Remove temporary Netbird connectivity debug step
The deploy pipeline works end-to-end now (Gimli deploys successfully), so the diagnostic step used to trace the WireGuard/TUN issue is no longer needed. RPIC continue-on-error is kept until the cluster returns.
This commit is contained in:
@@ -56,70 +56,6 @@ jobs:
|
|||||||
needs: build
|
needs: build
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Debug Netbird connectivity
|
|
||||||
env:
|
|
||||||
NB_URL: ${{ secrets.NETBIRD_URL }}
|
|
||||||
NB_KEY: ${{ secrets.NETBIRD_SETUP_KEY }}
|
|
||||||
run: |
|
|
||||||
echo "=== Secret presence (values are masked) ==="
|
|
||||||
echo "NETBIRD_URL length: ${#NB_URL}"
|
|
||||||
echo "NETBIRD_SETUP_KEY length: ${#NB_KEY}"
|
|
||||||
if [ -z "$NB_URL" ]; then echo "WARNING: NETBIRD_URL is EMPTY"; fi
|
|
||||||
if [ -z "$NB_KEY" ]; then echo "WARNING: NETBIRD_SETUP_KEY is EMPTY"; fi
|
|
||||||
|
|
||||||
# Derive host from the URL without printing the full URL.
|
|
||||||
host="$(printf '%s' "$NB_URL" | sed -E 's#^[a-zA-Z]+://##; s#[:/].*$##')"
|
|
||||||
echo "Derived management host: ${host:-<none>}"
|
|
||||||
|
|
||||||
echo "=== DNS resolution ==="
|
|
||||||
getent hosts "$host" || nslookup "$host" || echo "DNS resolution FAILED for $host"
|
|
||||||
|
|
||||||
echo "=== Control plane: HTTPS :443 reachable? ==="
|
|
||||||
curl -sS -o /dev/null -w "HTTP %{http_code} connect=%{time_connect}s\n" \
|
|
||||||
--max-time 15 "https://${host}/" || echo "curl to :443 FAILED"
|
|
||||||
|
|
||||||
# Other Netbird peers connect fine, so the server + 51820/udp are OK.
|
|
||||||
# 'netbird up' still hangs on THIS runner, which points to the runner
|
|
||||||
# container being unable to create the WireGuard tunnel interface.
|
|
||||||
# WireGuard needs a TUN device + NET_ADMIN capability inside the
|
|
||||||
# container; runner containers often lack these.
|
|
||||||
|
|
||||||
echo "=== Runner: TUN device present? (/dev/net/tun) ==="
|
|
||||||
if [ -c /dev/net/tun ]; then
|
|
||||||
echo "/dev/net/tun EXISTS (char device)"
|
|
||||||
else
|
|
||||||
echo "/dev/net/tun MISSING -- WireGuard cannot create a tunnel (LIKELY CAUSE)"
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "=== Runner: effective capabilities (need NET_ADMIN) ==="
|
|
||||||
if command -v capsh >/dev/null 2>&1; then
|
|
||||||
capsh --print 2>/dev/null | grep -i 'Current:' || true
|
|
||||||
else
|
|
||||||
grep -i CapEff /proc/self/status || true
|
|
||||||
echo "(decode with: capsh --decode=<hex>; NET_ADMIN is bit 12 / 0x1000)"
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "=== Runner: WireGuard tooling / kernel module ==="
|
|
||||||
command -v wg >/dev/null 2>&1 && echo "wg present" || echo "wg NOT present"
|
|
||||||
command -v wireguard-go >/dev/null 2>&1 && echo "wireguard-go (userspace) present" || echo "wireguard-go NOT present"
|
|
||||||
(lsmod 2>/dev/null | grep -q wireguard && echo "kernel wireguard module loaded") || echo "kernel wireguard module NOT loaded (userspace fallback needed)"
|
|
||||||
|
|
||||||
echo "=== Runner: can we create a dummy TUN? (definitive test) ==="
|
|
||||||
if command -v ip >/dev/null 2>&1; then
|
|
||||||
if ip tuntap add dev nbtest0 mode tun 2>/tmp/tunerr; then
|
|
||||||
echo "SUCCESS: created TUN interface -> NET_ADMIN + TUN available"
|
|
||||||
ip tuntap del dev nbtest0 mode tun 2>/dev/null || true
|
|
||||||
else
|
|
||||||
echo "FAILED to create TUN interface -> $(cat /tmp/tunerr)"
|
|
||||||
echo "This is almost certainly why 'netbird up' hangs."
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
echo "iproute2 'ip' not available"
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "=== done (this step never fails the build) ==="
|
|
||||||
continue-on-error: true
|
|
||||||
|
|
||||||
- name: Netbird Connect
|
- name: Netbird Connect
|
||||||
uses: Alemiz112/netbird-connect@v1
|
uses: Alemiz112/netbird-connect@v1
|
||||||
with:
|
with:
|
||||||
|
|||||||
Reference in New Issue
Block a user