Anyone have this deployed as a TrueNAS Scale App?

[TheHesster]

I have a great setup working myself on a docker host debian VM in my homelab but I'm trying to set this up for a friend on TrueNAS Scale using their Apps section to deploy a docker image.

I added NET_ADMIN to the capabilities section in the gui tool. I didn't choose to run the container privileged. Does this matter?

Currently the container is stuck on stopped and won't start and there are no logs available.

Will likely just move him over to a vm and help him understand docker at the command line...

Thanks for any help.

[dfredell]

I was able to get it running. Here is my config. I'm new to TrueNAS Scale, but not Kubernetes, so if there is a better way to share the config let me know.

image: haugene/transmission-openvpn:latest
ENVS for your vpn:

  OPENVPN_PROVIDER:   PIA
  OPENVPN_CONFIG:     ca_montreal
  OPENVPN_USERNAME:   xxxxx
  OPENVPN_PASSWORD:   xxxx
  TRANSMISSION_HOME:  /config/transmission-home
  LOCAL_NETWORK:      192.168.1.0/24
  OPENVPN_OPTS:       --inactive 3600 --ping 10 --ping-exit 60

Allow the pod to set host routes

mount your host data volumes in

allow god mode on networking so the pod can make a TUN interface

If you know kubernets, this can be deployed via k3s kubectl apply -f file.yaml but I don't know if TrueNAS UI would suck it in if you added this deploy via kubectl.

apiVersion: v1
items:
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "12"
      meta.helm.sh/release-name: docker-transmission-openvpn
      meta.helm.sh/release-namespace: ix-docker-transmission-openvpn
    generation: 12
    labels:
      app.kubernetes.io/instance: docker-transmission-openvpn
      app.kubernetes.io/managed-by: Helm
      app.kubernetes.io/name: ix-chart
      app.kubernetes.io/version: v1
      helm.sh/chart: ix-chart-2403.0.0
    name: docker-transmission-openvpn-ix-chart
    namespace: ix-docker-transmission-openvpn
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/instance: docker-transmission-openvpn
        app.kubernetes.io/name: ix-chart
    strategy:
      type: Recreate
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: ix-docker-transmission-openvpn-0
          rollme: dUxfF
        creationTimestamp: null
        labels:
          app.kubernetes.io/instance: docker-transmission-openvpn
          app.kubernetes.io/name: ix-chart
      spec:
        containers:
        - env:
          - name: OPENVPN_PROVIDER
            value: PIA
          - name: OPENVPN_CONFIG
            value: ca_montreal
          - name: OPENVPN_USERNAME
            value: pXXXXXX
          - name: OPENVPN_PASSWORD
            value: xxxxxx
          - name: TRANSMISSION_HOME
            value: /config/transmission-home
          - name: LOCAL_NETWORK
            value: 192.168.1.0/24
          - name: OPENVPN_OPTS
            value: --inactive 3600 --ping 10 --ping-exit 60
          image: haugene/transmission-openvpn:latest
          imagePullPolicy: Always
          name: ix-chart
          ports:
          - containerPort: 9091
            hostPort: 9091
            protocol: TCP
          resources:
            limits:
              amd.com/gpu: "0"
              cpu: "1"
              gpu.intel.com/i915: "0"
              memory: 1Gi
              nvidia.com/gpu: "0"
            requests:
              cpu: 10m
              memory: 50Mi
          securityContext:
            capabilities:
              add:
              - NET_ADMIN
            privileged: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /config
            name: ix-host-path-docker-transmission-openvpn-0
          - mountPath: /data
            name: ix-host-path-docker-transmission-openvpn-1
          - mountPath: /media
            name: ix-host-path-docker-transmission-openvpn-2
        dnsConfig: {}
        dnsPolicy: Default
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /mnt/mediatank/media/docker/transmission/config
            type: ""
          name: ix-host-path-docker-transmission-openvpn-0
        - hostPath:
            path: /mnt/mediatank/media/Media/Downloads
            type: ""
          name: ix-host-path-docker-transmission-openvpn-1
        - hostPath:
            path: /mnt/mediatank/media/Media
            type: ""
          name: ix-host-path-docker-transmission-openvpn-2
kind: List
metadata:
  resourceVersion: ""