cmd/tailscale/cli: add "tailscale get" command

This adds @alexwlchan's proposed "tailscale get" command that reads
current preference values, complementing "tailscale set". It uses the
same flag names as set.

  tailscale get              # show all settings as a table
  tailscale get all          # same
  tailscale get accept-dns   # show a single value
  tailscale get --json       # output as JSON object
  tailscale get --set-flags  # output as tailscale set argv

Fixes #11389
Fixes tailscale/corp#38702

Change-Id: Ie366f27f11ccc56c76fff9a94ed8a9de9c835bd0
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
This commit is contained in:
Brad Fitzpatrick 2026-04-08 18:09:58 +00:00
parent ccef06b968
commit b7860f2b5f
3 changed files with 258 additions and 14 deletions

View File

@ -246,6 +246,7 @@ change in the future.
upCmd,
downCmd,
setCmd,
getCmd,
loginCmd,
logoutCmd,
switchCmd,

View File

@ -451,10 +451,10 @@ var fileGetCmd = &ffcli.Command{
Exec: runFileGet,
FlagSet: (func() *flag.FlagSet {
fs := newFlagSet("get")
fs.BoolVar(&getArgs.wait, "wait", false, "wait for a file to arrive if inbox is empty")
fs.BoolVar(&getArgs.loop, "loop", false, "run get in a loop, receiving files as they come in")
fs.BoolVar(&getArgs.verbose, "verbose", false, "verbose output")
fs.Var(&getArgs.conflict, "conflict", "`behavior`"+` when a conflicting (same-named) file already exists in the target directory.
fs.BoolVar(&fileGetArgs.wait, "wait", false, "wait for a file to arrive if inbox is empty")
fs.BoolVar(&fileGetArgs.loop, "loop", false, "run get in a loop, receiving files as they come in")
fs.BoolVar(&fileGetArgs.verbose, "verbose", false, "verbose output")
fs.Var(&fileGetArgs.conflict, "conflict", "`behavior`"+` when a conflicting (same-named) file already exists in the target directory.
skip: skip conflicting files: leave them in the taildrop inbox and print an error. get any non-conflicting files
overwrite: overwrite existing file
rename: write to a new number-suffixed filename`)
@ -463,7 +463,7 @@ var fileGetCmd = &ffcli.Command{
})(),
}
var getArgs = struct {
var fileGetArgs = struct {
wait bool
loop bool
verbose bool
@ -525,7 +525,7 @@ func receiveFile(ctx context.Context, wf apitype.WaitingFile, dir string) (targe
return "", 0, fmt.Errorf("opening inbox file %q: %w", wf.Name, err)
}
defer rc.Close()
f, err := openFileOrSubstitute(dir, wf.Name, getArgs.conflict)
f, err := openFileOrSubstitute(dir, wf.Name, fileGetArgs.conflict)
if err != nil {
return "", 0, err
}
@ -551,10 +551,10 @@ func runFileGetOneBatch(ctx context.Context, dir string) []error {
errs = append(errs, fmt.Errorf("getting WaitingFiles: %w", err))
break
}
if len(wfs) != 0 || !(getArgs.wait || getArgs.loop) {
if len(wfs) != 0 || !(fileGetArgs.wait || fileGetArgs.loop) {
break
}
if getArgs.verbose {
if fileGetArgs.verbose {
printf("waiting for file...")
}
if err := waitForFile(ctx); err != nil {
@ -575,7 +575,7 @@ func runFileGetOneBatch(ctx context.Context, dir string) []error {
errs = append(errs, err)
continue
}
if getArgs.verbose {
if fileGetArgs.verbose {
printf("wrote %v as %v (%d bytes)\n", wf.Name, writtenFile, size)
}
if err = localClient.DeleteWaitingFile(ctx, wf.Name); err != nil {
@ -587,7 +587,7 @@ func runFileGetOneBatch(ctx context.Context, dir string) []error {
if deleted == 0 && len(wfs) > 0 {
// persistently stuck files are basically an error
errs = append(errs, fmt.Errorf("moved %d/%d files", deleted, len(wfs)))
} else if getArgs.verbose {
} else if fileGetArgs.verbose {
printf("moved %d/%d files\n", deleted, len(wfs))
}
return errs
@ -607,7 +607,7 @@ func runFileGet(ctx context.Context, args []string) error {
if fi, err := os.Stat(dir); err != nil || !fi.IsDir() {
return fmt.Errorf("%q is not a directory", dir)
}
if getArgs.loop {
if fileGetArgs.loop {
for {
errs := runFileGetOneBatch(ctx, dir)
for _, err := range errs {
@ -639,7 +639,7 @@ func runFileGet(ctx context.Context, args []string) error {
}
func wipeInbox(ctx context.Context) error {
if getArgs.wait {
if fileGetArgs.wait {
return errors.New("can't use --wait with /dev/null target")
}
wfs, err := localClient.WaitingFiles(ctx)
@ -648,7 +648,7 @@ func wipeInbox(ctx context.Context) error {
}
deleted := 0
for _, wf := range wfs {
if getArgs.verbose {
if fileGetArgs.verbose {
log.Printf("deleting %v ...", wf.Name)
}
if err := localClient.DeleteWaitingFile(ctx, wf.Name); err != nil {
@ -656,7 +656,7 @@ func wipeInbox(ctx context.Context) error {
}
deleted++
}
if getArgs.verbose {
if fileGetArgs.verbose {
log.Printf("deleted %d files", deleted)
}
return nil

243
cmd/tailscale/cli/get.go Normal file
View File

@ -0,0 +1,243 @@
// Copyright (c) Tailscale Inc & contributors
// SPDX-License-Identifier: BSD-3-Clause
package cli
import (
"context"
"encoding/json"
"flag"
"fmt"
"strings"
"text/tabwriter"
"github.com/peterbourgon/ff/v3/ffcli"
"tailscale.com/ipn"
"tailscale.com/ipn/ipnstate"
"tailscale.com/net/tsaddr"
"tailscale.com/types/views"
)
var getCmd = &ffcli.Command{
Name: "get",
ShortUsage: "tailscale get [flags] [setting-name | all]",
ShortHelp: "Show current preference values",
LongHelp: `"tailscale get" shows the current value of one or all preferences.
With no argument or "all", all preferences are shown.
With a specific setting name, only that value is shown.
The setting names are the same flag names accepted by "tailscale set".`,
FlagSet: getFlags,
Exec: runGet,
}
type getArgsT struct {
json bool
setFlags bool
}
var getArgs getArgsT
var getFlags = newGetFlagSet(&getArgs)
func newGetFlagSet(args *getArgsT) *flag.FlagSet {
fs := newFlagSet("get")
fs.BoolVar(&args.json, "json", false, "output as JSON")
fs.BoolVar(&args.setFlags, "set-flags", false, "output as \"tailscale set\" flag arguments")
return fs
}
// getSetting is a single preference name-value pair.
type getSetting struct {
name string
value any
}
func runGet(ctx context.Context, args []string) error {
if len(args) > 1 {
fatalf("too many arguments: %q", args)
}
wantAll := len(args) == 0 || args[0] == "all"
var wantName string
if !wantAll {
wantName = args[0]
}
prefs, err := localClient.GetPrefs(ctx)
if err != nil {
return err
}
st, err := localClient.Status(ctx)
if err != nil {
return err
}
goos := effectiveGOOS()
var settings []getSetting
if wantAll {
settings = getSettingsFromPrefs(prefs, st, goos, false)
} else {
// When querying a specific name, include hidden flags.
all := getSettingsFromPrefs(prefs, st, goos, true)
for _, s := range all {
if s.name == wantName {
settings = []getSetting{s}
break
}
}
if len(settings) == 0 {
return fmt.Errorf("unknown setting %q; see \"tailscale set --help\" for valid settings", wantName)
}
}
switch {
case getArgs.json:
return getOutputJSON(settings)
case getArgs.setFlags:
return getOutputSetFlags(settings)
case !wantAll:
// Single value: just print the raw value.
outln(fmt.Sprint(settings[0].value))
return nil
default:
return getOutputTable(settings)
}
}
// getSettingsFromPrefs returns get-able settings derived from prefs,
// using the same flag names as "tailscale set".
// If includeHidden is false, flags with hidden usage strings are omitted.
func getSettingsFromPrefs(prefs *ipn.Prefs, st *ipnstate.Status, goos string, includeHidden bool) []getSetting {
// Use the set command's flag set to get the canonical ordered list
// of flag names and to determine OS applicability.
var dummy setArgsT
fs := newSetFlagSet(goos, &dummy)
var settings []getSetting
fs.VisitAll(func(f *flag.Flag) {
if preflessFlag(f.Name) {
return
}
if !includeHidden && strings.HasPrefix(f.Usage, hidden) {
return
}
v := prefValue(f.Name, prefs, st)
settings = append(settings, getSetting{name: f.Name, value: v})
})
return settings
}
// prefValue returns the current value of the preference corresponding to
// the given "tailscale set" flag name.
func prefValue(flagName string, prefs *ipn.Prefs, st *ipnstate.Status) any {
switch flagName {
case "accept-routes":
return prefs.RouteAll
case "accept-dns":
return prefs.CorpDNS
case "exit-node":
if prefs.AutoExitNode.IsSet() {
return ipn.AutoExitNodePrefix + string(prefs.AutoExitNode)
}
ip := exitNodeIP(prefs, st)
if ip.IsValid() {
return ip.String()
}
return ""
case "exit-node-allow-lan-access":
return prefs.ExitNodeAllowLANAccess
case "shields-up":
return prefs.ShieldsUp
case "ssh":
return prefs.RunSSH
case "hostname":
return prefs.Hostname
case "advertise-routes":
var sb strings.Builder
for i, r := range tsaddr.WithoutExitRoutes(views.SliceOf(prefs.AdvertiseRoutes)).All() {
if i > 0 {
sb.WriteByte(',')
}
sb.WriteString(r.String())
}
return sb.String()
case "advertise-exit-node":
return tsaddr.ContainsExitRoutes(views.SliceOf(prefs.AdvertiseRoutes))
case "advertise-connector":
return prefs.AppConnector.Advertise
case "nickname":
return prefs.ProfileName
case "update-check":
return prefs.AutoUpdate.Check
case "auto-update":
return prefs.AutoUpdate.Apply.EqualBool(true)
case "report-posture":
return prefs.PostureChecking
case "webclient":
return prefs.RunWebClient
case "operator":
return prefs.OperatorUser
case "snat-subnet-routes":
return !prefs.NoSNAT
case "stateful-filtering":
val, ok := prefs.NoStatefulFiltering.Get()
if ok && val {
return false
}
return true
case "netfilter-mode":
return prefs.NetfilterMode.String()
case "unattended":
return prefs.ForceDaemon
case "sync":
return prefs.Sync.EqualBool(true)
case "relay-server-port":
if prefs.RelayServerPort != nil {
return fmt.Sprint(*prefs.RelayServerPort)
}
return ""
case "relay-server-static-endpoints":
parts := make([]string, len(prefs.RelayServerStaticEndpoints))
for i, ep := range prefs.RelayServerStaticEndpoints {
parts[i] = ep.String()
}
return strings.Join(parts, ",")
default:
return nil
}
}
func getOutputTable(settings []getSetting) error {
w := tabwriter.NewWriter(Stdout, 0, 0, 2, ' ', 0)
fmt.Fprintf(w, "NAME\tVALUE\n")
for _, s := range settings {
fmt.Fprintf(w, "%s\t%v\n", s.name, s.value)
}
return w.Flush()
}
func getOutputJSON(settings []getSetting) error {
m := make(map[string]any, len(settings))
for _, s := range settings {
m[s.name] = s.value
}
j, err := json.MarshalIndent(m, "", " ")
if err != nil {
return err
}
outln(string(j))
return nil
}
func getOutputSetFlags(settings []getSetting) error {
var parts []string
for _, s := range settings {
parts = append(parts, fmtFlagValueArg(s.name, s.value))
}
outln(strings.Join(parts, " "))
return nil
}