From d4acbfa5fc577e59349287b212c0a9f2b25857e3 Mon Sep 17 00:00:00 2001
From: alexz <me@alexzaw.dev>
Date: Wed, 24 Dec 2025 23:43:37 +0000
Subject: [PATCH] Add kmod package and call load_tun.sh before vpnagentd

---
 apps/rego-tunnel-linux/source/Dockerfile    | 2 +-
 apps/rego-tunnel-linux/source/entrypoint.sh | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/rego-tunnel-linux/source/Dockerfile b/apps/rego-tunnel-linux/source/Dockerfile
index 3754aa6..49520ea 100755
--- a/apps/rego-tunnel-linux/source/Dockerfile
+++ b/apps/rego-tunnel-linux/source/Dockerfile
@@ -5,7 +5,7 @@ ENV container=docker
 # Install systemd and required packages
 RUN apt-get update && apt-get install -y \
     systemd systemd-sysv dbus dbus-x11 \
-    iproute2 iptables ca-certificates \
+    iproute2 iptables ca-certificates kmod \
     curl wget openssh-client \
     x11vnc xvfb fluxbox novnc websockify xterm nano oathtool \
     xauth libnss3 libatk1.0-0 libatk-bridge2.0-0 \
diff --git a/apps/rego-tunnel-linux/source/entrypoint.sh b/apps/rego-tunnel-linux/source/entrypoint.sh
index 628c9b8..00b22db 100755
--- a/apps/rego-tunnel-linux/source/entrypoint.sh
+++ b/apps/rego-tunnel-linux/source/entrypoint.sh
@@ -37,6 +37,8 @@ start_gui() {
 }
 
 start_vpnagent() {
+  # Load TUN module if needed
+  /opt/cisco/secureclient/bin/load_tun.sh 2>/dev/null || true
   # Start Cisco VPN agent daemon
   /opt/cisco/secureclient/bin/vpnagentd &
   pids+=($!)