12 Commits

Include renames

Author	SHA1	Message	Date
Renovate Bot	e7dcdba8aa	chore(deps): update dependency tailscale to v1.98.5	2026-06-02 21:57:48 +00:00
Lumpiasty	1a8b065283	fix: preserve v prefix for tailscale version	2026-06-02 23:46:51 +02:00
Lumpiasty	315fd630e3	enable IP forwarding via entrypoint (fixes IPv6 subnet routes) ... tailscaled does not reliably enable IPv6 forwarding inside a container network namespace ('IPv6 forwarding is disabled'), so advertised IPv6 subnet routes silently fail. Add a tiny entrypoint.sh that sets net.ipv4.ip_forward and net.ipv6.conf.all.forwarding (writable inside a RouterOS container netns), then exec's tailscaled. Built in the builder stage so it stays in the single /usr/local/bin COPY layer. Verified: privileged run flips v6 forwarding 0->1 and exec's tailscaled with CMD args intact.	2026-06-02 16:06:10 +02:00
Lumpiasty	1bc10bcb6e	include ipnbus so 'tailscale up' waits and prints login URL ... Without ipnbus, 'tailscale up' fires config at the daemon and returns immediately ('built with ts_omit_ipnbus; not waiting for completion') without printing the auth URL or confirming success. Add it to the allowlist so interactive 'up' behaves normally.	2026-06-02 15:54:52 +02:00
Renovate Bot	9788fe146b	chore(deps): update alpine docker tag to v3.23.4	2026-05-29 14:29:59 +00:00
Lumpiasty	7a6efb52ec	include unixsocketidentity feature (fixes CLI access denied) ... The --extra-small baseline omits unixsocketidentity, but without it the localapi cannot verify a request came over the trusted unix socket, so PermitRead/PermitWrite are always false and every CLI call (status, up, set, ...) returns 'access denied' (tailscale/tailscale#17873). Add it to the opt-in allowlist. Negligible size cost (~3.55 MB unchanged); the CLI is non-functional without it.	2026-05-29 04:33:02 +02:00
Lumpiasty	f7ddd164b3	drop cachenetmap feature, expand omission rationale ... cachenetmap only persists the netmap to disk for cold-start-during- control-outage; the in-memory map (the common case) is unaffected. Its cost is a flash write on every netmap delta, which is frequent on active tailnets — the opposite of this image's flash-conservation goal. Remove it from the allowlist. Also expand the clientupdate/cachenetmap comments to document why they're deliberately omitted, and fix the stale volume/ statedir comments that referenced the now-removed on-disk netmap cache.	2026-05-29 04:23:51 +02:00
Lumpiasty	082703a6b8	fix overlayfs layer duplication doubling extracted size ... Creating the tailscale argv[0] symlinks with RUN in the final scratch stage forced overlayfs to copy-up the whole /usr/local/bin directory, duplicating the ~3 MB binary into a second layer. RouterOS extracts overlay layers separately, so the on-disk rootfs measured ~7 MB instead of ~3.4 MB. Assemble /usr/local/bin in the builder stage and bring it in with a single COPY layer. Verified on RouterOS 7.21.2: du -sx / now ~3.4 MB.	2026-05-29 04:23:41 +02:00
Lumpiasty	7bf9b2da4f	add releases	2026-05-29 00:54:56 +02:00
Lumpiasty	d5a32d13dd	don't use floating tags	2026-05-28 23:46:17 +02:00
Lumpiasty	dca233f9f2	add renovate cronjob	2026-05-28 23:37:02 +02:00
Lumpiasty	d912a450bf	Initial commit	2026-05-28 23:03:21 +02:00