[Plugin] Tailscale

[TBT]

On 7/5/2023 at 3:35 AM, phishfi said:

 

So this isn't a completely safe fix, but it did the job for fixing my Tailscale SMB connectivity:

 

Add the following to you SMB Extra config in settings - > SMB:

 

You might only need to include the Tailscale interface name, whatever's relevant when you run `IP addr` from the Unraid terminal. 

 

PARTIAL SUCCESS!

 

THIS fixed the SMB connectivity problem for ZEROTIER, but not for Tailscale. Still a very worthy direction to investigate from the plugin creator, probably.

 

Both networks (ZT and TS) are "private" networks and the firewall should be set accordingly.

 

EDIT: Transfers via SMB are quite unstable and tend to stall. Investigating. Netbios ist still on right now.

Edited July 7, 2023 by TBT

[EDACerton]

1 hour ago, TBT said:

 

PARTIAL SUCCESS!

 

THIS fixed the SMB connectivity problem for ZEROTIER, but not for Tailscale. Still a very worthy direction to investigate from the plugin creator, probably.

 

Both networks (ZT and TS) are "private" networks and the firewall should be set accordingly.

 

EDIT: Transfers via SMB are quite unstable and tend to stall. Investigating. Netbios ist still on right now.

If you can run the tailscale diagnostics (from the help tab in the plug-in settings) that would be helpful. That will include a copy of the Samba configuration, which might help pinpoint the problem better. 

[remati]

Can I request a settings page checkbox to disable most if not all Tailscale logging? This plugin is very noisy in the unraid system log.

[EDACerton]

39 minutes ago, remati said:

Can I request a settings page checkbox to disable most if not all Tailscale logging? This plugin is very noisy in the unraid system log.

The next release is going to move all of the logging to separate files

 

I just finished installing the update on my test boxes, so hopefully I'll have it pushed out within the next day.

 

https://github.com/dkaser/unraid-tailscale-utils/commit/d70f808643192c8c53f37c7b174f2fb4b8ec6da7

Edited July 9, 2023 by EDACerton

[EDACerton]

2023.07.09b

• Move logs to dedicated files instead of syslog
• Add tailscale-watcher, applies settings when tailscale1 IP changes
• Add CLI diagnostics command

[remati]

1 hour ago, EDACerton said:

2023.07.09b

• Move logs to dedicated files instead of syslog
• Add tailscale-watcher, applies settings when tailscale1 IP changes
• Add CLI diagnostics command

Wow that was super fast. Thanks!

[Johann]

Great plugin! Super easy to use. Is there a way to decrease logging? My syslog is full of tailscaled TCP accept lines.

 

Thanks!

[EDACerton]

9 minutes ago, Johann said:

Great plugin! Super easy to use. Is there a way to decrease logging? My syslog is full of tailscaled TCP accept lines.

 

Thanks!

Update to the latest version 😉

[SensibleSalmon]

For anyone else trying to figure out how to set up Tailscale using this plugin: turns out, you can just invoke "tailscale up" from the command line directly and pass all the usual arguments. Thanks @EDACerton for pointing that out to me!

[BrandonG777]

  

Getting the following message in my system log and the web interface stops responding afterwards. Seems to be related to Tailscale and recent upgrade to version 6.12. I'm using certs from Tailscale for https but even the local IP and localhost address fails to respond after this message appears. I can still access the system via SSH and I'm sure additional diag report needs to be pulled but I'm not entirely sure how to do that from the CLI. Also using bonded NICs with the network switch configured appropriately, all worked great until updating to 6.12.

 

[122299.152467] nginx[8998]: segfault at 3c598 ip 00000000004e6982 sp 00007ffd88a2d8f0 error 6 in nginx[424000+110000] likely on CPU 25 (core 1, socket 1)
[122299.152500] Code: 31 c0 e8 31 12 f4 ff e9 6f ff ff ff 48 8b 7c 24 08 e8 d2 62 f4 ff 49 89 c6 48 85 c0 0f 88 a4 00 00 00 4c 89 ef e8 de 54 02 00 <4c> 89 70 08 e9 4d fc ff ff be f3 01 00 00 e8 cb 28 f8 ff 48 c7 c0

[EDACerton]

16 minutes ago, BrandonG777 said:

  

Getting the following message in my system log and the web interface stops responding afterwards. Seems to be related to Tailscale and recent upgrade to version 6.12. I'm using certs from Tailscale for https but even the local IP and localhost address fails to respond after this message appears. I can still access the system via SSH and I'm sure additional diag report needs to be pulled but I'm not entirely sure how to do that from the CLI. Also using bonded NICs with the network switch configured appropriately, all worked great until updating to 6.12.

 

[122299.152467] nginx[8998]: segfault at 3c598 ip 00000000004e6982 sp 00007ffd88a2d8f0 error 6 in nginx[424000+110000] likely on CPU 25 (core 1, socket 1)
[122299.152500] Code: 31 c0 e8 31 12 f4 ff e9 6f ff ff ff 48 8b 7c 24 08 e8 d2 62 f4 ff 49 89 c6 48 85 c0 0f 88 a4 00 00 00 4c 89 ef e8 de 54 02 00 <4c> 89 70 08 e9 4d fc ff ff be f3 01 00 00 e8 cb 28 f8 ff 48 c7 c0

That’s a segfault from nginx, so not really a tailscale problem. You’ll want to post Unraid diagnostics on your other thread. 

[remati]

EDACerton, if you're feeling up to it, can you also turn Cloudflare's Tunnel offering (Zero Trust) into an unraid plugin as well? Currently this is only offered as a docker container in the Community Apps store.

 

Here is some info about the daemon

https://github.com/cloudflare/cloudflared

https://github.com/cloudflare/cloudflared/releases

https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation/

 

 

 

 

[diehardbattery]

Got the feeling I'm doing something wrong.  The plugin doesn't seem to want to install?  It shows pending on the apps page, and manually installing from here doesn't seem to to do anything?

[EDACerton]

3 hours ago, diehardbattery said:

Got the feeling I'm doing something wrong.  The plugin doesn't seem to want to install?  It shows pending on the apps page, and manually installing from here doesn't seem to to do anything?

That’s new… please post diagnostics from after trying to install the plugin. 

[ejf513]

I am getting an error since the latest update. This comes as an email alert to me every morning.

Subject: cron for user root /usr/bin/run-parts /etc/cron.daily 1> /dev/null

 

Message: error: Ignoring tailscale because the file owner is wrong (should be root or user with uid 0).

 

Unraid 6.12.1

Tailscale Plugin:  2023.07.09b

 

Any ideas would be appreciated!

 

Thanks!

 

 

Edited July 12, 2023 by ejf513

[furian]

so i know there is the smb bug with unraid 6.12.2 (rc included).

but i dont know if below is also part of that error..

this is when trying to use remote smb through unassigned plugin.

 

(removed ip's and hostnames)

Jul 12 13:12:05 unassigned.devices: Mount SMB share '///Backup' using SMB 1.0 protocol.
Jul 12 13:12:05  unassigned.devices: Mount SMB command: /sbin/mount -t 'cifs' -o rw,noserverino,nounix,iocharset=utf8,file_mode=0777,dir_mode=0777,uid=99,gid=100,vers=1.0,credentials='/tmp/unassigned.devices/credentials_Backup' '///Backup' '/mnt/remotes/Backup'
Jul 12 13:12:05  kernel: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
Jul 12 13:12:05  kernel: 
Jul 12 13:12:05  kernel: CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
Jul 12 13:12:05  kernel: CIFS: Attempting to mount \\\Backup
Jul 12 13:12:06  kernel: CIFS: VFS: Error connecting to socket. Aborting operation.
Jul 12 13:12:06  kernel: CIFS: VFS: cifs_mount failed w/return code = -111
Jul 12 13:12:06  unassigned.devices: SMB 1.0 mount failed: 'mount error(111): could not connect to IP Unable to find suitable address. '.
Jul 12 13:12:06  unassigned.devices: Share '///Backup' failed to mount.

[VideoVibrations]

1 hour ago, ejf513 said:

I am getting an error since the latest update. This comes as an email alert to me every morning.

Subject: cron for user root /usr/bin/run-parts /etc/cron.daily 1> /dev/null

 

Message: error: Ignoring tailscale because the file owner is wrong (should be root or user with uid 0).

 

Unraid 6.12.1

Tailscale Plugin:  2023.07.09b

 

Any ideas would be appreciated!

 

Thanks!

 

 

Adding that I have received the same error on unraid 6.12.2.  I also have 2023.07.09b tailscale plugin.

 

The app and connections are working normally.

Edited July 12, 2023 by VideoVibrations

[diehardbattery]

2 hours ago, EDACerton said:

That’s new… please post diagnostics from after trying to install the plugin. 

I was able to get it installed.... however after running tailscale up and registering I dont seem to be able to access anything using mobile data as a test connection... 

[Joel Rieger]

2 hours ago, ejf513 said:

I am getting an error since the latest update. This comes as an email alert to me every morning.

Subject: cron for user root /usr/bin/run-parts /etc/cron.daily 1> /dev/null

 

Message: error: Ignoring tailscale because the file owner is wrong (should be root or user with uid 0).

 

Unraid 6.12.1

Tailscale Plugin:  2023.07.09b

 

Any ideas would be appreciated!

 

Thanks!

 

 

I received this one this morning also.  This started once I updated to the latest plugin:

Unraid 6.12.2

Tailscale Plugin 2023.07.09b

 

Thanks!

 

[EDACerton]

9 hours ago, VideoVibrations said:

Adding that I have received the same error on unraid 6.12.2.  I also have 2023.07.09b tailscale plugin.

 

The app and connections are working normally.

 

8 hours ago, Joel Rieger said:

I received this one this morning also.  This started once I updated to the latest plugin:

Unraid 6.12.2

Tailscale Plugin 2023.07.09b

 

Thanks!

 

I just pushed an update that should fix this issue... apparently the fix in the last version wasn't completely effective, I used a larger hammer this time

[EDACerton]

2023.07.12

• Fix permissions on logrotate config

[EDACerton]

8 hours ago, diehardbattery said:

I was able to get it installed.... however after running tailscale up and registering I dont seem to be able to access anything using mobile data as a test connection... 

I'm not certain what you're trying to do here... please generate plugin diagnostics and then I can try to figure out what's happening.

[EDACerton]

17 hours ago, remati said:

EDACerton, if you're feeling up to it, can you also turn Cloudflare's Tunnel offering (Zero Trust) into an unraid plugin as well? Currently this is only offered as a docker container in the Community Apps store.

 

Here is some info about the daemon

https://github.com/cloudflare/cloudflared

https://github.com/cloudflare/cloudflared/releases

https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation/

Practically speaking, this isn't something that I have the time to do right now... maintaining/supporting this plugin takes up a non-trivial amount of time, and I don't have enough free to be able to properly support cloudflared. (Also, I don't use cloudflared for any of my Unraid systems.)

 

If someone wanted to work on making that plugin, though, this one would be a good starting point -- it'll be a very similar setup (download cloudflared, run daemon, provide configuration/logs/etc.). I'd be happy to help get things started if someone wants to take that on as a project.

[EDACerton]

10 hours ago, furian said:

so i know there is the smb bug with unraid 6.12.2 (rc included).

but i dont know if below is also part of that error..

this is when trying to use remote smb through unassigned plugin.

 

(removed ip's and hostnames)

Jul 12 13:12:05 unassigned.devices: Mount SMB share '///Backup' using SMB 1.0 protocol.
Jul 12 13:12:05  unassigned.devices: Mount SMB command: /sbin/mount -t 'cifs' -o rw,noserverino,nounix,iocharset=utf8,file_mode=0777,dir_mode=0777,uid=99,gid=100,vers=1.0,credentials='/tmp/unassigned.devices/credentials_Backup' '///Backup' '/mnt/remotes/Backup'
Jul 12 13:12:05  kernel: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
Jul 12 13:12:05  kernel: 
Jul 12 13:12:05  kernel: CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
Jul 12 13:12:05  kernel: CIFS: Attempting to mount \\\Backup
Jul 12 13:12:06  kernel: CIFS: VFS: Error connecting to socket. Aborting operation.
Jul 12 13:12:06  kernel: CIFS: VFS: cifs_mount failed w/return code = -111
Jul 12 13:12:06  unassigned.devices: SMB 1.0 mount failed: 'mount error(111): could not connect to IP Unable to find suitable address. '.
Jul 12 13:12:06  unassigned.devices: Share '///Backup' failed to mount.

I'm not certain why this is in the Tailscale thread... is the share that you're trying to mount connected via Tailscale?

 

If so, please generate plugin diagnostics (Help page in Tailscale settings).

[diehardbattery]

7 hours ago, EDACerton said:

I'm not certain what you're trying to do here... please generate plugin diagnostics and then I can try to figure out what's happening.

Here you go

diagnostics-20230712-2356.zip

 

Edited July 13, 2023 by diehardbattery