Note, although this installer also works on Firewalla Purple, I have seen people have trouble running large docker images on Purple so I caution that this may be too taxing for Puprle. To my knowledge, Firewalla hasn't made any official statement about this, but I felt a warning was justified.
I haven't run the controller on Purple SE so I can't give advice, but I would be cautious about doing this.
This is a script for installing the UniFi docker container on Firewalla Gold series boxes. It is based on the Firewalla tutorial and has been tested on 1.974 and above.
To install:
-
SSH into your Firewalla (learn how if you don't know how already.)
-
Copy the line below and paste into the Firewalla shell and then hit enter.
curl -s -L -C- "https://raw.githubusercontent.com/mbierman/unifi-installer-for-Firewalla/main/unifi_docker_install.sh?$(date +%s)" | cat <(cat <(bash))
Standard disclaimer: I can not be responsible for any issues that may result. Nothing in the script should in any way, affect firewalla as a router or compromise security. Happy to answer questions though if I can. :)
From time to time unifi will update the Controller. After vetting it for a while, the owner of the container will update the image. This is a good thing. It means you get some confidence it will run when you update it. I wrote a script to do the updates. I watch when the container is updated and then run the script. You could do this via a cron job (e.g. once a week run the update and if there isn't one it will just exit) but I don't tend to do that since if it goes poorly my controller could be down.
To update the unifi docker container in the future, go to:
/home/pi/.firewalla/run/docker
and run
./updatedocker.sh unifi
The installer script will remove the unifi docker and ALL related data. If you want to start from square one, you can use this. But be warned, I mean square one. It is currently set to remove all the docker data. I may make it more forgiving in the future, but if things aren't working and you need to start over, this should get you there.
If you want more of a piecemeal approach, see below.
- ssh to your firewalla. User is always
piand the password comes from the Firewalla app. - Save the uninstall script on your firewalla:
Go to the directory you want to save the script.
cd /data - Create an empty file.
sudo touch unifi-uninstall.sh - Give it permissions to read, write, execute.
sudo chmod +xwr unifi-uninstall.sh - Change the owner of the file
sudo chown pi unifi-uninstall.sh - Get the uninstall file and save to the file you just created.
curl -s https://raw.githubusercontent.com/mbierman/unifi-installer-for-Firewalla/main/unifi-uninstall.sh?$(date +%s) > /data/unifi-uninstall.sh - Run the script.
/data/unifi-uninstall.sh
You should now be back to a clean slate and ready to re-install if you choose do do so.
If you want something less severe, the commands below give you more discretion.
If you need to reset the container (stop and remove and try again) run the following commands.
WARNING: If you use these commands you are stopping and removing the container. Don't do this unless you are sure that you don't mind potentially losing stuff. Nothing here will hurt Firewalla, but it will clobber your unifi controller. If you haven't managed to get the Controller running then there is no harm in going forward. Otherwise, only do this if you know at least a little bit about what you are doing.
sudo docker container stop unifi && sudo docker container rm unifi
rm /home/pi/.firewalla/config/post_main.d/start_unifi.sh
rm ~/.firewalla/config/dnsmasq_local/unifi
rm -rf /home/pi/.firewalla/run/docker/unifi
There are lots of UniFi communities on Reddit and Facebook. If you have UniFi questions, please check there.