The easiest, most secure way to use WireGuard and 2FA.
Go to file
Brad Fitzpatrick 03caa95bf2 ssh/tailssh: get login shell when running as non-root
And also reject attempts to use other users.

Updates #3802

Change-Id: Iddc85f6ea2dba17d12be66a50408d24c1f92833e
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-02-18 19:22:11 -08:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github .github/workflows: add some iOS CI coverage 2022-01-27 15:57:49 -08:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
chirp chirp: remove regex dependency 2022-02-03 11:24:17 -08:00
client/tailscale cmd/tailscale: propagate tailscaled 403s as AccessDeniedErrors 2022-01-25 09:58:21 -08:00
cmd cmd/tailscaled: add -state=mem: to support creation of an ephemeral node. 2022-02-18 13:40:39 -08:00
control control/controlclient: use structured logging for MapResponse.ControlTime 2022-02-18 13:05:42 -08:00
derp derp/derphttp, wgengine/magicsock: prefer IPv6 to DERPs when IPv6 works 2022-01-29 15:55:54 -08:00
disco types/key: export constants for key size, not a method. 2021-10-29 17:39:04 -07:00
docs fix minor typo 2021-11-16 11:03:43 -08:00
envknob envknob: track, log env knobs in use 2022-02-12 21:56:10 -08:00
health net/dns: add health check for particular broken-ish Linux DNS config 2022-02-16 10:40:04 -08:00
hostinfo hostinfo: report when running in Docker Desktop. 2021-11-22 13:45:54 -08:00
internal/tooldeps util/deephash: move internal/deephash to util/deephash 2021-07-02 21:33:02 -07:00
ipn cmd/tailscaled: add -state=mem: to support creation of an ephemeral node. 2022-02-18 13:40:39 -08:00
kube ipn/store: add ability to store data as k8s secrets. 2021-09-01 12:50:59 -07:00
log log/filelogger: make filelogger remove redundant date before adding a date 2021-11-18 10:23:41 -08:00
logpolicy ipn/ipnlocal, wgengine/magicsock, logpolicy: quiet more logs 2022-02-12 16:42:29 -08:00
logtail types/logger, logtail: add mechanism to do structured JSON logs 2022-02-18 12:42:06 -08:00
metrics all: use testingutil.MinAllocsPerRun 2021-10-28 12:48:37 -07:00
net net/dns: add health check for particular broken-ish Linux DNS config 2022-02-16 10:40:04 -08:00
packages/deb packages/deb: add package to extract metadata from .deb files. 2021-06-07 16:22:23 -07:00
paths all: gofmt -w -s (simplify) tests 2021-12-15 08:43:41 -08:00
portlist envknob: add new package for all the strconv.ParseBool(os.Getenv(..)) 2022-01-24 11:51:23 -08:00
safesocket safesocket: add ConnectionStrategy, provide control over fallbacks 2021-12-09 15:46:38 -08:00
scripts scripts/installer: add Ubuntu 22.04 LTS Jammy Jellyfish (#3955) 2022-02-17 09:52:35 -05:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
ssh/tailssh ssh/tailssh: get login shell when running as non-root 2022-02-18 19:22:11 -08:00
syncs syncs: mark as safe for Go 1.18 2021-10-27 18:10:09 -07:00
tailcfg ssh/tailssh: evaluate tailcfg.SSHPolicy on incoming connections 2022-02-18 18:07:39 -08:00
tempfork/pprof tempfork/wireguard-windows: remove the old windows firewall code now that we are no 2021-08-26 15:00:45 -07:00
tool tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
tsconst net/interfaces/windows: update Tailscale interface detection logic to 2021-11-08 07:44:33 -08:00
tsnet cmd/tailscaled: add -state=mem: to support creation of an ephemeral node. 2022-02-18 13:40:39 -08:00
tstest cmd/tailscaled: add -state=mem: to support creation of an ephemeral node. 2022-02-18 13:40:39 -08:00
tstime tstime/rate: deflake TestLongRunningQPS 2022-01-13 16:48:29 -08:00
tsweb tsweb: fix JSONHandlerFunc regression where HTTP status was lost on gzip 2022-02-09 12:17:14 -08:00
types types/logger: add more reserved top level field names 2022-02-18 15:21:35 -08:00
util util/winutil: migrate corp's winutil into OSS. 2022-02-10 15:22:55 -07:00
version version: bump date 2022-01-07 12:40:23 -08:00
wf all: gofmt -w -s (simplify) tests 2021-12-15 08:43:41 -08:00
wgengine tailcfg: make Node.Hostinfo a HostinfoView 2022-02-16 12:55:57 -08:00
words words: more hamsters, less hampsters (#3938) 2022-02-14 15:15:30 -05:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore Makefile: update make spk target to use the new go spk builder 2022-01-21 12:27:00 -08:00
api.md api: document preauthorized auth keys 2022-02-17 14:27:39 -08:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
build_docker.sh tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile Dockerfile: remove long-obsolete -tags=xversion 2021-12-19 18:15:09 -08:00
Dockerfile.base Dockerfile.base: update to alpine:3.15 2022-01-07 07:33:25 -08:00
go.mod go.mod: bump netstack, switch to upstream netstack 2022-01-26 11:30:03 -08:00
go.sum go.mod: bump netstack, switch to upstream netstack 2022-01-26 11:30:03 -08:00
go.toolchain.branch go.toolchain.rev: add update script 2022-01-10 14:55:04 -08:00
go.toolchain.rev go.toolchain.rev: bump to Go 1.17.7 2022-02-15 13:29:17 -08:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile Makefile: update make spk target to use the new go spk builder 2022-01-21 12:27:00 -08:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pull-toolchain.sh go.toolchain.rev: add update script 2022-01-10 14:55:04 -08:00
README.md README.md: update platforms 2021-12-13 17:11:07 -08:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix add nix-shell boilerplate (#1028) 2020-12-29 12:17:03 -05:00
staticcheck.conf staticcheck.conf: remove unnecessary warning 2021-06-22 12:26:13 -07:00
version-embed.go go.toolchain.rev: add Go toolchain rev, tool to print it out 2022-01-03 11:56:27 -08:00
VERSION.txt VERSION.txt: This is 1.21. 2022-01-12 17:38:49 -08:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs on Linux, Windows and macOS, and to varying degrees on FreeBSD, OpenBSD, and Darwin. (The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.)

The Android app is at https://github.com/tailscale/tailscale-android

The Synology package is at https://github.com/tailscale/tailscale-synology

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.17) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.