Running CCD

Updating

docker compose pull && docker compose up -d

CCD reads its configuration once at start. To apply a changed setting, recreate the container with docker compose up -d; a plain docker restart keeps the old values. With docker run, remove the container and run it again.

Backups

Back up the ccd-data volume, mounted at /data. It holds the cluster list, capacity history (the last 90 days), audit trail, muted findings, user preferences, sign-in sessions and settings, so CCD can be recreated from it at any time. Take the backup with the container stopped or from a volume snapshot, because a copy of the database taken while CCD writes to it can be inconsistent.

Cluster credentials inside it are encrypted with your CCD_SECRET_KEY, which therefore belongs in your backup too, stored separately. CCD cannot read the clusters in a backup without the key that encrypted them.

Logs

docker logs ccd
docker compose logs -f ccd

CCD writes its sign-in decisions here, which is what to read when someone lands on the wrong role. See Checking what CCD received.