Andrew Lytvynov cca70ddbfc cmd/tailscaled: default --encrypt-state to true if TPM is available (#17376) ...

Whenever running on a platform that has a TPM (and tailscaled can access
it), default to encrypting the state. The user can still explicitly set
this flag to disable encryption.

Updates https://github.com/tailscale/corp/issues/32909

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>

2025-10-01 20:18:58 -07:00

..

attestation_test.go

feature/tpm: implement key.HardwareAttestationKey (#17256)

2025-09-25 11:54:41 -07:00

attestation.go

types/key: add IsZero method to HardwareAttestationKey (#17370)

2025-09-30 11:53:07 -07:00

tpm_linux.go

feature/tpm: try opening /dev/tpmrm0 before /tmp/tpm0 on Linux (#16600)

2025-07-18 10:17:40 -07:00

tpm_other.go

feature/tpm: implement ipn.StateStore using TPM sealing (#16030)

2025-06-18 14:17:12 -07:00

tpm_test.go

cmd/tailscaled: default --encrypt-state to true if TPM is available (#17376)

2025-10-01 20:18:58 -07:00

tpm_windows.go

feature/tpm: implement ipn.StateStore using TPM sealing (#16030)

2025-06-18 14:17:12 -07:00

tpm.go

cmd/tailscaled: default --encrypt-state to true if TPM is available (#17376)

2025-10-01 20:18:58 -07:00