Damien/infra-scripts
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Configure LXC for Docker and Tailscale

Browse Source 
Add unconfined AppArmor profile to allow Docker and required TUN/TAP
device access for Tailscale in LXC container.
This commit is contained in:
Damien
2026-05-04 14:56:11 +02:00
parent 526063b31b
commit 2bbbb5f04d
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
gitea-runner/install.sh
View File

@@ -96,8 +96,9 @@ create_lxc() {
--features nesting=1,keyctl=1 \ --features nesting=1,keyctl=1 \
--start 0 --start 0
log_info "Enabling TUN/TAP device for Tailscale..." log_info "Configuring LXC for Docker and Tailscale..."
cat >> "/etc/pve/lxc/${CTID}.conf" <<EOF cat >> "/etc/pve/lxc/${CTID}.conf" <<EOF
lxc.apparmor.profile: unconfined
lxc.cgroup2.devices.allow: c 10:200 rwm lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.entry: /dev/net dev/net none bind,create=dir lxc.mount.entry: /dev/net dev/net none bind,create=dir
lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file