You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Nick Khyl 9b32ba7f54 ipn/ipn{local,server}: move "staying alive in server mode" from ipnserver to LocalBackend ... Currently, we disconnect Tailscale and reset LocalBackend on Windows when the last LocalAPI client disconnects, unless Unattended Mode is enabled for the current profile. And the implementation is somewhat racy since the current profile could theoretically change after (*ipnserver.Server).addActiveHTTPRequest checks (*LocalBackend).InServerMode() and before it calls (*LocalBackend).SetCurrentUser(nil) (or, previously, (*LocalBackend).ResetForClientDisconnect). Additionally, we might want to keep Tailscale running and connected while a user is logged in rather than tying it to whether a LocalAPI client is connected (i.e., while the GUI is running), even when Unattended Mode is disabled for a profile. This includes scenarios where the new AlwaysOn mode is enabled, as well as when Tailscale is used on headless Windows editions, such as Windows Server Core, where the GUI is not supported. It may also be desirable to switch to the "background" profile when a user logs off from their device or implement other similar features. To facilitate these improvements, we move the logic from ipnserver.Server to ipnlocal.LocalBackend, where it determines whether to keep Tailscale running when the current user disconnects. We also update the logic that determines whether a connection should be allowed to better reflect the fact that, currently, LocalAPI connections are not allowed unless: - the current UID is "", meaning that either we are not on a multi-user system or Tailscale is idle; - the LocalAPI client belongs to the current user (their UIDs are the same); - the LocalAPI client is Local System (special case; Local System is always allowed). Whether Unattended Mode is enabled only affects the error message returned to the Local API client when the connection is denied. Updates #14823 Signed-off-by: Nick Khyl <nickk@tailscale.com>		11 months ago
..
testdata	ipn/ipnlocal: fix the path for writing cert files (#7203)	3 years ago
autoupdate.go	clientupdate: return true for CanAutoUpdate for macsys (#12746)	2 years ago
autoupdate_disabled.go	ipn/ipnlocal: periodically run auto-updates when "offline" (#12118)	2 years ago
breaktcp_darwin.go	cmd/tailscale: add debug commands to break connections	2 years ago
breaktcp_linux.go	cmd/tailscale: add debug commands to break connections	2 years ago
bus.go	ipn/ipnlocal: fix build, remove another Notify.BackendLogID reference that crept in	1 year ago
bus_test.go	ipn/ipnlocal: add IPN Bus NotifyRateLimit watch bit NotifyRateLimit	1 year ago
c2n.go	feature/*: make Wake-on-LAN conditional, start supporting modular features	12 months ago
c2n_pprof.go	ipn/ipnlocal: add c2n /debug/pprof/allocs endpoint	2 years ago
c2n_test.go	util/cmpx: delete now that we're using Go 1.22	2 years ago
cert.go	tempfork/acme: add new package for x/crypto package acme fork, move	12 months ago
cert_js.go	ipn/ipnlocal: add c2n method to check on TLS cert fetch status	2 years ago
cert_test.go	ipn/ipnlocal: add debug envknob for ACME directory URL (#14771)	12 months ago
dnsconfig_test.go	ipn/ipnlocal: don't program system DNS when node key is expired (#13370)	1 year ago
drive.go	cmd/viewer,types/views,various: avoid allocations in pointer field getters whenever possible	1 year ago
expiry.go	all: add Node.HomeDERP int, phase out "127.3.3.40:$region" hack [capver 111]	1 year ago
expiry_test.go	cmd/viewer,types/views,various: avoid allocations in pointer field getters whenever possible	1 year ago
local.go	ipn/ipn{local,server}: move "staying alive in server mode" from ipnserver to LocalBackend	11 months ago
local_test.go	types/netmap,*: pass around UserProfiles as views (pointers) instead	11 months ago
loglines_test.go	util/usermetrics: make usermetrics non-global	1 year ago
network-lock.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	11 months ago
network-lock_test.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	11 months ago
peerapi.go	appc,ipn/ipnlocal: log DNS parsing errors in app connectors (#14607)	12 months ago
peerapi_h2c.go	all: update copyright and license headers	3 years ago
peerapi_macios_ext.go	net/netmon, add: add netmon.State type alias of interfaces.State	2 years ago
peerapi_test.go	util/usermetrics: make usermetrics non-global	1 year ago
profiles.go	ipn/ipn{local,server}: move "staying alive in server mode" from ipnserver to LocalBackend	11 months ago
profiles_notwindows.go	ipn/ipnlocal: refactor and cleanup profileManager	1 year ago
profiles_test.go	ipn/ipnlocal: fix (*profileManager).DefaultUserProfileID for users other than current	11 months ago
profiles_windows.go	ipn/ipnlocal: refactor and cleanup profileManager	1 year ago
serve.go	ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate	11 months ago
serve_test.go	types/netmap,*: pass around UserProfiles as views (pointers) instead	11 months ago
ssh.go	ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh	11 months ago
ssh_stub.go	ipnlocal: log failure to get ssh host keys	2 years ago
ssh_test.go	ipn/ipnlocal: plumb health.Tracker into profileManager constructor	2 years ago
state_test.go	types/persist: remove Persist.LegacyFrontendPrivateMachineKey	12 months ago
taildrop.go	ipn/localapi: add support for multipart POST to file-put	2 years ago
web_client.go	all: use new LocalAPI client package location	11 months ago
web_client_stub.go	all: use new LocalAPI client package location	11 months ago