You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
Aaron Klotz 47019ce1f1 cmd/tailscaled: pre-load wintun.dll using a fully-qualified path
In corp PR #14970 I updated the installer to set a security mitigation that
always forces system32 to the front of the Windows dynamic linker's search
path.

Unfortunately there are other products out there that, partying like it's
1995, drop their own, older version of wintun.dll into system32. Since we
look there first, we end up loading that old version.

We can fix this by preloading wintun using a fully-qualified path. When
wintun-go then loads wintun, the dynamic linker will hand it the module
that was previously loaded by us.

Fixes #10023, #10025, #10052

Signed-off-by: Aaron Klotz <aaron@tailscale.com>
2 years ago
.bencher
.github .github: Bump actions/checkout from 3 to 4 2 years ago
appc appc,ipn/ipnlocal: add App Connector domain configuration from mapcap 2 years ago
atomicfile various: add golangci-lint, fix issues (#7905) 3 years ago
chirp
client client/web: move more session logic to auth.go 2 years ago
clientupdate clientupdate: clarify how to run update as Administrator on Windows (#10043) 2 years ago
cmd cmd/tailscaled: pre-load wintun.dll using a fully-qualified path 2 years ago
control control/controlclient: support certstore without cgo 2 years ago
derp derp/derphttp: close DERP client to avoid data race in test 2 years ago
disco disco,net/tstun,wgengine/magicsock: probe peer MTU 2 years ago
docs cmd/k8s-operator: use our own container image instead of busybox 2 years ago
doctor
envknob
health
hostinfo hostinfo: fix a couple of logic simplification lints 2 years ago
internal/tooldeps
ipn ipn/ipnlocal,tailcfg: add AppConnector service to HostInfo when configured 2 years ago
jsondb all: update copyright and license headers 3 years ago
kube
licenses licenses: update android licenses 2 years ago
log
logpolicy winutil: refactor methods to get values from registry to also return (#9536) 2 years ago
logtail adjust build tags for tamago 2 years ago
metrics
net appc,ipn/ipnlocal,net/dns/resolver: add App Connector wiring when enabled in prefs 2 years ago
packages/deb
paths
portlist portlist: populate Pid field on Linux 2 years ago
posture posture: add get serial support for macOS 2 years ago
prober
proxymap
release release/dist/unixpkgs: revert iptables move to Recommends, make it Depends 2 years ago
safesocket safesocket: make clear which net.Conns are winio types 2 years ago
scripts scripts/installer: add Kaisen, Garuda, Fedora-Asahi. 2 years ago
smallzstd all: update copyright and license headers 3 years ago
ssh/tailssh util/httpm, all: add a test to make sure httpm is used consistently 2 years ago
syncs syncs: add Map.LoadFunc (#9869) 2 years ago
tailcfg ipn/ipnlocal,tailcfg: add AppConnector service to HostInfo when configured 2 years ago
taildrop taildrop: fix theoretical race condition in fileDeleter.Init (#9876) 2 years ago
tempfork
tka
tool tool: download helm CLI (#9981) 2 years ago
tsconst all: update copyright and license headers 3 years ago
tsd cmd/tailscaled,*: add start of configuration file support 2 years ago
tsnet ipn/ipnlocal,client/web: add web client to tailscaled 2 years ago
tstest tstest/deptest: fix minor escaping error in regex 2 years ago
tstime tstime: add DefaultClock (#9691) 2 years ago
tsweb tsweb/varz: fix exporting histograms 2 years ago
types types/appctype: define the nodeAttrs type for dns-driven app connectors 2 years ago
util util/groupmember: fail earlier if group doesn't exist, use slices.Contains 2 years ago
version cmd/tailscale/cli: set Sparkle auto-update on macsys (#9952) 2 years ago
wf
wgengine wgengine/netstack: standardize var names in UpdateNetstackIPs 2 years ago
words words: flappy birds, but real life 2 years ago
.gitattributes
.gitignore
.golangci.yml
ALPINE.txt
AUTHORS
CODEOWNERS
CODE_OF_CONDUCT.md
Dockerfile
Dockerfile.base
LICENSE
Makefile Makefile: make it possibe to pass a custom tag when building dev images (#9461) 2 years ago
PATENTS
README.md client/web: switch to using prebuilt web client assets 2 years ago
SECURITY.md
VERSION.txt VERSION.txt: this is v1.53.0 (#10018) 2 years ago
api.md api.md: remove clientConnectivity.derp field 2 years ago
build_dist.sh client/web: switch to using prebuilt web client assets 2 years ago
build_docker.sh
flake.lock
flake.nix go.mod.sri: update SRI hash for go.mod changes 2 years ago
go.mod build(deps): bump github.com/docker/docker 2 years ago
go.mod.sri go.mod.sri: update SRI hash for go.mod changes 2 years ago
go.sum build(deps): bump github.com/docker/docker 2 years ago
go.toolchain.branch
go.toolchain.rev go.toolchain.rev: bump Tailscale Go toolchain 2 years ago
gomod_test.go go.mod: add test that replace directives aren't added in oss 2 years ago
pull-toolchain.sh
shell.nix go.mod.sri: update SRI hash for go.mod changes 2 years ago
staticcheck.conf
update-flake.sh
version-embed.go
version_test.go

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.21. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.