Changelog: https://github.com/tailscale/tailscale/releases/tag/v1.36.0 Also contains client-side mitigations for TS-2023-02. https://tailscale.com/security-bulletins/#ts-2023-002
40 lines
1.3 KiB
Nix
40 lines
1.3 KiB
Nix
{ lib, stdenv, buildGoModule, fetchFromGitHub, makeWrapper, iptables, iproute2, procps, shadow, getent }:
|
|
|
|
buildGoModule rec {
|
|
pname = "tailscale";
|
|
version = "1.36.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "tailscale";
|
|
repo = "tailscale";
|
|
rev = "v${version}";
|
|
sha256 = "sha256-hNyEABs/GdfOx6vLTVBgbOzkbFvEDYZ0y1y0a0mIsfA=";
|
|
};
|
|
vendorSha256 = "sha256-Jy3kjUA8qLhcw9XLw4Xo1zhD+IWZrDNM79TsbnKpx/g=";
|
|
|
|
nativeBuildInputs = lib.optionals stdenv.isLinux [ makeWrapper ];
|
|
|
|
CGO_ENABLED = 0;
|
|
|
|
subPackages = [ "cmd/tailscale" "cmd/tailscaled" ];
|
|
|
|
ldflags = [ "-X tailscale.com/version.Long=${version}" "-X tailscale.com/version.Short=${version}" ];
|
|
|
|
doCheck = false;
|
|
|
|
postInstall = lib.optionalString stdenv.isLinux ''
|
|
wrapProgram $out/bin/tailscaled --prefix PATH : ${lib.makeBinPath [ iproute2 iptables getent shadow ]}
|
|
wrapProgram $out/bin/tailscale --suffix PATH : ${lib.makeBinPath [ procps ]}
|
|
|
|
sed -i -e "s#/usr/sbin#$out/bin#" -e "/^EnvironmentFile/d" ./cmd/tailscaled/tailscaled.service
|
|
install -D -m0444 -t $out/lib/systemd/system ./cmd/tailscaled/tailscaled.service
|
|
'';
|
|
|
|
meta = with lib; {
|
|
homepage = "https://tailscale.com";
|
|
description = "The node agent for Tailscale, a mesh VPN built on WireGuard";
|
|
license = licenses.bsd3;
|
|
maintainers = with maintainers; [ danderson mbaillie twitchyliquid64 jk ];
|
|
};
|
|
}
|