From de4f5467a7a0e0a467aecd87e2cc1b16ce79938c Mon Sep 17 00:00:00 2001 From: WMJ Ismail Date: Mon, 6 Jul 2026 06:31:34 +0200 Subject: [PATCH] docs: add alpine-worker container setup (Tailscale, git, getrandom fix) --- Infrastructure-Tool-Log.-.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/Infrastructure-Tool-Log.-.md b/Infrastructure-Tool-Log.-.md index 8888154..53ccc2a 100644 --- a/Infrastructure-Tool-Log.-.md +++ b/Infrastructure-Tool-Log.-.md @@ -40,6 +40,34 @@ | **Storage volumes** | 6-drive RAID1: volume2 72% 🟡, volume4 12% ✅ | | **Traefik config** | 🟡 Fix attempted but blocked by high load | | **Samba access** | ✅ Credentials found on Mac Mini | +| **Alpine Worker container** | ✅ Running on Synology — Git/Podman/Tailscale installed | +| **Alpine Worker → Tailscale** | ✅ `100.101.57.46` (`alpine-worker`) | +| **Alpine Worker → GitHub pull** | ✅ `git clone` works (n8n, public repos) | +| **Alpine Worker → Gitea pull** | ✅ `git clone` works (falahos/app-prayer-times, etc.) | +| **Alpine Worker → Podman** | ✅ `podman version 5.8.3` | +| **Alpine Worker → getrandom fix** | ⚠️ Kernel 3.10 lacks `getrandom()` syscall. Fixed via `LD_PRELOAD=/data/getrandom_shim.so` | +| **Alpine Worker → seccomp** | `--security-opt seccomp=unconfined` | + +### Alpine Worker Container Details + +Runs directly on Synology host (not Swarm — Swarm blocks `--security-opt`): + +```bash +# On Synology: +docker exec alpine-worker + +# Examples: +docker exec alpine-worker git clone https://github.com/n8n-io/n8n.git /tmp/n8n +docker exec alpine-worker git clone https://git.falahos.my/falahos/app-prayer-times.git /tmp/pt +docker exec alpine-worker podman pull alpine:latest + +# SSH from VPS (admin user, key-based auth): +ssh admin@100.126.73.29 "docker exec alpine-worker " + +# Get random fix — compiled C shim on persistent volume: +# /data/getrandom_shim.so overrides musl's getrandom() → reads /dev/urandom +# LD_PRELOAD set in container env +``` ---