A script that manages the lifecycle of the eap_proxy-udmpro container on a UDM PRO between reboots or firmware updates. See https://github.com/pbrah/eap_proxy-udmpro for the upstream image.

eap_proxy-udmpro-health.sh

#!/bin/bash

SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"

TARGET_HOST="${TARGET_HOST:?"You must define TARGET_HOST"}"
PASSWORD_FILE="${PASSWORD_FILE:?"You must define PASSWORD_FILE"}"
EAP_PROXY_IMAGE="${EAP_PROXY_IMAGE:-"pbrah/eap_proxy-udmpro:v1.1"}"
HC_CONTAINER_NAME="eap_proxy-healthcheck"
UDM_CONTAINER_NAME="eap_proxy-udmpro"

if ! docker image inspect ${HC_CONTAINER_NAME} &>/dev/null; then
  docker build -t ${HC_CONTAINER_NAME} - <<EOF
FROM alpine

RUN apk add --update expect \
    && apk add --update openssh \
    && apk add --update sshpass

RUN { \
  echo "#!/usr/bin/expect -f"; \
  echo "set timeout 120"; \
  echo "spawn sshpass -f /password ssh -o StrictHostKeyChecking=no root@${TARGET_HOST}"; \
  echo "expect \"# \""; \
  echo "send -- \"podman container inspect ${UDM_CONTAINER_NAME} &>/dev/null && echo 0 || echo 1\r\""; \
  echo "sleep 1"; \
  echo "expect {"; \
  echo "	\"0\r\" { send \"podman start ${UDM_CONTAINER_NAME}\r\" }"; \
  echo "  \"1\r\" { send \"podman run --privileged --network=host --name=${UDM_CONTAINER_NAME} --log-driver=k8s-file --restart always -d -ti ${EAP_PROXY_IMAGE} --update-mongodb --ping-gateway --ignore-when-wan-up --ignore-start --ignore-logoff --set-mac eth8 eth9 &>/dev/null && echo 0 || echo 1\r\" }"; \
  echo "}"; \
  echo "sleep 1"; \
  echo "expect -re \".*\r\""; \
  echo "send -- \"exit\r\""; \
  echo "expect eof"; \
  } > /check.exp \
  && chmod 700 /check.exp
  
CMD /check.exp
EOF
fi

docker run --rm -v ${PASSWORD_FILE}:/password ${HC_CONTAINER_NAME}

This script is meant to be run from a secure host where you don't mind having your UDM root ssh password stored as cleartext. The script will build an image (lazily) on this secure host that contains an expect script that logs in to your UDM Pro and start (as needed) the pbrah/eap_proxy-udmpro:v1.1 image.

Env	Default	Desc
TARGET_HOST	Required	UDM Pro IP or hostname
PASSWORD_FILE	Required	Clear text UDM Pro root password file
HC_CONTAINER_NAME	eap_proxy-healthcheck	Name of the container that is built on your secure host and executes the expect script on the UDM
UDM_CONTAINER_NAME	eap_proxy-udmpro	Name of the container that is run on your UDM
EAP_PROXY_IMAGE	pbrah/eap_proxy-udmpro:v1.1	Desired eap_proxy-udmpro Image

I've got this running as a scheduled task on my Synology NAS:

$ TARGET_HOST=172.16.1.1 PASSWORD_FILE=/root/.udm_password /var/services/homes/admin/eap_proxy-udmpro-health.sh