From 4087d1fee9d34d042b279262ffbdaf1030ffd5e8 Mon Sep 17 00:00:00 2001
From: Florian Preinstorfer <site-github@nblock.org>
Date: Thu, 10 Sep 2026 10:59:44 +0200
Subject: [PATCH] Use tmpfs for /tmp

This is relevant when docker is used as container runtime as it does not
set /tmp as tmpfs. With podman /tmp is mounted as tmpfs due to
`--read-only-tmpfs` (enabled by default).

Fixes: #3463
---
 docs/setup/install/container.md | 1 +
 docs/setup/install/main.md      | 1 +
 2 files changed, 2 insertions(+)

diff --git a/docs/setup/install/container.md b/docs/setup/install/container.md
index a36219e53..789e359ac 100644
--- a/docs/setup/install/container.md
+++ b/docs/setup/install/container.md
@@ -34,6 +34,7 @@ Registry](https://github.com/juanfont/headscale/pkgs/container/headscale). The c
       --name headscale \
       --detach \
       --read-only \
+      --tmpfs /tmp \
       --tmpfs /var/run/headscale \
       --volume "$(pwd)/config:/etc/headscale:ro" \
       --volume "$(pwd)/lib:/var/lib/headscale" \
diff --git a/docs/setup/install/main.md b/docs/setup/install/main.md
index 80be51b8e..f09310b31 100644
--- a/docs/setup/install/main.md
+++ b/docs/setup/install/main.md
@@ -29,6 +29,7 @@ docker run \
   --name headscale \
   --detach \
   --read-only \
+  --tmpfs /tmp \
   --tmpfs /var/run/headscale \
   --volume "$(pwd)/config:/etc/headscale:ro" \
   --volume "$(pwd)/lib:/var/lib/headscale" \