mvisonneau / helm-charts

Personal Helm charts repository
Apache License 2.0
67 stars 58 forks source link

relay will not return data #37

Open Daxcor69 opened 2 years ago

Daxcor69 commented 2 years ago

Hello, I have this helm chart installed and working fine. I can watch the logs and see my incoming requests. However there is no reply. Here is the issue from the logs.

Warning: net.ipv4.ip_forward is disabled.
Subnet routes won't work without IP forwarding.
See https://tailscale.com/kb/1104/enable-ip-forwarding/

because the pod is a read only file system I cant make the change I need to enable fowarding.. Can you help?

brad

Daxcor69 commented 2 years ago

So I tried to roll my own image, with the following:

ROM alpine:latest

RUN apk add --no-cache iptables iproute2 ca-certificates bash --virtual=.install-deps curl tar

RUN curl -sLO "https://pkgs.tailscale.com/stable/tailscale_1.22.2_amd64.tgz"

RUN tar -zxf tailscale_1.22.2_amd64.tgz -C /usr/local/bin --strip=1 tailscale_1.22.2_amd64/tailscaled tailscale_1.22.2_amd64/tailscale

RUN apk del .install-deps

RUN echo 'net.ipv4.ip_forward = 1' | tee -a /etc/sysctl.conf

RUN echo 'net.ipv6.conf.all.forwarding = 1' | tee -a /etc/sysctl.conf

COPY entrypoint /usr/local/bin/entrypoint

ENTRYPOINT ["/usr/local/bin/entrypoint"]

When I go to launch the chart, I get an error in the Pod "cannot execute bash unknown file or dir" Not really sure yet what is going on.

Brad

mvisonneau commented 2 years ago

👋 hey @Daxcor69, I reckon the sysctl config has to be set at the host layer, unless you are running your pods with full privilege & capabilities 🤔