LanLens容器化部署指南 | Docker快速搭建网络资产监控系统

root@jeven:~# systemctl status docker
● docker.service - Docker Application Container Engine
     Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; preset: enabled)
     Active: active (running) since Thu 2026-02-05 00:27:40 CST; 1s ago
TriggeredBy: ● docker.socket
       Docs: https://docs.docker.com
   Main PID: 841698 (dockerd)
      Tasks: 65
     Memory: 73.5M (peak: 77.1M)
        CPU: 975ms
     CGroup: /system.slice/docker.service

root@jeven:~# docker -v
Docker version 28.5.0, build 887030f

root@jeven:~# docker compose version
Docker Compose version v2.39.4

root@jeven:~# docker pull alexrosbach/lanlens:1.5.0
1.5.0: Pulling from alexrosbach/lanlens
57fb71246055: Pull complete
797809503061: Pull complete
759e0c85a86e: Pull complete
b33ff618953d: Pull complete
e1b7808202cc: Pull complete
139cd875bbee: Pull complete
9414313f16ad: Pull complete
ceb56ab7a3c0: Pull complete
337b15847b10: Pull complete
9d2ac2fde8e0: Pull complete
e4dba22d0a30: Pull complete
f29100864560: Pull complete
f142a0d21606: Pull complete
a177fd15c467: Pull complete
Digest: sha256:dd80cb40e9cb1109bf80cae9dd07b651782c9328921f8e5a6c8d43691301415d
Status: Downloaded newer image for alexrosbach/lanlens:1.5.0
docker.io/alexrosbach/lanlens:1.5.0

mkdir -p /data/lanLens/data  && cd /data/lanLens

 chmod -R 777 /data/lanLens/

root@jeven:/data/lanLens# python3 -c "import secrets; print(secrets.token_hex(32))"
a9fd8c03fa59509dcae18042f5594221f50f0d508e2a85ce1900c5f7ac042e5a

docker run -d \
  --name=lanlens \
  --restart=always \
  --network=host \
  --cap-add=NET_ADMIN \
  --cap-add=NET_RAW \
  -v /data/lanLens/data:/data \
  -e SECRET_KEY=a9fd8c03fa59509dcae18042f5594221f50f0d508e2a85ce1900c5f7ac042e5a \
  -e DEFAULT_ADMIN_PASSWORD=admin \
  -e LANLENS_PORT=7765 \
  -e BACKEND_PORT=17765 \
  -e TZ=Asia/Shanghai \
  alexrosbach/lanlens:1.5.0

vim docker-compose.yaml

services:
  lanlens:
    image: alexrosbach/lanlens:1.5.0
    # To build locally instead of pulling from Docker Hub, uncomment:
    # build: .
    container_name: lanlens
    restart: always

    # Required for ARP scanning: container must share the host network stack
    # so scapy can send raw Ethernet frames via the host's physical NIC.
    # Remove this and uncomment 'ports' below to use bridge networking —
    # but note that ARP scanning will not work in bridge mode.
    network_mode: host
    cap_add:
      - NET_ADMIN  # network interface configuration
      - NET_RAW    # raw socket access for ARP broadcast

    volumes:
      - /data/lanLens/data:/data  # SQLite database + persistent state

    environment:
      # ── REQUIRED ──────────────────────────────────────────────────────────────
      # Replace with a strong random key (min 32 chars). App refuses to start otherwise.
      # Generate: python3 -c "import secrets; print(secrets.token_hex(32))"
      - SECRET_KEY=a9fd8c03fa59509dcae18042f5594221f50f0d508e2a85ce1900c5f7ac042e5a

      # ── OPTIONAL ──────────────────────────────────────────────────────────────
      # Initial admin password (will be changed on first login)
      - DEFAULT_ADMIN_PASSWORD=admin
      # Host-mode HTTP port for the LanLens UI (for example 80, 8080, 7765)
      - LANLENS_PORT=7765
      # Internal API port used behind nginx (leave as-is unless you know why)
      - BACKEND_PORT=17765
      # Timezone (e.g. Europe/Berlin, America/New_York, UTC)
      - TZ=Asia/Shanghai

    # Host mode still allows a custom HTTP port.
    # Example: set LANLENS_PORT=80 above if you want LanLens on port 80.

    # ── Bridge networking alternative (ARP scanning disabled) ─────────────────
    # Comment out network_mode and cap_add above, then uncomment:
    # ports:
    #   - "8080:8080"
    # and set LANLENS_PORT=8080 above so nginx listens on the same port.

    healthcheck:
      test: ["CMD-SHELL", "curl -fs http://localhost:$${LANLENS_PORT:-7765}/api/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 20s

docker compose up -d

root@jeven:/data/lanLens# docker compose ps
NAME      IMAGE                       COMMAND            SERVICE   CREATED          STATUS                    PORTS
lanlens   alexrosbach/lanlens:1.5.0   "/entrypoint.sh"   lanlens   30 seconds ago   Up 30 seconds (healthy)

root@jeven:/data/lanLens# ss -tunlp |grep 7765
tcp   LISTEN 0      511                              0.0.0.0:7765       0.0.0.0:*    users:(("nginx",pid=1591587,fd=5),("nginx",pid=1591585,fd=5))
tcp   LISTEN 0      2048                           127.0.0.1:17765      0.0.0.0:*    users:(("uvicorn",pid=1591559,fd=12))

docker compose logs