You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Tom Proctor 138a83efe1
cmd/containerboot: wait for consistent state on shutdown (#14263)
tailscaled's ipn package writes a collection of keys to state after
authenticating to control, but one at a time. If containerboot happens
to send a SIGTERM signal to tailscaled in the middle of writing those
keys, it may shut down with an inconsistent state Secret and never
recover. While we can't durably fix this with our current single-use
auth keys (no atomic operation to auth + write state), we can reduce
the window for this race condition by checking for partial state
before sending SIGTERM to tailscaled. Best effort only.

Updates #14080

Change-Id: I0532d51b6f0b7d391e538468bd6a0a80dbe1d9f7
Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
10 months ago
..
addlicense all: fix golangci-lint errors 11 months ago
build-webclient client/web: precompress assets 2 years ago
checkmetrics cmd/checkmetrics: add command for checking metrics against kb 1 year ago
cloner cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types 1 year ago
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 2 years ago
containerboot cmd/containerboot: wait for consistent state on shutdown (#14263) 10 months ago
derper go.mod: bump depaware, add --internal flag to stop hiding internal packages 10 months ago
derpprobe prober: support filtering regions by region ID in addition to code 11 months ago
dist release/dist/qnap: add qnap target builder 2 years ago
get-authkey cmd,{get-authkey,tailscale}: remove unnecessary scope qualifier from OAuth clients 1 year ago
gitops-pusher cmd/gitops-pusher: default previousEtag to controlEtag (#14296) 1 year ago
hello cmd/hello: link to the Hello KB article (#11022) 2 years ago
k8s-nameserver cmd/k8s-nameserver: fix AAAA record query response (#12412) 2 years ago
k8s-operator cmd/k8s-operator: temporarily disable HA Ingress controller (#14833) 10 months ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 3 years ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 2 years ago
mkversion version/mkversion: open-source version generation logic 3 years ago
nardump all: update copyright and license headers 3 years ago
natc cmd/natc: expose netstack metrics in client metrics in natc 10 months ago
netlogfmt all: use Go 1.22 range-over-int 2 years ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 3 years ago
pgproxy tsnet: split user facing and backend logging 2 years ago
printdep cmd/printdep: print correct toolchain URL 3 years ago
proxy-to-grafana cmd/proxy-to-grafana: add flag for alternative control server 1 year ago
sniproxy all: use math/rand/v2 more 2 years ago
speedtest all: update copyright and license headers 3 years ago
ssh-auth-none-demo Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh" 10 months ago
stunc cmd/stunc: enforce read timeout deadline (#14309) 1 year ago
stund go.mod: bump depaware, add --internal flag to stop hiding internal packages 10 months ago
stunstamp cmd/stunstamp: add protocol context to timeout logs (#13422) 1 year ago
sync-containers all: adjust some build tags for plan9 2 years ago
systray cmd/systray: add cmd/systray back as a small client/systray wrapper 11 months ago
tailscale cmd/tailscale: add warning to help text of `--force-reauth` (#14778) 10 months ago
tailscaled Revert "ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh" 10 months ago
testcontrol all: use Go 1.22 range-over-int 2 years ago
testwrapper util/slicesx: add MapKeys and MapValues from golang.org/x/exp/maps 11 months ago
tl-longchain cmd/tl-longchain: tool to re-sign nodes with long rotation signatures 1 year ago
tsconnect build(deps): bump braces from 3.0.2 to 3.0.3 in /cmd/tsconnect (#12468) 11 months ago
tsidp cmd/tsidp: add --dir flag 1 year ago
tsshd all: update copyright and license headers 3 years ago
tta cmd/tta: pull out test driver dialing into a type, fix bugs 1 year ago
viewer cmd/viewer,all: consistently use "read-only" instead of "readonly" 11 months ago
vnet tstest/natlab/vnet: add start of IPv6 support 1 year ago
xdpderper all: add test for package comments, fix, add comments as needed 1 year ago