[Tailscale-native] update APKG v 2.1.1 (tailscale 1.38.1)

[father.mande]

Hi,

An Update is available for Tailscale : 1.38.1
[Changelog]

Tailscale v1.38.1
Update instructions →
ALL PLATFORMS
tailscale configure command to configure resources that you want to include in your tailnet
tailscale lock tskey-wrap to sign pre-approved auth keys for use with tailnet lock
tailscale debug derp command to help diagnose DERP-related difficulty
tailscale debug capture command to write packet capturing for debugging
The tailscale debug portmap command replaces tailscaled debug -portmap. This is now available on platforms without a tailscaled binary (like the macOS App Store).
tailscale serve command has been overhauled
tailscale serve funnel has been made into its own command, tailscale funnel
Several improvements to UPnP port mapping have been made that allow it to work with a broader set of home routers
LINUX
Certificates can be stored in Kubernetes secret storage
WINDOWS
MSI installers start the GUI without user interaction to allow remote upgrades
MACOS
Notification upon node key expiration (only on macOS 10.14 and later)
Tailscale SSH server component is available for macOS open source Tailscale + tailscaled CLI devices
IOS
Support for alternate control servers by setting the URL in Settings page of the admin console
ANDROID
Chromecast support while Tailscale is active
Note: v1.38.0 was never released.

Update can be done manually (like in : https://forum.asustor.com/viewtopic.php ... 686#p46156 (replace 1.36.2 by 1.38.1)
OR
update using APKG
... APKG update to v 2.1 with tailscale update to 1.38.1
... change internal update to avoid rare conflict between tailscale MagicDNS (if you use it) and configured (DHCP or static) DNS
... restore "original resolv.conf" if MagicDNS is used when you stop tailscale.
... minor bugs solved

[DOWNALOAD]
Please wait for AppCentral update proposal ...
or Download (before validation) here after :
https://father-mande.ovh/A/apkg/tailsca ... _arm64.apk
https://father-mande.ovh/A/apkg/tailsca ... .1_arm.apk
https://father-mande.ovh/A/apkg/tailsca ... x86-64.apk

Philippe.

[father.mande]

Hi,

I am not involved in Tailscale development (except as a user of tailnet) ... only in integration on Asustor NAS (x86_64, arm or arm64)
So if you want to be up to date on Tailscale, the best is the tailscale web site

My small participation is to :
integrate an APKG to provide environment compatible with Asustor NAS
... add start / stop shell (at boot or at any time)
... add configuration options (ex. permanent add to tailscale up)
... add missing iptables modules require by tailscale for a full usage
... test using NAS as a subnet router (works) and as site-to-site bridge using two Asustor NAS
add an internal update mechanism ... so to don't have to wait for new APKG ( https://forum.asustor.com/viewtopic.php ... 755#p46464 )
... ex. for urgent security update
... ex. to get access to new functionality when ready on tailscale site
this update can be :
... manual in a terminal
... managed by cron (to check and get new version) ... so nothing to do for the user
... AND you can choice between stable channel (default) and beta channel

For your remarks :
* serve function is updated frequently (so internal update get sense) ... even as usual it's importanbt to don't add encryption to existing (wireguard) encryption
* fumel is reserved to beta and need an invite ... so I don't test it and don't see impact on NAS at this time
* kubernets have (as I know) no real interest on NAS ... so update is concerned but NAS not sure ... so also at the moment, I don't run any test, BUT I run test with chroot (Ubuntu) in separate namespace to test if tailscale can be used without specific configuration
* Chromecast ??? no idea ... what is exactly the link between tailnet and chromecast ?

Regards.
NB thanks for posting, I have no idea if my APKG is used or not and have interest or not ... so perhaps all this work is just for the fun and nothing more
Philippe.