nodecloud/panabit_cloud repository overview

⁠Panabit Image Capabilities Overview

This image packages Panabit TANG R7P8 into a containerized runtime environment, primarily designed to run the Panabit gateway/management system within Docker.

⁠Web Management Interface

• Provides an HTTPS management entry point by default
• Can be used to access and manage Panabit configurations

⁠Automatic Runtime Initialization

Automatically prepares the following directories and files on startup:

• Automatically generates or synchronizes configuration files required by Panabit

⁠Network Interface Role Detection

Automatically detects and configures the following network interface roles:

⁠Containerized Gateway Support

• The LAN side can serve as the default gateway for clients
• The WAN side can serve as the egress network
• Can synchronize WAN/LAN address information from the Panabit configuration

⁠Health Check

• Detects the status of Web/UI or data plane related services
• Supports checking container health via the healthcheck command

⁠Persistent Configuration & Logs

⁠Operational Entry Points

The image is compatible with common operational workflows:

• Main service — directly run the primary Panabit service
• Interactive shell — launch sh or bash for manual inspection
• Health check — execute container health verification
• Custom commands — run arbitrary commands inside the container

⁠⚠️ Notes

⁠Performance Recommendation: Enable 1G HugePage

If the following warning appears on container startup:

[panabit-entrypoint] WARN: 1G hugepages requested but kernel returned 0 free pages; falling back to 2M

It is recommended to enable 1G HugePages on the host kernel boot parameters to achieve optimal data plane forwarding performance.

Append the following to GRUB_CMDLINE_LINUX in /etc/default/grub (replace N with the desired number of pages):

default_hugepagesz=1G hugepagesz=1G hugepages=N

Then update the GRUB configuration and reboot the host to apply:

grub2-mkconfig -o /boot/grub2/grub.cfg && reboot

⁠docker-compose.yaml

services:
  panabit:
    image: nodecloud/panabit_cloud:PanabitFREE_TANGr7p8
    container_name: panabit
    hostname: panabit
    restart: unless-stopped
    privileged: true
    ports:
      - 443:443/tcp
    networks:
      panabit_admin:
    environment:
      PANABIT_ADMIN_TARGET_INTERFACE: eth0
    volumes:
      - panabit-etc:/usr/panaetc
      - panabit-log:/usr/panalog
      - panabit-var:/var/log/panabit
      - /sys/fs/bpf:/sys/fs/bpf:rshared
    cap_add:
      - NET_ADMIN
      - SYS_ADMIN
      - SYS_MODULE
      - NET_RAW
      - BPF
      - PERFMON
    sysctls:
      net.ipv4.ip_forward: "1"
      net.ipv4.conf.all.rp_filter: "0"
    ulimits:
      memlock: { soft: -1, hard: -1 }
    healthcheck:
      test: ["CMD", "/usr/local/bin/docker-entrypoint.sh", "healthcheck"]
      interval: 30s
      timeout: 5s
      start_period: 120s
      retries: 3

networks:
  panabit_admin:
    driver: bridge

volumes:
  panabit-etc:
  panabit-log:
  panabit-var: