TheArchive/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2024-11-25 19:15:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
8d6793fd70
tailscale/go.mod

273 lines
14 KiB
Modula-2
Raw Normal View History

Move Linux client & common packages into a public repo.
2020-02-05 22:16:58 +00:00
module tailscale.com
go.mod: require Go 1.18 Also, update depaware for Go 1.18's dependency tree. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2022-03-15 20:49:27 +00:00
go 1.18
Move Linux client & common packages into a public repo.
2020-02-05 22:16:58 +00:00
require (
net/tlsdial: bake in LetsEncrypt's ISRG Root X1 root We still try the host's x509 roots first, but if that fails (like if the host is old), we fall back to using LetsEncrypt's root and retrying with that. tlsdial was used in the three main places: logs, control, DERP. But it was missing in dnsfallback. So added it there too, so we can run fine now on a machine with no DNS config and no root CAs configured. Also, move SSLKEYLOGFILE support out of DERP. tlsdial is the logical place for that support. Fixes #1609 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-10-01 04:13:38 +00:00
filippo.io/mkcert v1.4.3
safesocket: add js/wasm implementation with in-memory net.Conn Updates #3157 Change-Id: Ia35b1e259011fb86f8c4e01f62146f9fd4c9b7c6 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-11-07 20:11:50 +00:00
github.com/akutz/memconn v0.1.0
cmd/tailscale/cli: add start of 'ssh' subcommand Updates #3802 Change-Id: Iabc07c00c7e4f43944cfe7daec8d2b66ac002289 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-03-24 19:22:36 +00:00
github.com/alessio/shellescape v1.4.1
go.mod: upgrade all deps At the start of a dev cycle we'll upgrade all dependencies. Done with: $ for Dep in $(cat go.mod | perl -ne '/(\S+) v/ and print "$1\n"'); do go get $Dep@upgrade; done Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-05-24 19:55:35 +00:00
github.com/alexbrainman/sspi v0.0.0-20210105120005-909beea2cc74
tempfork: temporarily fork gliderlabs/ssh and x/crypto/ssh While we rearrange/upstream things. gliderlabs/ssh is forked into tempfork from our prior fork at https://github.com/tailscale/ssh/commit/be8b7add4057ef5a8e458b42331a7633c06d026a x/crypto/ssh OTOH is forked at https://github.com/tailscale/golang-x-crypto because it was gnarlier to vendor with various internal packages, etc. Its git history shows where it starts (2c7772ba30643b7a2026cbea938420dce7c6384d). Updates #3802 Change-Id: I546e5cdf831cfc030a6c42557c0ad2c58766c65f Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-03-25 22:35:36 +00:00
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be
go.mod: bump github.com/aws/aws-sdk-go-v2/feature/s3/manager Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) from 1.7.3 to 1.7.4. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/fsx/v1.7.3...feature/s3/manager/v1.7.4) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-12-06 11:24:04 +00:00
github.com/aws/aws-sdk-go-v2 v1.11.2
github.com/aws/aws-sdk-go-v2/config v1.11.0
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.7.4
github.com/aws/aws-sdk-go-v2/service/s3 v1.21.0
go.mod: bump github.com/aws/aws-sdk-go-v2/service/ssm Bumps [github.com/aws/aws-sdk-go-v2/service/ssm](https://github.com/aws/aws-sdk-go-v2) from 1.17.0 to 1.17.1. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.17.0...service/ssm/v1.17.1) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/service/ssm dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-12-06 19:16:11 +00:00
github.com/aws/aws-sdk-go-v2/service/ssm v1.17.1
go.mod: upgrade all deps At the start of a dev cycle we'll upgrade all dependencies. Done with: $ for Dep in $(cat go.mod | perl -ne '/(\S+) v/ and print "$1\n"'); do go get $Dep@upgrade; done Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-05-24 19:55:35 +00:00
github.com/coreos/go-iptables v0.6.0
go.mod: bump u-root We only use the termios subpackage, so we're unaffected by CVE-2020-7665, but the bump will let dependabot return to slumber. Fixes https://github.com/tailscale/tailscale/security/dependabot/2 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-15 20:56:33 +00:00
github.com/coreos/go-systemd v0.0.0-20191104093116-d3cd4ed1dbcf
go.mod: bump github.com/creack/pty from 1.1.16 to 1.1.17 Bumps [github.com/creack/pty](https://github.com/creack/pty) from 1.1.16 to 1.1.17. - [Release notes](https://github.com/creack/pty/releases) - [Commits](https://github.com/creack/pty/compare/v1.1.16...v1.1.17) --- updated-dependencies: - dependency-name: github.com/creack/pty dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-10-18 11:30:30 +00:00
github.com/creack/pty v1.1.17
cmd/tsshd: switch from github.com/kr/pty to github.com/creack/pty The kr/pty module moved to creack/pty per the kr/pty README[1]. creack/pty brings in support for a number of OS/arch combos that are lacking in kr/pty. Run `go mod tidy` while here. [1] https://github.com/kr/pty/blob/master/README.md Signed-off-by: Aaron Bieber <aaron@bolddaemon.com>
2021-07-28 15:53:02 +00:00
github.com/dave/jennifer v1.4.1
go.mod: bump github.com/frankban/quicktest from 1.13.1 to 1.14.0 Bumps [github.com/frankban/quicktest](https://github.com/frankban/quicktest) from 1.13.1 to 1.14.0. - [Release notes](https://github.com/frankban/quicktest/releases) - [Commits](https://github.com/frankban/quicktest/compare/v1.13.1...v1.14.0) --- updated-dependencies: - dependency-name: github.com/frankban/quicktest dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-11-03 01:02:55 +00:00
github.com/frankban/quicktest v1.14.0
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/go-ole/go-ole v1.2.6
go.mod: bump github.com/godbus/dbus/v5 from 5.0.5 to 5.0.6 Bumps [github.com/godbus/dbus/v5](https://github.com/godbus/dbus) from 5.0.5 to 5.0.6. - [Release notes](https://github.com/godbus/dbus/releases) - [Commits](https://github.com/godbus/dbus/compare/v5.0.5...v5.0.6) --- updated-dependencies: - dependency-name: github.com/godbus/dbus/v5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-11-07 20:25:31 +00:00
github.com/godbus/dbus/v5 v5.0.6
net/dnscache, net/tsdial: add DNS caching to tsdial UserDial This is enough to handle the DNS queries as generated by Go's net package (which our HTTP/SOCKS client uses), and the responses generated by the ExitDNS DoH server. This isn't yet suitable for putting on 100.100.100.100 where a number of different DNS clients would hit it, as this doesn't yet do EDNS0. It might work, but it's untested and likely incomplete. Likewise, this doesn't handle anything about truncation, as the exchanges are entirely in memory between Go or DoH. That would also need to be handled later, if/when it's hooked up to 100.100.100.100. Updates #3507 Change-Id: I1736b0ad31eea85ea853b310c52c5e6bf65c6e2a Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-12-06 22:41:30 +00:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
go.mod: update github.com/mdlayher/netlink to 1.6.0 This unbreaks some downstream users of tailscale who end up with build errors from importing a v0 indirect dependency. Signed-off-by: David Anderson <danderson@tailscale.com>
2022-02-21 21:36:12 +00:00
github.com/google/go-cmp v0.5.7
go.mod: bump github.com/google/uuid from 1.1.2 to 1.3.0 Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.1.2 to 1.3.0. - [Release notes](https://github.com/google/uuid/releases) - [Commits](https://github.com/google/uuid/compare/v1.1.2...v1.3.0) --- updated-dependencies: - dependency-name: github.com/google/uuid dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-23 11:26:42 +00:00
github.com/google/uuid v1.3.0
go.mod: upgrade all deps At the start of a dev cycle we'll upgrade all dependencies. Done with: $ for Dep in $(cat go.mod | perl -ne '/(\S+) v/ and print "$1\n"'); do go get $Dep@upgrade; done Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-05-24 19:55:35 +00:00
github.com/goreleaser/nfpm v1.10.3
cmd/tsshd: switch from github.com/kr/pty to github.com/creack/pty The kr/pty module moved to creack/pty per the kr/pty README[1]. creack/pty brings in support for a number of OS/arch combos that are lacking in kr/pty. Run `go mod tidy` while here. [1] https://github.com/kr/pty/blob/master/README.md Signed-off-by: Aaron Bieber <aaron@bolddaemon.com>
2021-07-28 15:53:02 +00:00
github.com/iancoleman/strcase v0.2.0
go.mod: move from github.com/gliderlabs/ssh to github.com/tailscale/ssh Updates #4146 Signed-off-by: Maisem Ali <maisem@tailscale.com>
2022-03-13 01:25:00 +00:00
github.com/insomniacslk/dhcp v0.0.0-20211209223715-7d93572ebe8e
go.mod: bump rtnetlink for address label encoding (#4386) This will enable me to land tests for the upcoming monitor change in PR #4385. Update #4385 Update #4282 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-08 21:17:53 +00:00
github.com/jsimonetti/rtnetlink v1.1.2-0.20220408201609-d380b505068b
go.mod: update wireguard-go. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-04-29 23:31:41 +00:00
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
go.mod: bump github.com/klauspost/compress to 1.13.6 Signed-off-by: David Anderson <danderson@tailscale.com>
2021-09-22 22:11:25 +00:00
github.com/klauspost/compress v1.13.6
net/tstun: set link speed to SPEED_UNKNOWN Fixes #3933. Signed-off-by: Dmytro Shynkevych <dm.shynk@gmail.com>
2022-02-22 07:33:23 +00:00
github.com/mdlayher/genetlink v1.2.0
go.mod: update github.com/mdlayher/netlink to 1.6.0 This unbreaks some downstream users of tailscale who end up with build errors from importing a v0 indirect dependency. Signed-off-by: David Anderson <danderson@tailscale.com>
2022-02-21 21:36:12 +00:00
github.com/mdlayher/netlink v1.6.0
go.mod: github.com/mdlayher/sdnotify@v1.0.0 Signed-off-by: Matt Layher <mdlayher@gmail.com>
2022-04-06 16:39:05 +00:00
github.com/mdlayher/sdnotify v1.0.0
go.mod: bump github.com/miekg/dns from 1.1.42 to 1.1.43 Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.42 to 1.1.43. - [Release notes](https://github.com/miekg/dns/releases) - [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release) - [Commits](https://github.com/miekg/dns/compare/v1.1.42...v1.1.43) --- updated-dependencies: - dependency-name: github.com/miekg/dns dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-22 22:41:24 +00:00
github.com/miekg/dns v1.1.43
cmd/tailscale/cli: diagnose missing tailscaled on 'up' Fixes #2029 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-07-08 14:53:32 +00:00
github.com/mitchellh/go-ps v1.0.0
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/peterbourgon/ff/v3 v3.1.2
go.mod: bump github.com/pkg/sftp from 1.13.3 to 1.13.4 Bumps [github.com/pkg/sftp](https://github.com/pkg/sftp) from 1.13.3 to 1.13.4. - [Release notes](https://github.com/pkg/sftp/releases) - [Commits](https://github.com/pkg/sftp/compare/v1.13.3...v1.13.4) --- updated-dependencies: - dependency-name: github.com/pkg/sftp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-27 11:23:17 +00:00
github.com/pkg/sftp v1.13.4
cmd/tailscale: add up --qr to show QR code Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-10-06 16:53:23 +00:00
github.com/skip2/go-qrcode v0.0.0-20200617195104-da1b6568686e
go.mod: update to latest certstore It includes a fix to allow us to use Go 1.18. We can now remove our Tailscale-only build tags. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2022-03-16 22:47:15 +00:00
github.com/tailscale/certstore v0.1.1-0.20220316223106-78d6e1c49d8d
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/tailscale/depaware v0.0.0-20210622194025-720c4b409502
tstest/integration/vms: use fork of goexpect to avoid proto/grpc dep Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2021-09-02 21:55:31 +00:00
github.com/tailscale/goexpect v0.0.0-20210902213824-6e8c725cea41
ssh/tailssh: send banner messages during auth, move more to conn (VSCode Live Share between Brad & Maisem!) Updates #3802 Change-Id: Id8edca4481b0811debfdf56d4ccb1a46f71dd6d3 Co-Authored-By: Brad Fitzpatrick <bradfitz@tailscale.com> Signed-off-by: Maisem Ali <maisem@tailscale.com>
2022-04-21 00:36:19 +00:00
github.com/tailscale/golang-x-crypto v0.0.0-20220420224200-c602b5dfaa7f
net/portmapper: fix UPnP probing, work against all ports Prior to Tailscale 1.12 it detected UPnP on any port. Starting with Tailscale 1.11.x, it stopped detecting UPnP on all ports. Then start plumbing its discovered Location header port number to the code that was assuming port 5000. Fixes #2109 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-08-03 05:09:50 +00:00
github.com/tailscale/goupnp v1.0.1-0.20210804011211-c64d0f06ea05
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/tailscale/hujson v0.0.0-20211105212140-3a0adc019d83
wgengine/router: use netlink for ip rules on Linux Using temporary netlink fork in github.com/tailscale/netlink until we get the necessary changes upstream in either vishvananda/netlink or jsimonetti/rtnetlink. Updates #391 Change-Id: I6e1de96cf0750ccba53dabff670aca0c56dffb7c Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-10-28 22:22:03 +00:00
github.com/tailscale/netlink v1.1.1-0.20211101221916-cabfb018fe85
netcheck: DERP latency over HTTPS when UDP is blocked * netcheck: DERP letency over HTTPS when UDP failed Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: async DERP latency check over HTTPS Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: fix concurrent map Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: some improvements Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: use timeout context Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: use report mutex Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS if UDP is BLOCKED Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com> * netcheck: DERP latency check over HTTPS: new function measureHTTPSLatency Updates #207 Signed-off-by: Zijie Lu <zijie@tailscale.com>
2020-05-11 15:23:09 +00:00
github.com/tcnksm/go-httpstat v0.2.0
cmd/tailscale: add status subcommand Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2020-03-27 20:26:35 +00:00
github.com/toqueteos/webbrowser v1.2.0
ssh/tailssh: make pty termios options match OpenSSH Still not sure the exact rules of how/when/who's supposed to set these, but this works for now on making them match. Baby steps. Will research more and adjust later. Updates #4146 (but not enough to fix it, something's still wrong) Updates #3802 Change-Id: I496d8cd7e31d45fe9ede88fc8894f35dc096de67 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-03-11 19:19:55 +00:00
github.com/u-root/u-root v0.8.0
github.com/vishvananda/netlink v1.1.1-0.20211118161826-650dca95af54
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
go4.org/mem v0.0.0-20210711025021-927187094b94
ssh/tailssh: terminate ssh auth early if no policy can match Also bump github.com/tailscale/golang-x-crypto/ssh Updates #3802 Signed-off-by: Maisem Ali <maisem@tailscale.com>
2022-04-20 20:39:15 +00:00
golang.org/x/crypto v0.0.0-20220411220226-7b82a4e95df4
go.mod: bump rtnetlink for address label encoding (#4386) This will enable me to land tests for the upcoming monitor change in PR #4385. Update #4385 Update #4282 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-08 21:17:53 +00:00
golang.org/x/net v0.0.0-20220407224826-aac1ed45d8e3
go.mod: update golang.org/x/{crypto,sync,sys,term,time} These ones don't have large dependency trees. Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-03-18 05:04:31 +00:00
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
go.mod: bump u-root We only use the termios subpackage, so we're unaffected by CVE-2020-7665, but the bump will let dependabot return to slumber. Fixes https://github.com/tailscale/tailscale/security/dependabot/2 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-15 20:56:33 +00:00
golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211
golang.org/x/time v0.0.0-20211116232009-f0f3c7e86c11
go.mod: bump x/tools for go/packages generics fix Updates #4194 Change-Id: Ia992ffb14210d5ad53f8f98d12b80d64080998e6 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-04-13 20:49:48 +00:00
golang.org/x/tools v0.1.11-0.20220413170336-afc6aad76eb1
go.mod: upgrade to the latest wireguard-go This pulls in a handful of fixes and an update to Go 1.18. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2022-03-17 00:16:55 +00:00
golang.zx2c4.com/wireguard v0.0.0-20220317000134-95b48cdb3961
go.mod: bump golang.zx2c4.com/wireguard/windows from 0.4.9 to 0.4.10 Bumps golang.zx2c4.com/wireguard/windows from 0.4.9 to 0.4.10. --- updated-dependencies: - dependency-name: golang.zx2c4.com/wireguard/windows dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-29 14:53:43 +00:00
golang.zx2c4.com/wireguard/windows v0.4.10
go.mod: bump netstack for clone reset fix (#4379) In tracking down issue #4144 and reading through the netstack code in detail, I discovered that the packet buf Clone path did not reset the packetbuf it was getting from the sync.Pool. The fix was sent upstream https://github.com/google/gvisor/pull/7385, and this bump pulls that in. At this time there is no known path that this fixes, however at the time of upstream submission this reset at least one field that could lead to incorrect packet routing if exercised, a situation that could therefore lead to an information leak. Signed-off-by: James Tucker <james@tailscale.com>
2022-04-08 02:03:18 +00:00
gvisor.dev/gvisor v0.0.0-20220407223209-21871174d445
go.mod: bump staticcheck (#4359) Updates #4194 Signed-off-by: Maisem Ali <maisem@tailscale.com>
2022-04-05 19:24:33 +00:00
honnef.co/go/tools v0.4.0-0.dev.0.20220404092545-59d7a2877f83
go.mod: upgrade netaddr, netstack For Go 1.18 support. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2021-10-27 22:03:17 +00:00
inet.af/netaddr v0.0.0-20211027220019-c74959edd3b6
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
inet.af/peercred v0.0.0-20210906144145-0893ea02156a
inet.af/wf v0.0.0-20211204062712-86aaea0a7310
wgengine/router,util/kmod: load & log xt_mark Attempt to load the xt_mark kernel module when it is not present. If the load fails, log error information. It may be tempting to promote this failure to an error once it has been in use for some time, so as to avoid reaching an error with the iptables invocation, however, there are conditions under which the two stages may disagree - this change adds more useful breadcrumbs. Example new output from tailscaled running under my WSL2: ``` router: ensure module xt_mark: "/usr/sbin/modprobe xt_mark" failed: exit status 1; modprobe: FATAL: Module xt_mark not found in directory /lib/modules/5.10.43.3-microsoft-standard-WSL2 ``` Background: There are two places to lookup modules, one is `/proc/modules` "old", the other is `/sys/module/` "new". There was query_modules(2) in linux <2.6, alas, it is gone. In a docker container in the default configuration, you would get /proc/modules and /sys/module/ both populated. lsmod may work file, modprobe will fail with EPERM at `finit_module()` for an unpriviliged container. In a priviliged container the load may *succeed*, if some conditions are met. This condition should be avoided, but the code landing in this change does not attempt to avoid this scenario as it is both difficult to detect, and has a very uncertain impact. In an nspawn container `/proc/modules` is populated, but `/sys/module` does not exist. Modern `lsmod` versions will fail to gather most module information, without sysfs being populated with module information. In WSL2 modules are likely missing, as the in-use kernel typically is not provided by the distribution filesystem, and WSL does not mount in a module filesystem of its own. Notably the WSL2 kernel supports iptables marks without listing the xt_mark module in /sys/module, and /proc/modules is empty. On a recent kernel, we can ask the capabilities system about SYS_MODULE, that will help to disambiguate between the non-privileged container case and just being root. On older kernels these calls may fail. Update #4329 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-12 01:25:35 +00:00
kernel.org/pub/linux/libs/security/libcap/cap v1.2.64
cmd/derper, derp/derphttp: add websocket support Updates #3157 Change-Id: I337a919a3b350bc7bd9af567b49c4d5d6616abdd Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-10-21 17:12:51 +00:00
nhooyr.io/websocket v1.8.7
wgengine/router,util/kmod: load & log xt_mark Attempt to load the xt_mark kernel module when it is not present. If the load fails, log error information. It may be tempting to promote this failure to an error once it has been in use for some time, so as to avoid reaching an error with the iptables invocation, however, there are conditions under which the two stages may disagree - this change adds more useful breadcrumbs. Example new output from tailscaled running under my WSL2: ``` router: ensure module xt_mark: "/usr/sbin/modprobe xt_mark" failed: exit status 1; modprobe: FATAL: Module xt_mark not found in directory /lib/modules/5.10.43.3-microsoft-standard-WSL2 ``` Background: There are two places to lookup modules, one is `/proc/modules` "old", the other is `/sys/module/` "new". There was query_modules(2) in linux <2.6, alas, it is gone. In a docker container in the default configuration, you would get /proc/modules and /sys/module/ both populated. lsmod may work file, modprobe will fail with EPERM at `finit_module()` for an unpriviliged container. In a priviliged container the load may *succeed*, if some conditions are met. This condition should be avoided, but the code landing in this change does not attempt to avoid this scenario as it is both difficult to detect, and has a very uncertain impact. In an nspawn container `/proc/modules` is populated, but `/sys/module` does not exist. Modern `lsmod` versions will fail to gather most module information, without sysfs being populated with module information. In WSL2 modules are likely missing, as the in-use kernel typically is not provided by the distribution filesystem, and WSL does not mount in a module filesystem of its own. Notably the WSL2 kernel supports iptables marks without listing the xt_mark module in /sys/module, and /proc/modules is empty. On a recent kernel, we can ask the capabilities system about SYS_MODULE, that will help to disambiguate between the non-privileged container case and just being root. On older kernels these calls may fail. Update #4329 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-12 01:25:35 +00:00
pault.ag/go/modprobe v0.1.2
Move Linux client & common packages into a public repo.
2020-02-05 22:16:58 +00:00
)
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
require (
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
4d63.com/gochecknoglobals v0.1.0 // indirect
github.com/Antonboom/errname v0.1.5 // indirect
github.com/Antonboom/nilnil v0.1.0 // indirect
go.mod: bump staticcheck (#4359) Updates #4194 Signed-off-by: Maisem Ali <maisem@tailscale.com>
2022-04-05 19:24:33 +00:00
github.com/BurntSushi/toml v1.1.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/Djarvur/go-err113 v0.1.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/Masterminds/goutils v1.1.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/Masterminds/semver v1.5.0 // indirect
github.com/Masterminds/semver/v3 v3.1.1 // indirect
github.com/Masterminds/sprig v2.22.0+incompatible // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/Microsoft/go-winio v0.5.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/OpenPeeDeeP/depguard v1.0.1 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/ProtonMail/go-crypto v0.0.0-20211112122917-428f8eabeeb3 // indirect
github.com/acomagu/bufpipe v1.0.3 // indirect
github.com/alexkohler/prealloc v1.0.0 // indirect
github.com/ashanbrown/forbidigo v1.2.0 // indirect
github.com/ashanbrown/makezero v0.0.0-20210520155254-b6261585ddde // indirect
Replace AWS SDK v1 dependency with v2 This change drops AWS SDKv1 dependency, leaving only SDK v2 in use. Closes #3461 Signed-off-by: Artyom Pervukhin <github@artyom.dev>
2021-12-01 10:10:32 +00:00
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.0.0 // indirect
go.mod: bump github.com/aws/aws-sdk-go-v2/feature/s3/manager Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) from 1.7.3 to 1.7.4. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/fsx/v1.7.3...feature/s3/manager/v1.7.4) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-12-06 11:24:04 +00:00
github.com/aws/aws-sdk-go-v2/credentials v1.6.4 // indirect
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.8.2 // indirect
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.2 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.0.2 // indirect
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.2 // indirect
Replace AWS SDK v1 dependency with v2 This change drops AWS SDKv1 dependency, leaving only SDK v2 in use. Closes #3461 Signed-off-by: Artyom Pervukhin <github@artyom.dev>
2021-12-01 10:10:32 +00:00
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.5.0 // indirect
go.mod: bump github.com/aws/aws-sdk-go-v2/feature/s3/manager Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) from 1.7.3 to 1.7.4. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/fsx/v1.7.3...feature/s3/manager/v1.7.4) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-12-06 11:24:04 +00:00
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.5.2 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.9.2 // indirect
github.com/aws/aws-sdk-go-v2/service/sso v1.6.2 // indirect
github.com/aws/aws-sdk-go-v2/service/sts v1.11.1 // indirect
update github.com/aws/aws-sdk-go-v2 Replaces #3464, #3365, #3366 with a PR that includes the depaware fix. Signed-off-by: David Crawshaw <crawshaw@tailscale.com>
2021-11-29 18:12:27 +00:00
github.com/aws/smithy-go v1.9.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/beorn7/perks v1.0.1 // indirect
github.com/bkielbasa/cyclop v1.2.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/blizzy78/varnamelen v0.5.0 // indirect
github.com/bombsimon/wsl/v3 v3.3.0 // indirect
github.com/breml/bidichk v0.2.1 // indirect
github.com/butuzov/ireturn v0.1.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/cavaliercoder/go-cpio v0.0.0-20180626203310-925f9528c45e // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/cespare/xxhash/v2 v2.1.2 // indirect
github.com/charithe/durationcheck v0.0.9 // indirect
github.com/chavacava/garif v0.0.0-20210405164556-e8a0a408d6af // indirect
github.com/daixiang0/gci v0.2.9 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/davecgh/go-spew v1.1.1 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/denis-tingajkin/go-header v0.4.2 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/emirpasic/gods v1.12.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/esimonov/ifshort v1.0.3 // indirect
github.com/ettle/strcase v0.1.1 // indirect
github.com/fatih/color v1.13.0 // indirect
github.com/fatih/structtag v1.2.0 // indirect
github.com/fsnotify/fsnotify v1.5.1 // indirect
github.com/fzipp/gocyclo v0.3.1 // indirect
go.mod, ssh/tailssh, tempfork/gliderlabs: bump x/crypto/ssh fork for NoClientAuthCallback Prep for evaluating SSHPolicy earlier to decide whether certs are required, which requires knowing the target SSH user. Updates #3802 Change-Id: I2753ec8069e7f19c9121300d0fb0813c1c627c36 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-03-30 00:31:44 +00:00
github.com/gliderlabs/ssh v0.3.3 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/go-critic/go-critic v0.6.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/go-git/gcfg v1.5.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/go-git/go-billy/v5 v5.3.1 // indirect
github.com/go-git/go-git/v5 v5.4.2 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/go-toolsmith/astcast v1.0.0 // indirect
github.com/go-toolsmith/astcopy v1.0.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/go-toolsmith/astequal v1.0.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/go-toolsmith/astfmt v1.0.0 // indirect
github.com/go-toolsmith/astp v1.0.0 // indirect
github.com/go-toolsmith/strparse v1.0.0 // indirect
github.com/go-toolsmith/typep v1.0.2 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/go-xmlfmt/xmlfmt v0.0.0-20211206191508-7fd73a941850 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/gobwas/glob v0.2.3 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/gofrs/flock v0.8.1 // indirect
github.com/golang/protobuf v1.5.2 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/golangci/check v0.0.0-20180506172741-cfe4005ccda2 // indirect
github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a // indirect
github.com/golangci/go-misc v0.0.0-20180628070357-927a3d87b613 // indirect
github.com/golangci/gofmt v0.0.0-20190930125516-244bba706f1a // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/golangci/golangci-lint v1.43.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/golangci/lint-1 v0.0.0-20191013205115-297bf364a8e0 // indirect
github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca // indirect
github.com/golangci/misspell v0.3.5 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/golangci/revgrep v0.0.0-20210930125155-c22e5001d4f2 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/golangci/unconvert v0.0.0-20180507085042-28b1c447d1f4 // indirect
github.com/google/btree v1.0.1 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/google/goterm v0.0.0-20200907032337-555d40f16ae2 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/google/rpmpack v0.0.0-20201206194719-59e495f2b7e1 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/gordonklaus/ineffassign v0.0.0-20210914165742-4cc7213b9bc8 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/goreleaser/chglog v0.1.2 // indirect
github.com/goreleaser/fileglob v0.3.1 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/gostaticanalysis/analysisutil v0.7.1 // indirect
github.com/gostaticanalysis/comment v1.4.2 // indirect
github.com/gostaticanalysis/forcetypeassert v0.1.0 // indirect
github.com/gostaticanalysis/nilerr v0.1.1 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/hashicorp/hcl v1.0.0 // indirect
github.com/huandu/xstrings v1.3.2 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/imdario/mergo v0.3.12 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/inconshreveable/mousetrap v1.0.0 // indirect
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/jgautheron/goconst v1.5.1 // indirect
github.com/jingyugao/rowserrcheck v1.1.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/jirfag/go-printf-func-name v0.0.0-20200119135958-7558a9eaa5af // indirect
github.com/jmespath/go-jmespath v0.4.0 // indirect
go.mod: update github.com/mdlayher/netlink to 1.6.0 This unbreaks some downstream users of tailscale who end up with build errors from importing a v0 indirect dependency. Signed-off-by: David Anderson <danderson@tailscale.com>
2022-02-21 21:36:12 +00:00
github.com/josharian/native v1.0.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/julz/importas v0.0.0-20210922140945-27e0a5d4dee2 // indirect
github.com/kevinburke/ssh_config v1.1.0 // indirect
github.com/kisielk/errcheck v1.6.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/kisielk/gotool v1.0.0 // indirect
github.com/kr/fs v0.1.0 // indirect
go.mod: bump github.com/frankban/quicktest from 1.13.0 to 1.13.1 Bumps [github.com/frankban/quicktest](https://github.com/frankban/quicktest) from 1.13.0 to 1.13.1. - [Release notes](https://github.com/frankban/quicktest/releases) - [Commits](https://github.com/frankban/quicktest/compare/v1.13.0...v1.13.1) --- updated-dependencies: - dependency-name: github.com/frankban/quicktest dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-23 11:26:50 +00:00
github.com/kr/pretty v0.3.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/kr/text v0.2.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/kulti/thelper v0.4.0 // indirect
github.com/kunwardeep/paralleltest v1.0.3 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/kyoh86/exportloopref v0.1.8 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/ldez/gomoddirectives v0.2.2 // indirect
github.com/ldez/tagliatelle v0.2.0 // indirect
github.com/magiconair/properties v1.8.5 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/maratori/testpackage v1.0.1 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/matoous/godox v0.0.0-20210227103229-6504466cf951 // indirect
github.com/mattn/go-colorable v0.1.12 // indirect
github.com/mattn/go-isatty v0.0.14 // indirect
github.com/mattn/go-runewidth v0.0.13 // indirect
github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
github.com/mbilski/exhaustivestruct v1.2.0 // indirect
go.mod: bump rtnetlink for address label encoding (#4386) This will enable me to land tests for the upcoming monitor change in PR #4385. Update #4385 Update #4282 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-08 21:17:53 +00:00
github.com/mdlayher/socket v0.2.3 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/mgechev/dots v0.0.0-20210922191527-e955255bf517 // indirect
github.com/mgechev/revive v1.1.2 // indirect
github.com/mitchellh/copystructure v1.2.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/mitchellh/go-homedir v1.1.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/mitchellh/mapstructure v1.4.3 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/moricho/tparallel v0.2.1 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/nakabonne/nestif v0.3.1 // indirect
github.com/nbutton23/zxcvbn-go v0.0.0-20210217022336-fa2cb2858354 // indirect
github.com/nishanths/exhaustive v0.7.11 // indirect
github.com/nishanths/predeclared v0.2.1 // indirect
github.com/olekukonko/tablewriter v0.0.5 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/op/go-logging v0.0.0-20160315200505-970db520ece7 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/pelletier/go-toml v1.9.4 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/phayes/checkstyle v0.0.0-20170904204023-bfd46e6a821d // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/pkg/errors v0.9.1 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/polyfloyd/go-errorlint v0.0.0-20211125173453-6d6d39c5bb8b // indirect
github.com/prometheus/client_golang v1.11.0 // indirect
github.com/prometheus/client_model v0.2.0 // indirect
github.com/prometheus/common v0.32.1 // indirect
github.com/prometheus/procfs v0.7.3 // indirect
github.com/quasilyte/go-ruleguard v0.3.13 // indirect
github.com/quasilyte/regex/syntax v0.0.0-20210819130434-b3f0c404a727 // indirect
github.com/rivo/uniseg v0.2.0 // indirect
github.com/rogpeppe/go-internal v1.8.1-0.20211023094830-115ce09fd6b4 // indirect
github.com/ryancurrah/gomodguard v1.2.3 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/ryanrolds/sqlclosecheck v0.3.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/sanposhiho/wastedassign/v2 v2.0.7 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/sassoftware/go-rpmutils v0.0.0-20190420191620-a8f1baeba37b // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/securego/gosec/v2 v2.9.3 // indirect
github.com/sergi/go-diff v1.2.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/shazow/go-diff v0.0.0-20160112020656-b6b7b6733b8c // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/sirupsen/logrus v1.8.1 // indirect
github.com/sivchari/tenv v1.4.7 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/sonatard/noctx v0.0.1 // indirect
github.com/sourcegraph/go-diff v0.6.1 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/spf13/afero v1.6.0 // indirect
github.com/spf13/cast v1.4.1 // indirect
github.com/spf13/cobra v1.2.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/spf13/jwalterweatherman v1.1.0 // indirect
github.com/spf13/pflag v1.0.5 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/spf13/viper v1.9.0 // indirect
github.com/ssgreg/nlreturn/v2 v2.2.1 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/stretchr/objx v0.3.0 // indirect
go.mod: bump github.com/pkg/sftp from 1.13.0 to 1.13.3 Bumps [github.com/pkg/sftp](https://github.com/pkg/sftp) from 1.13.0 to 1.13.3. - [Release notes](https://github.com/pkg/sftp/releases) - [Commits](https://github.com/pkg/sftp/compare/v1.13.0...v1.13.3) --- updated-dependencies: - dependency-name: github.com/pkg/sftp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-22 22:41:19 +00:00
github.com/stretchr/testify v1.7.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/subosito/gotenv v1.2.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/sylvia7788/contextcheck v1.0.4 // indirect
github.com/tdakkota/asciicheck v0.1.1 // indirect
github.com/tetafro/godot v1.4.11 // indirect
github.com/timakin/bodyclose v0.0.0-20210704033933-f49887972144 // indirect
github.com/tomarrell/wrapcheck/v2 v2.4.0 // indirect
github.com/tommy-muehle/go-mnd/v2 v2.4.0 // indirect
go.mod: move from github.com/gliderlabs/ssh to github.com/tailscale/ssh Updates #4146 Signed-off-by: Maisem Ali <maisem@tailscale.com>
2022-03-13 01:25:00 +00:00
github.com/u-root/uio v0.0.0-20210528151154-e40b768296a7 // indirect
github.com/ulikunitz/xz v0.5.10 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
github.com/ultraware/funlen v0.0.3 // indirect
github.com/ultraware/whitespace v0.0.4 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
github.com/uudashr/gocognit v1.0.5 // indirect
github.com/vishvananda/netns v0.0.0-20211101163701-50045581ed74 // indirect
github.com/xanzy/ssh-agent v0.3.1 // indirect
github.com/yeya24/promlinter v0.1.0 // indirect
go.mod: upgrade netaddr, netstack For Go 1.18 support. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2021-10-27 22:03:17 +00:00
go4.org/intern v0.0.0-20211027215823-ae77deb06f29 // indirect
go4.org/unsafe/assume-no-moving-gc v0.0.0-20211027215541-db492cf91b37 // indirect
go.mod: bump staticcheck (#4359) Updates #4194 Signed-off-by: Maisem Ali <maisem@tailscale.com>
2022-04-05 19:24:33 +00:00
golang.org/x/exp/typeparams v0.0.0-20220328175248-053ad81199eb // indirect
go.mod: update golang.org/x/tools and honnef.co/go/tools This is required for staticcheck to process code using Go 1.18. This puts us on a random commit on the bleeding edge of staticcheck, which isn't great, but there don't appear to have been any releases yet that support 1.18. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2022-03-15 23:19:03 +00:00
golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3 // indirect
go.mod: bump golang.zx2c4.com/wireguard/windows from 0.3.16 to 0.4.9 Bumps golang.zx2c4.com/wireguard/windows from 0.3.16 to 0.4.9. --- updated-dependencies: - dependency-name: golang.zx2c4.com/wireguard/windows dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-23 11:27:13 +00:00
golang.org/x/text v0.3.7 // indirect
go.mod: bump u-root We only use the termios subpackage, so we're unaffected by CVE-2020-7665, but the bump will let dependabot return to slumber. Fixes https://github.com/tailscale/tailscale/security/dependabot/2 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-15 20:56:33 +00:00
golang.org/x/xerrors v0.0.0-20220411194840-2f41105eb62f // indirect
go.mod: update wireguard-go to pick up roaming toggle wgengine/wgcfg: introduce wgcfg.NewDevice helper to disable roaming at all call sites (one real plus several tests). Fixes tailscale/corp#3016. Signed-off-by: David Anderson <danderson@tailscale.com> Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2021-11-16 19:35:25 +00:00
golang.zx2c4.com/wintun v0.0.0-20211104114900-415007cec224 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
google.golang.org/protobuf v1.27.1 // indirect
gopkg.in/ini.v1 v1.66.2 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
gopkg.in/warnings.v0 v0.1.2 // indirect
gopkg.in/yaml.v2 v2.4.0 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
howett.net/plist v1.0.0 // indirect
wgengine/router,util/kmod: load & log xt_mark Attempt to load the xt_mark kernel module when it is not present. If the load fails, log error information. It may be tempting to promote this failure to an error once it has been in use for some time, so as to avoid reaching an error with the iptables invocation, however, there are conditions under which the two stages may disagree - this change adds more useful breadcrumbs. Example new output from tailscaled running under my WSL2: ``` router: ensure module xt_mark: "/usr/sbin/modprobe xt_mark" failed: exit status 1; modprobe: FATAL: Module xt_mark not found in directory /lib/modules/5.10.43.3-microsoft-standard-WSL2 ``` Background: There are two places to lookup modules, one is `/proc/modules` "old", the other is `/sys/module/` "new". There was query_modules(2) in linux <2.6, alas, it is gone. In a docker container in the default configuration, you would get /proc/modules and /sys/module/ both populated. lsmod may work file, modprobe will fail with EPERM at `finit_module()` for an unpriviliged container. In a priviliged container the load may *succeed*, if some conditions are met. This condition should be avoided, but the code landing in this change does not attempt to avoid this scenario as it is both difficult to detect, and has a very uncertain impact. In an nspawn container `/proc/modules` is populated, but `/sys/module` does not exist. Modern `lsmod` versions will fail to gather most module information, without sysfs being populated with module information. In WSL2 modules are likely missing, as the in-use kernel typically is not provided by the distribution filesystem, and WSL does not mount in a module filesystem of its own. Notably the WSL2 kernel supports iptables marks without listing the xt_mark module in /sys/module, and /proc/modules is empty. On a recent kernel, we can ask the capabilities system about SYS_MODULE, that will help to disambiguate between the non-privileged container case and just being root. On older kernels these calls may fail. Update #4329 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-12 01:25:35 +00:00
kernel.org/pub/linux/libs/security/libcap/psx v1.2.64 // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
mvdan.cc/gofumpt v0.2.0 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
mvdan.cc/interfacer v0.0.0-20180901003855-c20040233aed // indirect
mvdan.cc/lint v0.0.0-20170908181259-adc824a0674b // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
mvdan.cc/unparam v0.0.0-20211002134041-24922b6997ca // indirect
wgengine/router,util/kmod: load & log xt_mark Attempt to load the xt_mark kernel module when it is not present. If the load fails, log error information. It may be tempting to promote this failure to an error once it has been in use for some time, so as to avoid reaching an error with the iptables invocation, however, there are conditions under which the two stages may disagree - this change adds more useful breadcrumbs. Example new output from tailscaled running under my WSL2: ``` router: ensure module xt_mark: "/usr/sbin/modprobe xt_mark" failed: exit status 1; modprobe: FATAL: Module xt_mark not found in directory /lib/modules/5.10.43.3-microsoft-standard-WSL2 ``` Background: There are two places to lookup modules, one is `/proc/modules` "old", the other is `/sys/module/` "new". There was query_modules(2) in linux <2.6, alas, it is gone. In a docker container in the default configuration, you would get /proc/modules and /sys/module/ both populated. lsmod may work file, modprobe will fail with EPERM at `finit_module()` for an unpriviliged container. In a priviliged container the load may *succeed*, if some conditions are met. This condition should be avoided, but the code landing in this change does not attempt to avoid this scenario as it is both difficult to detect, and has a very uncertain impact. In an nspawn container `/proc/modules` is populated, but `/sys/module` does not exist. Modern `lsmod` versions will fail to gather most module information, without sysfs being populated with module information. In WSL2 modules are likely missing, as the in-use kernel typically is not provided by the distribution filesystem, and WSL does not mount in a module filesystem of its own. Notably the WSL2 kernel supports iptables marks without listing the xt_mark module in /sys/module, and /proc/modules is empty. On a recent kernel, we can ask the capabilities system about SYS_MODULE, that will help to disambiguate between the non-privileged container case and just being root. On older kernels these calls may fail. Update #4329 Signed-off-by: James Tucker <james@tailscale.com>
2022-04-12 01:25:35 +00:00
pault.ag/go/topsort v0.0.0-20160530003732-f98d2ad46e1a // indirect
go.mod: mass update with go get -u. Gets ahead of dependabot slightly, but the updates are minor. Signed-off-by: David Anderson <danderson@tailscale.com>
2021-12-06 19:57:13 +00:00
software.sslmate.com/src/go-pkcs12 v0.0.0-20210415151418-c5206de65a78 // indirect
all: bump minimum Go to 1.17 In prep for using 1.17 features. Note the go.mod changes are due to: https://golang.org/doc/go1.17#go-command Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-09-02 19:28:03 +00:00
)
Reference in New Issue Copy Permalink