From a19f8f290e51f4c0dcd204200e84725c1f87a77f Mon Sep 17 00:00:00 2001 From: Kristoffer Dalby Date: Wed, 22 Jul 2026 14:26:22 +0000 Subject: [PATCH] gokrazy/tsapp: revert breakglass access lockdown Revert the tailscale/breakglass fork and its access-control flags; not ready to ship yet. This reverts commit 1d82c1b3d. Updates #1866 Signed-off-by: Kristoffer Dalby --- gokrazy/tsapp/config.json | 10 +++------- gokrazy/tsapp/gokrazydeps.go | 2 +- 2 files changed, 4 insertions(+), 8 deletions(-) diff --git a/gokrazy/tsapp/config.json b/gokrazy/tsapp/config.json index fbf87f0b1..10825b3c5 100644 --- a/gokrazy/tsapp/config.json +++ b/gokrazy/tsapp/config.json @@ -11,20 +11,16 @@ ], "Packages": [ "github.com/gokrazy/serial-busybox", - "github.com/tailscale/breakglass", + "github.com/gokrazy/breakglass", "github.com/bradfitz/qemu-guest-kragent", "tailscale.com/cmd/fbstatus", "tailscale.com/cmd/tailscale", "tailscale.com/cmd/tailscaled" ], "PackageConfig": { - "github.com/tailscale/breakglass": { + "github.com/gokrazy/breakglass": { "CommandLineFlags": [ - "-authorized_keys=ec2", - "-allowed_user=aws-marketplace-sec-scan", - "-allowed_cidrs=10.0.0.0/16,10.2.0.0/16", - "-stop_after_idle=120s", - "-start_on_boot=true" + "-authorized_keys=/perm/breakglass.authorized_keys" ] }, "tailscale.com/cmd/tailscale": { diff --git a/gokrazy/tsapp/gokrazydeps.go b/gokrazy/tsapp/gokrazydeps.go index 477d5da0d..60935b24f 100644 --- a/gokrazy/tsapp/gokrazydeps.go +++ b/gokrazy/tsapp/gokrazydeps.go @@ -7,12 +7,12 @@ package gokrazydeps import ( _ "github.com/bradfitz/qemu-guest-kragent" + _ "github.com/gokrazy/breakglass" _ "github.com/gokrazy/gokrazy/cmd/dhcp" _ "github.com/gokrazy/gokrazy/cmd/ntp" _ "github.com/gokrazy/gokrazy/cmd/randomd" _ "github.com/gokrazy/kernel.amd64" _ "github.com/gokrazy/serial-busybox" - _ "github.com/tailscale/breakglass" _ "github.com/tailscale/ts-gokrazy/gokrazyinit" _ "tailscale.com/cmd/tailscale" _ "tailscale.com/cmd/tailscaled"