mirrors/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2025-08-06 22:27:36 +02:00
Code Issues Packages Projects Releases Wiki Activity
The easiest, most secure way to use WireGuard and 2FA.
9,309 Commits 873 Branches 182 Tags 109 MiB
Go 95.1%
C 1.9%
TypeScript 1.2%
Shell 0.6%
Swift 0.3%
Other 0.5%
67514f5eb2
Go to file
M. J. Fromberger 67514f5eb2
ssh/tailssh: fix path of "true" on Darwin (#16569) 
This is a follow-up to #15351, which fixed the test for Linux but not for
Darwin, which stores its "true" executable in /usr/bin instead of /bin.
Try both paths when not running on Windows.

In addition, disable CGo in the integration test build, which was causing the
linker to fail. These tests do not need CGo, and it appears we had some version
skew with the base image on the runners.

In addition, in error cases the recover step of the permissions check was
spuriously panicking and masking the "real" failure reason. Don't do that check
when a command was not produced.

Updates #15350

Change-Id: Icd91517f45c90f7554310ebf1c888cdfd109f43a
Signed-off-by: M. J. Fromberger <fromberger@tailscale.com>
2025-07-16 08:08:59 -07:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github .github: Bump github/codeql-action from 3.29.1 to 3.29.2 (#16480) 2025-07-15 09:54:00 -06:00
appc appc: fix a deadlock in route advertisements (#15031) 2025-02-18 11:31:14 -08:00
atomicfile ipn/store: automatically migrate between plaintext and encrypted state (#16318) 2025-06-26 17:09:13 -07:00
chirp scripts/check_license_headers.sh: delete, rewrite as a Go test 2025-06-16 13:35:38 -07:00
client client/systray: replace counter metric with gauge 2025-06-28 21:39:58 -07:00
clientupdate clientupdate: fix MSI exit code handling, preserve MSI and updater logs on Windows 2025-04-09 15:25:42 -05:00
cmd cmd/{k8s-operator,k8s-proxy},kube/k8s-proxy: add static endpoints for kube-apiserver type ProxyGroups (#16523) 2025-07-14 15:39:39 +01:00
control tstest/tlstest: simplify, don't even bake in any keys 2025-06-19 16:12:32 -07:00
derp derp/derphttp: fix DERP TLS client server name inclusion in URL form 2025-07-02 14:56:48 -07:00
disco disco,net/udprelay,wgengine/magicsock: support relay re-binding (#16388) 2025-06-26 19:30:14 -07:00
docs docs/windows/policy: add ExitNode.AllowOverride as an option to ExitNodeID policy 2025-07-10 18:39:18 -05:00
doctor all: remove non-applicable "linux" deps on Android 2025-05-07 21:05:13 -07:00
drive drive,ipn/ipnlocal: calculate peer taildrive URLs on-demand 2025-07-01 10:59:58 -05:00
envknob envknob/featureknob: restore SSH and exit-node capability for Home Assistant (#16263) 2025-06-25 11:26:11 -06:00
feature feature/relayserver,wgengine/magicsock: remove WIP gating of peer relay (#16533) 2025-07-10 18:52:01 -07:00
gokrazy gokrazy/natlab: update gokrazy, wire up natlab tests to GitHub CI 2025-03-04 18:57:29 -08:00
health tailcfg: send health update if DisplayMessage URL changes 2025-07-15 16:09:37 +01:00
hostinfo hostinfo, ipnlocal: add optional os-specific callback for querying the hostname (#15647) 2025-04-14 15:02:32 -04:00
internal cmd/k8s-operator,internal/client/tailscale: use VIPService annotations for ownership tracking (#15356) 2025-03-21 09:08:39 +00:00
ipn ipn/ipnlocal: check if suggested exit node is online 2025-07-15 01:23:24 -07:00
jsondb all: update copyright and license headers 2023-01-27 15:36:29 -08:00
k8s-operator k8s-operator,sessionrecording: fixing race condition between resize (#16454) 2025-07-14 15:17:20 +01:00
kube cmd/{k8s-operator,k8s-proxy},kube/k8s-proxy: add static endpoints for kube-apiserver type ProxyGroups (#16523) 2025-07-14 15:39:39 +01:00
licenses licenses: update license notices 2025-04-07 12:09:43 -07:00
log log/sockstatlog: don't block for more than 5s on shutdown 2024-07-12 17:50:11 +01:00
logpolicy all: detect JetKVM and specialize a handful of things for it 2025-07-10 15:07:19 -07:00
logtail logtail: remove unneeded IP redaction code 2025-05-02 13:37:27 -07:00
maths maths: add exponentially weighted moving average type 2025-02-25 11:59:19 -08:00
metrics metrics,syncs: add ShardedInt support to metrics.LabelMap 2024-12-23 13:10:18 -08:00
net net/udprelay: log socket read errors (#16573) 2025-07-15 15:23:47 -07:00
omit cmd/tailscaled, ipn/conffile: support ec2 user-data config file 2024-05-30 09:49:18 -07:00
packages/deb go.mod: upgrade nfpm to v2 (#8786) 2023-08-03 13:00:45 -07:00
paths all: detect JetKVM and specialize a handful of things for it 2025-07-10 15:07:19 -07:00
portlist portlist: add Plan 9 support 2025-04-02 07:36:04 -07:00
posture posture: propagate serial number from MDM on Android 2025-06-03 17:15:52 +02:00
prober prober: speed up TestCRL ~450x by baking in some test keys 2025-06-16 19:47:02 -07:00
proxymap ipnlocal,proxymap,wgengine/netstack: add optional WhoIs/proxymap debug 2024-09-10 14:23:33 -07:00
release release/dist/qnap: upgrade to Ubuntu 24.04 Docker image 2025-06-24 20:49:11 -05:00
safesocket all: remove non-applicable "linux" deps on Android 2025-05-07 21:05:13 -07:00
safeweb safeweb: Set Cross-Origin-Opener-Policy for browser requests (#15936) 2025-05-09 13:44:36 -07:00
scripts scripts/check_license_headers.sh: delete, rewrite as a Go test 2025-06-16 13:35:38 -07:00
sessionrecording k8s-operator,sessionrecording: fixing race condition between resize (#16454) 2025-07-14 15:17:20 +01:00
smallzstd all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
ssh/tailssh ssh/tailssh: fix path of "true" on Darwin (#16569) 2025-07-16 08:08:59 -07:00
syncs syncs: fix AtomicValue.CompareAndSwap (#16137) 2025-05-30 11:06:16 -07:00
tailcfg tailcfg,wgengine/magicsock: set peer relay CapVer (#16531) 2025-07-15 12:29:07 -07:00
tempfork tempfork/acme: update to latest version (#15543) 2025-04-04 16:32:12 -07:00
tka tka: reject removal of the last signing key 2025-06-16 15:38:37 +01:00
tool tool/gocross: remove GOROOT to ensure correct toolchain use 2025-06-26 09:35:06 -07:00
tsconsensus tsconsensus: skipping slow non-applicable tests on Windows for now 2025-06-20 10:42:15 -07:00
tsconst cmd/tailscale/cli: support passing network lock keys via files 2024-08-14 09:18:34 -07:00
tsd all: update the tsd.System constructor name (#15372) 2025-04-16 10:10:45 -07:00
tsnet cmd/tailscale/cli: add a risk message about rp_filter 2025-06-10 07:38:06 +01:00
tstest ipn/store: automatically migrate between plaintext and encrypted state (#16318) 2025-06-26 17:09:13 -07:00
tstime tstime: add GoDuration which JSON serializes with time.Duration.String (#15726) 2025-04-17 15:51:41 -07:00
tsweb scripts/check_license_headers.sh: delete, rewrite as a Go test 2025-06-16 13:35:38 -07:00
types types/lazy: add lazy.GMap: a map of lazily computed GValues (#16532) 2025-07-13 05:47:56 -07:00
util util/jsonutil: remove unused package (#16563) 2025-07-14 14:57:54 -07:00
version cmd/tailscale/cli: add "configure jetkvm" subcommand 2025-07-11 14:35:24 -07:00
wf wf/firewall: allow link-local multicast for permitted local routes when the killswitch is on on Windows 2024-10-02 18:36:01 -05:00
wgengine tailcfg,wgengine/magicsock: set peer relay CapVer (#16531) 2025-07-15 12:29:07 -07:00
words words: C what I did there? 2025-04-08 09:18:38 -07:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364) 2025-06-25 14:14:17 +01:00
.golangci.yml .github: Bump golangci/golangci-lint-action from 6.5.0 to 7.0.0 (#15476) 2025-04-14 16:04:36 -06:00
ALPINE.txt Bump Alpine, link iptables back to legacy (#15428) 2025-03-26 01:48:01 +00:00
api.md {api.md,publicapi}: remove old API docs (#13468) 2024-09-13 14:10:33 -06:00
assert_ts_toolchain_match.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2024-10-06 15:22:04 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh hostinfo,tailcfg: report TPM availability on windows/linux (#15831) 2025-05-02 11:01:13 -07:00
build_docker.sh cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266) 2025-07-09 09:21:56 +01:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
CODEOWNERS CODEOWNERS: add the start of an owners file 2023-08-16 15:57:29 -07:00
Dockerfile Dockerfile,build_docker.sh: add a note on how to build local images (#16471) 2025-07-04 16:06:22 +01:00
Dockerfile.base Bump Alpine, link iptables back to legacy (#15428) 2025-03-26 01:48:01 +00:00
flake.lock nix: update nix and use go 1.24 (#15578) 2025-04-08 09:38:48 -07:00
flake.nix nix: update nix and use go 1.24 (#15578) 2025-04-08 09:38:48 -07:00
go.mod go.mod: bump wg-go to fix keepalive detection (#16535) 2025-07-10 22:21:08 -07:00
go.mod.sri nix: update nix and use go 1.24 (#15578) 2025-04-08 09:38:48 -07:00
go.sum go.mod: bump wg-go to fix keepalive detection (#16535) 2025-07-10 22:21:08 -07:00
go.toolchain.branch go.toolchain.branch: update to Go 1.24 (#15016) 2025-02-19 10:55:49 -08:00
go.toolchain.rev go.toolchain.rev: bump to go 1.24.4 (#16230) 2025-06-10 14:39:27 -07:00
gomod_test.go go.mod: add test that replace directives aren't added in oss 2023-09-29 12:31:52 -07:00
header.txt cmd/k8s-operator: operator can create subnetrouter (#9505) 2023-12-14 13:51:59 +00:00
LICENSE all: update tools that manage copyright headers 2023-01-27 15:36:29 -08:00
license_test.go scripts/check_license_headers.sh: delete, rewrite as a Go test 2025-06-16 13:35:38 -07:00
Makefile ssh/tailssh: fix path of "true" on Darwin (#16569) 2025-07-16 08:08:59 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pkgdoc_test.go all: skip looking for package comments in .git/ repository (#15384) 2025-03-21 14:46:02 -07:00
pull-toolchain.sh pull-toolchain.sh: don't run update-flake.sh 2023-02-09 15:04:01 -08:00
README.md commit-messages.md: make our git commit message style guide public 2025-04-08 11:41:47 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix nix: update nix and use go 1.24 (#15578) 2025-04-08 09:38:48 -07:00
staticcheck.conf all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
update-flake.sh Code Improvements (#11311) 2024-03-08 15:24:36 -08:00
version_tailscale_test.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2024-10-06 15:22:04 -07:00
version_test.go .github/workflows: test that ./go/tool version matches go mod version 2025-06-16 15:04:10 -07:00
version-embed.go Fix various linting, vet & static check issues 2025-01-04 15:11:10 -08:00
VERSION.txt VERSION.txt: this is v1.85.0 (#16042) 2025-05-21 15:27:32 -04:00

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.23. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See commit-messages.md (or skim git log) for our commit message style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.