tailscale
| Version | 2026.144.1443 |
| Repo | superproject |
Tailscale mesh VPN daemon baked in as an enabled systemd service.
Installs the tailscale package (the tailscale CLI plus the
tailscaled daemon) and enables tailscaled.service at build
time, so the image boots as its own tailnet node. Bringing the
mesh up (tailscale up --authkey=...) is a runtime concern, so
every check here is a build-time fact: the binaries land on PATH,
the CLI runs offline, and the unit is enabled.
Packages
Section titled “Packages”Installed on every distro:
tailscale
Acceptance plan
Section titled “Acceptance plan”This candy’s plan: — the runnable spec charly check executes against a live deployment. check: steps are idempotent probes; run: steps change state.
| Intent | Step |
|---|---|
run |
command=systemctl enable tailscaled.service 2>/dev/null || true |
check |
the tailscale CLI is installed and executable at /usr/bin/tailscale |
check |
the tailscale CLI reports its version without contacting the daemon |
check |
the tailscaled daemon binary is installed at /usr/sbin/tailscaled |
check |
the tailscaled systemd unit is enabled so the node joins its tailnet at boot |
check |
command=test -x /usr/bin/tailscale && test -x /usr/sbin/tailscaled |
check |
package=tailscale |