netMap is nil when setting up Tailscale

IncusOS
1

I’m having trouble setting up Tailscale on Incus. This is the config I’m using:

config:
  accept_routes: false
  advertised_routes: null
  auth_key: tskey-auth-mykey
  enabled: true
  login_server: https://controlplane.tailscale.com
  serve_enabled: true
  serve_port: 443

After saving, I’m given the error:

Config parsing error: Failed to run: tailscale serve reset: exit status 1 (sending serve config: updating config: netMap is nil)

Maybe this is the result of my first attempt to enable Tailscale without setting enabled: true. Can you tell me how to continue?

3

What happens if you set serve_enabled to false?

4

Switching that to falseresults into the same error

5

Looking at the code, if you change the login server or auth key value, it will trigger a full tailscale down and tailscale up which should be sufficient to reset things to a clean state here.

6

Ah, that gives us something!

The only thing left is the serve part, as with it enabled, I get this error:

Config parsing error: Failed to run: tailscale serve --bg --https=443 https+insecure://localhost:8443: signal: killed
Press enter to open the editor again or ctrl+c to abort change

The server is reachable on port 8443 via Tailscale however :slight_smile:

7

I needed to provision HTTPS Certificates as stated in the docs :person_facepalming: Now it works as expected :smiley:

8

One follow-up question: I think I locked myself out after rebooting the system, by configuring serve_port: 8443. As it appears, Tailscale is enabled before Incus is loaded, both on port 8443.

What’s my best way to alter either core.https_address or the serve_port?

9

Oh, oops, that’s not good :slight_smile:

Assuming you have the recovery key for your system, you can follow:

Not all steps are relevant here, but the steps to get access to the encrypted storage and modify files on it is what you really want in this scenario.

Once you have the disk accessible, your options are:

  • Edit /var/lib/incus-os/state.txt to remove the Tailscale config AND wipe /var/lib/tailscale/ so that the system can start normally without Tailscale
  • Write a /var/lib/incus/database/patch.local.sql to change the core.https_address key to another value, basically UPDATE config SET value=':8444' WHERE key='core.https_address'.
  • Directly run sqlite3 against /var/lib/incus/database/local.db and change the config in the config table.
10

Submitted this one to try to prevent others from running into this.
I never used that particular Tailscale feature so I’m not sure exactly what it does as far as the local listener.

1 Like