v1.74.0-sunos
github-actions
released this
15 Sep 16:51
·
136 commits
to sunos-1.76
since this release
Builds
- deps: bump ws from 8.14.2 to 8.17.1 in /client/web (tailscale#12524) #12524 (dependabot[bot])
Commits
- 1e8f8ee: VERSION.txt: this is v1.73.0 (tailscale#13181) (Andrea Gottardo) #13181
- 8fad8c4: tstest/tailmac: add customized macOS virtualization tooling (tailscale#13146) (Jonathan Nobels) #13146
- f95785f: util/winutil: add constants from Win32 SDK for dll blocking mitigation policies (Aaron Klotz) #13183
- 16bb541: wgengine/magicsock: replace deprecated poly1305 (tailscale#13184) (tomholford) #13175
- support setting authkey at login using syspolicy (tailscale#13061) #13061 (Andrea Gottardo)
- 01aa01f: ipn/ipnlocal: network-lock, error if no pubkey instead of panic (Kristoffer Dalby) #12505
- 2105773: cmd/k8s-operator/deploy: replace wildcards in Kubernetes Operator RBAC role definitions with verbs (pierig-n3xtio) #13169
- 8f6a235: util/winutil: add GetRegUserString/SetRegUserString accessors for storage and retrieval of string values in HKEY_CURRENT_USER (Aaron Klotz) #13188
- 93dc2de: cmd/k8s-operator: support default proxy class in k8s-operator (tailscale#12711) (ChandonPierre) #12711
- df6014f: net/tstun,wgengine{/netstack/gro}: refactor and re-enable gVisor GRO for Linux (tailscale#13172) (Jordan Whited) #13172
- 7675c3e: wgengine/netstack/gro: exclude importation of gVisor GRO pkg on iOS (tailscale#13202) (Jordan Whited) #13202
- 7d83056: ssh/tailssh: fix SSH on busybox systems (Percy Wegmann) #13040
- 151b77f: cmd/tl-longchain: tool to re-sign nodes with long rotation signatures (Anton Tolchanov) #13201
- af3d3c4: types/prefs: add a package containing generic preference types (Nick Khyl) #12830
- 4b525fd: ssh/tailssh: only chdir incubator process to user's homedir when necessary and possible (Percy Wegmann) #13171
- 8e42510: wgengine/netstack: disable gVisor GSO on Linux (tailscale#13215) (Jordan Whited) #13215
- 690d3bf: cmd/tailscale/cli: add debug command to do DNS lookups portably (Brad Fitzpatrick) #13219
- 4637ac7: ipn/ipnlocal: remember last notified taildrive shares and only notify if they've changed (Percy Wegmann) #13210
- fix new lint warnings from bumping staticcheck #13220 (Brad Fitzpatrick)
- switch to and require Go 1.23 #13220 (Brad Fitzpatrick)
- 0cb7eb9: net/dns: updated gonotify dependency to v2 that supports closable context (Ilarion Kovalchuk) #13221
- aedfb82: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13227
- e54c81d: types/views: add Slice.All iterator (Brad Fitzpatrick) #12913
- d00d6d6: go.mod: update to github.com/tailscale/netlink library that doesn't require vishvananda/netlink (Percy Wegmann) #13228
- 743d296: update to github.com/tailscale/netlink library that doesn't require vishvananda/netlink (Percy Wegmann) #13228
- 1191eb0: tstest/natlab: add unix address to writer for dgram mode (Jonathan Nobels) #13229
- 6280c44: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13234
- 3c66ee3: cmd/systray: add a basic linux systray app (Will Norris) #13237
- b091264: cmd/systray: set ipn.NotifyNoPrivateKeys, permit non-operator use (Brad Fitzpatrick) #13244
- d862898: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13238
- 3904e4d: cmd/tta, tstest/natlab/vnet: remove unneeded port 124 log hack, add log buffer (Brad Fitzpatrick) #13247
- 3b70968: cmd/vnet: add --blend and --pcap flags (Brad Fitzpatrick) #13247
- 5a99940: tstest/natlab/vnet: explicitly ignore PCP and SSDP UDP queries (Brad Fitzpatrick) #13247
- aa42ae9: tstest/natlab: make a new virtualIP type in prep for IPv6 support (Brad Fitzpatrick) #13248
- a9dc6e0: util/codegen, cmd/cloner, cmd/viewer: update codegen.LookupMethod to support alias type nodes (Nick Khyl) #13232
- 03acab2: cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types (Nick Khyl) #13236
- e5fd36a: tstest/natlab: respect NATTable interface's invalid-means-drop everywhere (Brad Fitzpatrick) #13250
- 475ab1f: cmd/vnet: omit log spam when backend status hasn't changed (Brad Fitzpatrick) #13251
- 641693d: ipn/ipnlocal: install IPv6 service addr route (tailscale#13252) (Jordan Whited) #13252
- 367bfa6: tstest/integration: exercise TCP DNS queries against quad-100 (tailscale#13231) (Jordan Whited) #13231
- 9783065: tstest/integration: change log.Fatal() to t.Fatal() (tailscale#13253) (Jordan Whited) #13253
- 31b5239: tstest/natlab/vnet: flush and sync pcap file after every packet (Maisem Ali) #13255
- b78df4d: tstest/natlab/vnet: add start of IPv6 support (Brad Fitzpatrick) #13167
- 8af50fa: ipn/ipnlocal: update routes on link change with ExitNodeAllowLANAccess (James Tucker) #13246
- cccacff: types/opt: add BoolFlag for setting Bool value as a flag (Will Norris) #13264
- e0bdd5d: tstest/natlab: simplify a defer (Brad Fitzpatrick) #13259
- 3a8cfbc: tstest/natlab: be more paranoid about IP versions from gvisor (Brad Fitzpatrick) #13259
- 6dd1af0: tstest/natlab: refactor HandleEthernetPacketForRouter a bit (Brad Fitzpatrick) #13259
- 2636a83: cmd/tta: pull out test driver dialing into a type, fix bugs (Brad Fitzpatrick) #13259
- extend the gokrazy/natlab wait-for-network delay for IPv6 #13259 (Brad Fitzpatrick)
- 0157000: tstest/natlab: fix IPv6 tests, remove TODOs (Brad Fitzpatrick) #13259
- f99f970: tstest/natlab/vnet: rename some things for clarity (Brad Fitzpatrick) #13259
- 6d4973e: wgengine/netstack: use types/logger.Logf instead of stdlib log.Printf (tailscale#13267) (Jordan Whited) #13267
- d097096: net/tstun,wgengine/netstack: make inbound synthetic packet injection GSO-aware (tailscale#13266) (Jordan Whited) #13266
- bfcb356: wgengine/netstack: re-enable gVisor GSO on Linux (tailscale#13269) (Jordan Whited) #13269
- 06c31f4: tsweb/varz: remove pprof (Kristoffer Dalby) #12990
- add initial user-facing metrics #12990 (Kristoffer Dalby)
- 31cdbd6: net/tstun: fix gvisor inbound GSO packet injection (tailscale#13283) (Jordan Whited) #13283
- ff1d0aa: tstest/natlab/vnet: start adding tests (Brad Fitzpatrick) #13282
- 8b23ba7: tstest/natlab/vnet: add qemu + Virtualization.framework protocol tests (Brad Fitzpatrick) #13290
- 961ee32: ipn/{ipnauth,ipnlocal,ipnserver,localapi}: start baby step toward moving access checks from the localapi.Handler to the LocalBackend (Nick Khyl) #13281
- 73b3c8f: tstest/natlab/vnet: add IPv6 all-nodes support (Brad Fitzpatrick) #13300
- 80b2b45: ipn/ipnlocal: refactor and cleanup profileManager (Nick Khyl) #13206
- d21ebc2: wgengine/netstack: implement netstack loopback (tailscale#13301) (Jordan Whited) #13301
- 82c2c5c: tstest/natlab/vnet: add more tests (Brad Fitzpatrick) #13302
- b48c8db: ipn/ipnlocal: set WantRunning upon an interactive login, but not during a seamless renewal or a profile switch (Nick Khyl) #13258
- update nix and use go 1.23 #13308 (Kristoffer Dalby)
- 71acf87: tstest/integration: add UDP netstack loopback integration test (tailscale#13312) (Jordan Whited) #13312
- 0926954: net/tstun,wgengine/netstack: implement TCP GRO for local services (tailscale#13315) (Jordan Whited) #13315
- increase TimeToVisible before DNS unavailable warning (tailscale#13317) #13317 (Andrea Gottardo)
- ecc4515: ssh/tailssh: add ability to force V2 behavior using new feature flag (Percy Wegmann) #13048
- 45c9775: net/tstun: clarify GROFilterFunc *gro.GRO usage (tailscale#13318) (Jordan Whited) #13318
- 35423fc: drive/driveimpl: use su instead of sudo (Percy Wegmann) #13225
- 959285e: ipn/ipnlocal: fix race condition that results in a panic sending on a closed channel (Nick Khyl) #13289
- stop logging serial numbers #13323 (Anton Tolchanov)
- ffa1c93: tstest/natlab/vnet: use mkPacketErr in more places (Brad Fitzpatrick) #13310
- b1a5b40: tstest/natlab/vnet: add DHCP tests, ignore DHCPv4 on v6-only networks (Brad Fitzpatrick) #13310
- 7e88d67: tstest/natlab/vnet: add syslog tests (Brad Fitzpatrick) #13324
- 3d9e3a1: tstest/natlab/vnet: move some boilerplate to mkPacket helper (Brad Fitzpatrick) #13329
- 2f2aeae: ipn/ipnlocal: fix a nil pointer dereference when serving /localapi/v0/tka/status (Nick Khyl) #13331
- 65fe0ba: wgengine/magicsock: fix panic regression from cryptokey routing change (Brad Fitzpatrick) #13333
- 20cf48b: gokrazy{,/natlabapp.arm64}: start adding arm64 appliance support (Brad Fitzpatrick) #13349
- bump capver for earlier cryptokey panic fix [capver 106] #13350 (Brad Fitzpatrick)
- 1c972bc: wgengine/magicsock: actually use AF_PACKET socket for raw disco (Andrew Dunham) #13141
- 8e1c00f: cmd/k8s-operator,k8s-operator/sessionrecording: ensure recording header contains terminal size for terminal sessions (tailscale#12965) (Irbe Krumina) #12965
- 345876d: client/tailscale: adding missing proto field in ACL parsing structures (tailscale#13051) (Seaver Thorn) #13051
- e865a0e: cmd/tailscale/cli: add 'debug go-buildinfo' subcommand (Brad Fitzpatrick) #12963
- aeb15de: util/syspolicy/source: add package for reading policy settings from external stores (Nick Khyl) #13113
- c4d0237: tstest/natlab: add dual stack with blackholed IPv4 (Brad Fitzpatrick) #13356
- 6d6b177: cmd/stunstamp: implement ICMP{v6} probing (tailscale#13354) (Jordan Whited) #13354
- 1dd1798: cmd/stunstamp: use measureFn more consistently in naming/signatures (tailscale#13360) (Jordan Whited) #13360
- 1fc4268: cmd/stunstamp: increase probe jitter (tailscale#13362) (Jordan Whited) #13362
- 0112da6: net/dns: support GetBaseConfig on Darwin OSS tailscaled (tailscale#13351) (Andrea Gottardo) #13351
- 5bc9faf: ipn/ipnlocal: always send auth URL notifications when a user requests interactive login (Nick Khyl) #13306
- implement
tailscale dns status
(tailscale#13353) #13353 (Andrea Gottardo) - 11d205f: control/controlclient,posture,util/syspolicy: use predefined syspolicy keys instead of string literals (Nick Khyl) #13363
- bcc47d9: cmd/tailscale/cli: use new Go 1.23 slices.Sorted (Brad Fitzpatrick) #13369
- truncate long rotation signature chains #13295 (Anton Tolchanov)
- use new Go 1.23 slices.Sorted more #13371 (Brad Fitzpatrick)
- fix magicsockReceiveFuncWarnable health clearing #13380 (Brad Fitzpatrick)
- 7dcf65a: net/dns: fix IsZero and Equal methods on OSConfig (Andrew Dunham) #13381
- 7aa766e: net/tstun: probe TCP GRO (tailscale#13376) (Jordan Whited) #13376
- 4f2a2bf: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13388
- e7a6e79: cmd/systray: handle reconnects to IPN bus (tailscale#13386) (Andrew Lytvynov) #13386
- e7b5e8c: ipn/ipnserver: remove IdleTimeout (Nick Khyl) #13385
- 95f0094: cmd/stunstamp: cleanup timeout and interval constants (tailscale#13393) (Jordan Whited) #13393
- 71ff3d7: go.mod: bump github.com/illarion/gonotify/v2 (Brad Fitzpatrick) #13402
- 7ce9c19: go.toolchain.rev: update to 1.23.1 (tailscale#13408) (Patrick O'Doherty) #13408
- 2b0d0dd: sessionrecording,ssh/tailssh,k8s-operator: log connected recorder address (tailscale#13382) (Irbe Krumina) #13382
- 4dfde7b: net/dns: disable DNS registration for Tailscale interface on Windows (Nick Khyl) #13412
- ecd64f6: cmd/k8s-operator,kube: set app name for Kubernetes Operator proxies (tailscale#13410) (Irbe Krumina) #13410
- d6dfb7f: kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: split out kube types (tailscale#13417) (Irbe Krumina) #13417
- 209567e: kube,cmd/{k8s-operator,containerboot},envknob,ipn/store/kubestore,*/depaware.txt: rename packages (tailscale#13418) (Irbe Krumina) #13418
- remove old package doc experimental warning #13421 (Brad Fitzpatrick)
- 0970615: ipn/ipnlocal: don't program system DNS when node key is expired (tailscale#13370) (Andrew Dunham) #13370
- a228d77: cmd/stunstamp: add protocol context to timeout logs (tailscale#13422) (Jordan Whited) #13422
- 71b550c: .github: Bump peter-evans/create-pull-request from 5.0.1 to 7.0.1 (tailscale#13419) (dependabot[bot]) #13419
- 7d16af8: cmd/natc: fix nil pointer (Fran Bull) #13433
- 9f9470f: ipnlocal,proxymap,wgengine/netstack: add optional WhoIs/proxymap debug (Brad Fitzpatrick) #13434
- 98f4dd9: cmd/k8s-operator,k8s-operator,kube: Add TSRecorder CRD + controller (tailscale#13299) (Tom Proctor) #13299
- 4d6a822: util/linuxfw: fall back to nftables when iptables not found (Maisem Ali) #13437
- f2713b6: .github: enable fuzz testing again (go1.23) (Maisem Ali) #13443
- unify server's clientSet interface into concrete type #13444 (Brad Fitzpatrick)
- cec779e: util/slicesx: add FirstElementEqual and LastElementEqual (Brad Fitzpatrick) #13445
- 2118d0c: VERSION.txt: this is v1.74.0 (kari-ts)
- 4f32e33: illumos/solaris support rebased onto 1.74.0 (Nahum Shalman)
- 22a065a: build tailscale client (Kevin Meziere)