From 4009f118c1d85c503002d47b540c551eaf42cd6f Mon Sep 17 00:00:00 2001 From: Frank Date: Wed, 21 Oct 2026 15:55:21 -0700 Subject: [PATCH] fix(blackbox): the flag is --web.listen-address, repeatable, not --listen-address Third boot failure: the exporter exited 100 ms in with 'unknown long flag --listen-address' (proved against the pinned image, plus --help). The bind semantics were right; the flag name was invented. --web.listen-address is repeatable - one per address - so the dual gateway+LAN bind stands. Proven again pre-deploy with the real argv: the run starts and dies only on the deliberate /dev/null placeholder config. --- .../observability/quadlet/blackbox-exporter.container | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/dankclaw/observability/quadlet/blackbox-exporter.container b/dankclaw/observability/quadlet/blackbox-exporter.container index d6c2405..5d5b9f6 100644 --- a/dankclaw/observability/quadlet/blackbox-exporter.container +++ b/dankclaw/observability/quadlet/blackbox-exporter.container @@ -18,9 +18,11 @@ # clients. The podman gateway (169.254.1.2 = host.containers.internal) is the # address bridge containers reach same-host targets at, so the exporter binds # it explicitly for the scrape rather than relying on loopback-forwarding -# semantics, and keeps the LAN bind for its own healthcheck and diagnostics. -# No public DNS name, no guard chain: internal net only, per the exposure -# policy. +# semantics, and keeps the LAN bind for diagnostics. No public DNS name, no +# guard chain: internal net only, per the exposure policy. The listen flag is +# --web.listen-address and it is REPEATABLE, one flag per bind; plain +# --listen-address does not exist and the exporter exits in 100 ms with +# "unknown long flag" (live 2026-10-21). [Unit] Description=Blackbox exporter (HTTP probe prober) @@ -30,7 +32,7 @@ After=network-online.target Image=docker.io/prom/blackbox-exporter@sha256:ea1c7aa3ef3f307cd03e85f34abb604478ccb90b567fc690da0cd9776da76b13 ContainerName=blackbox-exporter Network=host -Exec=/bin/blackbox_exporter --config.file=/etc/blackbox_exporter/config.yml --listen-address=192.168.0.143:9115,169.254.1.2:9115 +Exec=/bin/blackbox_exporter --config.file=/etc/blackbox_exporter/config.yml --web.listen-address=192.168.0.143:9115 --web.listen-address=169.254.1.2:9115 Volume=/opt/blackbox/blackbox.yml:/etc/blackbox_exporter/config.yml:ro HealthCmd=/bin/sh -c "wget -q -O /dev/null http://169.254.1.2:9115/-/healthy || exit 1" HealthInterval=30s -- 2.54.0