Skip to content

Embed official TailscaleKit for private phone reach - #5

Open
Adam-Dalloul wants to merge 1 commit into
xintaofei:mainfrom
Adam-Dalloul:private-tailnet-embedded
Open

Embed official TailscaleKit for private phone reach#5
Adam-Dalloul wants to merge 1 commit into
xintaofei:mainfrom
Adam-Dalloul:private-tailnet-embedded

Conversation

@Adam-Dalloul

Copy link
Copy Markdown

Same privacy as Tailscale on both devices, without installing Tailscale.app on the phone.

What this does

  • Desktop Private (Serve) QR is now {url, token, mode:"private"} (codeg#475).
  • Scanning it in Codeg iOS fills URL + token and starts an in-app Tailscale node via official TailscaleKit / tsnet.
  • First launch opens Tailscale login in Safari. After that the node state stays in Application Support. HTTP and WebSockets to *.ts.net go through that userspace node.
  • Tokens and tskey- values are redacted from logs.

Build

Needs a Mac with Xcode and current Go:

./scripts/bootstrap_tailscalekit.sh   # latest libtailscale, records the SHA
xcodegen generate

Without that step the app still builds. Private *.ts.net then needs the Tailscale app, or it fails with a rebuild hint. The framework is not vendored (reproducible from the recorded SHA).

Not Funnel

This is Serve / tailnet only. Public Funnel stays a separate, weaker door on the desktop.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant