265 lines
8.6 KiB
Bash
265 lines
8.6 KiB
Bash
#!/bin/bash
|
|
# This script allows you to easily add a container from ich777 or almost
|
|
# any s6-overlay image to your Tailnet.
|
|
#
|
|
# For more information see:
|
|
# https://github.com/ich777/tailscale-container-script/blob/master/README.md
|
|
#
|
|
# tailscale.sh version: 2024-09-25
|
|
|
|
error_handler() {
|
|
echo
|
|
echo "======================="
|
|
exit 1
|
|
}
|
|
|
|
echo "======================="
|
|
echo
|
|
|
|
# Import variables from s6-overlay images
|
|
if [ -x "/usr/bin/with-contenv" ]; then
|
|
echo "just-containers s6-overlay image found, importing variables..."
|
|
ENV_VARS="$(/usr/bin/with-contenv bash -c 'env')"
|
|
|
|
while IFS='=' read -r KEY VALUE; do
|
|
export "${KEY}"="${VALUE}"
|
|
done <<< "${ENV_VARS}"
|
|
fi
|
|
|
|
if [[ ! -f /usr/bin/tailscale || ! -f /usr/bin/tailscaled ]]; then
|
|
if [ ! -z "${TAILSCALE_EXIT_NODE_IP}" ]; then
|
|
if [ ! -c /dev/net/tun ]; then
|
|
echo "ERROR: Device /dev/net/tun not found!"
|
|
echo " Make sure to pass through /dev/net/tun to the container."
|
|
error_handler
|
|
fi
|
|
APT_IPTABLES="iptables "
|
|
fi
|
|
|
|
echo "Detecting Package Manager..."
|
|
if which apt-get >/dev/null 2>&1; then
|
|
echo "Detected Advanced Package Tool!"
|
|
PACKAGES_UPDATE="apt-get update"
|
|
PACKAGES_INSTALL="apt-get -y install --no-install-recommends"
|
|
elif which apk >/dev/null 2>&1; then
|
|
echo "Detected Alpine Package Keeper!"
|
|
PACKAGES_UPDATE="apk update"
|
|
PACKAGES_INSTALL="apk add"
|
|
else
|
|
echo "ERROR: Detection failed!"
|
|
error_handler
|
|
fi
|
|
|
|
echo "Installing dependencies..."
|
|
echo "Please wait..."
|
|
${PACKAGES_UPDATE} >/dev/null 2>&1
|
|
${PACKAGES_INSTALL} jq wget ${APT_IPTABLES}>/dev/null 2>&1
|
|
echo "Done"
|
|
|
|
if [ "${APT_IPTABLES}" == "iptables " ]; then
|
|
if ! iptables -L >/dev/null 2>&1; then
|
|
echo "ERROR: Cap: NET_ADMIN not available!"
|
|
echo " Make sure to add --cap-add=NET_ADMIN to the Extra Parameters"
|
|
error_handler
|
|
fi
|
|
fi
|
|
|
|
echo "Tailscale not found, downloading..."
|
|
echo "Please wait..."
|
|
|
|
TAILSCALE_VERSION=$(wget -qO- 'https://pkgs.tailscale.com/stable/?mode=json' | jq -r '.TarballsVersion')
|
|
|
|
if [ -z "${TAILSCALE_VERSION}" ]; then
|
|
echo "ERROR: Can't get Tailscale JSON"
|
|
error_handler
|
|
fi
|
|
|
|
if [ ! -d /tmp/tailscale ]; then
|
|
mkdir -p /tmp/tailscale
|
|
fi
|
|
|
|
if wget -q -nc --show-progress --progress=bar:force:noscroll -O /tmp/tailscale/tailscale.tgz "https://pkgs.tailscale.com/stable/tailscale_${TAILSCALE_VERSION}_amd64.tgz" ; then
|
|
echo "Download from Tailscale version ${TAILSCALE_VERSION} successful!"
|
|
else
|
|
echo "ERROR: Download from Tailscale version ${TAILSCALE_VERSION} failed!"
|
|
rm -rf /tmp/tailscale
|
|
error_handler
|
|
fi
|
|
|
|
cd /tmp/tailscale
|
|
tar -xf /tmp/tailscale/tailscale.tgz
|
|
cp /tmp/tailscale/tailscale_${TAILSCALE_VERSION}_amd64/tailscale /usr/bin/tailscale
|
|
cp /tmp/tailscale/tailscale_${TAILSCALE_VERSION}_amd64/tailscaled /usr/bin/tailscaled
|
|
rm -rf /tmp/tailscale
|
|
|
|
echo "Installation Done"
|
|
|
|
elif [ "${TAILSCALE_UPDATE}" == "true" ]; then
|
|
echo "Version Check enabled, please wait..."
|
|
CUR_V="$(tailscale version --json | jq -r '.short')"
|
|
LAT_V="$(timeout 5 tailscale version --upstream --json | jq -r '.upstream')"
|
|
if [ -z "${LAT_V}" ]; then
|
|
echo "ERROR: Can't grab latest version from Tailscale, continuing..."
|
|
else
|
|
if [ "${CUR_V}" == "${LAT_V}" ]; then
|
|
echo "Tailscale version ${CUR_V} up-to-date, continuing..."
|
|
else
|
|
echo "Found new Tailscale version ${LAT_V}, updating, please wait..."
|
|
if [ ! -d /tmp/tailscale ]; then
|
|
mkdir -p /tmp/tailscale
|
|
fi
|
|
|
|
unset EXIT_STATUS
|
|
if wget -q -nc --show-progress --progress=bar:force:noscroll -O /tmp/tailscale/tailscale.tgz "https://pkgs.tailscale.com/stable/tailscale_${LAT_V}_amd64.tgz" ; then
|
|
echo "Download from Tailscale version ${LAT_V} successful!"
|
|
else
|
|
echo "ERROR: Download from Tailscale version ${LAT_V} failed!"
|
|
echo " Falling back to installed version ${CUR_V}"
|
|
rm -rf /tmp/tailscale
|
|
EXIT_STATUS="failed"
|
|
fi
|
|
if [ "${EXIT_STATUS}" != "failed" ]; then
|
|
cd /tmp/tailscale
|
|
tar -xf /tmp/tailscale/tailscale.tgz
|
|
cp /tmp/tailscale/tailscale_${TAILSCALE_VERSION}_amd64/tailscale /usr/bin/tailscale
|
|
cp /tmp/tailscale/tailscale_${TAILSCALE_VERSION}_amd64/tailscaled /usr/bin/tailscaled
|
|
rm -rf /tmp/tailscale
|
|
echo "Update Done"
|
|
fi
|
|
fi
|
|
fi
|
|
else
|
|
echo "Tailscale found, continuing..."
|
|
fi
|
|
|
|
unset TSD_PARAMS
|
|
unset TS_PARAMS
|
|
|
|
if [ -v SERVER_DIR ]; then
|
|
TSD_STATE_DIR=${SERVER_DIR}/.tailscale_state
|
|
echo "Settings Tailscale state dir to: ${TSD_STATE_DIR}"
|
|
elif [ -v DATA_DIR ]; then
|
|
TSD_STATE_DIR=${DATA_DIR}/.tailscale_state
|
|
echo "Settings Tailscale state dir to: ${TSD_STATE_DIR}"
|
|
else
|
|
if [ -z "${TAILSCALE_STATE_DIR}" ]; then
|
|
TAILSCALE_STATE_DIR="/config/.tailscale_state"
|
|
fi
|
|
TSD_STATE_DIR=${TAILSCALE_STATE_DIR}
|
|
echo "Settings Tailscale state dir to: ${TSD_STATE_DIR}"
|
|
fi
|
|
|
|
if [ ! -d ${TSD_STATE_DIR} ]; then
|
|
mkdir -p ${TSD_STATE_DIR}
|
|
fi
|
|
|
|
if [ ! -z "${TAILSCALE_EXIT_NODE_IP}" ]; then
|
|
echo "Using ${TAILSCALE_EXIT_NODE_IP} as Exit Node! See https://tailscale.com/kb/1103/exit-nodes"
|
|
TS_PARAMS=" --exit-node=${TAILSCALE_EXIT_NODE_IP}"
|
|
if [ ! -z "${TAILSCALE_ALLOW_LAN_ACCESS}" ]; then
|
|
echo "Enabling local LAN Access to the container!"
|
|
TS_PARAMS+=" --exit-node-allow-lan-access"
|
|
fi
|
|
else
|
|
if [ -z "${TAILSCALE_USERSPACE_NETWORKING}" ] || [ "${TAILSCALE_USERSPACE_NETWORKING}" == "true" ]; then
|
|
TSD_PARAMS+="-tun=userspace-networking "
|
|
else
|
|
if [ ! -c /dev/net/tun ]; then
|
|
echo "ERROR: Device /dev/net/tun not found!"
|
|
echo " Make sure to pass through /dev/net/tun to the container and add the"
|
|
echo " parameter --cap-add=NET_ADMIN to the Extra Parameters!"
|
|
error_handler
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ "${TAILSCALE_USE_SSH}" == "true" ]; then
|
|
echo "Enabling SSH. See https://tailscale.com/kb/1193/tailscale-ssh"
|
|
TS_PARAMS+=" --ssh"
|
|
fi
|
|
|
|
if [ "${TAILSCALE_LOG}" != "false" ]; then
|
|
TSD_PARAMS+=">>/var/log/tailscaled 2>&1 "
|
|
TSD_MSG=" with log file /var/log/tailscaled"
|
|
else
|
|
TSD_PARAMS+=">/dev/null 2>&1 "
|
|
fi
|
|
|
|
if [[ ! -z "${TAILSCALE_AUTHKEY}" && -f ${TSD_STATE_DIR}/.initialized ]]; then
|
|
echo
|
|
echo "-> It is now save to remove the variable TAILSCALE_AUTHKEY from your template <-"
|
|
echo
|
|
unset TAILSCALE_AUTHKEY
|
|
fi
|
|
|
|
if [ ! -z "${TAILSCALE_AUTHKEY}" ]; then
|
|
TS_AUTH="--authkey=${TAILSCALE_AUTHKEY} "
|
|
fi
|
|
|
|
if [ ! -z "${TAILSCALE_HOSTNAME}" ]; then
|
|
echo "Setting host name to ${TAILSCALE_HOSTNAME}"
|
|
TS_PARAMS+=" --hostname=${TAILSCALE_HOSTNAME/ /}"
|
|
fi
|
|
|
|
if [ "${TAILSCALE_EXIT_NODE}" == "true" ]; then
|
|
echo "Configuring container as Exit Node! See https://tailscale.com/kb/1103/exit-nodes"
|
|
TS_PARAMS+=" --advertise-exit-node"
|
|
fi
|
|
|
|
if [ ! -z "${TAILSCALED_PARAMS}" ]; then
|
|
TSD_PARAMS="${TAILSCALED_PARAMS} ${TSD_PARAMS}"
|
|
fi
|
|
|
|
if [ ! -z "${TAILSCALE_PARAMS}" ]; then
|
|
TS_PARAMS="${TAILSCALE_PARAMS}${TS_PARAMS}"
|
|
fi
|
|
|
|
echo "Starting tailscaled${TSD_MSG}"
|
|
eval tailscaled -statedir=${TSD_STATE_DIR} ${TSD_PARAMS}&
|
|
|
|
echo "Starting tailscale"
|
|
eval tailscale up ${TS_AUTH}${TS_PARAMS}
|
|
EXIT_STATUS="$?"
|
|
|
|
if [ "${EXIT_STATUS}" == "0" ]; then
|
|
echo "Connecting to Tailscale successful!"
|
|
if [ ! -f ${TSD_STATE_DIR}/.initialized ]; then
|
|
echo "Please don't remove this file!" > ${TSD_STATE_DIR}/.initialized
|
|
fi
|
|
else
|
|
echo "ERROR: Connecting to Tailscale not successful!"
|
|
if [ -f /var/log/tailscaled ]; then
|
|
echo "Please check the logs:"
|
|
tail -20 /var/log/tailscaled
|
|
echo "======================="
|
|
fi
|
|
error_handler
|
|
fi
|
|
|
|
if [[ ! -z "${TAILSCALE_SERVE_PORT}" && "$(tailscale status --json | jq -r '.CurrentTailnet.MagicDNSEnabled')" == "false" ]] ; then
|
|
echo "ERROR: Enable HTTPS on your Tailscale account to use Tailscale Serve/Funnel."
|
|
echo "See: https://tailscale.com/kb/1153/enabling-https"
|
|
error_handler
|
|
fi
|
|
|
|
if [ ! -z ${TAILSCALE_SERVE_PORT} ]; then
|
|
if [ ! -z "${TAILSCALE_SERVE_PATH}" ]; then
|
|
TAILSCALE_SERVE_PATH="=${TAILSCALE_SERVE_PATH}"
|
|
fi
|
|
if [ -z "${TAILSCALE_SERVE_MODE}" ]; then
|
|
TAILSCALE_SERVE_MODE="https"
|
|
fi
|
|
if [ -z "${TAILSCALE_SERVE_PROTOCOL_PORT}" ]; then
|
|
TAILSCALE_SERVE_PROTOCOL_PORT="=443"
|
|
fi
|
|
if [ "${TAILSCALE_FUNNEL}" == "true" ]; then
|
|
echo "Enabling Funnel! See https://tailscale.com/kb/1223/funnel"
|
|
eval tailscale funnel --bg --"${TAILSCALE_SERVE_MODE}"${TAILSCALE_SERVE_PROTOCOL_PORT}${TAILSCALE_SERVE_PATH} http://localhost:"${TAILSCALE_SERVE_PORT}${TAILSCALE_SERVE_LOCALPATH}"
|
|
else
|
|
echo "Enabling Serve! See https://tailscale.com/kb/1312/serve"
|
|
eval tailscale serve --bg --"${TAILSCALE_SERVE_MODE}"${TAILSCALE_SERVE_PROTOCOL_PORT}${TAILSCALE_SERVE_PATH} http://localhost:"${TAILSCALE_SERVE_PORT}${TAILSCALE_SERVE_LOCALPATH}"
|
|
fi
|
|
fi
|
|
|
|
echo
|
|
echo "=======================" |