From 7c17b8a93e7e58dc66e78c8488545c1ccfc48a54 Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Sat, 11 Apr 2026 04:31:01 -0500 Subject: [PATCH] fix(gluetun): remove shell wrapper, use default entrypoint The /gluetun binary has restrictive permissions and cannot be exec'd from a shell wrapper. The OOM fix (512Mi limit) prevents the crashes that caused stale ip rules, so the wrapper is not needed. --- servers/legion/k8s/media/gluetun-qbittorrent.yaml | 9 --------- 1 file changed, 9 deletions(-) diff --git a/servers/legion/k8s/media/gluetun-qbittorrent.yaml b/servers/legion/k8s/media/gluetun-qbittorrent.yaml index ec27225..7cdb359 100644 --- a/servers/legion/k8s/media/gluetun-qbittorrent.yaml +++ b/servers/legion/k8s/media/gluetun-qbittorrent.yaml @@ -30,15 +30,6 @@ spec: # VPN container — must come first so network is up before qBittorrent starts - name: gluetun image: ghcr.io/qdm12/gluetun:latest - # Clean up stale ip rules before starting — handles both pod restarts and container-only restarts - # (initContainer only runs on pod restart; this command runs on every container start) - command: ["/bin/sh", "-c"] - args: - - | - ip rule del priority 101 2>/dev/null || true - ip route flush table 51820 2>/dev/null || true - ip rule del table 51820 2>/dev/null || true - exec /gluetun securityContext: capabilities: add: ["NET_ADMIN"]