curben
/
blog
mirror of https://gitlab.com/curben/blog
1
0
Fork 0
Code Issues Releases Wiki Activity

ci(gl): start tailscaled as ephemeral node 

https://tailscale.com/kb/1278/tailscaled#flags-to-tailscaled
This commit is contained in:
Ming Di Leom 2025-04-05 07:24:27 +00:00
parent 205d3fd854
commit 3de900c5d3
No known key found for this signature in database
GPG Key ID: 32D3E28E96A695E8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitlab-ci.yml
View File

@ -52,7 +52,7 @@ deploy:
- apk update && apk add tailscale openssh-client rsync - apk update && apk add tailscale openssh-client rsync
- export PATH="/usr/libexec/tailscale:$PATH" - export PATH="/usr/libexec/tailscale:$PATH"
- export TS_DEBUG_FIREWALL_MODE=nftables - export TS_DEBUG_FIREWALL_MODE=nftables
- tailscaled --socket=/run/tailscale/tailscaled.sock --state=/var/lib/tailscale/tailscaled.state --port=41641 --no-logs-no-support >/dev/null 2>&1 & - tailscaled --socket=/run/tailscale/tailscaled.sock --state="mem:" --port=41641 --no-logs-no-support >/dev/null 2>&1 &
- tailscale up --auth-key="${TAILSCALE_OAUTH}?ephemeral=true&preauthorized=true" --advertise-tags=tag:gl-ci --hostname="gitlab-$(cat /etc/hostname)" --accept-routes - tailscale up --auth-key="${TAILSCALE_OAUTH}?ephemeral=true&preauthorized=true" --advertise-tags=tag:gl-ci --hostname="gitlab-$(cat /etc/hostname)" --accept-routes
- mkdir -p ~/.ssh - mkdir -p ~/.ssh
- chmod 700 ~/.ssh - chmod 700 ~/.ssh