I'm using the Pinchflat container from CA
When I enable the tailscale integration in the container, I get
 

Executing Unraid Docker Hook for Tailscale

ERROR: No root privileges!
ERROR: Unraid Docker Hook script throw an error!
       Starting container without Tailscale!

Starting container...

I figured that the problem is the container needs this extra parameter (--user 99:100), but if I remove it, tailscale installs perfectly but I cannot access the webui for pinchflat. As far as I can tell though, everything else is working, just that I cannot access the webui.

56 minutes ago, jayndoodle said:

I figured that the problem is the container needs this extra parameter (--user 99:100), but if I remove it, tailscale installs perfectly but I cannot access the webui for pinchflat. As far as I can tell though, everything else is working, just that I cannot access the webui.

This is caused because the permissions are set by default to 99:100 to match the Unraid share user:group and when you remove these parameters the permissions are not correct any more for the config and download directory, however if you still want to start the container without that parameter you have to set the folder/group owner from your config and download directory to root:root then it will work but that can lead to other issues if you want to access the files over SMB because the file owner is not 99:100 any more but I'm not sure if that would really cause issues if you just want to read the files <- this of course always depends on your specific use case.

 

However you can always use a Tailscale sidecar container to get the container into your Tailnet or you could also share the container network with a container where the Unraid Docker Integration is working.

 

Hope that helps.

after google'ng this error  i also came to this thread so in the hopes of getting some extra understanding. 

my unraid version is 7.0.1  

the docker container is  openbudgeteer ... 

 

i want it so that this docker  only listens on the ip within my tailnet 

so instead of  having it bridged on  192.168.1.2:8880  unraid:8880    i would prefer it to only be on:   100.100.1.70  or   mybudget.blabla.tailnet

 

this would add one extra layer of security to my financials as you'd not only need to be on my wifi (and thus have access to my unraid dockers and its webapps. but you'd  instead need to have access to the account alowed to login to tailnet  before having to guess the webapps password. 

 

from what i understand in unraid 7 all dockers where suposed to have tail intergration  but it gives this error (even when i change the docker run as priviledged (if that would 'v helped) ... please help me figure out how to fix or at least why it dont work.  

21 hours ago, i-chat said:

when i change the docker run as priviledged

Please don't do that when it is not necessary and this toggle switch is not there to solve problems...

 

21 hours ago, i-chat said:

please help me figure out how to fix or at least why it dont work

As mentioned above, please use the Tailscale Sidecar Docker for that container:

sorry for the late reply,  running the sidecar sadly didn't have the desired effect and i had a bunch mor issues with it.. 

i ended up  using a usergroup + otp rule in cloudflare  so now the tunnel only allows data if you have a username+password setup in cloudflare  this provides me a simular level of protection and hase the added advantage that i can have more 'free' users for this or other apps. than i would have on a tailnet.  and as a added benefit it doesnt require aditionall software or clients to be installed. 

 

if anyone is interested i could post a small howto on what i did. 

I am interested what you did. I am getting a similar error with docker "Gameyfin". I've tried the integrated method, and receive the same error. Tried using the fixes as described above just to see if it will get to work but didnt either. Then tried the sidecar docker, and after i map it to Tailscale docker under the network i can't access it at all. I get Tailscale to see and authenticate the new Tailscale docker, but its like its not passing access through to the Gameyfin docker.

On 1/16/2025 at 12:49 PM, ich777 said:

However you can always use a Tailscale sidecar container to get the container into your Tailnet or you could also share the container network with a container where the Unraid Docker Integration is working.

On 3/3/2025 at 8:07 AM, ich777 said:

As mentioned above, please use the Tailscale Sidecar Docker for that container:

Is there a guide for how to configure this? I can install Tailscale-Docker but I have no idea how to set it.