Kristoffer DalbyandKristoffer Dalby
1d82c1b3d0
Point tsapp at the tailscale/breakglass fork, fetch SSH keys from EC2 IMDSv2, restrict to the sec-scan user and internal CIDRs, start on boot, and stop after 120s idle. Updates #1866 Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
Tailscale Appliance
This is the definition of the Gokrazy Tailscale Appliance (tsapp) image. See the parent directory for context.
File contents
The config.json is a Gokrazy config.
The usr-dir.tar is a single symlink named bin pointing to /user. We write it to /usr/bin => /user so the Busybox ash shell's default $PATH includes /user, where the tailscale CLI is.
The builddir is the Gokrazy build environment, defining each program's go.mod.