packages icon indicating copy to clipboard operation
packages copied to clipboard

tailscale: does not work as it can not find iptables in $PATH

Open kaikikokuke opened this issue 3 years ago • 2 comments

Maintainer: @kesslerm @BKPepe

Environment: OpenWrt version: 22.03.0 / Target: ipq40xx/generic / ARCH: arm_cortex-a7_neon-vfpv4

Description:

I updated the OpenWRT to version 22.03.0 and install tailscale. After rebooting I tried running tailscale up and got the error that iptables can not be found in path. I assume this has something to do with the change to nftables, howevert I am not sure. I am also willing to help to solve the issue.

root@OpenWrt:~# tailscaled
logtail started
Program starting: v1.24.2-dev-t, Go 1.18.4: []string{"tailscaled"}
LogID: a5cd4a2f71dc9...
logpolicy: using system state directory "/var/lib/tailscale"
wgengine.NewUserspaceEngine(tun "tailscale0") ...
wgengine.NewUserspaceEngine(tun "tailscale0") error: creating router: exec: "iptables": executable file not found in $PATH
flushing log.
logger closing down
createEngine: creating router: exec: "iptables": executable file not found in $PATH
root@OpenWrt:~# 

kaikikokuke avatar Sep 26 '22 11:09 kaikikokuke

Install iptabless-nft

obsy avatar Sep 26 '22 13:09 obsy

Would be nice to have them support nft also (please someone open a feature request on tails ale tracker)

champtar avatar Sep 26 '22 17:09 champtar

Please see https://github.com/tailscale/tailscale/issues/4638 and https://github.com/tailscale/tailscale/issues/391 .

opkg install iptables-nft is the interim solution/requirement https://openwrt.org/docs/guide-user/services/vpn/tailscale/start

williamla avatar Jan 16 '23 04:01 williamla

@kaikikokuke did you follow the OpenWrt Tailscale Guide. Specifically did you start tailscale with '--netfilter-mode=off'? 'nft' should already be installed on 22.03.

boretom avatar Jan 07 '24 17:01 boretom