fix(wireguard): continue on ipv6 route add permission denial

This commit is contained in:
Quentin McGaw
2022-05-28 21:06:21 +00:00
parent 90c6c8485b
commit eb18eaf0a9

View File

@@ -5,6 +5,7 @@ import (
"errors" "errors"
"fmt" "fmt"
"net" "net"
"strings"
"github.com/qdm12/gluetun/internal/netlink" "github.com/qdm12/gluetun/internal/netlink"
"golang.zx2c4.com/wireguard/conn" "golang.zx2c4.com/wireguard/conn"
@@ -108,8 +109,15 @@ func (w *Wireguard) Run(ctx context.Context, waitError chan<- error, ready chan<
// requires net.ipv6.conf.all.disable_ipv6=0 // requires net.ipv6.conf.all.disable_ipv6=0
err = w.addRoute(link, allIPv6(), w.settings.FirewallMark) err = w.addRoute(link, allIPv6(), w.settings.FirewallMark)
if err != nil { if err != nil {
waitError <- fmt.Errorf("%w: %s", ErrRouteAdd, err) if strings.Contains(err.Error(), "permission denied") {
return w.logger.Errorf("cannot add route for IPv6 due to a permission denial. "+
"Ignoring and continuing execution; "+
"Please report to https://github.com/qdm12/gluetun/issues/998 if you find a fix. "+
"Full error string: %s", err)
} else {
waitError <- fmt.Errorf("%w: %s", ErrRouteAdd, err)
return
}
} }
} }