You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Nick Khyl 9b32ba7f54 ipn/ipn{local,server}: move "staying alive in server mode" from ipnserver to LocalBackend ... Currently, we disconnect Tailscale and reset LocalBackend on Windows when the last LocalAPI client disconnects, unless Unattended Mode is enabled for the current profile. And the implementation is somewhat racy since the current profile could theoretically change after (*ipnserver.Server).addActiveHTTPRequest checks (*LocalBackend).InServerMode() and before it calls (*LocalBackend).SetCurrentUser(nil) (or, previously, (*LocalBackend).ResetForClientDisconnect). Additionally, we might want to keep Tailscale running and connected while a user is logged in rather than tying it to whether a LocalAPI client is connected (i.e., while the GUI is running), even when Unattended Mode is disabled for a profile. This includes scenarios where the new AlwaysOn mode is enabled, as well as when Tailscale is used on headless Windows editions, such as Windows Server Core, where the GUI is not supported. It may also be desirable to switch to the "background" profile when a user logs off from their device or implement other similar features. To facilitate these improvements, we move the logic from ipnserver.Server to ipnlocal.LocalBackend, where it determines whether to keep Tailscale running when the current user disconnects. We also update the logic that determines whether a connection should be allowed to better reflect the fact that, currently, LocalAPI connections are not allowed unless: - the current UID is "", meaning that either we are not on a multi-user system or Tailscale is idle; - the LocalAPI client belongs to the current user (their UIDs are the same); - the LocalAPI client is Local System (special case; Local System is always allowed). Whether Unattended Mode is enabled only affects the error message returned to the Local API client when the connection is denied. Updates #14823 Signed-off-by: Nick Khyl <nickk@tailscale.com>		11 months ago
..
conffile	ipn/conffile: don't depend on hujson on iOS/Android	1 year ago
desktop	ipn/desktop: add a new package for managing desktop sessions on Windows	11 months ago
ipnauth	ipn/ipnauth: implement WindowsActor	11 months ago
ipnlocal	ipn/ipn{local,server}: move "staying alive in server mode" from ipnserver to LocalBackend	11 months ago
ipnserver	ipn/ipn{local,server}: move "staying alive in server mode" from ipnserver to LocalBackend	11 months ago
ipnstate	types/netmap,*: pass around UserProfiles as views (pointers) instead	11 months ago
localapi	ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet localapi handlers	11 months ago
policy	ipn,tailconfig: clean up unreleased and removed app connector service	2 years ago
store	kube/{kubeapi,kubeclient},ipn/store/kubestore,cmd/{containerboot,k8s-operator}: emit kube store Events (#14112)	1 year ago
backend.go	ipn: declare NotifyWatchOpt consts without using iota	12 months ago
conf.go	ipn/conf.go: add VIPServices to tailscaled configfile (#14345)	12 months ago
doc.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	11 months ago
ipn_clone.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	11 months ago
ipn_test.go	all: do not depend on the testing package	2 years ago
ipn_view.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	11 months ago
prefs.go	cmd/tailscale,ipn,tailcfg: add `tailscale advertise` subcommand behind envknob (#13734)	1 year ago
prefs_test.go	types/persist: remove Persist.LegacyFrontendPrivateMachineKey	11 months ago
serve.go	tailcfg: add ServiceName	11 months ago
serve_test.go	ipn: [serve] warn that foreground funnel won't work if shields are up (#14685)	11 months ago
store.go	ipn: add comment about thread-safety to StateStore	2 years ago
store_test.go	ipn: avoid useless no-op WriteState calls	2 years ago