webnet/tailscale
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

cmd/tailscaled: only warn about unsupported attestation when enabled (#20028)

Browse Source 
We don't need to log if the policy doesn't actually say that hardware
attestation must be enabled.

Updates #cleanup

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
This commit is contained in:
Andrew Lytvynov
2026-06-05 14:00:07 -07:00
committed by GitHub
parent 6a709216b9
commit c07bf57eba
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/tailscaled/tailscaled.go
+3 -1
View File
@@ -923,7 +923,9 @@ func handleTPMFlags() {
case !args.hardwareAttestation.set: case !args.hardwareAttestation.set:
policyHWAttestation, _ := policyclient.Get().GetBoolean(pkey.HardwareAttestation, false) policyHWAttestation, _ := policyclient.Get().GetBoolean(pkey.HardwareAttestation, false)
if err := canUseHardwareAttestation(); err != nil { if err := canUseHardwareAttestation(); err != nil {
log.Printf("[unexpected] policy requires hardware attestation, but device does not support it: %v", err) if policyHWAttestation {
log.Printf("[unexpected] policy requires hardware attestation, but device does not support it: %v", err)
}
args.hardwareAttestation.v = false args.hardwareAttestation.v = false
} else { } else {
args.hardwareAttestation.v = policyHWAttestation args.hardwareAttestation.v = policyHWAttestation