Fix tailscale up by building ipnbus and enable ip forwarding in entrypoint #11

Merged

Lumpiasty merged 2 commits from fix/forwarding-and-ipnbus into main

2026-06-02 14:15:40 +00:00

Author	SHA1	Message	Date
Lumpiasty	315fd630e3	enable IP forwarding via entrypoint (fixes IPv6 subnet routes) ci/woodpecker/pr/pr-build Pipeline was successful Details tailscaled does not reliably enable IPv6 forwarding inside a container network namespace ('IPv6 forwarding is disabled'), so advertised IPv6 subnet routes silently fail. Add a tiny entrypoint.sh that sets net.ipv4.ip_forward and net.ipv6.conf.all.forwarding (writable inside a RouterOS container netns), then exec's tailscaled. Built in the builder stage so it stays in the single /usr/local/bin COPY layer. Verified: privileged run flips v6 forwarding 0->1 and exec's tailscaled with CMD args intact.	2026-06-02 16:06:10 +02:00
Lumpiasty	1bc10bcb6e	include ipnbus so 'tailscale up' waits and prints login URL Without ipnbus, 'tailscale up' fires config at the daemon and returns immediately ('built with ts_omit_ipnbus; not waiting for completion') without printing the auth URL or confirming success. Add it to the allowlist so interactive 'up' behaves normally.	2026-06-02 15:54:52 +02:00

Author

SHA1

Message

Date

Lumpiasty

315fd630e3

enable IP forwarding via entrypoint (fixes IPv6 subnet routes)

ci/woodpecker/pr/pr-build Pipeline was successful

Details

tailscaled does not reliably enable IPv6 forwarding inside a container
network namespace ('IPv6 forwarding is disabled'), so advertised IPv6
subnet routes silently fail. Add a tiny entrypoint.sh that sets
net.ipv4.ip_forward and net.ipv6.conf.all.forwarding (writable inside a
RouterOS container netns), then exec's tailscaled. Built in the builder
stage so it stays in the single /usr/local/bin COPY layer.

Verified: privileged run flips v6 forwarding 0->1 and exec's tailscaled
with CMD args intact.

2026-06-02 16:06:10 +02:00

Lumpiasty

1bc10bcb6e

include ipnbus so 'tailscale up' waits and prints login URL

Without ipnbus, 'tailscale up' fires config at the daemon and returns
immediately ('built with ts_omit_ipnbus; not waiting for completion')
without printing the auth URL or confirming success. Add it to the
allowlist so interactive 'up' behaves normally.

2026-06-02 15:54:52 +02:00