Yggdrasil Container

Pull using podman pull git.exu.li/exu/yggdrasil:latest

Run the container

podman run -d \
    --name=yggdrasil \
    -v yggdrasil_conf:/etc/yggdrasil \
    -v /dev/net/tun:/dev/net/tun \
    --cap-add=NET_ADMIN \
    --network=host \
    git.exu.li/exu/yggdrasil:latest

• -d: Detach container console
• --name=yggdrasil: Container name
• -v yggdrasil_conf:/etc/yggdrasil: Persist the config file stored under /etc/yggdrasil/yggdrasil.conf in the container

Explaination of powerful capabilities:

• -v /dev/net/tun:/dev/net/tun: Yggdrasil allocates a tunnel interface for the VPN
• --cap-add=NET_ADMIN: Grant the container permission to manage network operations
• --network=host: Expose as host network. This allows using the tunnel interface from the host and enables local listening for peers

Tags

• 0.5.12-5, 0.5.12, 0.5, latest

Building

Change the variables in build.sh if necessary

Requirements

• qemu-full (technically only x86_64 and/or aarch64 required, depending on your host device)
• qemu-user-static
• qemu-user-static-binfmt

Problems with building multi-arch images

Login to the registry using buildah login "registry URL"

Execute build.sh to create a manifest, build an x86_64 and aarch64 container and finally push the image to your registry