Parallels

Resolution

Follow the steps below to configure the TUN/TAP device in the container:

1. Make sure the tun module is loaded on the hardware node:
For RHEL3-based distributions load this module if necessary:and add it into /etc/modules.conf.

For RHEL4/5-based distributions put the following line to the config /etc/modprobe.conf:
alias char-major-10-200 tun

For RHEL/CentOS 6.x based distributions create a separate file /etc/sysconfig/modules/vztun.sh to let it load automatically during the boot time:

This file should be executable. You can make it executable by running:

This module tun is supposed to be loaded before the Virtuozzo service is started, so runto let Virtuozzo acknowledge this module's availability (all containers will be restarted). On SuSE-based systems, add  the tun module into the MODULES_LOADED_ON_BOOT variable in /etc/sysconfig/kernel file (it should be processed by the /etc/init.d/boot.loadmodules initialization script).


2. Allow the container to use the TUN/TAP device:
In that case, you will receive the following error message:

Note: Cannot set tx queue length on tun0: Operation not permitted (errno=1)

Add required permission:Granting such capability should be considered for trusted environments only.


3. Create the device in the container:

4. Set proper permissions for /dev/net/tun:

5. Install VPN software, which requires TUN/TAP interface such as Virtual TUNnel or OpenVPN.