Migrate to nftables.
This commit is contained in:
Frank Edwards 2025-01-16 09:28:42 +10:00
parent c7c6daca06
commit 162055e2db
3 changed files with 5 additions and 2 deletions

View file

@ -60,7 +60,7 @@ RUN upx /go/bin/tailscale && upx /go/bin/tailscaled
FROM alpine:3.19
RUN apk add --no-cache ca-certificates iptables iproute2 ip6tables bash openssh curl jq
RUN apk add --no-cache ca-certificates nftables iproute2 bash openssh curl jq
RUN ssh-keygen -f /etc/ssh/ssh_host_rsa_key -N '' -t rsa
RUN ssh-keygen -f /etc/ssh/ssh_host_dsa_key -N '' -t dsa

View file

@ -28,7 +28,7 @@
#
PLATFORM="linux/amd64"
TAILSCALE_VERSION=1.78.1
VERSION=0.1.33
VERSION=0.1.34
set -eu

View file

@ -38,6 +38,9 @@ if [[ -n "$STARTUP_SCRIPT" ]]; then
bash "$STARTUP_SCRIPT" || exit $?
fi
# Flag tailscale to use nftables
TS_DEBUG_FIREWALL_MODE=nftables
# Start tailscaled and bring tailscale up
/usr/local/bin/tailscaled ${TAILSCALED_ARGS} &
until /usr/local/bin/tailscale up \