mirror of
https://github.com/tailscale-dev/deck-tailscale.git
synced 2025-10-21 15:08:13 +00:00
135 lines
4.4 KiB
Bash
135 lines
4.4 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# set invocation settings for this script:
|
|
# -e: Exit immediately if a command exits with a non-zero status.
|
|
# -u: Treat unset variables as an error when substituting.
|
|
# -o pipefail: the return value of a pipeline is the status of the last command to exit with a non-zero status, or zero if no command exited with a non-zero status
|
|
set -eu -o pipefail
|
|
|
|
# save the current directory silently
|
|
pushd . > /dev/null
|
|
|
|
# make a temporary directory, save the name, and move into it
|
|
dir="$(mktemp -d)"
|
|
cd "${dir}"
|
|
|
|
echo -n "Getting version..."
|
|
|
|
# get info for the latest version of Tailscale
|
|
tarball="$(curl -s 'https://pkgs.tailscale.com/stable/?mode=json' | jq -r .Tarballs.amd64)"
|
|
version="$(echo ${tarball} | cut -d_ -f2)"
|
|
|
|
echo "got ${version}."
|
|
|
|
echo "Downloading:"
|
|
|
|
# download the Tailscale package itself
|
|
wget -q --show-progress -O tailscale.tgz "https://pkgs.tailscale.com/stable/${tarball}"
|
|
|
|
echo -n "Removing Legacy Installations..."
|
|
|
|
# Stop and disable the systemd service
|
|
if systemctl is-active --quiet tailscaled; then
|
|
systemctl stop tailscaled &>/dev/null || echo "ERROR: could not stop tailscaled"
|
|
fi
|
|
if systemctl is-enabled --quiet tailscaled; then
|
|
systemctl disable tailscaled &>/dev/null || echo "ERROR: could not disable tailscaled"
|
|
fi
|
|
|
|
# Remove the systemd system extension
|
|
if [ $(systemd-sysext list 2>/dev/null | grep -c "/var/lib/extensions/tailscale") -ne 0 ]; then
|
|
systemd-sysext unmerge &>/dev/null || echo "ERROR: could not unmerge system extensions"
|
|
rm -rf /var/lib/extensions/tailscale
|
|
systemd-sysext merge &>/dev/null || echo "ERROR: could not merge system extensions"
|
|
fi
|
|
|
|
echo "done."
|
|
|
|
echo -n "Installing..."
|
|
|
|
# extract the tailscale binaries
|
|
tar xzf tailscale.tgz
|
|
tar_dir="$(echo ${tarball} | cut -d. -f1-3)"
|
|
test -d $tar_dir
|
|
|
|
# Create binaries directory in home
|
|
mkdir -p /opt/tailscale
|
|
|
|
# pull binaries
|
|
cp -rf $tar_dir/tailscale /opt/tailscale/tailscale
|
|
cp -rf $tar_dir/tailscaled /opt/tailscale/tailscaled
|
|
|
|
# add binaries to path via profile.d
|
|
if ! test -f /etc/profile.d/tailscale.sh; then
|
|
echo 'PATH="$PATH:/opt/tailscale"' >> /etc/profile.d/tailscale.sh
|
|
source /etc/profile.d/tailscale.sh
|
|
fi
|
|
|
|
# copy the systemd file into place
|
|
cp -rf $tar_dir/systemd/tailscaled.service /etc/systemd/system/tailscaled.service
|
|
|
|
# copy in the defaults file if it doesn't already exist
|
|
if ! test -f /etc/default/tailscaled; then
|
|
cp -rf $tar_dir/systemd/tailscaled.defaults /etc/default/tailscaled
|
|
fi
|
|
|
|
# add atomic-update.conf.d configuration
|
|
cat <<EOF > /etc/atomic-update.conf.d/tailscale.conf
|
|
/etc/default/tailscaled
|
|
/etc/profile.d/tailscale.sh
|
|
EOF
|
|
|
|
# return to our original directory (silently) and clean up
|
|
popd > /dev/null
|
|
rm -rf "${dir}"
|
|
|
|
# if an override file already exists, back up and remove
|
|
if test -f /etc/systemd/system/tailscaled.service.d/override.conf; then
|
|
echo
|
|
echo
|
|
echo "Warning: An existing Tailscaled systemd override file was detected. It must be replaced."
|
|
echo "A backup of the existing file is being placed at /etc/systemd/system/tailscaled.service.d/override.conf.bak"
|
|
echo
|
|
cp -f /etc/systemd/system/tailscaled.service.d/override.conf /etc/systemd/system/tailscaled.service.d/override.conf.bak
|
|
rm /etc/systemd/system/tailscaled.service.d/override.conf
|
|
fi
|
|
|
|
# copy our override file in
|
|
mkdir -p /etc/systemd/system/tailscaled.service.d
|
|
cp -f override.conf /etc/systemd/system/tailscaled.service.d/override.conf
|
|
|
|
# capture the above override file in systemd
|
|
systemctl daemon-reload
|
|
|
|
echo "done."
|
|
|
|
echo -n "Starting required services..."
|
|
|
|
# tailscaled - the tailscale daemon
|
|
# Note: enable and start/restart must be run because the legacy installation stops and disables
|
|
# any existing installations.
|
|
systemctl enable tailscaled &>/dev/null || echo "ERROR: Could not enable tailscaled service"
|
|
if systemctl is-active --quiet tailscaled; then
|
|
echo "Upgrade complete."
|
|
echo -n "Restarting tailscaled..."
|
|
else
|
|
echo "Install complete."
|
|
echo -n "Starting tailscaled..."
|
|
fi
|
|
|
|
# This needs to be the last thing we do in case the user's running this over Tailscale SSH.
|
|
systemctl restart tailscaled &>/dev/null || echo "ERROR: Could not start tailscaled service"
|
|
|
|
echo "done."
|
|
|
|
if ! command -v tailscale &> /dev/null; then
|
|
echo
|
|
echo "Tailscale is installed and running but the binaries are not in your path yet."
|
|
echo "Restart your session or run the following command to add them:"
|
|
echo
|
|
echo "source /etc/profile.d/tailscale.sh"
|
|
echo
|
|
fi
|
|
|
|
echo "Installation Complete."
|