Cannot install Tinc-VPN inside Windows Container

[mback2k]

Please, check https://docs.docker.com/docker-for-win/troubleshoot/.
Issues without logs and details cannot be debugged, and will be closed.

• I have tried with the latest version of my channel (Stable or Edge)
• I have submitted Diagnostics
• I have included the Diagnostics ID in this Issue
• Windows Version: Windows Server 1709 and Windows 10 1709.
• Docker for Windows Version: 17.06.2-ee-8-rc1 and 18.03.0-ce on Windows 10 1709

Expected behavior

I would like to be able to install the Tinc-VPN inside a Windows Container and run tincd.exe with a TAP device.

Actual behavior

On Windows Server 1709 the software installation does not go through, because of a filesystem error, probably in https://github.com/Microsoft/hcsshim.
On Windows 10 1709 the software installation does complete, but a TAP device cannot be installed inside the container.

Information

Diagnostics ID for Windows 10 1709: 6B3344D2-36A6-44A4-89BB-764B62C76472/2018-04-01_22-13-38

Dockerfile:

# escape=`

FROM microsoft/windowsservercore:1709_KB4088776

SHELL ["powershell", "-command"]

RUN Invoke-WebRequest "https://www.tinc-vpn.org/packages/windows/tinc-1.1pre15-install.exe" -OutFile tinc-1.1pre15-install.exe; `
    Start-Process -FilePath "C:\tinc-1.1pre15-install.exe" -ArgumentList /S -NoNewWindow -PassThru -Wait; `
    Remove-Item tinc-1.1pre15-install.exe;

SHELL ["cmd.exe", "/s", "/c"]

WORKDIR C:\Program Files\tinc\tap-win64

RUN .\addtap.bat

WORKDIR C:\Program Files\tinc

CMD ["tincd.exe"]

Steps to reproduce the behavior

1. docker build of Dockerfile above

2. get the following error on Windows Server 1709:

   re-exec error: exit status 1: output: remove \?\C:\ProgramData\docker\windowsfilter\ee435baca81a3c8c8ebe23fe9e338ae36d64942135f3c15714bbdcc4296f6414\Files\Windows\System32\LogFiles\Scm\SCM.EVM: The system cannot find the file specified.

3. get the following error on Windows 10 1709:

   tapinstall.exe failed.
   Device node created. Install is complete when drivers are installed...
   Updating drivers for tap0901 from C:\Program Files\tinc\tap-win64\OemWin2k.inf.
   UpdateDriverForPlugAndPlayDevices failed, GetLastError=13

[mback2k]

Pinging @darrenstahlmsft and @jhowardmsft due to potential issue in https://github.com/Microsoft/hcsshim.

[mback2k]

With 17.10.0-ee-preview-3 the software installation goes through on Windows Server 1709, so the hcsshim issue is solved there, but the TAP device cannot be installed:

C:\Program Files\tinc\tap-win64>tapinstall.exe install OemWin2k.inf tap0901
Device node created. Install is complete when drivers are installed...
Updating drivers for tap0901 from C:\Program Files\tinc\tap-win64\OemWin2k.inf.
UpdateDriverForPlugAndPlayDevices failed, GetLastError=13
tapinstall.exe failed.

[docker-robott]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale comment.
Stale issues will be closed after an additional 30d of inactivity.

Prevent issues from auto-closing with an /lifecycle frozen comment.

If this issue is safe to close now please do so.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle stale

[docker-robott]

Closed issues are locked after 30 days of inactivity.
This helps our team focus on active issues.

If you have found a problem that seems similar to this, please open a new issue.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle locked