Heads-Up for anyone running Tailscale via docker-compose (Breaking Change) (github.com)
from RxBrad@infosec.pub to selfhosted@lemmy.world on 17 Dec 15:45
https://infosec.pub/post/21290252

Due to a recent containerd 1.7.24 update, your /dev/net/tun:/dev/net/tun mapping needs to be moved from the volumes section to the devices section.

Don’t be like me and realize this AFTER you leave home for the holidays.

#selfhosted

threaded - newest

kitnaht@lemmy.world on 17 Dec 17:15 next collapse

This is the kind of bullshit I don’t have time for, when shit gets broken in userspace because someone wanted to change the location of something.

Appoxo@lemmy.dbzer0.com on 17 Dec 17:58 next collapse

Makes sense to move it where it’s appropriate.

Scipitie@lemmy.dbzer0.com on 17 Dec 19:15 collapse

No one forces unattended updates. And containerd is already living in the userspace.

If every dev would live on a kernel level stability approach we’d will not have a containerd release at all.

Appoxo@lemmy.dbzer0.com on 17 Dec 17:57 next collapse

Luckily my stack is only auto updating every month and only my downloader was impacted by this breaking change.

c2c2@lemmy.world on 17 Dec 18:27 next collapse

Kind of crazy it wasn’t like this from the start.

RxBrad@infosec.pub on 17 Dec 19:54 next collapse

Adding this device this also appeared to fix my github.com/haugene/docker-transmission-openvpn container that recently died. (And not simply giving it elevated privileges, as was previously recommended)

github.com/haugene/…/2883

It appears that these issues all originate from an update to runc (which is used by containerd): github.com/containerd/containerd/issues/11078

AtariDump@lemmy.world on 19 Dec 02:35 next collapse

Let this be a lesson to implement a change freeze 1 week before leaving home for a holiday/trip/etc. 😁

RxBrad@infosec.pub on 19 Dec 13:14 collapse

Luckily I realized that I could Cloudflare-tunnel my Portainer UI out to a long random-nonsense subdomain name.

That allowed me to fix it (and then immediately kill the tunnel – not a fan of exposing Portainer to the internet).

Cpo@lemm.ee on 19 Dec 23:37 collapse

Thank you for your sacrifice. It will not be forgotten.