Skip to content

Commit 47db314

Browse files
nshalmannshalman
committed
illumos/solaris support rebased onto 1.78.1
1 parent c80eb69 commit 47db314

21 files changed

+506
-7
lines changed

‎.github/workflows/cross-illumos.yaml

+32
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
name: illumos-Cross
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
- 'illumos-*'
8+
pull_request:
9+
branches:
10+
- '*'
11+
12+
jobs:
13+
build:
14+
runs-on: ubuntu-latest
15+
16+
if: "!contains(github.event.head_commit.message, '[ci skip]')"
17+
18+
steps:
19+
- name: Check out code
20+
uses: actions/checkout@v3
21+
with:
22+
fetch-depth: 0
23+
24+
- name: Set up Go
25+
uses: actions/setup-go@v4
26+
with:
27+
go-version-file: 'go.mod'
28+
check-latest: true
29+
id: go
30+
31+
- name: SunOS build script
32+
run: bash -x build.sh

‎.github/workflows/nshalman-sunos-releases.yml

+39
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
---
2+
name: "tagged-release"
3+
4+
on:
5+
push:
6+
tags:
7+
- "v*-sunos"
8+
9+
jobs:
10+
tagged-release:
11+
name: "SunOS Tagged Release"
12+
runs-on: "ubuntu-latest"
13+
14+
steps:
15+
- name: Check out code
16+
uses: actions/checkout@v3
17+
with:
18+
fetch-depth: 0
19+
20+
- name: Set up Go
21+
uses: actions/setup-go@v4
22+
with:
23+
go-version-file: 'go.mod'
24+
check-latest: true
25+
id: go
26+
27+
- name: SunOS build script
28+
run: bash -x build.sh
29+
30+
- name: Create Release
31+
uses: "marvinpinto/action-automatic-releases@latest"
32+
with:
33+
repo_token: "${{ secrets.GITHUB_TOKEN }}"
34+
prerelease: false
35+
files: |
36+
cmd/tailscaled/tailscale.xml
37+
sha256sums
38+
tailscaled-illumos
39+
tailscaled-solaris

‎AUTHORS

+1
Original file line numberDiff line numberDiff line change
@@ -15,3 +15,4 @@
1515
# company that owns the rights to your contribution.
1616

1717
Tailscale Inc.
18+
Nahum Shalman <nahamu@gmail.com>

‎build.sh

+30
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
#!/bin/bash
2+
3+
set -o xtrace
4+
set -o errexit
5+
6+
export TS_USE_TOOLCHAIN=true
7+
# This prevents illumos libc from leaking into Solaris binaries when built on illumos
8+
export CGO_ENABLED=0
9+
10+
fix_osabi () {
11+
if [[ $(uname -s) == SunOS ]]; then
12+
/usr/bin/elfedit \
13+
-e "ehdr:ei_osabi ELFOSABI_SOLARIS" \
14+
-e "ehdr:ei_abiversion EAV_SUNW_CURRENT" \
15+
"${1?}"
16+
else
17+
elfedit --output-osabi "Solaris" --output-abiversion "1" "${1?}"
18+
fi
19+
}
20+
21+
for GOOS in illumos solaris; do
22+
export GOOS
23+
bash -x ./build_dist.sh --box ./cmd/tailscaled
24+
fix_osabi tailscaled
25+
mv tailscaled{,-${GOOS}}
26+
done
27+
28+
ln cmd/tailscaled/tailscale.xml .
29+
shasum -a 256 tailscaled-* tailscale.xml >sha256sums
30+
rm ./tailscale.xml

‎cmd/tailscaled/tailscale-smartos-gz.xml

+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
<?xml version='1.0'?>
2+
<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>
3+
<service_bundle type='manifest' name='export'>
4+
<service name='vpn/tailscale' type='service' version='0'>
5+
<create_default_instance enabled='true'/>
6+
<single_instance/>
7+
<dependency name='network' grouping='require_all' restart_on='error' type='service'>
8+
<service_fmri value='svc:/milestone/network:default'/>
9+
</dependency>
10+
<dependency name='filesystem' grouping='require_all' restart_on='error' type='service'>
11+
<service_fmri value='svc:/system/filesystem/local'/>
12+
</dependency>
13+
<method_context>
14+
<method_credential group='root' user='root'/>
15+
</method_context>
16+
<exec_method name='start' type='method' exec='/opt/local/sbin/tailscaled' timeout_seconds='60'>
17+
<method_context>
18+
<method_environment>
19+
<envvar name='SSL_CERT_FILE' value='/opt/tools/share/mozilla-rootcerts/cacert.pem'/>
20+
</method_environment>
21+
</method_context>
22+
</exec_method>
23+
<exec_method name='stop' type='method' exec=':kill' timeout_seconds='60'/>
24+
<property_group name='application' type='application'/>
25+
<property_group name='startd' type='framework'>
26+
<propval name='duration' type='astring' value='child'/>
27+
<propval name='ignore_error' type='astring' value='core,signal'/>
28+
</property_group>
29+
<stability value='Evolving'/>
30+
<template>
31+
<common_name>
32+
<loctext xml:lang='C'>Tailscale</loctext>
33+
</common_name>
34+
</template>
35+
</service>
36+
</service_bundle>

‎cmd/tailscaled/tailscale.xml

+30
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
<?xml version='1.0'?>
2+
<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>
3+
<service_bundle type='manifest' name='export'>
4+
<service name='vpn/tailscale' type='service' version='0'>
5+
<create_default_instance enabled='true'/>
6+
<single_instance/>
7+
<dependency name='network' grouping='require_all' restart_on='error' type='service'>
8+
<service_fmri value='svc:/milestone/network:default'/>
9+
</dependency>
10+
<dependency name='filesystem' grouping='require_all' restart_on='error' type='service'>
11+
<service_fmri value='svc:/system/filesystem/local'/>
12+
</dependency>
13+
<method_context>
14+
<method_credential group='root' user='root'/>
15+
</method_context>
16+
<exec_method name='start' type='method' exec='/usr/local/sbin/tailscaled' timeout_seconds='60'/>
17+
<exec_method name='stop' type='method' exec=':kill' timeout_seconds='60'/>
18+
<property_group name='application' type='application'/>
19+
<property_group name='startd' type='framework'>
20+
<propval name='duration' type='astring' value='child'/>
21+
<propval name='ignore_error' type='astring' value='core,signal'/>
22+
</property_group>
23+
<stability value='Evolving'/>
24+
<template>
25+
<common_name>
26+
<loctext xml:lang='C'>Tailscale</loctext>
27+
</common_name>
28+
</template>
29+
</service>
30+
</service_bundle>

‎cmd/tailscaled/tailscaled.go

+2
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,8 @@ import (
7373
// defaultTunName returns the default tun device name for the platform.
7474
func defaultTunName() string {
7575
switch runtime.GOOS {
76+
case "illumos", "solaris":
77+
return "tun"
7678
case "openbsd":
7779
return "tun"
7880
case "windows":

‎derper

10.5 MB
Binary file not shown.

‎go.mod

+2
Original file line numberDiff line numberDiff line change
@@ -405,3 +405,5 @@ require (
405405
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
406406
sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
407407
)
408+
409+
replace github.com/tailscale/wireguard-go => github.com/nshalman/wireguard-go v0.0.20200321-0.20240821122409-fbd66f85d5bc

‎go.sum

+2-2
Original file line numberDiff line numberDiff line change
@@ -735,6 +735,8 @@ github.com/nishanths/exhaustive v0.12.0 h1:vIY9sALmw6T/yxiASewa4TQcFsVYZQQRUQJhK
735735
github.com/nishanths/exhaustive v0.12.0/go.mod h1:mEZ95wPIZW+x8kC4TgC+9YCUgiST7ecevsVDTgc2obs=
736736
github.com/nishanths/predeclared v0.2.2 h1:V2EPdZPliZymNAn79T8RkNApBjMmVKh5XRpLm/w98Vk=
737737
github.com/nishanths/predeclared v0.2.2/go.mod h1:RROzoN6TnGQupbC+lqggsOlcgysk3LMK/HI84Mp280c=
738+
github.com/nshalman/wireguard-go v0.0.20200321-0.20240821122409-fbd66f85d5bc h1:I/q5kiFd4mTc475wxRWqYEd2SbFGEG0NvbuvfzUOweQ=
739+
github.com/nshalman/wireguard-go v0.0.20200321-0.20240821122409-fbd66f85d5bc/go.mod h1:BOm5fXUBFM+m9woLNBoxI9TaBXXhGNP50LX/TGIvGb4=
738740
github.com/nunnatsa/ginkgolinter v0.16.1 h1:uDIPSxgVHZ7PgbJElRDGzymkXH+JaF7mjew+Thjnt6Q=
739741
github.com/nunnatsa/ginkgolinter v0.16.1/go.mod h1:4tWRinDN1FeJgU+iJANW/kz7xKN5nYRAOfJDQUS9dOQ=
740742
github.com/nxadm/tail v1.4.8 h1:nPr65rt6Y5JFSKQO7qToXr7pePgD6Gwiw05lkbyAQTE=
@@ -941,8 +943,6 @@ github.com/tailscale/web-client-prebuilt v0.0.0-20240226180453-5db17b287bf1 h1:t
941943
github.com/tailscale/web-client-prebuilt v0.0.0-20240226180453-5db17b287bf1/go.mod h1:agQPE6y6ldqCOui2gkIh7ZMztTkIQKH049tv8siLuNQ=
942944
github.com/tailscale/wf v0.0.0-20240214030419-6fbb0a674ee6 h1:l10Gi6w9jxvinoiq15g8OToDdASBni4CyJOdHY1Hr8M=
943945
github.com/tailscale/wf v0.0.0-20240214030419-6fbb0a674ee6/go.mod h1:ZXRML051h7o4OcI0d3AaILDIad/Xw0IkXaHM17dic1Y=
944-
github.com/tailscale/wireguard-go v0.0.0-20241113014420-4e883d38c8d3 h1:dmoPb3dG27tZgMtrvqfD/LW4w7gA6BSWl8prCPNmkCQ=
945-
github.com/tailscale/wireguard-go v0.0.0-20241113014420-4e883d38c8d3/go.mod h1:BOm5fXUBFM+m9woLNBoxI9TaBXXhGNP50LX/TGIvGb4=
946946
github.com/tailscale/xnet v0.0.0-20240729143630-8497ac4dab2e h1:zOGKqN5D5hHhiYUp091JqK7DPCqSARyUfduhGUY8Bek=
947947
github.com/tailscale/xnet v0.0.0-20240729143630-8497ac4dab2e/go.mod h1:orPd6JZXXRyuDusYilywte7k094d7dycXXU5YnWsrwg=
948948
github.com/tc-hib/winres v0.2.1 h1:YDE0FiP0VmtRaDn7+aaChp1KiF4owBiJa5l964l5ujA=

‎ipn/ipnlocal/local.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -4126,7 +4126,7 @@ func (b *LocalBackend) peerAPIServicesLocked() (ret []tailcfg.Service) {
41264126
})
41274127
}
41284128
switch runtime.GOOS {
4129-
case "linux", "freebsd", "openbsd", "illumos", "darwin", "windows", "android", "ios":
4129+
case "linux", "freebsd", "openbsd", "illumos", "solaris", "darwin", "windows", "android", "ios":
41304130
// These are the platforms currently supported by
41314131
// net/dns/resolver/tsdns.go:Resolver.HandleExitNodeDNSQuery.
41324132
ret = append(ret, tailcfg.Service{

‎ipn/ipnstate/ipnstate.go

+2
Original file line numberDiff line numberDiff line change
@@ -650,6 +650,8 @@ func osEmoji(os string) string {
650650
return "🐡"
651651
case "illumos":
652652
return "☀️"
653+
case "solaris":
654+
return "🌤️"
653655
}
654656
return "👽"
655657
}

‎net/dns/manager_default.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
// Copyright (c) Tailscale Inc & AUTHORS
22
// SPDX-License-Identifier: BSD-3-Clause
33

4-
//go:build !linux && !freebsd && !openbsd && !windows && !darwin
4+
//go:build !linux && !freebsd && !openbsd && !windows && !darwin && !illumos && !solaris
55

66
package dns
77

‎net/dns/manager_solaris.go

+14
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
// Copyright (c) Tailscale Inc & AUTHORS
2+
// SPDX-License-Identifier: BSD-3-Clause
3+
4+
package dns
5+
6+
import (
7+
"tailscale.com/control/controlknobs"
8+
"tailscale.com/health"
9+
"tailscale.com/types/logger"
10+
)
11+
12+
func NewOSConfigurator(logf logger.Logf, health *health.Tracker, _ *controlknobs.Knobs, iface string) (OSConfigurator, error) {
13+
return newDirectManager(logf, health), nil
14+
}

‎net/dns/resolver/tsdns.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -384,7 +384,7 @@ func (r *Resolver) HandlePeerDNSQuery(ctx context.Context, q []byte, from netip.
384384
// but for now that's probably good enough. Later we'll
385385
// want to blend in everything from scutil --dns.
386386
fallthrough
387-
case "linux", "freebsd", "openbsd", "illumos", "ios":
387+
case "linux", "freebsd", "openbsd", "illumos", "solaris", "ios":
388388
nameserver, err := stubResolverForOS()
389389
if err != nil {
390390
r.logf("stubResolverForOS: %v", err)

‎net/netutil/ip_forward.go

+26
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,11 @@ func CheckIPForwarding(routes []netip.Prefix, state *netmon.State) (warn, err er
6363
switch runtime.GOOS {
6464
case "dragonfly", "freebsd", "netbsd", "openbsd":
6565
return fmt.Errorf("Subnet routing and exit nodes only work with additional manual configuration on %v, and is not currently officially supported.", runtime.GOOS), nil
66+
case "illumos", "solaris":
67+
_, err := ipForwardingEnabledSunOS(ipv4, "")
68+
if err != nil {
69+
return nil, fmt.Errorf("Couldn't check system's IP forwarding configuration, subnet routing/exit nodes may not work: %w%s", err, "")
70+
}
6671
}
6772
return nil, nil
6873
}
@@ -325,3 +330,24 @@ func reversePathFilterValueLinux(iface string) (int, error) {
325330
}
326331
return v, nil
327332
}
333+
334+
func ipForwardingEnabledSunOS(p protocol, iface string) (bool, error) {
335+
var proto string
336+
if p == ipv4 {
337+
proto = "ipv4"
338+
} else if p == ipv6 {
339+
proto = "ipv6"
340+
} else {
341+
return false, fmt.Errorf("unknown protocol")
342+
}
343+
344+
ipadmCmd := "\"ipadm show-prop " + proto + " -p forwarding -o CURRENT -c\""
345+
bs, err := exec.Command("ipadm", "show-prop", proto, "-p", "forwarding", "-o", "CURRENT", "-c").Output()
346+
if err != nil {
347+
return false, fmt.Errorf("couldn't check %s (%v).\nSubnet routes won't work without IP forwarding.", ipadmCmd, err)
348+
}
349+
if string(bs) != "on\n" {
350+
return false, fmt.Errorf("IP forwarding is set to off. Subnet routes won't work. Try 'routeadm -u -e " + proto + "-forwarding'")
351+
}
352+
return true, nil
353+
}

‎paths/paths_unix.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ func init() {
2222

2323
func statePath() string {
2424
switch runtime.GOOS {
25-
case "linux":
25+
case "linux", "illumos", "solaris":
2626
return "/var/lib/tailscale/tailscaled.state"
2727
case "freebsd", "openbsd":
2828
return "/var/db/tailscale/tailscaled.state"

‎tool/go

+6
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,10 @@
44
# currently-desired version from https://github.com/tailscale/go,
55
# downloading it first if necessary.
66

7+
case $(uname -s) in
8+
SunOS)
9+
exec go "$@"
10+
;;
11+
esac
12+
713
exec "$(dirname "$0")/../tool/gocross/gocross-wrapper.sh" "$@"

‎wgengine/router/router_default.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
// Copyright (c) Tailscale Inc & AUTHORS
22
// SPDX-License-Identifier: BSD-3-Clause
33

4-
//go:build !windows && !linux && !darwin && !openbsd && !freebsd
4+
//go:build !windows && !linux && !darwin && !openbsd && !freebsd && !illumos && !solaris
55

66
package router
77

‎wgengine/router/router_solaris.go

+46
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
// Copyright (c) Tailscale Inc & AUTHORS
2+
// SPDX-License-Identifier: BSD-3-Clause
3+
4+
package router
5+
6+
import (
7+
"strings"
8+
9+
"github.com/tailscale/wireguard-go/tun"
10+
"tailscale.com/health"
11+
"tailscale.com/net/netmon"
12+
"tailscale.com/types/logger"
13+
)
14+
15+
// For now this router only supports the userspace WireGuard implementations.
16+
17+
func newUserspaceRouter(logf logger.Logf, tundev tun.Device, linkMon *netmon.Monitor, health *health.Tracker) (Router, error) {
18+
return newUserspaceSunosRouter(logf, tundev, linkMon, health)
19+
}
20+
21+
func cleanUp(logf logger.Logf, interfaceName string) {
22+
ipadm := []string{"ipadm", "show-addr", "-p", "-o", "addrobj"}
23+
out, err := cmd(ipadm...).Output()
24+
if err != nil {
25+
logf("ipadm show-addr: %v\n%s", err, out)
26+
}
27+
for _, a := range strings.Fields(string(out)) {
28+
s := strings.Split(a, "/")
29+
if len(s) > 1 && strings.Contains(s[1], "tailscale") {
30+
ipadm = []string{"ipadm", "down-addr", "-t", a}
31+
cmdVerbose(logf, ipadm)
32+
ipadm = []string{"ipadm", "delete-addr", a}
33+
cmdVerbose(logf, ipadm)
34+
ipadm = []string{"ipadm", "delete-if", s[0]}
35+
cmdVerbose(logf, ipadm)
36+
}
37+
}
38+
ifcfg := []string{"ifconfig", interfaceName, "unplumb"}
39+
if out, err := cmd(ifcfg...).CombinedOutput(); err != nil {
40+
logf("ifconfig unplumb: %v\n%s", err, out)
41+
}
42+
ifcfg = []string{"ifconfig", interfaceName, "inet6", "unplumb"}
43+
if out, err := cmd(ifcfg...).CombinedOutput(); err != nil {
44+
logf("ifconfig inet6 unplumb: %v\n%s", err, out)
45+
}
46+
}

0 commit comments

Comments
 (0)