When I follow the instructions at tailscale.com for performing a linux install, their script doesn’t recognize IPFire’s linux. While a Pakfire install would be most preferable, I’d be willing to interface with tailscale support to at least try to get IPFire support added to their script – but I’ll need to know a few more specifics on what exactly to tell them.
# curl -fsSL https://tailscale.com/install.sh | sh
Couldn't determine what kind of Linux is running.
You could try the static binaries at:
https://pkgs.tailscale.com/stable/#static
If you'd like us to support your system better, please email support@tailscale.com
and tell us what OS you're running.
Please include the following information we gathered from your system:
OS=other-linux
VERSION=
PACKAGETYPE=
UNAME=Linux ipfire.brazoslink.net 6.1.45-ipfire #1 SMP PREEMPT_DYNAMIC Tue Aug 15 21:32:54 GMT 2023 x86_64 Intel(R) Celeron(R) CPU J1900 @ 1.99GHz GenuineIntel GNU/Linux
NAME="IPFire"
VERSION="2.27"
ID=ipfire
VERSION_ID=2
PRETTY_NAME="IPFire 2.27 (x86_64) - core180"
ANSI_COLOR="0:31"
[root@ipfire ~]#
FWIW I want to configure tailscale in order to get past MetroNet’s CGNAT.
Yeah, looks like that’s indeed the case. Insufficient due diligence on my part before trying to set it up in the first place. I’ll have to either use OpenVPN to do a site-to-site, or just use Anydesk to remote control a box inside that network.
I may necrobump, but this is actually the first topic coming in search so I wanted to share how I managed to setup tailscale manually based on qnap package (I think) pkgs.tailscale.com/stable/#static
cd /root #download
wget https://pkgs.tailscale.com/stable/tailscale_1.78.1_amd64.tgz #extract
tar xvf tailscale_1.78.1_amd64.tgz #rename for simplicity
mv tailscale_1.78.1_amd64 tailscale
cd tailscale
ln -s /root/tailscale/tailscaled /usr/sbin/tailscaled
create unit
vim /etc/init.d/tailscale
#!/bin/sh
SERVICE_NAME="tailscale"
PID_FILE="/var/run/tailscale/tailscaled.pid"
LOG_FILE="/var/run/tailscale/tailscaled.log"
STATE_FILE="/var/run/tailscale/tailscaled.state"
SOCKET_FILE="/var/run/tailscale/tailscaled.sock"
PORT="41641"
SERVICE_COMMAND="/usr/sbin/tailscaled \
--state=${STATE_FILE} \
--socket=${SOCKET_FILE} \
--port=$PORT"
start_daemon() {
local ts=$(date --iso-8601=second)
echo "${ts} Starting ${SERVICE_NAME} with: ${SERVICE_COMMAND}" >>${LOG_FILE}
${SERVICE_COMMAND} >>${LOG_FILE} 2>&1 &
if [ -n "${PID_FILE}" ]; then
echo "$!" >"${PID_FILE}"
else
wait_for_status 0
fi
}
stop_daemon() {
if [ -n "${PID_FILE}" -a -r "${PID_FILE}" ]; then
local PID=$(cat "${PID_FILE}")
local ts=$(date --iso-8601=second)
echo "${ts} Stopping ${SERVICE_NAME} service PID=${PID}" >>${LOG_FILE}
kill -TERM $PID >>${LOG_FILE} 2>&1
wait_for_status 1 || kill -KILL $PID >>${LOG_FILE} 2>&1
if [ -f "${PID_FILE}" ]; then
rm -f "${PID_FILE}" >/dev/null
fi
fi
}
daemon_status() {
if [ -n "${PID_FILE}" -a -r "${PID_FILE}" ]; then
if kill -0 $(cat "${PID_FILE}") >/dev/null 2>&1; then
return
fi
rm -f "${PID_FILE}" >/dev/null
fi
return 1
}
wait_for_status() {
# 20 tries
# sleeps for 1 second after each try
local counter=20
while [ ${counter} -gt 0 ]; do
daemon_status
[ $? -eq $1 ] && return
counter=$((counter - 1))
sleep 1
done
return 1
}
ensure_tun_created() {
# Create the necessary file structure for /dev/net/tun
if ([ ! -c /dev/net/tun ]); then
if ([ ! -d /dev/net ]); then
mkdir -m 755 /dev/net
fi
mknod /dev/net/tun c 10 200
chmod 0755 /dev/net/tun
fi
# Load the tun module if not already loaded
if (!(lsmod | grep -q "^tun\s")); then
insmod /lib/modules/tun.ko
fi
}
case $1 in
start)
if daemon_status; then
echo "${SERVICE_NAME} is already running"
exit 0
else
echo "Starting ${SERVICE_NAME} ..."
ensure_tun_created
start_daemon
exit $?
fi
;;
stop)
if daemon_status; then
echo "Stopping ${SERVICE_NAME} ..."
stop_daemon
exit $?
else
echo "${SERVICE_NAME} is not running"
exit 0
fi
;;
status)
if daemon_status; then
echo "${SERVICE_NAME} is running"
exit 0
else
echo "${SERVICE_NAME} is not running"
exit 3
fi
;;
log)
exit 0
;;
*)
echo "command $1 is not implemented"
exit 0
;;
esac
Hi all! I successfully installed and configured Tailscale using the instructions in this topic. Thank you Maciej Klimas, Tomek for the step by step guide.
I’m sorry for the noob question, but how to enable Tailscale as service so it starts automatically at boot time?
Yeah, sure. I knew it when I posted. My problem is that I’m behind a CGNAT and the modem my ISP provided me can’t operate in bridge mode. My actual setup has a DMZ in modem pointing to my IPFire box Red IP.
I can connect with Tailscale despite this unusual and definitely not ideal setup but can’t with WireGuard.
My network knowledge is very limited, despite my love for the area, but by what I’ve read, to use WireGuard I need a VPS, correctly?
And this is why I tried using Tailscale and posted here (just to clarify for anyone who may be reading this thread).
You don’t need to configure WireGuard on IPFire when using Tailscale. From my own - limited - testing I see that Tailscale already uses WireGuard internally and handles NAT traversal itself, so it works even behind CGNAT. IPFire won’t ‘see’ the Tailscale network unless you intentionally set up subnet routing.
