v1.72.0-sunos

Builds

• deps: bump github.com/docker/docker (tailscale#12966) #12966 (dependabot[bot])

Commits

• 4ff276c: VERSION.txt: this is v1.71.0 (Aaron Klotz) #12844
• remove warning (tailscale#12841) #12841 (Cameron Stokes)
• set Hostinfo.PackageType for mkctr container builds #12843 (Brad Fitzpatrick)
• f77821f: derp/derphttp: determine whether a region connect was to non-ideal node (Brad Fitzpatrick) #12725
• swallow panics #12836 (Paul Scott)
• d3af544: client/tailscale: document ACLTestFailureSummary.User field (Brad Fitzpatrick) #12852
• 1608831: wgengine/router: use quad-100 as the nexthop on Windows (Nick Khyl) #12847
• 4850186: {tool,client}: bump node version (tailscale#12840) (Mario Minardi) #12840
• 54f58d1: ipn/ipnlocal: add comment explaining auto exit node migration (Adrian Dewhurst) #12821
• log cancelled requests as 499 #12861 (Paul Scott)
• 0f57b93: cmd/k8s-operator,tstest,go.{mod,sum}: remove fybrik.io/crdoc dependency (tailscale#12862) (Irbe Krumina) #12862
• 32ce187: Add extra environment variables in deployment template (tailscale#12858) (Lee Briggs) #12858
• e7bf6e7: cmd/tailscale: add --min-validity flag to the cert command (tailscale#12822) (Andrew Lytvynov) #12822
• 20562a4: cmd/viewer, types/views, util/codegen: add viewer support for custom container types (Nick Khyl) #12809
• bd54b61: types/opt: add (Value[T]).GetOr(def T) T method (Nick Khyl) #12865
• 1f94047: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #12880
• d500a92: util/slicesx: add HasPrefix, HasSuffix, CutPrefix, and CutSuffix functions (Nick Khyl) #12887
• 5d09649: types/lazy: add (*SyncValue[T]).SetForTest method (Nick Khyl) #12866
• update license notices #12886 (License Updater)
• 57856fc: ipn,wgengine/magicsock: allow setting static node endpoints via tailscaled configfile (tailscale#12882) (Irbe Krumina) #12882
• log all cancellations as 499s (tailscale#12894) #12894 (Paul Scott)
• 43375c6: types/lazy: re-init SyncValue during test cleanup if it wasn't set before SetForTest (Nick Khyl) #12905
• Add MiddlewareStack func to apply lists of Middleware (tailscale#12907) #12907 (Paul Scott)
• cf97cff: wgengine/netstack: simplify netaddrIPFromNetstackIP (Brad Fitzpatrick) #12922
• introduce captive-portal-detected Warnable (tailscale#12707) #12707 (Andrea Gottardo)
• 6840f47: net/dnsfallback: set CanPort80 in static DERPMap (tailscale#12929) (Andrea Gottardo) #12929
• 1bf82dd: util/osuser: run getent on non-Linux Unixes (Ross Williams) #12732
• c5623e0: go.{mod,sum},tstest/tools,k8s-operator,cmd/k8s-operator: autogenerate CRD API docs (tailscale#12884) (Irbe Krumina) #12884
• add QuietLogging option (tailscale#12838) #12838 (Paul Scott)
• a21bf10: cmd/k8s-operator,k8s-operator/sessionrecording,sessionrecording,ssh/tailssh: refactor session recording functionality (tailscale#12945) (Irbe Krumina) #12945
• 3088c61: go.mod: pull in latest github.com/tailscale/xnet (Percy Wegmann) #12951
• 19b0c8a: net/dns, health: raise health warning for failing forwarded DNS queries (tailscale#12888) (Jonathan Nobels) #12888
• 35a8fca: cmd/tailscale/cli: release portmap after netcheck (Andrew Dunham) #12956
• add some associated with scales #12953 (Brad Fitzpatrick)
• 2ab1d53: gokrazy/tsapp: add go.mod replacing two tailscale.com binaries with parent module (Brad Fitzpatrick) #12962
• 575feb4: util/osuser: turn wasm check into a const expression (Brad Fitzpatrick) #12930
• 34de96d: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #12949
• add a warning that this is not used to build our published images (tailscale#12955) #12955 (Irbe Krumina)
• eead255: build_docker.sh: update script comment (tailscale#12970) (Irbe Krumina) #12970
• 8a8ecac: net/dns, cmd/tailscaled: plumb system health tracker into dns cleanup (tailscale#12969) (Jonathan Nobels) #12969
• 949b15d: net/captivedetection: call SetHealthy once connectivity restored (tailscale#12974) (Andrea Gottardo) #12974
• 7bc2dda: go.mod,net/tstun,wgengine/netstack: implement gVisor TCP GSO for Linux (tailscale#12869) (Jordan Whited) #12869
• 0def4f8: net/netns: on Windows, fall back to default interface index when unspecified address is passed to ControlC and bindToInterfaceByRoute is enabled (Aaron Klotz) #12981
• 004dded: net/tlsdial: relax self-signed cert health warning (Brad Fitzpatrick) #12980
• 655b4f8: net/netns: remove some logspam by avoiding logging parse errors due to unspecified addresses (Aaron Klotz) #12983
• don't show login error details with context cancelations #12992 (Brad Fitzpatrick)
• f0230ce: go.mod,net/tstun,wgengine/netstack: implement gVisor TCP GRO for Linux (tailscale#12921) (Jordan Whited) #12921
• 4055b63: net/captivedetection: exclude cellular data interfaces (tailscale#13002) (Andrea Gottardo) #13002
• 9939374: wgengine/magicsock: use cloud metadata to get public IPs (Andrew Dunham) #12997
• d9d9d52: wgengine/netstack: increase gVisor's TCP send and receive buffer sizes (tailscale#12994) (Jordan Whited) #12994
• 4099a36: util/winutil/gp: fix a busy loop bug (Nick Khyl) #13006
• a917718: util/linuxfw: return nil interface not concrete type (Maisem Ali) #13013
• f205efc: net/packet/checksum: fix v6 NAT (Maisem Ali) #13014
• 0a6eb12: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #12967
• mark TestStdHandler_ConnectionClosedDuringBody flaky #13018 (Maisem Ali)
• 07e2487: wgengine/capture: fix v6 field typo in wireshark dissector (Maisem Ali) #13016
• a7a394e: tstest/integration: mark TestNATPing flaky (Maisem Ali) #13020
• 25f0a3f: wgengine/netstack: use build tags to exclude gVisor GRO importation on iOS (tailscale#13015) (Jordan Whited) #13015
• 17c88a1: net/captivedetection: mark TestAllEndpointsAreUpAndReturnExpectedResponse flaky (tailscale#13021) (Jordan Whited) #13021
• 0fd7374: cmd/tailscale/cli: fix revoke-keys command name in CLI output (Anton Tolchanov) #13035
• update license notices #12952 (License Updater)
• raccoon dog, dog with the raccoon in 'im #13030 (Kot C)
• e3f0476: net/socks5: support UDP (VimT) #13037
• 2275095: {control,net}: close idle connections of custom transports (Anton Tolchanov) #13011
• add an HTTP endpoint for triggering a probe #12978 (Anton Tolchanov)
• add a status page handler #12978 (Anton Tolchanov)
• support JSON response in RunHandler #12978 (Anton Tolchanov)
• b3fc345: cmd/derpprobe: use a status page from the prober library (Anton Tolchanov) #12978
• 7bac5df: control/controlhttp: extract the last network connection (Anton Tolchanov) #13010
• a93dc6c: wgengine/magicsock: refactor batchingUDPConn to batchingConn interface (tailscale#13042) (Jordan Whited) #13042
• 6ca078c: cmd/derper: move 204 handler from package main to derphttp (Brad Fitzpatrick) #13053
• 1ed958f: tstest/natlab/vnet: add start of virtual network-based NAT Lab (Brad Fitzpatrick) #13039
• f79183d: cmd/tsidp: add funnel support (tailscale#12591) (Naman Sood) #12591
• make status page more clear #13064 (Anton Tolchanov)
• ad038f4: cmd/gitops-pusher: add --fail-on-manual-edits flag (tailscale#13066) (Andrew Lytvynov) #13066
• c0c4791: cmd/gitops-pusher: ignore previous etag if local acls match control (tailscale#13068) (Andrew Lytvynov) #13068
• a867a48: go.toolchain.rev: bump Go toolchain for net pkg resolv.conf fix (Brad Fitzpatrick) #13069
• f23932b: net/dns/resolver: log forwarded query details when TS_DEBUG_DNS_FORWARD_SEND is enabled (Nick Khyl) #13071
• 2069189: cmd/stunstamp: refactor to support multiple protocols (tailscale#13063) (Jordan Whited) #13063
• add control/derps to test, stateful firewall #13078 (Brad Fitzpatrick)
• add hostinfo.IsNATLabGuestVM #13078 (Brad Fitzpatrick)
• add NodeAgentClient #13078 (Maisem Ali)
• 6798f8e: tstest/natlab/vnet: add port mapping (Brad Fitzpatrick) #13078
• don't hard-code bradfitz or maisem in paths #13078 (Brad Fitzpatrick)
• add network.logf #13078 (Brad Fitzpatrick)
• f8d23b3: tstest/integration/nat: stream daemon logs directly (Maisem Ali) #13078
• fix port mapping (w/ maisem + andrew) #13078 (Brad Fitzpatrick)
• reduce some log spam #13078 (Brad Fitzpatrick)
• 730fec1: tstest/integration/nat: add start of TestGrid (Brad Fitzpatrick) #13078
• 194ff6e: tstest/integration/nat: add sameLAN node type (Brad Fitzpatrick) #13078
• bump #13078 (Maisem Ali)
• d0e8375: cmd/{tta,vnet}: proxy to gokrazy UI (Maisem Ali) #13078
• d4cc074: tstest/natlab/vnet: add pcap support (Maisem Ali) #13078
• 44d6343: tstest/natlab/vnet: add easyAF (Brad Fitzpatrick) #13078
• 2a88428: tstest/integration/nat: skip some tests by default without flags (Brad Fitzpatrick) #13078
• ce4413a: client/tailscale: add Via to UserRuleMatch (Maisem Ali) #13085
• 2e32abc: cmd/tailscaled: allow setting env via linux cmdline for integration tests (Brad Fitzpatrick) #13083
• fix TestStdHandler_ConnectionClosedDuringBody flake (tailscale#13046) #13046 (Paul Scott)
• 2181109: cmd/stunstamp: implement HTTPS & TCP latency measurements (tailscale#13082) (Jordan Whited) #13082
• 7aec8d4: cmd/stunstamp: refactor connection construction (tailscale#13110) (Jordan Whited) #13110
• 10c2bee: tstest/natlab/vnet: capture network wan/lan interfaces (Maisem Ali) #13108
• 0dd9f53: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13060
• 0686bc8: cmd/tailscaled: add env knob to control default verbosity (Brad Fitzpatrick) #13111
• b692985: client/tailscale: add LocalClient.OmitAuth for tests (Brad Fitzpatrick) #13112
• a61825c: cmd/tta, vnet: add host firewall, env var support, more tests (Brad Fitzpatrick) #13088
• 67df9ab: util/syspolicy/setting: add package that contains types for the next syspolicy PRs (Nick Khyl) #13023
• 10662c4: tstest/integration/nat: annotate test 'want' values, fail on mismatch (Brad Fitzpatrick) #13114
• 10d0ce8: tstest/natlab: get tailscaled logs from gokrazy via syslog (Brad Fitzpatrick) #13115
• 84adfa1: tstest/natlab/vnet: standardize on 1-based naming of nodes, networks, MACs (Brad Fitzpatrick) #13124
• b7e4805: cmd/tailscale/cli: don't run CLI as a service on gokrazy (Brad Fitzpatrick) #13125
• 9f1d9d3: gokrazy/tsapp: remove builddirs packages that aren't in config.json (Brad Fitzpatrick) #13126
• adbab25: cmd/k8s-operator: fix DNS reconciler for dual-stack clusters (tailscale#13057) (Irbe Krumina) #13057
• f79e688: cmd/tailscale/cli: fix gokrazy CLI-as-a-service detection (Brad Fitzpatrick) #13127
• b60a9fc: gokrazy/tsapp: remove implicit heartbeat package (Brad Fitzpatrick) #13128
• eae6a00: tstest/integration/nat: crank up verbosity of a failing test (Brad Fitzpatrick) #13128
• b26c533: tstest/integration/nat: make Tailscale status log print less spammy (Brad Fitzpatrick) #13128
• d985da2: tstest/natlab/vnet: fix one-by-one from earlier numbering change (Brad Fitzpatrick) #13128
• b358f48: tstest/integration/nat: remove -audio none flag from qemu (Brad Fitzpatrick) #13131
• 02581b1: gokrazy,tstest/integration/nat: add Gokrazy appliance just for natlab (Brad Fitzpatrick) #13129
• c987cf1: go.mod: pull in latest github.com/creack/pty (Aaron Bieber) #13130
• b4e5956: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13132
• b9f4281: cmd/containerboot: optionally serve health check endpoint (tailscale#12899) (Irbe Krumina) #12899
• 2506bf5: fix tailscale#13076: codegen error when using anonymous struct (cai.li) #13077
• 4c2e978: cmd/tailscale/cli: support passing network lock keys via files (Brad Fitzpatrick) #13137
• a15ff1b: cmd/k8s-operator,k8s-operator/sessionrecording: support recording kubectl exec sessions over WebSockets (tailscale#12947) (Irbe Krumina) #12947
• 74b9fa1: ipn/localapi: only flush relevant data in multiFilePostResponseWriter.Flush() (Percy Wegmann) #13142
• 2dd71e6: wgengine/magicsock: log when a ReceiveFunc fails (Brad Fitzpatrick) #13143
• 2f27319: wgengine/netstack: disable gVisor TCP GRO for Linux (tailscale#13138) (Jordan Whited) #13138
• f8f9f05: cmd/viewer: add support for map-like container types (Nick Khyl) #13147
• 6c852fa: go.{mod,sum}: migrate from nhooyr.io/websocket to github.com/coder/websocket (Kyle Carberry) #13084
• db4247f: go.mod.sri: update SRI hash for go.mod changes (Flakes Updater) #13155
• e107977: wgengine/magicsock: disable SIO_UDP_NETRESET on Windows (Andrew Dunham) #12927
• add Server.Close method (tailscale#13160) #13160 (Andrew Lytvynov)
• update license notices #13105 (License Updater)
• ccf091e: wgengine/magicsock: don't upgrade to linuxBatchingConn on Android (tailscale#13161) (Jordan Whited) #13161
• 5cbbb48: health/dns: reduce severity of DNS unavailable warning (tailscale#13152) (Andrea Gottardo) #13152
• deduplicate MAC addresses before returning them #13165 (Anton Tolchanov)
• aa448d5: VERSION.txt: this is v1.72.0 (Andrea Gottardo)
• 5890df5: illumos/solaris support rebased onto 1.72.0 (Nahum Shalman)
• a45af6c: build tailscale client (Kevin Meziere)