docs: add alpine-worker container setup (Tailscale, git, getrandom fix)

2026-07-06 06:31:34 +02:00
parent 21babc40e8
commit de4f5467a7
1 changed files with 28 additions and 0 deletions
@@ -40,6 +40,34 @@
 | **Storage volumes** | 6-drive RAID1: volume2 72% 🟡, volume4 12% ✅ |
 | **Traefik config** | 🟡 Fix attempted but blocked by high load |
 | **Samba access** | ✅ Credentials found on Mac Mini |
+| **Alpine Worker container** | ✅ Running on Synology — Git/Podman/Tailscale installed |
+| **Alpine Worker → Tailscale** | ✅ `100.101.57.46` (`alpine-worker`) |
+| **Alpine Worker → GitHub pull** | ✅ `git clone` works (n8n, public repos) |
+| **Alpine Worker → Gitea pull** | ✅ `git clone` works (falahos/app-prayer-times, etc.) |
+| **Alpine Worker → Podman** | ✅ `podman version 5.8.3` |
+| **Alpine Worker → getrandom fix** | ⚠️ Kernel 3.10 lacks `getrandom()` syscall. Fixed via `LD_PRELOAD=/data/getrandom_shim.so` |
+| **Alpine Worker → seccomp** | `--security-opt seccomp=unconfined` |
+
+### Alpine Worker Container Details
+
+Runs directly on Synology host (not Swarm — Swarm blocks `--security-opt`):
+
+```bash
+# On Synology:
+docker exec alpine-worker <command>
+
+# Examples:
+docker exec alpine-worker git clone https://github.com/n8n-io/n8n.git /tmp/n8n
+docker exec alpine-worker git clone https://git.falahos.my/falahos/app-prayer-times.git /tmp/pt
+docker exec alpine-worker podman pull alpine:latest
+
+# SSH from VPS (admin user, key-based auth):
+ssh admin@100.126.73.29 "docker exec alpine-worker <command>"
+
+# Get random fix — compiled C shim on persistent volume:
+# /data/getrandom_shim.so overrides musl's getrandom() → reads /dev/urandom
+# LD_PRELOAD set in container env
+```

 ---