How to persist the 2FA for weekly use?

[Amir-Inbar]

Hi everyone 👋

I'm using the ghcr.io/gnzsnz/ib-gateway:latest Docker image and everything is working well — except for 2FA persistence.

Each week I want to restart the container without manually re-approving 2FA again on my phone.
I'm mounting volumes and using CUSTOM_CONFIG=yes as well, but still I get prompted again after restart.

Here’s a snippet of how I run the container programmatically:

 volumes = {
                host_jts: {
                    "bind": "/opt/ibgateway/Jts",
                    "mode": "rw"
                }
            }
            
            
container = self.client.containers.create(
    image='ghcr.io/gnzsnz/ib-gateway:latest',
    name='localhost',
    environment={
        'TWS_USERID': user_config['TWS_USERID'],
        'TWS_PASSWORD': user_config['TWS_PASSWORD'],
        'VNC_SERVER_PASSWORD': 'myVncPassword',
        'TRADING_MODE': 'live',
        'TWOFA_TIMEOUT_ACTION': 'exit',
        'TWOFA_EXIT_INTERVAL': '90',
        'AUTO_RESTART_TIME': '11:59 PM',
        'READ_ONLY_API': 'no',
        'RELOGIN_AFTER_TWOFA_TIMEOUT': 'yes',
        'ALLOW_BLIND_TRADING': 'no',
        # 'CUSTOM_CONFIG': 'yes',
        'EXISTING_SESSION_DETECTED_ACTION': 'primary',
        'TIME_ZONE': 'America/New_York',
        'IB_GATEWAY_HOST': 'localhost',
        'JAVA_HEAP_SIZE': '512',
        'JAVA_OPTS': '-XX:+UseSerialGC -XX:MaxMetaspaceSize=128m -Dsun.java2d.xrender=false -Dsun.java2d.opengl=false -Dsun.java2d.d3d=false -Dsun.java2d.ddoffscreen=false -Djava.awt.headless=false',
    },
    ports=ports,
    network='smart-trader-network',
    detach=True,
    platform='linux/amd64',
    restart_policy={"Name": "always"},
    shm_size='256m',
    security_opt=['seccomp:unconfined'],
    mem_limit='1g',
    oom_kill_disable=True,
    tmpfs={'/tmp': 'size=100m,uid=1000,gid=1000'},
    # volumes=volumes,
)

I’m wondering:

What's the correct way to persist the 2FA token across container restarts?

Is there a specific file or volume that needs to be mounted to achieve that?

Is CUSTOM_CONFIG required for this, or can it work with the default image setup?

Thanks so much in advance 🙏
Any guidance or working examples would be really appreciated!

[gnzsnz]

please refeer to #145

[Amir-Inbar]

I'm not sure I fully understand.

So I need to set a daily restart time for your Docker image, and on Sundays, it will prompt for 2FA—is that correct?

In my current paper trading setup, I run one container per user. Whenever a strategy triggers, I create a container, connect to IB, send the order, and then destroy the container once the order is successfully submitted.

What are the exact steps I need to follow to ensure I only perform 2FA once a week?

[gnzsnz]

please continue the discussion on #145