You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Andrew Lytvynov 68617bb82e cmd/tailscaled: disable state encryption / attestation by default (#18336) ... TPM-based features have been incredibly painful due to the heterogeneous devices in the wild, and many situations in which the TPM "changes" (is reset or replaced). All of this leads to a lot of customer issues. We hoped to iron out all the kinks and get all users to benefit from state encryption and hardware attestation without manually opting in, but the long tail of kinks is just too long. This change disables TPM-based features on Windows and Linux by default. Node state should get auto-decrypted on update, and old attestation keys will be removed. There's also tailscaled-on-macOS, but it won't have a TPM or Keychain bindings anyway. Updates #18302 Updates #15830 Signed-off-by: Andrew Lytvynov <awly@tailscale.com>		7 days ago
..
testdata	ipn/ipnlocal: fix the path for writing cert files (#7203)	3 years ago
breaktcp_darwin.go	cmd/tailscale: add debug commands to break connections	2 years ago
breaktcp_linux.go	cmd/tailscale: add debug commands to break connections	2 years ago
bus.go	ipn/local: add the suggested exit node to the ipn bus (#16748)	5 months ago
bus_test.go	ipn/ipnlocal: add IPN Bus NotifyRateLimit watch bit NotifyRateLimit	1 year ago
c2n.go	types/netmap: remove PrivateKey from NetworkMap	2 months ago
c2n_pprof.go	ipn/ipnlocal, engine: avoid runtime/pprof with two usages of ts_omit_debug	3 months ago
c2n_test.go	types/netmap,*: remove some redundant fields from NetMap	2 months ago
captiveportal.go	feature/featuretags: add build tag to remove captive portal detection	4 months ago
cert.go	cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extension (#18252)	3 weeks ago
cert_disabled.go	feature/featuretags, all: add ts_omit_acme to disable TLS cert support	4 months ago
cert_test.go	ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250)	10 months ago
dnsconfig_test.go	types/netmap,*: remove some redundant fields from NetMap	2 months ago
drive.go	ipn/ipnlocal: fix panic in driveTransport on network error	2 months ago
drive_test.go	ipn/ipnlocal: fix panic in driveTransport on network error	2 months ago
drive_tomove.go	feature/drive: start factoring out Taildrive, add ts_omit_drive build tag	4 months ago
expiry.go	ipn/ipnlocal: use eventbus.SubscribeFunc in expiryManager	3 months ago
expiry_test.go	control/controlclient: introduce eventbus messages instead of callbacks (#16956)	4 months ago
extension_host.go	ipn/ipnlocal: make GetExt work earlier, before extension init	8 months ago
extension_host_test.go	health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085)	4 months ago
hwattest.go	Revert "control/controlclient: back out HW key attestation (#17664)" (#17732)	2 months ago
local.go	cmd/tailscaled: disable state encryption / attestation by default (#18336)	7 days ago
local_test.go	ipn/ipnlocal: don't panic if there are no suitable exit nodes	2 months ago
loglines_test.go	health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085)	4 months ago
netstack.go	ipn/ipnlocal: move last unconditional gvisor import, complete ts_omit_netstack support	4 months ago
network-lock.go	cmd/tailscale/cli: stabilise the output of `tailscale lock status --json`	1 month ago
network-lock_test.go	tstest/integration: add integration test for Tailnet Lock	2 months ago
node_backend.go	types/netmap,*: remove some redundant fields from NetMap	2 months ago
node_backend_test.go	ipn/ipnlocal: introduce the concept of client-side-reachability (#17367)	3 months ago
peerapi.go	net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#17823)	4 weeks ago
peerapi_drive.go	feature/drive: start factoring out Taildrive, add ts_omit_drive build tag	4 months ago
peerapi_macios_ext.go	net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#17823)	4 weeks ago
peerapi_test.go	ipn/ipnlocal: fix another racy test (#17472)	3 months ago
prefs_metrics.go	feature/featuretags: add features for c2n, peerapi, advertise/use routes/exit nodes	3 months ago
profiles.go	ipn/ipnlocal: don't fail profile unmarshal due to attestation keys (#18335)	7 days ago
profiles_notwindows.go	ipn/ipnlocal: refactor and cleanup profileManager	1 year ago
profiles_test.go	ipn/ipnlocal: don't fail profile unmarshal due to attestation keys (#18335)	7 days ago
profiles_windows.go	ipn/ipnlocal: refactor and cleanup profileManager	1 year ago
serve.go	net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#17823)	4 weeks ago
serve_disabled.go	all: add ts_omit_serve, start making tailscale serve/funnel be modular	4 months ago
serve_test.go	ipn/ipnlocal: add validations when setting serve config (#17950)	2 months ago
serve_unix_test.go	cmd/tailscale,ipn: add Unix socket support for serve	1 month ago
ssh.go	ipn/ipnlocal: fix a case where ts_omit_ssh was still linking in x/crypto/ssh	4 months ago
ssh_stub.go	ipn/ipnlocal: fix a case where ts_omit_ssh was still linking in x/crypto/ssh	4 months ago
ssh_test.go	health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085)	4 months ago
state_test.go	ipn/ipnlocal: add peer API endpoints to Hostinfo on initial client creation (#17851)	1 month ago
tailnetlock_disabled.go	all: add ts_omit_tailnetlock as a start of making it build-time modular	4 months ago
web_client.go	util/backoff: rename logtail/backoff package to util/backoff	4 months ago
web_client_stub.go	derp/derpserver: split off derp.Server out of derp into its own package	4 months ago