v1.40.0-sunos
·
4131 commits
to sunos-1.90
since this release
Continuous Integration
- add more lints (tailscale#7909) #7909 (Andrew Dunham)
Commits
- 6d3490f: VERSION.txt: this is 1.39 (Denton Gentry) #7564
- 9ebab96: version/mkversion: don't break on tagged go.mod entries (David Anderson) #7566
- remove per-interface stats from Get #7565 (Mihai Parparita)
- df3996c: tool/gocross: bootstrap correctly on an older toolchain (David Anderson) #7395
- 9526858: control/controlclient: fix accidental backoff reset (Kurnia D Win) #7570
- 1f95bfe: tool/gocross: adjust Xcode flags to match new Xcode env (David Anderson) #7448
- 0498d5e: tool/gocross: delete bootstrap tarball downloads after use (David Anderson) #7579
- do not start logtail in tests #7580 (Maisem Ali)
- add test for Funnel connections #7519 (Maisem Ali)
- 9534783: tailscale/cmd: Warn for up --force-reauth over SSH without accepting the risk (tailscale#7575) (James 'zofrex' Sanderson) #7575
- 95494a1: .github: use unique names for jobs (Maisem Ali) #7586
- 82e067e: build_dist.sh: make cross-compilation friendly (Nahum Shalman) #7583
- 927e2e3: .github: Bump actions/setup-go from 3 to 4 (dependabot[bot]) #7612
- 60a028a: .github: Bump peter-evans/create-pull-request from 4.1.4 to 4.2.4 (dependabot[bot]) #7611
- log client pubkeys on derp mesh probe failures #7614 (Anton Tolchanov)
- 50d211d: cmd/derpprobe: allow running all probes at the same time (Anton Tolchanov) #7614
- add optional debug logging for prober clients #7614 (Anton Tolchanov)
- e1fb687: cmd/tailscale/cli: fix inconsistency between serve text and example command (Mihai Parparita) #7593
- ccace1f: ssh/tailssh: fix privilege dropping on FreeBSD; add tests (Andrew Dunham) #7615
- ebc630c: net/interfaces: also allow link-local for AzureAppServices. (Denton Gentry) #7604
- df02bb0: tool/gocross: fail if the toolchain revision isn't findable (David Anderson) #7618
- e7a78bc: tool/gocross: support running from outside the repo dir (David Anderson) #7618
- d2dec13: net/sockstats: export cellular-only clientmetrics (Mihai Parparita) #7624
- f11c270: go.toolchain.rev: bump Go toolchain (Brad Fitzpatrick) #7628
- c9a4dbe: tool/gocross: correctly embed the git commit into gocross (David Anderson) #7629
- 39b2895: ssh/tailssh: make uid an int instead of uint64 (Andrew Dunham) #7630
- what?! a llama?! he's supposed to be dead! (tailscale#7623) #7623 (Sam Linville)
- add recorders field to SSHRule struct #7636 (Charlotte Brandhorst-Satzkorn)
- move recorders field from SSHRule to SSHAction #7639 (Charlotte Brandhorst-Satzkorn)
- 60cd4ac: cmd/tailscale/cli: move tskey-wrap functionality under lock sign (Tom DNetto) #7622
- 916aa78: ssh/tailssh: stream SSH recordings to configured recorders (Maisem Ali) #7640
- cc38060: scripts/installer.sh: Add Ubuntu Lunar Lobster 23.04. (Denton Gentry) #7641
- 7a97e64: ssh/tailssh: add more metadata to recording header (Maisem Ali) #7643
- d92047c: ssh/tailssh: allow recorders to be configured on the first or final action (Maisem Ali) #7644
- only record latency for successful probes #7632 (Anton Tolchanov)
- 731688e: ipn/localapi: add endpoint for adding debug log entries (Mihai Parparita) #7642
- use logtail to log and upload sockstat logs #7654 (Will Norris)
- c350cd1: ssh/tailssh: use background context for uploading recordings (Maisem Ali) #7647
- 9de8287: ssh/tailssh: lock OS thread during incubator (Andrew Dunham) #7660
- 13377e6: ssh/tailssh: always assert our final uid/gid (Andrew Dunham) #7659
- pass log IDs as the proper type rather than strings #7661 (Will Norris)
- 9d8b7a7: ipn/store/kubestore: handle "/" in ipn.StateKeys (Maisem Ali) #7663
- 8765568: ssh/tailssh: add docs to CastHeader fields (Maisem Ali) #7667
- 8a24648: ssh/tailssh: enable recording of non-pty sessions (Maisem Ali) #7667
- df89b7d: cmd/k8s-operator: disable HTTP/2 for the auth proxy (Maisem Ali) #7664
- 583e86b: ssh/tailssh: handle session recording when running in userspace mode (Maisem Ali) #7670
- add Node.SelfNodeV4MasqAddrForThisPeer #7437 (Maisem Ali)
- 535fad1: net/tstun: rename filterIn/filterOut methods to be more descriptive (Maisem Ali) #7437
- bb31fd7: net/tstun: add inital support for NAT v4 (Maisem Ali) #7437
- f6ea686: tstest/integration: add ping test w/ masquerades (Maisem Ali) #7437
- 0bf8c8e: net/tstun: use p.Buffer() in more places (Maisem Ali) #7437
- 0e203e4: net/packet: add checksum update tests (Maisem Ali) #7437
- ec90522: ipn/ipnlocal: also store ACME keys in the certStore (Maisem Ali) #7669
- 8a11f76: ipn/ipnlocal: fix cert storage in Kubernetes (Maisem Ali) #7669
- 9e81db5: ipn/ipnlocal: use atomicfile.WriteFile in certFileStore (Maisem Ali) #7669
- 4a89642: log/sockstatlog: make shutdown close idle connections (Maisem Ali) #7674
- 4cb1bfe: net/netcheck: improve determinism in hairpinning test (Andrew Dunham) #7682
- use pkg server to determine supported deb/rpm distros #7127 (Anton Tolchanov)
- 33b3596: net/dns: don't send on closed channel in resolvedManager (Andrew Dunham) #7683
- ca19cf1: log/sockstatlog: add resource cleanup test (Maisem Ali) #7675
- split out DialContext into a func #7675 (Maisem Ali)
- do not upload logs in tests #7675 (Maisem Ali)
- d2fd101: net/tstun: only log natConfig on changes (Maisem Ali) #7688
- support TS_AUTH_KEY variant too #7689 (Maisem Ali)
- 09d0b63: ssh/tailssh: add session recording test for non-pty sessions (Maisem Ali) #7690
- 74eb99a: derp, derphttp, magicsock: send new unknown peer frame when destination is unknown (tailscale#7552) (valscale) #7552
- d5abdd9: scripts/installer: add VMWare PhotonOS. (Denton Gentry) #7691
- 5ba57e4: ssh/tailssh: add tests for recording failure (Maisem Ali) #7693
- ed10a17: scripts/installer.sh: check Photon OS version with pkg server. (Denton Gentry) #7694
- 7908b6d: ipn/ipnlocal: [serve] Trim mountPoint prefix from proxy path (tailscale#7334) (shayne) #7334
- 3177cca: ipn/ipnlocal: [serve/funnel] use actual SrcAddr as X-Forwarded-For (tailscale#7600) (shayne) #7600
- change references from alpha to beta (tailscale#7613) #7613 (shayne)
- 2a933c1: cmd/tailscale: extend hostname validation (tailscale#7678) (Anton Tolchanov) #7678
- 920ec69: tsnet,wgenegine/netstack: add test and fix resource leaks (Maisem Ali) #7699
- allow toggling sockstat logs via c2n component logging #7704 (Will Norris)
- 3ba9f8d: util/codegen: add -copyright to control presence of copyright headers (Josh Bleecher Snyder) #7705
- update win/apple licenses #7676 (License Updater)
- update win/apple licenses #7710 (License Updater)
- 27e37cf: go.mod, net/tstun, wgengine/magicsock: update wireguard-go (tailscale#7712) (Jordan Whited) #7712
- cb960d6: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #7713
- e04acab: ssh/tailssh: fix race in errors returned when starting recorder (Maisem Ali) #7718
- c628132: wgengine/netstack: do not send packets to netstack after close (James Tucker) #7720
- a31e43f: go.mod: bump gvisor to 20230320 for dispatcher locking (James Tucker) #7716
- 8c2b755: tool/gocross: use grep -E over egrep to avoid warning (James Tucker) #7717
- update tailscale{,d} licenses #7714 (License Updater)
- c98652c: doctor/permissions: add new check to print process permissions (Andrew Dunham) #7724
- 2522b06: tempfork/device: add a temp fork of golang.zx2c4.com/wireguard/device (Maisem Ali) #7725
- d1d5d52: net/tstun/table: add initial RoutingTable implementation (Maisem Ali) #7727
- 985535a: net/tstun,wgengine/*: add support for NAT to routes (Maisem Ali) #7727
- 62a1e9a: log/sockstatlog: add delay before writing logs to disk (Will Norris) #7723
- 38e4d30: net/tshttpproxy: don't proxy through ourselves (Andrew Dunham) #7462
- add labels for netlog and sockstatlog packages #7733 (Will Norris)
- update win/apple licenses #7731 (License Updater)
- update win/apple licenses #7736 (License Updater)
- e0d291a: ipn/store: add support for stores to hook into a custom dialer (Maisem Ali) #7735
- 3b39ca9: ipn/ipnlocal: update comment in SetComponentDebugLogging (Andrew Dunham) #7738
- 8ed4fd1: envknob/logknob: add package for configurable logging (Andrew Dunham) #7574
- 40fa2a4: envknob,net/tstun,wgengine: use TS_DEBUG_MTU consistently (James Tucker) #7739
- 0258208: cmd/tsconnect: allow root directory to be passed in (Mihai Parparita) #7742
- reject overwriting irregular files #7749 (James Tucker)
- 38bbb30: .github/workflows: remove tsconnect-pkg-publish.yml (Mihai Parparita) #7751
- 1bf65e4: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #7722
- 59879e5: cmd/tailscale/cli: make serve and funnel visible in list (tailscale#7737) (shayne) #7737
- 483109b: client/tailscale: Fix NPE caused by erroneous close in error case (Tom DNetto) #7773
- 8d3acc9: util/sysresources, magicsock: scale DERP buffer based on system memory (Andrew Dunham) #7776
- e3cb8cc: ipn/ipnlocal: automatically upload sockstats logs when the period ends (Mihai Parparita) #7778
- 90fd04c: ipn/ipnlocal, util/winutil/policy: modify Windows profile migration to load legacy prefs from within tailscaled (Aaron Klotz) #7734
- add sockstat logger to stable builds #7779 (Will Norris)
- prefer allow/denylist terminology #7784 (Will Norris)
- 4d1b3bc: net/art: implement the stride table building block of ART (David Anderson) #7782
- use /tmp for socket path on macOS #7786 (James Tucker)
- 45138fc: go.toolchain.rev: update for go 1.20.3 (David Anderson) #7788
- f475e55: net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (tailscale#7791) (Jordan Whited) #7791
- 7bfb774: derp,magicsock: add debug envknobs for HTTP and derp server name (tailscale#7744) (valscale) #7744
- ba4e58f: cmd/tailscale/cli: do not allow turning Funnel on while shields-up (tailscale#7770) (shayne) #7770
- 765d325: go.mod: bump wireguard-go (tailscale#7792) (Jordan Whited) #7792
- 3d29da1: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #7794
- 2c0bda6: ssh/tailssh: make Tailscale SSH work on gokrazy (Brad Fitzpatrick) #7796
- d42d570: ssh/tailssh: handle output matching better in tests (tailscale#7799) (Maisem Ali) #7799
- 81fd00a: cmd/tailscale/cli: [serve] add support for proxy paths (tailscale#7800) (shayne) #7800
- c0e0a54: cmd/tailscale: show reauth etc. links even if no login name (tailscale#7803) (phirework) #7803
- f49b9f7: util/clientmetric: allow client metric values to be provided by a function (Mihai Parparita) #7805
- update android licenses #7795 (License Updater)
- update tailscale{,d} licenses #7793 (License Updater)
- update win/apple licenses #7787 (License Updater)
- 6a627e5: net, wgengine/capture: encode NAT addresses in pcap stream (Tom DNetto) #7740
- add client metrics for radio power state #7777 (Will Norris)
- 22680a1: net/sockstats: return early if no radio period length (Will Norris) #7819
- e978299: net/sockstats: disable deltas for the cell radio power state metric (Mihai Parparita) #7820
- 6cfcb3c: wgengine/magicsock: fix synchronization of endpoint disco fields (James Tucker) #7825
- c573bef: tailcfg,wgengine: add initial support for WireGuard only peers (Charlotte Brandhorst-Satzkorn) #7821
- fb18af5: wgengine/netstack: fix data-race on startup (James Tucker) #7834
- a257b2f: wgengine/magicsock: add immutability documentation to endpointDisco (James Tucker) #7833
- e1b71c8: wgengine/magicsock: remove unused fields on discoInfo (James Tucker) #7832
- e09c434: wgengine/magicsock: remove locking sync requirements on conn disco keys (James Tucker) #7831
- f571536: go.mod: bump wireguard-go (tailscale#7836) (Jordan Whited) #7836
- 1bec2cb: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #7838
- 03b2c44: ipn/ipnlocal: more explicitly say if sockstats are not available (Mihai Parparita) #7842
- cef0a47: ipn/ipnlocal: check that sockstatLogger is available in c2n endpoint (Mihai Parparita) #7843
- update android licenses #7840 (License Updater)
- expose native Prometheus metrics in /debug/varz #7767 (Anton Tolchanov)
- migrate to Prometheus metric library #7767 (Anton Tolchanov)
- move varz handler(s) into separate modules #7767 (Anton Tolchanov)
- 7c95734: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #7846
- update win/apple licenses #7839 (License Updater)
- update tailscale{,d} licenses #7837 (License Updater)
- bdc7a61: tool/gocross: add ts_macext build tag for Xcode builds (Mihai Parparita) #7849
- 9e50da3: client/tailscale: dial LocalAPI at 127.0.0.1 on macOS (Brad Fitzpatrick) #7852
- bb34589: log/sockstatlog: limit sockstat logs to 5 MB (Will Norris) #7853
- 782ccb5: .github/workflows: run one set of tests with the tailscale_go build tag (Mihai Parparita) #7854
- edb02b6: net/sockstats: pass in logger to sockstats.WithSockStats (Mihai Parparita) #7855
- a7c910e: net/art: implement the Table type, a multi-level art route table. (David Anderson) #7806
- a5fd51e: net/art: disable the IPv6 100k routes benchmark. (David Anderson) #7806
- make SelfNodeV4MasqAddrForThisPeer a pointer #7857 (Maisem Ali)
- 228d0c6: net/netcheck: use dnscache.Resolver when resolving DERP IPs (Andrew Dunham) #7865
- c889254: net/art: skip tests on CI for now (Brad Fitzpatrick) #7867
- 6866aae: wgengine/magicsock: factor out receiveIPv4 & receiveIPv6 common code (Brad Fitzpatrick) #7864
- 4ecc7fd: api.md: update example auth key value (Will Norris) #7871
- 8dec1a8: .github/workflows: reenable Windows CI, disable broken tests (James Tucker) #7870
- f352f8a: util/set: move Slice type from corp to oss (Andrew Dunham) #7879
- b7f51a1: .github/workflows: add artifact caching and remove double build on race (James Tucker) #7869
- disable TestLoopbackSOCKS5 on Windows #7885 (James Tucker)
- 20f17d6: wgengine/magicsock: reenable magicsock tests on Windows (James Tucker) #7883
- 83c41f3: net/netcheck: remove unused method from interface (Brad Fitzpatrick) #7887
- 29f7df9: wgengine/magicsock, etc: remove mostly unused WriteTo methods (Brad Fitzpatrick) #7888
- 10f1c90: wgengine/magicsock, types/nettype, etc: finish ReadFromUDPAddrPort netip migration (Brad Fitzpatrick) #7890
- 4b49ca4: wgengine/magicsock: update comments on what implements conn.Bind (Brad Fitzpatrick) #7892
- 80b138f: wgengine/magicsock: keep advertising endpoints after we stop discovering them (Andrew Dunham) #7877
- c5150ea: net/netcheck: reenable TestNodeAddrResolve on Windows (James Tucker) #7878
- 162488a: net/interfaces: cache "home" router lookup on big Linux routers (Brad Fitzpatrick) #7900
- d5a870b: wgengine/monitor: add --monitor-duration flag to opt-in TestMonitorMode (Brad Fitzpatrick) #7903
- 28cb122: .github: Bump actions/setup-go from 3 to 4 (dependabot[bot]) #7898
- 9a655a1: net/dnsfallback: more explicitly pass through logf function (Mihai Parparita) #7902
- ff1b35e: net/connstats: exclude traffic with internal Tailscale service (tailscale#7904) (Joe Tsai) #7904
- add golangci-lint, fix issues (tailscale#7905) #7905 (Andrew Dunham)
- c7cea82: net/netns: don't log errors when we can't get the default route on Darwin (Mihai Parparita) #7912
- update tailscale{,d} licenses #7907 (License Updater)
- 7c386ca: net/sockstats: fix calculation of radio power usage (Will Norris) #7927
- d0906cd: net/sockstats: expose debug info (Mihai Parparita) #7928
- 85de580: net/tsdial: do not use proxies when dialing out to PeerAPI (Maisem Ali) #7929
- c3ef6fb: ipn/ipnlocal: handle masquerade addresses in PeerAPI (Maisem Ali) #7929
- update win/apple licenses #7931 (License Updater)
- c328770: .github: Bump peter-evans/create-pull-request from 4.2.4 to 5.0.0 (dependabot[bot]) #7835
- 5acc7c4: .github: Bump ruby/action-slack from 3.0.0 to 3.2.1 (dependabot[bot]) #7543
- relax TestWatchMultipleValues timing on Windows #7882 (James Tucker)
- enable test to run on Windows unpriviliged #7881 (James Tucker)
- 3ede3aa: ipn/localapi: also verify STUN queries work in 'debug derp' (Andrew Dunham) #7926
- move network monitoring from wgengine/monitor to net/netmon #7917 (Mihai Parparita)
- 7f17e04: log/sockstatlog: bump logInterval to 10 seconds (Will Norris) #7936
- avoid repeated default interface lookups #7908 (Mihai Parparita)
- c791e64: scripts/installer: add Deepin, RisiOS. (Denton Gentry) #7932
- 04a3118: net/tstun: add tests for captureHook (Andrew Dunham) #7939
- add CanPort80 field to DERPNode #7935 (Andrew Dunham)
- e3b2250: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #7906
- add SSHRecorderFailureAction and SSHRecordingFailureNotifyRequest #7933 (Maisem Ali)
- 7778d70: ssh/tailssh: handle dialing multiple recorders and failing open (Maisem Ali) #7933
- 90ba26c: net/netcheck: fix crash when IPv6 kinda but not really works (Brad Fitzpatrick) #7950
- ce11c82: ipn/store/awsstore: persist state with intelligent tiering (Marwan Sulaiman) #7955
- f58751e: net/packet: add NAT support for DCCP and GRE (Maisem Ali) #7960
- update win/apple licenses #7959 (License Updater)
- update android licenses #7944 (License Updater)
- 018a382: cmd/tailscale/cli: [serve] fix MinGW path conversion (tailscale#7964) (shayne) #7964
- 1b8a0df: ssh/tailssh: also handle recording upload failure during writes (Maisem Ali) #7969
- 4381930: .github/workflows: split tests and benchmarks for caching (James Tucker) #7974
- 095d3ed: ipn/ipnlocal: reenable profile tests on Windows (James Tucker) #7880
- 13de363: cmd/tailscale/cli: [up] add experimental oauth2 authkey support (Brad Fitzpatrick) #7983
- b2b5379: cmd/tailscale/cli: [up] change oauth authkey format (Brad Fitzpatrick) #7985
- a8f10c2: cmd/tailscale/cli: [up] reuse --advertise-tags for OAuth key generation (Maisem Ali) #7987
- 1e876a3: ipn/ipnlocal: fix fmt format arg type mismatch in log line (Brad Fitzpatrick) #7977
- 9bdaece: VERSION.txt: this is v1.40.0 (Denton Gentry)
- 233a647: illumos/solaris support rebased onto 1.40.0 (Nahum Shalman)