Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Install of iptables causes failure #29

Open
zorbaTheRainy opened this issue Nov 3, 2024 · 0 comments
Open

Install of iptables causes failure #29

zorbaTheRainy opened this issue Nov 3, 2024 · 0 comments

Comments

@zorbaTheRainy
Copy link

zorbaTheRainy commented Nov 3, 2024

The docker mod installs iptables by default.

root/etc/s6-overlay/s6-rc.d/init-mod-universal-tailscale/run

if [ -f /usr/bin/apt ]; then
    echo "\
        jq \
        iptables" >> /mod-repo-packages-to-install.list
fi

This results in the error

2024/11/03 16:42:18 onPortUpdate(port=48788, network=udp4)
2024/11/03 16:42:18 router: using firewall mode pref 
2024/11/03 16:42:18 router: default choosing iptables
2024/11/03 16:42:18 UpdateMagicsockPort(port=48788, network=udp4) failed: could not setup netfilter: could not create new netfilter: could not get iptables version: exit status 1
2024/11/03 16:42:18 magicsock: disco key = d:704374b91c0c61a8
2024/11/03 16:42:18 Creating WireGuard device...
2024/11/03 16:42:18 Bringing WireGuard device up...
2024/11/03 16:42:18 Bringing router up...
2024/11/03 16:42:18 router: using firewall mode pref 
2024/11/03 16:42:18 external route: up
2024/11/03 16:42:18 router: default choosing iptables
2024/11/03 16:42:18 wgengine.NewUserspaceEngine(tun "tailscale0") error: router.Up: setting netfilter mode: could not get iptables version: exit status 1
2024/11/03 16:42:18 flushing log.
2024/11/03 16:42:18 logger closing down
2024/11/03 16:42:19 getLocalBackend error: createEngine: router.Up: setting netfilter mode: could not get iptables version: exit status 1

It fails on both lsiobase/ubuntu:noble and lsiobase/alpine:3.20 for AMD64.

Oddly it does not fail on lsiobase/alpine:3.20 for ARM64, as the install of iptables fails there, and therefore tailscale never tries to use iptables.

removal of the iptables line fixes the problem

if [ -f /usr/bin/apt ]; then
    echo "\
        jq " >> /mod-repo-packages-to-install.list
fi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant