konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 2 Packages Projects Releases 1 Wiki Activity

fix(otbr): bridge the radio from a socat sidecar over a Unix socket #1608

Merged
k.renner merged 1 commits from fix/otbr-no-runtime-install into main 2026-11-08 09:55:21 +00:00
Conversation 0 Commits 1 Files Changed 2
+76 -49
claude-bot commented 2026-11-08 09:52:22 +00:00
Member
Copy Link
Copy Source

otbr no longer installs anything at runtime.

  • radio-bridge: native sidecar (alpine/socat:1.8.1.3, same pin as mdns-relay/paperless) serving /run/thread/spinel.sock on a shared emptyDir and bridging each connection to slzb-thread.renner.uno:6638. Startup probe waits for the socket.
  • otbr: openthread/otbr image of 2026-11-07 (sha256:cada244b…), RADIO_URL=spinel+hdlc+unix:///run/thread/spinel.sock. OpenThread supports Unix stream sockets since #13785 (2026-10-25); ot-br-posix pins OpenThread of 2026-11-06, and the image's otbr-agent carries the scheme. Its entrypoint is identical to the previous image's, so the --auto-attach=0 patch still applies. The apt/socat/PTY steps are gone.
  • otbr-egress CiliumNetworkPolicy: DNS plus slzb-thread.renner.uno TCP/6638 only.

Replaces #1607 (YouTrack S28-48).

🤖 Generated with Claude Code

otbr no longer installs anything at runtime. - `radio-bridge`: native sidecar (`alpine/socat:1.8.1.3`, same pin as mdns-relay/paperless) serving `/run/thread/spinel.sock` on a shared emptyDir and bridging each connection to `slzb-thread.renner.uno:6638`. Startup probe waits for the socket. - `otbr`: `openthread/otbr` image of 2026-11-07 (`sha256:cada244b…`), `RADIO_URL=spinel+hdlc+unix:///run/thread/spinel.sock`. OpenThread supports Unix stream sockets since #13785 (2026-10-25); ot-br-posix pins OpenThread of 2026-11-06, and the image's `otbr-agent` carries the scheme. Its entrypoint is identical to the previous image's, so the `--auto-attach=0` patch still applies. The apt/socat/PTY steps are gone. - `otbr-egress` CiliumNetworkPolicy: DNS plus `slzb-thread.renner.uno` TCP/6638 only. Replaces #1607 (YouTrack S28-48). 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-11-08 09:52:22 +00:00
fix(otbr): bridge the radio from a socat sidecar over a Unix socket
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
dfb8a0834c 
otbr installed socat from apt at every start, which the namespace
egress baseline denies, so it crash-looped. otbr-agent now speaks
spinel+hdlc+unix to a socket served by a native alpine/socat sidecar
that bridges to slzb-thread:6638 (openthread/otbr image of 2026-11-07;
Unix stream sockets landed in OpenThread #13785). otbr-egress allows
only that TCP link (S28-48).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
k.renner merged commit bdd36d3587 into main 2026-11-08 09:55:21 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#1608