Tailscale SSH via VS Code Extension

TrueNAS General
, , ,
1

I am trying to utilize the Tailscale Extension on VS Code to SSH via my Tailnet. I am met with an error of login: can't set groups: Operation not permitted within VS Code.

My Tailscale app is also running as unknown user and group. Is this expected behavior?

image
image299×143 2.88 KB

SSH is enabled in TrueNAS system services. (This should not be required from my understanding but I have it enabled for SSH outside of my Tailnet)

App Config:
Tailscale ssh flag is set within the container.
Tailscale ACL is set to allow SSH.

image
image258×132 1.22 KB

image
image207×115 2.43 KB

image
image275×218 9.72 KB

1605: tailscale0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1280 qdisc fq_codel state UNKNOWN group default qlen 500 link/none

Is this expected behavior of the docker0 device? Being down?
38: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default

Is all of this expected behavior or is something misconfigured? Any help would be greatly appreciated.

2

Bump

3

On both of my Truenas systems the Tailscale app runs as root user and group

Run As Context

UID: 0
GID: 0

Username: root
Groupname: root

Description: Tailscale runs as a root user.

4

That is just the run as context. Is it actually running as root?

5

Go look in htop. All the Tailscale processes run as root just like the description says.

6

So yes, I see in htop and if I run id in the container shell it is running as root.

The main issue is still present and is even more confusing knowing that the container has the correct user permissions to do what I am trying to do.

7

Have you read the KB article on Tailscale SSH from Tailscale?

Tailscale ssh is specific to Tailscale and the Tailscale network.

8

Yes, are you stating something specific? What I am trying to do should be possible.

9

You are trying to interact with Visual Studio development via ssh in your tailnet correct? Then Tailscale does have an extension for Visual Studio Code lets you interact with resources in your tailnet from within the VS Code IDE. The page below has the link and has some info on solving ssh issues. Other than that I am out of ideas.

10

Thanks to stavros-k on github for giving me the flag and responding so fast.

cap_add needs to have SETGID flag added.

This only gets access to the container and the containers file system. This may be the limitation to the environment (docker). Not willing to run as privileged.

We need Tailscale on the TrueNAS host. Let’s make that happen!