This is frustratingly necessary

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>

apps-kustomized/torrents/deploy.yaml

@@ -19,7 +19,7 @@ spec:
         command:
         - /bin/sh
         - -c
-        - mkdir -p /persist/var/lib/tailscale
+        - mkdir -p /persist/var/lib/tailscale; touch /run/xtables.lock
         name: ts-prep
         securityContext:
           runAsGroup: 1000
@@ -31,6 +31,8 @@ spec:
           readOnly: true
         - mountPath: /persist
           name: persist
+        - mountPath: /run
+          name: runfolder
       containers:
       - image: qbittorrentofficial/qbittorrent-nox:latest
         name: qbittorrent
@@ -92,6 +94,8 @@ spec:
           readOnly: true
         - mountPath: /persist
           name: persist
+        - mountPath: /run
+          name: runfolder
       preemptionPolicy: PreemptLowerPriority
       priority: 0
       serviceAccountName: tailscale
@@ -113,6 +117,8 @@ spec:
           claimName: q-config
       - name: persist
         emptyDir: {}
+      - name: runfolder
+        emptyDir: {}
       - name: kube-api-access-t4rzn
         projected:
           sources: