Skip to content

v1.74.0-sunos

Compare
Choose a tag to compare
@github-actions github-actions released this 15 Sep 16:51
· 136 commits to sunos-1.76 since this release

Builds

Commits

  • 1e8f8ee: VERSION.txt: this is v1.73.0 (tailscale#13181) (Andrea Gottardo) #13181
  • 8fad8c4: tstest/tailmac: add customized macOS virtualization tooling (tailscale#13146) (Jonathan Nobels) #13146
  • f95785f: util/winutil: add constants from Win32 SDK for dll blocking mitigation policies (Aaron Klotz) #13183
  • 16bb541: wgengine/magicsock: replace deprecated poly1305 (tailscale#13184) (tomholford) #13175
  • support setting authkey at login using syspolicy (tailscale#13061) #13061 (Andrea Gottardo)
  • 01aa01f: ipn/ipnlocal: network-lock, error if no pubkey instead of panic (Kristoffer Dalby) #12505
  • 2105773: cmd/k8s-operator/deploy: replace wildcards in Kubernetes Operator RBAC role definitions with verbs (pierig-n3xtio) #13169
  • 8f6a235: util/winutil: add GetRegUserString/SetRegUserString accessors for storage and retrieval of string values in HKEY_CURRENT_USER (Aaron Klotz) #13188
  • 93dc2de: cmd/k8s-operator: support default proxy class in k8s-operator (tailscale#12711) (ChandonPierre) #12711
  • df6014f: net/tstun,wgengine{/netstack/gro}: refactor and re-enable gVisor GRO for Linux (tailscale#13172) (Jordan Whited) #13172
  • 7675c3e: wgengine/netstack/gro: exclude importation of gVisor GRO pkg on iOS (tailscale#13202) (Jordan Whited) #13202
  • 7d83056: ssh/tailssh: fix SSH on busybox systems (Percy Wegmann) #13040
  • 151b77f: cmd/tl-longchain: tool to re-sign nodes with long rotation signatures (Anton Tolchanov) #13201
  • af3d3c4: types/prefs: add a package containing generic preference types (Nick Khyl) #12830
  • 4b525fd: ssh/tailssh: only chdir incubator process to user's homedir when necessary and possible (Percy Wegmann) #13171
  • 8e42510: wgengine/netstack: disable gVisor GSO on Linux (tailscale#13215) (Jordan Whited) #13215
  • 690d3bf: cmd/tailscale/cli: add debug command to do DNS lookups portably (Brad Fitzpatrick) #13219
  • 4637ac7: ipn/ipnlocal: remember last notified taildrive shares and only notify if they've changed (Percy Wegmann) #13210
  • fix new lint warnings from bumping staticcheck #13220 (Brad Fitzpatrick)
  • switch to and require Go 1.23 #13220 (Brad Fitzpatrick)
  • 0cb7eb9: net/dns: updated gonotify dependency to v2 that supports closable context (Ilarion Kovalchuk) #13221
  • aedfb82: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13227
  • e54c81d: types/views: add Slice.All iterator (Brad Fitzpatrick) #12913
  • d00d6d6: go.mod: update to github.com/tailscale/netlink library that doesn't require vishvananda/netlink (Percy Wegmann) #13228
  • 743d296: update to github.com/tailscale/netlink library that doesn't require vishvananda/netlink (Percy Wegmann) #13228
  • 1191eb0: tstest/natlab: add unix address to writer for dgram mode (Jonathan Nobels) #13229
  • 6280c44: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13234
  • 3c66ee3: cmd/systray: add a basic linux systray app (Will Norris) #13237
  • b091264: cmd/systray: set ipn.NotifyNoPrivateKeys, permit non-operator use (Brad Fitzpatrick) #13244
  • d862898: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13238
  • 3904e4d: cmd/tta, tstest/natlab/vnet: remove unneeded port 124 log hack, add log buffer (Brad Fitzpatrick) #13247
  • 3b70968: cmd/vnet: add --blend and --pcap flags (Brad Fitzpatrick) #13247
  • 5a99940: tstest/natlab/vnet: explicitly ignore PCP and SSDP UDP queries (Brad Fitzpatrick) #13247
  • aa42ae9: tstest/natlab: make a new virtualIP type in prep for IPv6 support (Brad Fitzpatrick) #13248
  • a9dc6e0: util/codegen, cmd/cloner, cmd/viewer: update codegen.LookupMethod to support alias type nodes (Nick Khyl) #13232
  • 03acab2: cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types (Nick Khyl) #13236
  • e5fd36a: tstest/natlab: respect NATTable interface's invalid-means-drop everywhere (Brad Fitzpatrick) #13250
  • 475ab1f: cmd/vnet: omit log spam when backend status hasn't changed (Brad Fitzpatrick) #13251
  • 641693d: ipn/ipnlocal: install IPv6 service addr route (tailscale#13252) (Jordan Whited) #13252
  • 367bfa6: tstest/integration: exercise TCP DNS queries against quad-100 (tailscale#13231) (Jordan Whited) #13231
  • 9783065: tstest/integration: change log.Fatal() to t.Fatal() (tailscale#13253) (Jordan Whited) #13253
  • 31b5239: tstest/natlab/vnet: flush and sync pcap file after every packet (Maisem Ali) #13255
  • b78df4d: tstest/natlab/vnet: add start of IPv6 support (Brad Fitzpatrick) #13167
  • 8af50fa: ipn/ipnlocal: update routes on link change with ExitNodeAllowLANAccess (James Tucker) #13246
  • cccacff: types/opt: add BoolFlag for setting Bool value as a flag (Will Norris) #13264
  • e0bdd5d: tstest/natlab: simplify a defer (Brad Fitzpatrick) #13259
  • 3a8cfbc: tstest/natlab: be more paranoid about IP versions from gvisor (Brad Fitzpatrick) #13259
  • 6dd1af0: tstest/natlab: refactor HandleEthernetPacketForRouter a bit (Brad Fitzpatrick) #13259
  • 2636a83: cmd/tta: pull out test driver dialing into a type, fix bugs (Brad Fitzpatrick) #13259
  • extend the gokrazy/natlab wait-for-network delay for IPv6 #13259 (Brad Fitzpatrick)
  • 0157000: tstest/natlab: fix IPv6 tests, remove TODOs (Brad Fitzpatrick) #13259
  • f99f970: tstest/natlab/vnet: rename some things for clarity (Brad Fitzpatrick) #13259
  • 6d4973e: wgengine/netstack: use types/logger.Logf instead of stdlib log.Printf (tailscale#13267) (Jordan Whited) #13267
  • d097096: net/tstun,wgengine/netstack: make inbound synthetic packet injection GSO-aware (tailscale#13266) (Jordan Whited) #13266
  • bfcb356: wgengine/netstack: re-enable gVisor GSO on Linux (tailscale#13269) (Jordan Whited) #13269
  • 06c31f4: tsweb/varz: remove pprof (Kristoffer Dalby) #12990
  • add initial user-facing metrics #12990 (Kristoffer Dalby)
  • 31cdbd6: net/tstun: fix gvisor inbound GSO packet injection (tailscale#13283) (Jordan Whited) #13283
  • ff1d0aa: tstest/natlab/vnet: start adding tests (Brad Fitzpatrick) #13282
  • 8b23ba7: tstest/natlab/vnet: add qemu + Virtualization.framework protocol tests (Brad Fitzpatrick) #13290
  • 961ee32: ipn/{ipnauth,ipnlocal,ipnserver,localapi}: start baby step toward moving access checks from the localapi.Handler to the LocalBackend (Nick Khyl) #13281
  • 73b3c8f: tstest/natlab/vnet: add IPv6 all-nodes support (Brad Fitzpatrick) #13300
  • 80b2b45: ipn/ipnlocal: refactor and cleanup profileManager (Nick Khyl) #13206
  • d21ebc2: wgengine/netstack: implement netstack loopback (tailscale#13301) (Jordan Whited) #13301
  • 82c2c5c: tstest/natlab/vnet: add more tests (Brad Fitzpatrick) #13302
  • b48c8db: ipn/ipnlocal: set WantRunning upon an interactive login, but not during a seamless renewal or a profile switch (Nick Khyl) #13258
  • update nix and use go 1.23 #13308 (Kristoffer Dalby)
  • 71acf87: tstest/integration: add UDP netstack loopback integration test (tailscale#13312) (Jordan Whited) #13312
  • 0926954: net/tstun,wgengine/netstack: implement TCP GRO for local services (tailscale#13315) (Jordan Whited) #13315
  • increase TimeToVisible before DNS unavailable warning (tailscale#13317) #13317 (Andrea Gottardo)
  • ecc4515: ssh/tailssh: add ability to force V2 behavior using new feature flag (Percy Wegmann) #13048
  • 45c9775: net/tstun: clarify GROFilterFunc *gro.GRO usage (tailscale#13318) (Jordan Whited) #13318
  • 35423fc: drive/driveimpl: use su instead of sudo (Percy Wegmann) #13225
  • 959285e: ipn/ipnlocal: fix race condition that results in a panic sending on a closed channel (Nick Khyl) #13289
  • stop logging serial numbers #13323 (Anton Tolchanov)
  • ffa1c93: tstest/natlab/vnet: use mkPacketErr in more places (Brad Fitzpatrick) #13310
  • b1a5b40: tstest/natlab/vnet: add DHCP tests, ignore DHCPv4 on v6-only networks (Brad Fitzpatrick) #13310
  • 7e88d67: tstest/natlab/vnet: add syslog tests (Brad Fitzpatrick) #13324
  • 3d9e3a1: tstest/natlab/vnet: move some boilerplate to mkPacket helper (Brad Fitzpatrick) #13329
  • 2f2aeae: ipn/ipnlocal: fix a nil pointer dereference when serving /localapi/v0/tka/status (Nick Khyl) #13331
  • 65fe0ba: wgengine/magicsock: fix panic regression from cryptokey routing change (Brad Fitzpatrick) #13333
  • 20cf48b: gokrazy{,/natlabapp.arm64}: start adding arm64 appliance support (Brad Fitzpatrick) #13349
  • bump capver for earlier cryptokey panic fix [capver 106] #13350 (Brad Fitzpatrick)
  • 1c972bc: wgengine/magicsock: actually use AF_PACKET socket for raw disco (Andrew Dunham) #13141
  • 8e1c00f: cmd/k8s-operator,k8s-operator/sessionrecording: ensure recording header contains terminal size for terminal sessions (tailscale#12965) (Irbe Krumina) #12965
  • 345876d: client/tailscale: adding missing proto field in ACL parsing structures (tailscale#13051) (Seaver Thorn) #13051
  • e865a0e: cmd/tailscale/cli: add 'debug go-buildinfo' subcommand (Brad Fitzpatrick) #12963
  • aeb15de: util/syspolicy/source: add package for reading policy settings from external stores (Nick Khyl) #13113
  • c4d0237: tstest/natlab: add dual stack with blackholed IPv4 (Brad Fitzpatrick) #13356
  • 6d6b177: cmd/stunstamp: implement ICMP{v6} probing (tailscale#13354) (Jordan Whited) #13354
  • 1dd1798: cmd/stunstamp: use measureFn more consistently in naming/signatures (tailscale#13360) (Jordan Whited) #13360
  • 1fc4268: cmd/stunstamp: increase probe jitter (tailscale#13362) (Jordan Whited) #13362
  • 0112da6: net/dns: support GetBaseConfig on Darwin OSS tailscaled (tailscale#13351) (Andrea Gottardo) #13351
  • 5bc9faf: ipn/ipnlocal: always send auth URL notifications when a user requests interactive login (Nick Khyl) #13306
  • implement tailscale dns status (tailscale#13353) #13353 (Andrea Gottardo)
  • 11d205f: control/controlclient,posture,util/syspolicy: use predefined syspolicy keys instead of string literals (Nick Khyl) #13363
  • bcc47d9: cmd/tailscale/cli: use new Go 1.23 slices.Sorted (Brad Fitzpatrick) #13369
  • truncate long rotation signature chains #13295 (Anton Tolchanov)
  • use new Go 1.23 slices.Sorted more #13371 (Brad Fitzpatrick)
  • fix magicsockReceiveFuncWarnable health clearing #13380 (Brad Fitzpatrick)
  • 7dcf65a: net/dns: fix IsZero and Equal methods on OSConfig (Andrew Dunham) #13381
  • 7aa766e: net/tstun: probe TCP GRO (tailscale#13376) (Jordan Whited) #13376
  • 4f2a2bf: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13388
  • e7a6e79: cmd/systray: handle reconnects to IPN bus (tailscale#13386) (Andrew Lytvynov) #13386
  • e7b5e8c: ipn/ipnserver: remove IdleTimeout (Nick Khyl) #13385
  • 95f0094: cmd/stunstamp: cleanup timeout and interval constants (tailscale#13393) (Jordan Whited) #13393
  • 71ff3d7: go.mod: bump github.com/illarion/gonotify/v2 (Brad Fitzpatrick) #13402
  • 7ce9c19: go.toolchain.rev: update to 1.23.1 (tailscale#13408) (Patrick O'Doherty) #13408
  • 2b0d0dd: sessionrecording,ssh/tailssh,k8s-operator: log connected recorder address (tailscale#13382) (Irbe Krumina) #13382
  • 4dfde7b: net/dns: disable DNS registration for Tailscale interface on Windows (Nick Khyl) #13412
  • ecd64f6: cmd/k8s-operator,kube: set app name for Kubernetes Operator proxies (tailscale#13410) (Irbe Krumina) #13410
  • d6dfb7f: kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: split out kube types (tailscale#13417) (Irbe Krumina) #13417
  • 209567e: kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (tailscale#13418) (Irbe Krumina) #13418
  • remove old package doc experimental warning #13421 (Brad Fitzpatrick)
  • 0970615: ipn/ipnlocal: don't program system DNS when node key is expired (tailscale#13370) (Andrew Dunham) #13370
  • a228d77: cmd/stunstamp: add protocol context to timeout logs (tailscale#13422) (Jordan Whited) #13422
  • 71b550c: .github: Bump peter-evans/create-pull-request from 5.0.1 to 7.0.1 (tailscale#13419) (dependabot[bot]) #13419
  • 7d16af8: cmd/natc: fix nil pointer (Fran Bull) #13433
  • 9f9470f: ipnlocal,proxymap,wgengine/netstack: add optional WhoIs/proxymap debug (Brad Fitzpatrick) #13434
  • 98f4dd9: cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (tailscale#13299) (Tom Proctor) #13299
  • 4d6a822: util/linuxfw: fall back to nftables when iptables not found (Maisem Ali) #13437
  • f2713b6: .github: enable fuzz testing again (go1.23) (Maisem Ali) #13443
  • unify server's clientSet interface into concrete type #13444 (Brad Fitzpatrick)
  • cec779e: util/slicesx: add FirstElementEqual and LastElementEqual (Brad Fitzpatrick) #13445
  • 2118d0c: VERSION.txt: this is v1.74.0 (kari-ts)
  • 4f32e33: illumos/solaris support rebased onto 1.74.0 (Nahum Shalman)
  • 22a065a: build tailscale client (Kevin Meziere)