Andrew Lytvynov cca70ddbfc

cmd/tailscaled: default --encrypt-state to true if TPM is available (#17376) ...

Whenever running on a platform that has a TPM (and tailscaled can access
it), default to encrypting the state. The user can still explicitly set
this flag to disable encryption.

Updates https://github.com/tailscale/corp/issues/32909

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>

2025-10-01 20:18:58 -07:00

..

internal

util/syspolicy/*: move syspolicy keys to new const leaf "pkey" package

2025-08-31 17:09:24 -07:00

pkey

cmd/tailscaled: default --encrypt-state to true if TPM is available (#17376)

2025-10-01 20:18:58 -07:00

policyclient

util/syspolicy/policyclient: always use no-op policyclient in tests by default

2025-09-04 15:14:15 -07:00

policytest

ipn/ipnlocal, util/syspolicy: convert last RegisterWellKnownSettingsForTest caller, remove

2025-09-04 12:45:44 -07:00

ptype

util/syspolicy/{setting,ptype}: move PreferenceOption and Visibility to new leaf package

2025-09-02 10:28:35 -07:00

rsop

util/syspolicy/{setting,ptype}: move PreferenceOption and Visibility to new leaf package

2025-09-02 10:28:35 -07:00

setting

util/syspolicy/{setting,ptype}: move PreferenceOption and Visibility to new leaf package

2025-09-02 10:28:35 -07:00

source

util/syspolicy/{setting,ptype}: move PreferenceOption and Visibility to new leaf package

2025-09-02 10:28:35 -07:00

policy_keys_test.go

util/syspolicy: remove handler, other dead code

2025-09-03 15:37:21 -07:00

policy_keys.go

various: allow tailscaled shutdown via LocalAPI

2025-09-25 14:26:06 -05:00

syspolicy_test.go

ipn/ipnlocal, util/syspolicy: convert last RegisterWellKnownSettingsForTest caller, remove

2025-09-04 12:45:44 -07:00

syspolicy_windows.go

all: unify some redundant testing.TB interface copies

2025-04-08 08:19:29 -07:00

syspolicy.go

ipn/ipnlocal, util/syspolicy: convert last RegisterWellKnownSettingsForTest caller, remove

2025-09-04 12:45:44 -07:00