[Plugin] Tailscale

[phishfi]

I'm struggling to get this configured correctly ever since the 6.12 update to UnRAID.

 

Previously, I was using the Tailscale docker container, but I just found this Plugin while I was troubleshooting.

 

Basically, what I need is to configure Tailscale such that when I share my device to other Tailscale users, they can access the UnRAID shares via SMB. This was previously working perfectly by just having the UnRAID server shared to the Tailscale user (my dad), but now I'm able to reach any of the web interfaces via the Tailscale IP, but SMB times out when I try to browse to

\\<Tailscale IP>\

or 

\\<Tailscale IP>\<Share Name>

 

Edit: I experience the same issue when trying to access a share from my phone over SMB as well. So it has nothing to do with the fact that I'm sharing the device over Tailscale to another user.

Edited July 2, 2023 by phishfi

[EDACerton]

Which version of 6.12 are you on? There was a bug in 6.12.0 that affected SMB. 

[EDACerton]

On 7/1/2023 at 1:37 PM, mihcox said:

 

I do notice that it does happen twice, once on initial boot, and a second time during the array start.

I’ll have to poke around this some more. Other folks have reported similar messages, but I’ve never seen them on my system. I’ll probably try to add some diagnostic output in a future release to try and understand where these are coming from. 

[phishfi]

17 hours ago, EDACerton said:

Which version of 6.12 are you on? There was a bug in 6.12.0 that affected SMB. 

I'm on 6.12.2.

[dopeytree]

Thanks for all the updates. 

I have just used the tailscale SSL certs. 

Very cool!

[TBT]

On 7/2/2023 at 7:18 PM, phishfi said:

but SMB times out when I try to browse to

\\<Tailscale IP>\

or 

\\<Tailscale IP>\<Share Name>

Can cofirm, this happens with Tailscale and Zerotier as well since 6.12.0. I am on 6.12.2, still not fixed. I have all the mentioned tricks applied, does not work.

 

  

On 7/2/2023 at 8:51 PM, EDACerton said:

Which version of 6.12 are you on? There was a bug in 6.12.0 that affected SMB. 

It is still in there with 6.12.2.

 

Edited July 3, 2023 by TBT

[trevorstarick]

I'm still encountering the issue where as soon as I have tailscale running, I'm unable to access the GUI or SSH via the non-tailenet IP. I can SSH but not access the GUI via the tailnet IP. Has been happening since 6.12.0, on 6.12.2 and still there. Have the same issue on multiple Unraid boxes. I've attached my diagnostics while tailscale is not running and while it is running.

modnardev-diagnostics-20230704-1748-running.zip modnardev-diagnostics-20230704-1746-notrunning.zip

[EDACerton]

13 minutes ago, trevorstarick said:

I'm still encountering the issue where as soon as I have tailscale running, I'm unable to access the GUI or SSH via the non-tailenet IP. I can SSH but not access the GUI via the tailnet IP. Has been happening since 6.12.0, on 6.12.2 and still there. Have the same issue on multiple Unraid boxes. I've attached my diagnostics while tailscale is not running and while it is running.

modnardev-diagnostics-20230704-1748-running.zip 115.78 kB · 0 downloads modnardev-diagnostics-20230704-1746-notrunning.zip 115.19 kB · 0 downloads

I’ll take a look later on. I might need for you to run diags again in a day or two… the next plugin release will have some better diagnostics in it. 

[phishfi]

On 7/3/2023 at 3:36 PM, TBT said:

Can cofirm, this happens with Tailscale and Zerotier as well since 6.12.0. I am on 6.12.2, still not fixed. I have all the mentioned tricks applied, does not work.

 

  

It is still in there with 6.12.2.

 

 

So this isn't a completely safe fix, but it did the job for fixing my Tailscale SMB connectivity:

 

Add the following to you SMB Extra config in settings - > SMB:

 

Quote

[global]
bind interfaces only = no
interfaces = lo tailscale1 br0

You might only need to include the Tailscale interface name, whatever's relevant when you run `IP addr` from the Unraid terminal. 

[EDACerton]

2023.07.05b

• Add tailnet lock support
• Add diagnostic collection utility
• Cleanup output on server startup

Edited July 5, 2023 by EDACerton

[EDACerton]

5 hours ago, trevorstarick said:

I'm still encountering the issue where as soon as I have tailscale running, I'm unable to access the GUI or SSH via the non-tailenet IP. I can SSH but not access the GUI via the tailnet IP. Has been happening since 6.12.0, on 6.12.2 and still there. Have the same issue on multiple Unraid boxes. I've attached my diagnostics while tailscale is not running and while it is running.

modnardev-diagnostics-20230704-1748-running.zip 115.78 kB · 0 downloads modnardev-diagnostics-20230704-1746-notrunning.zip 115.19 kB · 0 downloads

Can you update to the latest plugin version (2023.07.05b) and then run the Tailscale diagnostics?

 

Settings -> Tailscale -> Help -> Click the "Download diagnostic package" link.

[trevorstarick]

2 hours ago, EDACerton said:

Can you update to the latest plugin version (2023.07.05b) and then run the Tailscale diagnostics?

 

Settings -> Tailscale -> Help -> Click the "Download diagnostic package" link.

Thanks! Attached the diags. This is with tailscale still being in the down state as I can't access the UI to grab it in the running state. Let me know if there's something you need me to grab off the box or run while tailscale is "up"

modnardev-tailscale-diag-20230705-020610.zip

[ThatDude]

First of all thanks for this plugin, it's much needed IMO as running TailScale or ZeroTier in a docker doesn't work unless the array is mounted.

 

I've installed the plugin and 'tailscale up' to add to my tailscale network.

 

I can ping the unraid server from my remote machine but no other services work, SSH, HTTP, SMB etc.

 

Can anyone point me in the right direction? unRAID v6.12.0

[ThatDude]

8 minutes ago, ThatDude said:

First of all thanks for this plugin, it's much needed IMO as running TailScale or ZeroTier in a docker doesn't work unless the array is mounted.

 

I've installed the plugin and 'tailscale up' to add to my tailscale network.

 

I can ping the unraid server from my remote machine but no other services work, SSH, HTTP, SMB etc.

 

Can anyone point me in the right direction? unRAID v6.12.0

 

It looks like recent builds of unRAID lockdown services, which is a good thing!

 

To enable SSH I had to edit /etc/ssh/sshd_config and add my tailscale IP in the listen section:

 

Port 22
AddressFamily any
ListenAddress 192.168.1.250
ListenAddress 100.94.227.51    <-------- here
ListenAddress fd7a:115c:a1e0:ab12:4843:cd96:625e:e333

 

Then restart SSH with

 /etc/rc.d/rc.sshd restart

 

This seems to have updated /boot/config/ssh/sshd_config which I guess means it will work across reboots (I can't test this right now)

 

I guess there will be a similar process for the other services on unRAID

 

[bonienl]

See 

 

I encourage everyone to read the release notes of Unraid 6.12.0.

 

[EDACerton]

8 minutes ago, bonienl said:

See 

 

I encourage everyone to read the release notes of Unraid 6.12.0.

 

These instructions are not needed for folks using the plugin, the plugin does it for them. 

[ThatDude]

3 minutes ago, bonienl said:

 

 

Thanks so much @bonienl I totally missed that post.

 

If Tailscale is running as a plugin presumably I just need to run  /usr/local/emhttp/webGui/scripts/reload_services from the go script to get the web interface working. I'm specifically interested in getting the Tailscale plugin operational before the array is brought online as I need to type in my encryption key before the array can start.

 

[bonienl]

These are instructions when using docker containers, the plugin version of tailscale is started before the array comes online and doesn’t need the script.

 

[EDACerton]

Just now, ThatDude said:

 

Thanks so much @bonienl I totally missed that post.

 

If Tailscale is running as a plugin presumably I just need to run  /usr/local/emhttp/webGui/scripts/reload_services from the go script to get the web interface working. I'm specifically interested in getting the Tailscale plugin operational before the array is brought online as I need to type in my encryption key before the array can start.

 

In your case it was probably just a timing issue… the one thing that I can’t easily catch is the first connection to Tailscale (when you log in to Tailscale to authorize the device). My guess is that’s what you encountered, then after rebooting everything worked fine.

 

The plugin triggers the reload_services script at startup, so you shouldn’t need to run that from your go file.

[ThatDude]

4 hours ago, EDACerton said:

In your case it was probably just a timing issue… the one thing that I can’t easily catch is the first connection to Tailscale (when you log in to Tailscale to authorize the device). My guess is that’s what you encountered, then after rebooting everything worked fine.

 

The plugin triggers the reload_services script at startup, so you shouldn’t need to run that from your go file.

 

That correlates - thanks for the clarification.

[phishfi]

On 7/4/2023 at 9:35 PM, phishfi said:

 

So this isn't a completely safe fix, but it did the job for fixing my Tailscale SMB connectivity:

 

Add the following to you SMB Extra config in settings - > SMB:

 

You might only need to include the Tailscale interface name, whatever's relevant when you run `IP addr` from the Unraid terminal. 

 

Just a follow up in case anyone ever finds this solution useful. It appears binding lo causes some issues with Docker containers accessing the shares. I recommend just including the Tailscale interface name and seeing how well that works before making any additional changes.

[kumper33]

On 7/5/2023 at 5:07 AM, bonienl said:

See 

 

I encourage everyone to read the release notes of Unraid 6.12.0.

 

Thank you! This is what I was looking for. 

 

Cheers

[SensibleSalmon]

Is there any way to pass a login_server param to the underlying tailscale daemon? I'm trying to link my unraid host to my headscale instance. (Docs here). I didn't see anything in the plugin settings.

[EDACerton]

1 hour ago, SensibleSalmon said:

Is there any way to pass a login_server param to the underlying tailscale daemon? I'm trying to link my unraid host to my headscale instance. (Docs here). I didn't see anything in the plugin settings.

In concept, it’s possible to add that feature, but I can’t currently test that. Are you on Discord at all? If so, ping me there (@edacerton) and we can chat. 

[SensibleSalmon]

Quote

Are you on Discord at all? If so, ping me there

Reaching out now!