Renovate
82f239be1f
chore(deps): update golang:1.27.1-alpine docker digest to cf6fca6
ci/woodpecker/pr/pr-build Pipeline was successful
2026-09-03 02:01:25 +00:00
Renovate
63d16c7ee3
chore(deps): update golang docker tag to v1.27.1
ci/woodpecker/pr/pr-build Pipeline was successful
2026-09-02 02:01:33 +00:00
Lumpiasty
6323311920
Merge pull request 'chore(deps): update golang docker tag to v1.27.0' ( #52 ) from renovate/golang-1.x into main
...
ci/woodpecker/push/release-tag Pipeline was successful
ci/woodpecker/push/pr-build Pipeline was successful
ci/woodpecker/cron/renovate Pipeline was successful
Reviewed-on: #52
2026-08-22 22:51:19 +00:00
Lumpiasty
c5e1c8be24
Merge pull request 'chore(deps): update docker/dockerfile docker tag to v1.26.0' ( #48 ) from renovate/docker-dockerfile-1.x into main
...
ci/woodpecker/push/release-tag Pipeline is pending
ci/woodpecker/push/pr-build Pipeline was canceled
Reviewed-on: #48
2026-08-22 22:46:37 +00:00
Renovate
561f067bb6
chore(deps): update dependency tailscale to v1.102.3
ci/woodpecker/pr/pr-build Pipeline was successful
2026-08-22 22:26:27 +00:00
Renovate
284ea0ddad
chore(deps): update golang docker tag to v1.27.0
ci/woodpecker/pr/pr-build Pipeline was successful
2026-08-20 02:01:38 +00:00
Renovate
9ef4a1b006
chore(deps): update docker/dockerfile docker tag to v1.26.0
ci/woodpecker/pr/pr-build Pipeline was successful
2026-08-17 02:01:44 +00:00
Renovate
22b57a8ce0
chore(deps): update golang:1.26.6-alpine docker digest to 3889b42
ci/woodpecker/pr/pr-build Pipeline was successful
2026-08-16 20:13:59 +00:00
Renovate
fabcc8f43d
chore(deps): update golang docker tag to v1.26.6
ci/woodpecker/pr/pr-build Pipeline was successful
2026-08-14 02:00:47 +00:00
Renovate
290c8e71ca
chore(deps): update dependency tailscale to v1.102.2
ci/woodpecker/pr/pr-build Pipeline was successful
2026-08-07 02:01:31 +00:00
Renovate
aec542e727
chore(deps): update dependency tailscale to v1.98.10
ci/woodpecker/pr/pr-build Pipeline was successful
2026-07-29 02:00:55 +00:00
Renovate
0e42ef9a25
chore(deps): update dependency tailscale to v1.98.9
ci/woodpecker/pr/pr-build Pipeline was successful
2026-07-21 02:01:42 +00:00
Renovate
391fabddf9
chore(deps): update golang:1.26.5-alpine docker digest to 0178a64
ci/woodpecker/pr/pr-build Pipeline was successful
2026-07-09 02:00:51 +00:00
Renovate
cc6fbedf5b
chore(deps): update golang docker tag to v1.26.5
ci/woodpecker/pr/pr-build Pipeline was successful
2026-07-08 02:01:19 +00:00
Renovate
b5da91e772
chore(deps): update dependency tailscale to v1.98.8
ci/woodpecker/pr/pr-build Pipeline was successful
2026-07-01 02:01:08 +00:00
Renovate
77d7cdcd25
chore(deps): update docker/dockerfile docker tag to v1.25.0
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-21 01:19:55 +00:00
Renovate
b96f88680f
chore(deps): update golang:1.26.4-alpine docker digest to 3ad5730
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-19 02:01:05 +00:00
Renovate
9fc48bac7b
chore(deps): update alpine docker tag to v3.24.1
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-16 22:44:38 +00:00
Lumpiasty
e009040cb4
add peer api server to remedy DNS
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-17 00:30:46 +02:00
Lumpiasty
7482ddb832
Enable netstack to hopefully fix DNS
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-16 23:32:03 +02:00
Renovate
509762c1b4
chore(deps): update golang:1.26.4-alpine docker digest to f1ddd9f
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-16 02:01:02 +00:00
Lumpiasty
8fee49bf09
cross compile busybox instead of emulation
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-16 01:50:50 +02:00
Lumpiasty
3ff4666495
Add workaround for panic with ts_omit_netstack
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-16 01:16:45 +02:00
Renovate
26debfaf30
chore(deps): update golang:1.26.4-alpine docker digest to 7a3e500
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-12 00:41:13 +00:00
Lumpiasty
16fd2170db
Merge pull request 'chore(deps): update busybox docker tag to v1.38.0' ( #17 ) from renovate/busybox-1.x into main
...
ci/woodpecker/push/pr-build Pipeline was canceled
ci/woodpecker/push/release-tag Pipeline was canceled
Reviewed-on: #17
2026-06-12 00:30:20 +00:00
Lumpiasty
b7f3bdbbc6
Merge pull request 'chore(deps): update alpine docker tag to v3.24.0' ( #18 ) from renovate/alpine-3.x into main
...
ci/woodpecker/push/release-tag Pipeline is pending
ci/woodpecker/push/pr-build Pipeline was canceled
Reviewed-on: #18
2026-06-12 00:30:12 +00:00
Lumpiasty
ebf011908a
Log verbosity filtering feature
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-12 01:25:44 +02:00
Renovate Bot
c8b5101416
chore(deps): update alpine docker tag to v3.24.0
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-11 02:00:57 +00:00
Renovate Bot
11d12737f7
chore(deps): update golang:1.26.4-alpine docker digest to a6a091e
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-11 02:00:55 +00:00
Renovate Bot
cba8447fa7
chore(deps): update busybox docker tag to v1.38.0
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-04 02:01:01 +00:00
Renovate Bot
d085d3120e
chore(deps): update golang docker tag to v1.26.4
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-03 02:01:01 +00:00
Renovate Bot
e7dcdba8aa
chore(deps): update dependency tailscale to v1.98.5
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-02 21:57:48 +00:00
Lumpiasty
1a8b065283
fix: preserve v prefix for tailscale version
ci/woodpecker/pr/pr-build Pipeline was successful
2026-06-02 23:46:51 +02:00
Lumpiasty
315fd630e3
enable IP forwarding via entrypoint (fixes IPv6 subnet routes)
...
ci/woodpecker/pr/pr-build Pipeline was successful
tailscaled does not reliably enable IPv6 forwarding inside a container
network namespace ('IPv6 forwarding is disabled'), so advertised IPv6
subnet routes silently fail. Add a tiny entrypoint.sh that sets
net.ipv4.ip_forward and net.ipv6.conf.all.forwarding (writable inside a
RouterOS container netns), then exec's tailscaled. Built in the builder
stage so it stays in the single /usr/local/bin COPY layer.
Verified: privileged run flips v6 forwarding 0->1 and exec's tailscaled
with CMD args intact.
2026-06-02 16:06:10 +02:00
Lumpiasty
1bc10bcb6e
include ipnbus so 'tailscale up' waits and prints login URL
...
Without ipnbus, 'tailscale up' fires config at the daemon and returns
immediately ('built with ts_omit_ipnbus; not waiting for completion')
without printing the auth URL or confirming success. Add it to the
allowlist so interactive 'up' behaves normally.
2026-06-02 15:54:52 +02:00
Renovate Bot
9788fe146b
chore(deps): update alpine docker tag to v3.23.4
ci/woodpecker/pr/pr-build Pipeline was successful
2026-05-29 14:29:59 +00:00
Lumpiasty
7a6efb52ec
include unixsocketidentity feature (fixes CLI access denied)
...
ci/woodpecker/push/release-tag Pipeline was successful
ci/woodpecker/tag/release Pipeline was successful
The --extra-small baseline omits unixsocketidentity, but without it the
localapi cannot verify a request came over the trusted unix socket, so
PermitRead/PermitWrite are always false and every CLI call (status, up,
set, ...) returns 'access denied' (tailscale/tailscale#17873 ). Add it to
the opt-in allowlist. Negligible size cost (~3.55 MB unchanged); the CLI
is non-functional without it.
2026-05-29 04:33:02 +02:00
Lumpiasty
f7ddd164b3
drop cachenetmap feature, expand omission rationale
...
cachenetmap only persists the netmap to disk for cold-start-during-
control-outage; the in-memory map (the common case) is unaffected. Its
cost is a flash write on every netmap delta, which is frequent on active
tailnets — the opposite of this image's flash-conservation goal. Remove
it from the allowlist. Also expand the clientupdate/cachenetmap comments
to document why they're deliberately omitted, and fix the stale volume/
statedir comments that referenced the now-removed on-disk netmap cache.
2026-05-29 04:23:51 +02:00
Lumpiasty
082703a6b8
fix overlayfs layer duplication doubling extracted size
...
Creating the tailscale argv[0] symlinks with RUN in the final scratch
stage forced overlayfs to copy-up the whole /usr/local/bin directory,
duplicating the ~3 MB binary into a second layer. RouterOS extracts
overlay layers separately, so the on-disk rootfs measured ~7 MB instead
of ~3.4 MB. Assemble /usr/local/bin in the builder stage and bring it in
with a single COPY layer. Verified on RouterOS 7.21.2: du -sx / now ~3.4 MB.
2026-05-29 04:23:41 +02:00
Lumpiasty
7bf9b2da4f
add releases
ci/woodpecker/push/release-tag Pipeline was successful
ci/woodpecker/tag/release Pipeline was successful
2026-05-29 00:54:56 +02:00
Lumpiasty
d5a32d13dd
don't use floating tags
ci/woodpecker/cron/renovate Pipeline was successful
2026-05-28 23:46:17 +02:00
Lumpiasty
dca233f9f2
add renovate cronjob
ci/woodpecker/cron/renovate Pipeline was canceled
2026-05-28 23:37:02 +02:00
Lumpiasty
d912a450bf
Initial commit
2026-05-28 23:03:21 +02:00
Renovate
Lumpiasty
Renovate Bot