From e731f85296c865e351ae3cd05b38b5886809419b Mon Sep 17 00:00:00 2001
From: Ming Di Leom <2809763-curben@users.noreply.gitlab.com>
Date: Sun, 30 Mar 2025 09:32:21 +0000
Subject: [PATCH] ci(gl): start tailscaled without openrc

https://stackoverflow.com/questions/78269734/is-there-a-better-way-to-run-openrc-in-a-container-than-enabling-softlevel
---
 .gitlab-ci.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 757d0a6..c1b391f 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -49,11 +49,10 @@ deploy:
   stage: deploy
 
   before_script:
-    - apk update && apk add openrc tailscale openssh-client rsync
-    - mkdir -p /run/openrc/
-    - touch /run/openrc/softlevel
-    - rc-service -Z tailscale start
-    - rc-service tailscale start
+    - apk update && apk add tailscale openssh-client rsync
+    - export PATH="/usr/libexec/tailscale:$PATH"
+    - export TS_DEBUG_FIREWALL_MODE=nftables
+    - tailscaled --socket=/run/tailscale/tailscaled.sock --state=/var/lib/tailscale/tailscaled.state --port=41641 --no-logs-no-support >/dev/null 2>&1 &
     - tailscale up --auth-key="${TAILSCALE_OAUTH}?ephemeral=true&preauthorized=true" --advertise-tags=tag:gl-ci --hostname="gitlab-$(cat /etc/hostname)" --accept-routes
     - mkdir -p ~/.ssh
     - chmod 700 ~/.ssh