provided by another company, and I just set up the check in compose using the etcdctl commands (etcdctl endpoint health).

    https://docs.docker.com/reference/compose-file/services/#healthcheck

  • source
  • [–] 3 points 10 months ago*

    So many upvotes without a comment :/ Sadly I don't have much useful info to add either, I'm looking forward to how others do it as well, since I recently noticed this panel in Beszel too.

    Honestly, I use the status icons in Homepage dashboard as a health check, since I always use my dashboard to navigate to apps. Red status indicator -> I have to go fix it. Nothing more severe.

    But for point 3 I do have a strong hunch that it depends on the container image creator - a health check is usually just a command that either succeeds or not (or a http response that gets a 200 or not), so it can be as simple as pointing a request to the root url of the app. Of course, this is not the most performant way to check this, which is why app makers may also put in explicit liveness/readiness or similar endpoints that return a really short json to indicate their status. But for the containers that have a healthcheck, they must be implemented in the image (too) I think

  • source
  • [–] 4 points 10 months ago (1 child)

    If I go to its web interface (because everything is a web interface) and it's down, then I know it has a problem.

    I could set up monitoring, but I wouldn't care enough to fix it until I had free time to use it either.

  • source
  • hideshow 1 child comment
  • [–] 3 points 10 months ago

    Same here. I'm the only user of my services, so if I try visiting the website and it's down, that's how I know it's down.

    I prefer phrasing it differently, though. "With my current uptime monitoring strategy, all endpoints serve as an on-demand healthcheck endpoint."

    One legitimate thing I do, though, is have a systemd service that starts each docker compose file. If a container crashes, systemd will notice (I think it keeps an eye on the PIDs automatically) and restart them.

  • source
  • parent
  • [+] 2 points 7 months ago (1 child)
  • [–] 2 points 10 months ago (1 child)

    Dozzle will tell you just about everything you want to know about the health of a container. Sadly, to my knowledge, it does not integrate with any notification platforms like nfty, even though there is a long standing request for that feature.

  • source
  • hideshow 1 child comment
  • [–] 2 points 10 months ago (1 child)

    What happened to grafana and Prometheus?

    I have been putting off rebuilding my home cluster since moving but that used to be the default for much of this and I'm not hearing that in these responses.

  • source
  • hideshow 1 child comment
  • [–] 4 points 10 months ago

    While I love and run Grafana and Prometheus myself, it's like taking a RPG to an ant.

    There are simpler tools that do the job just fine of "is X broken?".

    Even just running Portainer and attaching it to a bunch of standalone Docker environments is pretty good too.

  • source
  • parent
  • [–] 2 points 10 months ago

    I rely on the developers putting in a health check, but few do.

    I've also got uptime kuma setup, which is kinda like an external healthcheck.

  • source
  • [–] 2 points 10 months ago*

    A superb image will have a health check endpoint set up in the dockerfile.

    A good image will have a health check endpoint on either the service or another port that you can set up manually.

    Most images will require you to manually devise some convoluted health check procedure using automated auth tokens.

    All of my images fall into that latter category. You’re welcome.

    (Ok, ok, I’m sorry. But you did just remind me that I need to code a health check endpoint and put it in the dockerfile.)

  • source
  • [–] 1 point 10 months ago (1 child)

    When something doesn't work, I do sudo docker ps lol.

  • source
  • hideshow 1 child comment
  • [–] 1 point 10 months ago

    This isnt really the same as a health check. PS just checks that the process is up and running, but it could be lagging or deadlocked, or the socket closed.

    A proper healthcheck checks if the application is actually healthy and behaving correctly.

  • source
  • parent
  • [–] 1 point 10 months ago

    I use Gatus in conjunction with http APIs for health checking. For services that don't support that, you can always pattern match the HTML code.

  • source
  • [–] 2 points 10 months ago

    I just put a healthcheck in my compose files and then run an autoheal container that will automatically restart them if they are "unhealthy".

  • source
  • [+] -8 points 10 months ago (3 children)

    I decided that at my scale, NixOS is easier to maintain. So for me its just a `systemctl status Λ‹

  • source
  • hideshow 3 child comments