From b36e729e08df9f04a33d89f0145bfb1970e103bb Mon Sep 17 00:00:00 2001
From: Damien <sepales.pret0h@icloud.com>
Date: Mon, 4 May 2026 14:39:07 +0200
Subject: [PATCH] Enable TUN/TAP device for Tailscale in LXC container

Add necessary LXC configuration entries to allow TUN/TAP device access
---
 gitea-runner/install.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/gitea-runner/install.sh b/gitea-runner/install.sh
index 9545f42..149e759 100644
--- a/gitea-runner/install.sh
+++ b/gitea-runner/install.sh
@@ -96,6 +96,13 @@ create_lxc() {
     --features nesting=1,keyctl=1 \
     --start 0
 
+  log_info "Enabling TUN/TAP device for Tailscale..."
+  cat >> "/etc/pve/lxc/${CTID}.conf" <<EOF
+lxc.cgroup2.devices.allow: c 10:200 rwm
+lxc.mount.entry: /dev/net dev/net none bind,create=dir
+lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file
+EOF
+
   log_info "Starting LXC $CTID..."
   pct start "$CTID"
   sleep 5