The easiest, most secure way to use WireGuard and 2FA.
Go to file
Christine Dodrill b131a74f99
tstest/integration/vms: build and run NixOS (#2190)
Okay, so, at a high level testing NixOS is a lot different than
other distros due to NixOS' determinism. Normally NixOS wants packages to
be defined in either an overlay, a custom packageOverrides or even
yolo-inline as a part of the system configuration. This is going to have
us take a different approach compared to other distributions. The overall
plan here is as following:

1. make the binaries as normal
2. template in their paths as raw strings to the nixos system module
3. run `nixos-generators -f qcow -o $CACHE_DIR/tailscale/nixos/version -c generated-config.nix`
4. pass that to the steps that make the virtual machine

It doesn't really make sense for us to use a premade virtual machine image
for this as that will make it harder to deterministically create the image.

Nix commands generate a lot of output, so their output is hidden behind the
`-verbose-nix-output` flag.

This unfortunately makes this test suite have a hard dependency on
Nix/NixOS, however the test suite has only ever been run on NixOS (and I
am not sure if it runs on other distros at all), so this probably isn't too
big of an issue.

Signed-off-by: Christine Dodrill <xe@tailscale.com>
2021-06-28 09:45:45 -04:00
.github tstest/integration/vms: build and run NixOS (#2190) 2021-06-28 09:45:45 -04:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
client/tailscale client/tailscale: document SetDNS more 2021-06-08 15:25:03 -07:00
cmd net/dnsfallback: don't depend on derpmap.Prod 2021-06-27 22:07:40 -07:00
control/controlclient hostinfo: add hostinfo package, move stuff out of controlclient 2021-06-17 14:27:01 -07:00
derp derp,cmd/derper: allow server to verify clients 2021-06-24 14:11:16 -07:00
disco all: adapt to opaque netaddr types 2021-05-16 14:52:00 -07:00
health wgengine/magicsock: always run ReceiveIPv6 2021-04-28 11:07:14 -07:00
hostinfo hostinfo: add hostinfo package, move stuff out of controlclient 2021-06-17 14:27:01 -07:00
internal internal/deephash: remove remaining type special cases 2021-05-24 15:22:44 -07:00
ipn net/dns{,/resolver}: refactor DNS forwarder, send out of right link on macOS/iOS 2021-06-23 16:04:10 -07:00
log log/filelogger: move our Windows disk file writing+rotation package here 2020-10-29 14:59:44 -07:00
logpolicy logpolicy: set log target on windows based on a registry key (#1542) 2021-03-18 13:23:56 -04:00
logtail staticcheck.conf: turn off noisy lint errors 2021-06-18 15:48:20 -07:00
metrics metrics: add LabelMap.GetFloat 2020-07-19 12:31:12 -07:00
net net/dns/resolver: fmt item 2021-06-27 23:57:55 -07:00
packages/deb packages/deb: add package to extract metadata from .deb files. 2021-06-07 16:22:23 -07:00
paths cmd/tailscale/web: restrict web access to synology admins. 2021-06-03 08:41:47 +05:00
portlist staticcheck.conf: turn off noisy lint errors 2021-06-18 15:48:20 -07:00
safesocket safesocket: delete unused function 2021-05-04 08:54:50 -07:00
scripts scripts: fix up installer script comments. 2021-05-14 14:13:31 -07:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
syncs syncs: add AtomicUint32 2021-06-23 08:51:37 -07:00
tailcfg tailcfg/derpmap: add flag to omit ts's derps 2021-06-23 10:10:33 -07:00
tempfork tempfork/wireguard-windows/firewall: add. 2021-03-01 19:37:22 -08:00
tsconst net/netns: add windows support. 2020-09-14 16:28:49 -07:00
tsnet all: adapt to opaque netaddr types 2021-05-16 14:52:00 -07:00
tstest tstest/integration/vms: build and run NixOS (#2190) 2021-06-28 09:45:45 -04:00
tstime tstime: add RandomDurationBetween helper 2021-01-21 07:54:14 -08:00
tsweb tsweb: replace NewMux with a more flexible DebugHandler. 2021-06-16 19:00:47 -07:00
types types/logger: fix deadlock RateLimitedFn reentrancy 2021-06-25 08:38:08 -07:00
util cmd/tailscale/web: add support for QNAP 2021-06-10 19:06:05 +05:00
version cmd/tailscale/web: add support for QNAP 2021-06-10 19:06:05 +05:00
wf wf: loopback condition should use MatchTypeFlagsAllSet. 2021-06-16 12:57:57 +05:00
wgengine wgengine/filter: add a debug flag for filter logs (#2241) 2021-06-25 10:10:26 -04:00
.gitattributes .gitattributes: add a smudge filter for go.mod. 2020-02-19 20:02:02 -05:00
.gitignore Revert "cmd/tailscaled: split package main into main shim + package" 2021-03-25 09:06:00 -07:00
api.md api.md: clarify response behaviour for ACL POST endpoint 2021-04-10 11:38:12 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh build_dist.sh: add a command to output the shell vars. 2021-06-05 19:02:42 -07:00
build_docker.sh build_docker.sh, Dockerfile: fix bug with shell quoting 2021-03-05 10:38:32 -08:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile build_docker.sh, Dockerfile: fix bug with shell quoting 2021-03-05 10:38:32 -08:00
go.mod go.mod: update netstack 2021-06-22 10:34:14 -07:00
go.sum go.mod: update netstack 2021-06-22 10:34:14 -07:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile wgengine/netstack: fix 32-bit build broken from prior commit 2021-03-01 11:19:31 -08:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
README.md Switch to Go 1.16. 2021-02-19 13:18:31 -08:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix add nix-shell boilerplate (#1028) 2020-12-29 12:17:03 -05:00
staticcheck.conf staticcheck.conf: remove unnecessary warning 2021-06-22 12:26:13 -07:00
VERSION.txt VERSION.txt: this is v1.11.0. 2021-06-24 15:45:08 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs primarily on Linux; it also works to varying degrees on FreeBSD, OpenBSD, Darwin, and Windows.

The Android app is at https://github.com/tailscale/tailscale-android

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.16) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.