TAP device issues for N2N/Edge under TrueNAS 12

[jesko]

Hello! My goal is to run n2n inside a jail; I am currently running TrueNAS-12.0-U8.1 on an HP ProLiant MicroServer Gen8. I originally set up this machine in 2014 using FreeNAS 9.3, and was sitting on 9.10 for a long while. I recently upgraded to 11.2, and even more recently to TrueNAS 12.0. I have n2n working without issues inside a legacy jail that I am still able to boot when using FreeNAS 11.2, but I cannot to replicate the same capability with iocage. My new jail was created as follows:

• VNET is activated.
• Release is 12.3-RELEASE-p5.
• The following boxes are ticked under Jail Properties: allow_set_hostname, allow_sysvipc, allow_raw_sockets, allow_socket_af, allow_mount, allow_mount_devfs, allow_mount_fusefs, allow_mount_nullfs, allow_mount_procfs, allow_mount_tmpfs, allow_mount_zfs.
• Under Custom Properties, the option allow_tun is selected.
• I installed n2n by running pkg install n2n inside the jail.

I have also rebooted the entire system more than once. When I run the edge command as root with the correct parameters, the output is the following:

Code:

18/Apr/2022 20:06:38 [edge.c:852] Starting n2n edge 2.8.0 Apr 12 2022 05:52:42
18/Apr/2022 20:06:38 [edge.c:852] Using OpenSSL 1.11l-freebsd  24 Aug 2021
18/Apr/2022 20:06:38 [edge.c:852] Using compression: none.
18/Apr/2022 20:06:38 [edge.c:852] Using twofish cipher.
18/Apr/2022 20:06:38 [edge.c:852] ip_mode='static'
18/Apr/2022 20:06:38 [tuntap_freebsd.c:49] ERROR: Unable to open tap device

Furthermore, after the command has failed in this fashion, my ifconfig contains 255 new devices called tap0, tap1, ..., tap254.

I tried following this post simply because it is the closest related topic I could find, but kldload if_tun already fails with the following error message:

Code:

kldload: can't load if_tun: Operation not permitted

A similar error is displayed when running kldload if_tab. I am not sure if that is an issue or not, seeing as lots of tap devices were indeed created. I also went back to 11.2 and used the warden migration script to migrate my legacy jail to an iocage one, but the resulting jail was plagued with precisely the same problems.

I am out of ideas, and I hope that someone here can come up with additional suggestions.