add aarch64

.gitignore

@@ -1,2 +1 @@
-maintain/
-/build
+maintain/

README.md

@@ -1,14 +1,15 @@
 # Alpine :: Traefik Labels
-![size](https://img.shields.io/docker/image-size/11notes/traefik-labels/0.1.2?color=0eb305) ![version](https://img.shields.io/docker/v/11notes/traefik-labels?color=eb7a09) ![pulls](https://img.shields.io/docker/pulls/11notes/traefik-labels?color=2b75d6) ![activity](https://img.shields.io/github/commit-activity/m/11notes/docker-traefik-labels?color=c91cb8) ![commit-last](https://img.shields.io/github/last-commit/11notes/docker-traefik-labels?color=c91cb8)
+![size](https://img.shields.io/docker/image-size/11notes/traefik-labels/latest?color=0eb305) ![version](https://img.shields.io/docker/v/11notes/traefik-labels?color=eb7a09) ![pulls](https://img.shields.io/docker/pulls/11notes/traefik-labels?color=2b75d6) ![activity](https://img.shields.io/github/commit-activity/m/11notes/docker-traefik-labels?color=c91cb8) ![commit-last](https://img.shields.io/github/last-commit/11notes/docker-traefik-labels?color=c91cb8)
 
 Run Traefik Labels based on Alpine Linux. Small, lightweight, secure and fast 🏔️
 
 What can I do with this? Simply put: It will export any traefik labels on a container on the same host as this image runs to a Redis instance. This makes it possible for a centralized Traefik load balancer to update endpoints dynamically by utilizing the docker labels, just like you would on a local installation of Traefik with labels. It is meant as an alternative and simple way to proxy requests from a Traefik load balanacer to multiple docker nodes running in different networks and locations.
 
-In order to use this image, you need to setup Traefik with a Redis provider and then point this image via REDIS_URL to the same Redis instance. Each entry will have an expire timer set in Redis, so that if a container is removed by a server crashing, Redis will automatically remove stale entries as well. Entries are refreshed every 60 seconds or on all docker container events (create, run, kill, stop, restart, ...).
+In order to use this image, you need to setup Traefik with a Redis provider and then point this image via REDIS_URL to the same Redis instance. Each entry will have an expire timer set in Redis, so that if a container is removed by a server crashing, Redis will automatically remove stale entries as well. Entries are refreshed every 300 seconds or on all docker container events (create, run, kill, stop, restart, ...).
+
+This image provides the ability to call a webhook for each container for each event or poll after the data was updates in Redis.
 
 ## Run
-This will export all labels from all containers to the Redis instance specified in LABELS_REDIS_URL from the same host this container is running on.
 ```shell
 docker run --name traefik-labels \
   -v /run/docker.sock:/run/docker.sock \
@@ -16,6 +17,15 @@ docker run --name traefik-labels \
   -d 11notes/traefik-labels:[tag]
 ```
 
+```shell
+docker run --name traefik-labels \
+  -v /run/docker.sock:/run/docker.sock \
+  -e LABELS_REDIS_URL="rediss://foo:bar@10.127.198.254:6379/0" \
+  -e LABELS_WEBHOOK="https://domain.com/traefik/labels" \
+  -e LABELS_WEBHOOK_AUTH_BASIC="foo:bar" \
+  -d 11notes/traefik-labels:[tag]
+```
+
 This is a demo webserver that will start on :8080, all the traefik labels will be exportet to the Redis instance. They follow the exact same [syntax](https://doc.traefik.io/traefik/routing/providers/kv/) as for normal Redis and Traefik, just as labels.
 ```shell
 docker run --name demo \
@@ -39,9 +49,11 @@ docker run --name demo \
 ## Environment
 | Parameter | Value | Default |
 | --- | --- | --- |
-| `LABELS_REDIS_URL` | the redis URL to connect, use rediss:// for SSL | redis:://localhost:6379/0 |
-| `LABELS_INTERVAL` | in what interval container information is pulled | 300 |
-| `LABELS_TIMEOUT` | how many seconds after an interval the keys should stay till they expire | 30 |
+| `LABELS_REDIS_URL` | the redis URL to connect, use rediss:// for SSL | rediss://localhost:6379/0 |
+| `LABELS_INTERVAL` | in what interval container information is pulled in seconds | 300 |
+| `LABELS_TIMEOUT` | how many seconds after an interval the keys should stay till they expire in seconds | 30 |
+| `LABELS_WEBHOOK` | URL to call on each event or poll for each container |  |
+| `LABELS_WEBHOOK_AUTH_BASIC` | Basic authentication to use in the form of "username:password" for the webhook |  |
 
 ## Parent image
 * [11notes/node:stable](https://github.com/11notes/docker-node)

amd64.dockerfile

@@ -1,6 +1,5 @@
 # :: Header
   FROM 11notes/node:stable
-  ENV APP_VERSION=0.1.1
   ENV APP_ROOT=/labels
 
 # :: Run

arm64v8.dockerfile

@@ -0,0 +1,38 @@
+# :: Builder
+  FROM alpine AS qemu
+  ENV QEMU_URL https://github.com/balena-io/qemu/releases/download/v3.0.0%2Bresin/qemu-3.0.0+resin-aarch64.tar.gz
+  RUN apk add curl && curl -L ${QEMU_URL} | tar zxvf - -C . && mv qemu-3.0.0+resin-aarch64/qemu-aarch64-static .
+
+# :: Header
+  FROM arm64v8/node:20.10.0-alpine3.19
+  COPY --from=qemu qemu-aarch64-static /usr/bin
+  ENV APP_ROOT=/labels
+
+# :: Run
+  USER root
+
+  # :: prepare image
+    RUN set -ex; \
+      mkdir -p ${APP_ROOT};
+
+  # :: install
+    RUN set -ex; \
+      cd ${APP_ROOT}; \
+      npm --save install \
+        redis@4.6.11 \
+        dockerode@4.0.0;
+
+  # :: update image
+    RUN set -ex; \
+      apk --no-cache upgrade;
+
+  # :: copy root filesystem changes and set correct permissions
+    COPY ./rootfs /
+    RUN set -ex; \
+      chmod +x -R /usr/local/bin; \
+      chown -R 1000:1000 \
+        ${APP_ROOT};
+
+# :: Start
+  USER docker
+  ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]

hooks/pre_build

@@ -0,0 +1,2 @@
+#!/bin/bash
+  docker run --rm --privileged multiarch/qemu-user-static:register --reset

rootfs/labels/app.js

@@ -1,106 +0,0 @@
-const Docker = require('dockerode');
-const redis = require('redis');
-const ERROR = 1;
-
-class Labels{
-  #docker;
-  #redis;
-  #poll = false;
-
-  constructor(){
-    this.#docker = new Docker({socketPath: '/run/docker.sock'});
-  }
-
-  #log(message, error){
-    console.log(JSON.stringify({
-      time:new Date().toISOString(),
-      type:(error === ERROR) ? 'ERROR' : 'INFO',
-      message:message,
-    }));
-  }
-
-  async watch(){
-    this.#redis = await redis.createClient({
-      url:process.env.LABELS_REDIS_URL,
-      pingInterval:30000,
-      socket:{
-        rejectUnauthorized: false,
-      }
-    });
-
-    this.#redis.connect();
-    this.#redis.on('ready', ()=>{
-      this.#log('connected to Redis');
-      (async() => {
-        await this.dockerPoll();
-      })();
-      this.dockerEvents();
-    });
-
-    this.#redis.on('error', error =>{
-      this.#log(error, ERROR);
-    });
-
-    setInterval(async() => {
-      await this.dockerPoll();
-    }, parseInt(process.env.LABELS_INTERVAL)*1000);
-  }
-
-  dockerEvents(){
-    this.#docker.getEvents({}, (error, data) => {
-      data.on('data', async(chunk) => {
-        const event = JSON.parse(chunk.toString('utf8'));
-        if(/Container/i.test(event?.Type) && /start|stop|restart|kill|die|destroy/i.test(event?.status)){
-          this.#log(`new docker event for container ${event.id}`);
-          await this.dockerInspect(event.id, event.status);
-        }
-      });
-    });
-  }
-
-  async dockerPoll(){
-    if(!this.#poll){
-      try{
-        this.#poll = true;
-        this.#log(`poll start (interval:${process.env.LABELS_INTERVAL})}`);
-        this.#docker.listContainers((error, containers) => {
-          containers.forEach(async(container) => {
-            await this.dockerInspect(container.Id, 'start');
-          });
-        });
-      }catch(e){
-        this.#log(e, ERROR);
-      }finally{
-        this.#log('poll end');
-        this.#poll = false;
-      }
-    }
-  }
-
-  dockerInspect(id, status = null){
-    return(new Promise((resolve, reject) => {
-      const container = this.#docker.getContainer(id);
-      container.inspect(async(error, data) => {
-        if(error){
-          reject(error);
-        }
-        for(const label in data?.Config?.Labels){
-          if(/traefik\//i.test(label)){
-            switch(true){
-              case /start|restart/i.test(status):
-                await this.#redis.set(label, data?.Config?.Labels[label], {EX:parseInt(process.env.LABELS_INTERVAL) + parseInt(process.env.LABELS_TIMEOUT)});
-              break;
-
-              case /stop|kill|die|destroy/i.test(status):
-                await this.#redis.del(label);
-              break;
-            }
-          }
-        }
-        resolve(true);
-      });
-    }));
-  }
-}
-
-new Labels().watch();

rootfs/labels/main.js

@@ -1,18 +1,144 @@
 process.once('SIGTERM', () => process.exit(0));
 process.once('SIGINT', () => process.exit(0));
-const { fork } = require('node:child_process');
-const child = fork(`${__dirname}/app.js`, [], {
-  env:{
-    LABELS_REDIS_URL:process.env?.LABELS_REDIS_URL || 'redis:://localhost:6379/0',
-    LABELS_INTERVAL:parseInt(process.env?.LABELS_INTERVAL || 300),
-    LABELS_TIMEOUT:parseInt(process.env?.LABELS_TIMEOUT|| 30),
+
+const Docker = require('dockerode');
+const redis = require('redis');
+
+const ERROR = 1;
+const POLL_INTERVAL = parseInt(process.env?.LABELS_INTERVAL || 300);
+const POLL_TIMEOUT = parseInt(process.env?.LABELS_TIMEOUT|| 30);
+
+class Labels{
+  #docker;
+  #redis;
+  #poll = false;
+  #webhook = {
+    headers:{'Content-Type':'application/json'}
+  };
+
+  constructor(){
+    this.#docker = new Docker({socketPath:'/run/docker.sock'});
+    if(undefined !== process.env.LABELS_WEBHOOK_AUTH_BASIC){
+      this.#webhook.headers['Authorization'] = 'Basic ' + Buffer.from(process.env.LABELS_WEBHOOK_AUTH_BASIC).toString('base64')
+    }
   }
-});
-child.on('error', (error) =>{
-  console.error(error);
-  process.exit(1);
-});
-child.on('close', (code) =>{
-  console.warn(`child process closed with exit code ${code}`);
-  process.exit(code);
-});
+
+  #log(message, type){
+    console.log(JSON.stringify({
+      time:new Date().toISOString(),
+      type:(type === ERROR) ? 'ERROR' : 'INFO',
+      message:message,
+    }));
+  }
+
+  async watch(){
+    if(undefined !== process.env.LABELS_WEBHOOK){
+      this.#log(`using webhook ${process.env.LABELS_WEBHOOK}`);
+    }
+
+    this.#redis = await redis.createClient({
+      url:process.env.LABELS_REDIS_URL,
+      pingInterval:30000,
+      socket:{
+        rejectUnauthorized: false,
+      }
+    });
+
+    this.#redis.connect();
+    this.#redis.on('ready', ()=>{
+      this.#log('successfully connected to redis');
+      (async() => {
+        await this.dockerPoll();
+      })();
+      this.dockerEvents();
+    });
+
+    this.#redis.on('error', error =>{
+      this.#log(error, ERROR);
+    });
+
+    setInterval(async() => {
+      await this.dockerPoll();
+    }, POLL_INTERVAL*1000);
+  }
+
+  dockerEvents(){
+    this.#docker.getEvents({}, (error, data) => {
+      if(error){
+        this.#log(error, ERROR);
+      }else{
+        data.on('data', async(chunk) => {
+          const event = JSON.parse(chunk.toString('utf8'));
+          if(/Container/i.test(event?.Type) && /^(start|kill)$/i.test(event?.status)){
+            await this.dockerInspect(event.id, event.status);
+          }
+        });
+      }
+    });
+  }
+
+  async dockerPoll(){
+    if(!this.#poll){
+      try{
+        this.#poll = true;
+        this.#docker.listContainers((error, containers) => {
+          if(!error){
+            containers.forEach(async(container) => {
+              await this.dockerInspect(container.Id, 'poll');
+            });
+          }
+        });
+      }catch(e){
+        this.#log(e, ERROR);
+      }finally{
+        this.#poll = false;
+      }
+    }
+  }
+
+  dockerInspect(id, status = null){
+    return(new Promise((resolve, reject) => {
+      const container = this.#docker.getContainer(id);
+      container.inspect(async(error, data) => {
+        if(!error){
+          const update = (/start|poll/i.test(status)) ? true : false;
+          const webHook = {event:status, labels:{}};
+          let log = false;
+      
+          for(const label in data?.Config?.Labels){
+            if(/traefik\//i.test(label)){
+              if(!log){
+                this.#log(`inspect container {${(data?.Name || data?.id).replace(/^\//i, '')}}${(
+                  (null === status) ? '' : ` event[${status}]`
+                )} traefik labels`);
+                log = true;
+              }
+              if(undefined !== process.env.LABELS_WEBHOOK){
+                webHook.labels[label] = data?.Config?.Labels[label];
+              }
+              if(update){
+                await this.#redis.set(label, data?.Config?.Labels[label], {EX:POLL_INTERVAL + POLL_TIMEOUT});
+              }else{
+                await this.#redis.del(label);
+              }
+            }
+          }
+
+          if(undefined !== process.env.LABELS_WEBHOOK){           
+            try{
+              await fetch(process.env.LABELS_WEBHOOK, {method:(
+                (update) ? 'PUT' : 'DELETE'
+              ), body:JSON.stringify(webHook), headers:this.#webhook.headers, signal:AbortSignal.timeout(2500)});
+            }catch(e){
+              this.#log(e, ERROR);
+            }
+          }
+
+          resolve(true);
+        }
+      });
+    }));
+  }
+}
+
+new Labels().watch();