Update Tailscale to v1.94.2

The tailscaled.state file in localdata will now persist across updates, so your camera stays connected to Tailscale without re-authentication

.github/workflows/build.yml

@@ -2,7 +2,7 @@ name: Auto Build & Release Tailscale ACAP
 
 on:
   schedule:
-    - cron: "0 3 * * 1"   # Every Monday at 03:00 UTC
+    - cron: "0 0 * * *"   # Every Monday at 03:00 UTC
   workflow_dispatch:
 
 jobs:
@@ -20,8 +20,28 @@ jobs:
     - name: Get latest Tailscale version
       id: tailscale_version
       run: |
-        VERSION=$(curl -s https://api.github.com/repos/tailscale/tailscale/releases/latest | jq -r .tag_name)
-        VERSION=${VERSION#v}  # remove leading 'v'
+        # 1. Start from GitHub latest
+        GH_TAG=$(curl -s https://api.github.com/repos/tailscale/tailscale/releases/latest | jq -r .tag_name)
+        GH_VERSION=${GH_TAG#v}
+
+        echo "GitHub latest: $GH_VERSION"
+
+        # 2. See if static ARM build exists for that version
+        if curl -sfI "https://pkgs.tailscale.com/stable/tailscale_${GH_VERSION}_arm.tgz" > /dev/null; then
+          VERSION="$GH_VERSION"
+          echo "Using GitHub latest (has ARM package): $VERSION"
+        else
+          echo "No ARM package for $GH_VERSION, falling back to latest version on pkgs.tailscale.com"
+          # 3. Derive latest version that actually has an ARM tarball
+          VERSION=$(
+            curl -s https://pkgs.tailscale.com/stable/ \
+            | grep -o 'tailscale_[0-9.]*_arm\.tgz' \
+            | sed -E 's/^tailscale_([0-9.]+)_arm\.tgz$/\1/' \
+            | sort -V | tail -n1
+          )
+          echo "Fallback version: $VERSION"
+        fi
+
         echo "RELEASE_VERSION=$VERSION" >> $GITHUB_ENV
         echo "version=$VERSION" >> $GITHUB_OUTPUT
     
@@ -128,8 +148,8 @@ jobs:
       run: |
         git config user.name "github-actions[bot]"
         git config user.email "github-actions[bot]@users.noreply.github.com"
-
-        git add */app/manifest.json releases/*
+        # Only commit manifests; do not track release artifacts
+        git add */app/manifest.json
         if git diff --cached --quiet; then
           echo "No changes to commit"
         else

.gitignore

@@ -1,2 +1,10 @@
 **/.DS_Store
 **/build
+
+# Do not track release artifacts
+releases/
+build/
+
+# Do not track downloaded Tailscale tarballs and temp bins
+tailscale_bins/
+*.tgz

aarch64/app/Tailscale_VPN

@@ -1,10 +1,30 @@
 #!/bin/sh
 
-    echo "Starting Service"
-    chmod 777 /usr/local/packages/Tailscale_VPN/lib/tailscale
-    chmod 777 /usr/local/packages/Tailscale_VPN/lib/tailscaled
-    /usr/local/packages/Tailscale_VPN/lib/tailscaled --socks5-server=localhost:1055 --tun=userspace-networking --socket=/usr/local/packages/Tailscale_VPN/tailscaled.sock &
-    echo "Service Started"
-    echo "Scroll to Bottom for link"
-    /usr/local/packages/Tailscale_VPN/lib/tailscale --socket=/usr/local/packages/Tailscale_VPN/tailscaled.sock up
-    wait
+echo "Starting Service"
+
+# Define paths
+APP_DIR="/usr/local/packages/Tailscale_VPN"
+STATE_DIR="$APP_DIR/localdata"
+
+# Create localdata directory if it doesn't exist
+mkdir -p "$STATE_DIR"
+
+# Set permissions
+chmod 777 "$APP_DIR/lib/tailscale"
+chmod 777 "$APP_DIR/lib/tailscaled"
+
+# Start tailscaled with state stored in localdata
+"$APP_DIR/lib/tailscaled" \
+    --state="$STATE_DIR/tailscaled.state" \
+    --socket="$STATE_DIR/tailscaled.sock" \
+    --socks5-server=localhost:1055 \
+    --tun=userspace-networking &
+
+echo "Service Started"
+sleep 2
+echo "Scroll to Bottom for link"
+
+# Run tailscale up with the socket in localdata
+"$APP_DIR/lib/tailscale" --socket="$STATE_DIR/tailscaled.sock" up
+
+wait

aarch64/app/manifest.json

@@ -8,11 +8,11 @@
             "embeddedSdkVersion": "3.0",
             "vendorUrl": "https://www.tailscale.com",
             "runMode": "once",
-            "version": "1.90.2",
+            "version": "1.94.2",
             "architecture": "aarch64"
         },
         "configuration": {
             "settingPage": "index.html"
         }
     }
-}
+}

aarch64_ROOT/app/Tailscale_VPN

@@ -1,10 +1,28 @@
 #!/bin/sh
 
-    echo "Starting Service"
-    chmod 777 /usr/local/packages/Tailscale_VPN/lib/tailscale
-    chmod 777 /usr/local/packages/Tailscale_VPN/lib/tailscaled
-    /usr/local/packages/Tailscale_VPN/lib/tailscaled &
-    echo "Service Started"
-    echo "Scroll to Bottom for link"
-    /usr/local/packages/Tailscale_VPN/lib/tailscale up --accept-routes
-    wait
+echo "Starting Service"
+
+# Define paths
+APP_DIR="/usr/local/packages/Tailscale_VPN"
+STATE_DIR="$APP_DIR/localdata"
+
+# Create localdata directory if it doesn't exist
+mkdir -p "$STATE_DIR"
+
+# Set permissions
+chmod 777 "$APP_DIR/lib/tailscale"
+chmod 777 "$APP_DIR/lib/tailscaled"
+
+# Start tailscaled with state stored in localdata
+"$APP_DIR/lib/tailscaled" \
+    --state="$STATE_DIR/tailscaled.state" \
+    --socket="$STATE_DIR/tailscaled.sock" &
+
+echo "Service Started"
+sleep 2
+echo "Scroll to Bottom for link"
+
+# Run tailscale up with the socket in localdata
+"$APP_DIR/lib/tailscale" --socket="$STATE_DIR/tailscaled.sock" up --accept-routes
+
+wait

aarch64_ROOT/app/manifest.json

@@ -12,11 +12,11 @@
           },
             "vendorUrl": "https://www.tailscale.com",
             "runMode": "once",
-            "version": "1.90.2",
+            "version": "1.94.2",
             "architecture": "aarch64"
         },
         "configuration": {
             "settingPage": "index.html"
         }
     }
-}
+}

aarch64_custom/app/config_updater.c

@@ -17,7 +17,9 @@
 #include <errno.h>
 
 #define APP_NAME "serverconfig"
-#define CONFIG_FILE "/usr/local/packages/serverconfig/config.txt"
+#define APP_DIR "/usr/local/packages/serverconfig"
+#define STATE_DIR APP_DIR "/localdata"
+#define CONFIG_FILE STATE_DIR "/config.txt"
 #define SCRIPT_PATH "/usr/local/packages/serverconfig/start_tailscale.sh"
 #define SCRIPT_SOURCE "/usr/local/packages/serverconfig/lib/start_tailscale.sh"
 
@@ -27,6 +29,19 @@ static gboolean signal_handler(gpointer loop) {
     return G_SOURCE_REMOVE;
 }
 
+// Create localdata directory
+static void ensure_localdata_exists(void) {
+    struct stat st = {0};
+    
+    if (stat(STATE_DIR, &st) == -1) {
+        if (mkdir(STATE_DIR, 0755) != 0) {
+            syslog(LOG_ERR, "Failed to create localdata directory: %s", strerror(errno));
+        } else {
+            syslog(LOG_INFO, "Created localdata directory: %s", STATE_DIR);
+        }
+    }
+}
+
 // Copy script from lib folder to main directory
 static void copy_script_file(void) {
     char buffer[4096];
@@ -109,6 +124,9 @@ static void update_config_file(AXParameter* handle) {
     gchar* key_value = NULL;
     FILE* file;
     
+    // Ensure localdata directory exists
+    ensure_localdata_exists();
+    
     // Get parameter values
     if (!ax_parameter_get(handle, "CustomServer", &server_value, &error)) {
         syslog(LOG_ERR, "Failed to get CustomServer: %s", 
@@ -125,7 +143,7 @@ static void update_config_file(AXParameter* handle) {
         key_value = g_strdup("");
     }
     
-    // Write to config file
+    // Write to config file in localdata
     file = fopen(CONFIG_FILE, "w");
     if (file) {
         fprintf(file, "custom_server=%s\n", server_value ? server_value : "");
@@ -135,12 +153,12 @@ static void update_config_file(AXParameter* handle) {
         // Set permissions to ensure the file is readable
         chmod(CONFIG_FILE, 0644);
         
-        syslog(LOG_INFO, "Updated configuration file: custom_server=%s", 
+        syslog(LOG_INFO, "Updated configuration file in local custom_server=%s", 
                server_value ? server_value : "");
-        syslog(LOG_INFO, "Updated configuration file: auth_key=%s", 
+        syslog(LOG_INFO, "Updated configuration file in local auth_key=%s", 
                key_value && strlen(key_value) > 0 ? "(set)" : "(empty)");
     } else {
-        syslog(LOG_ERR, "Failed to open config file for writing");
+        syslog(LOG_ERR, "Failed to open config file for writing: %s", strerror(errno));
     }
     
     // Clean up
@@ -185,6 +203,9 @@ int main(void) {
         exit(1);
     }
 
+    // Ensure localdata directory exists
+    ensure_localdata_exists();
+    
     // Ensure script is copied from lib folder
     copy_script_file();
 
@@ -229,4 +250,4 @@ int main(void) {
     ax_parameter_free(handle);
     
     return 0;
-}
+}

aarch64_custom/app/lib/start_tailscale.sh

@@ -5,10 +5,15 @@
 pkill -f tailscaled || true
 
 # Simple script to start Tailscale with custom configuration
-CONFIG_FILE="/usr/local/packages/serverconfig/config.txt"
-TAILSCALED_PATH="/usr/local/packages/serverconfig/lib/tailscaled"
-TAILSCALE_PATH="/usr/local/packages/serverconfig/lib/tailscale"
-SOCKET_PATH="/usr/local/packages/serverconfig/tailscaled.sock"
+APP_DIR="/usr/local/packages/serverconfig"
+STATE_DIR="$APP_DIR/localdata"
+CONFIG_FILE="$STATE_DIR/config.txt"
+TAILSCALED_PATH="$APP_DIR/lib/tailscaled"
+TAILSCALE_PATH="$APP_DIR/lib/tailscale"
+SOCKET_PATH="$STATE_DIR/tailscaled.sock"
+
+# Create localdata directory if it doesn't exist
+mkdir -p "$STATE_DIR"
 
 # Log to syslog
 logger -t "tailscale_script" "Starting Tailscale VPN service"
@@ -31,9 +36,13 @@ if [ -f "$CONFIG_FILE" ]; then
     done < "$CONFIG_FILE"
 fi
 
-# Start tailscaled
+# Start tailscaled with state stored in localdata
 logger -t "tailscale_script" "Starting tailscaled daemon"
-$TAILSCALED_PATH --socks5-server=localhost:1055 --tun=userspace-networking --socket=$SOCKET_PATH &
+$TAILSCALED_PATH \
+    --state="$STATE_DIR/tailscaled.state" \
+    --socket=$SOCKET_PATH \
+    --socks5-server=localhost:1055 \
+    --tun=userspace-networking &
 TAILSCALED_PID=$!
 
 # Wait for tailscaled to initialize

aarch64_custom/app/manifest.json

@@ -8,7 +8,7 @@
             "embeddedSdkVersion": "3.0",
             "vendorUrl": "https://www.tailscale.com",
             "runMode": "respawn",
-            "version": "1.90.2"
+            "version": "1.94.2"
         },
         "configuration": {
             "settingPage": "index.html",
@@ -26,4 +26,4 @@
             ]
         }
     }
-}
+}

arm/app/Tailscale_VPN

@@ -1,10 +1,30 @@
 #!/bin/sh
 
-    echo "Starting Service"
-    chmod 777 /usr/local/packages/Tailscale_VPN/lib/tailscale
-    chmod 777 /usr/local/packages/Tailscale_VPN/lib/tailscaled
-    /usr/local/packages/Tailscale_VPN/lib/tailscaled --socks5-server=localhost:1055 --tun=userspace-networking --socket=/usr/local/packages/Tailscale_VPN/tailscaled.sock &
-    echo "Service Started"
-    echo "Scroll to Bottom for link"
-    /usr/local/packages/Tailscale_VPN/lib/tailscale --socket=/usr/local/packages/Tailscale_VPN/tailscaled.sock up
-    wait
+echo "Starting Service"
+
+# Define paths
+APP_DIR="/usr/local/packages/Tailscale_VPN"
+STATE_DIR="$APP_DIR/localdata"
+
+# Create localdata directory if it doesn't exist
+mkdir -p "$STATE_DIR"
+
+# Set permissions
+chmod 777 "$APP_DIR/lib/tailscale"
+chmod 777 "$APP_DIR/lib/tailscaled"
+
+# Start tailscaled with state stored in localdata
+"$APP_DIR/lib/tailscaled" \
+    --state="$STATE_DIR/tailscaled.state" \
+    --socket="$STATE_DIR/tailscaled.sock" \
+    --socks5-server=localhost:1055 \
+    --tun=userspace-networking &
+
+echo "Service Started"
+sleep 2
+echo "Scroll to Bottom for link"
+
+# Run tailscale up with the socket in localdata
+"$APP_DIR/lib/tailscale" --socket="$STATE_DIR/tailscaled.sock" up
+
+wait

arm/app/manifest.json

@@ -8,11 +8,11 @@
             "embeddedSdkVersion": "3.0",
             "vendorUrl": "https://www.tailscale.com",
             "runMode": "once",
-            "version": "1.90.2",
+            "version": "1.94.2",
             "architecture": "armv7hf"
         },
         "configuration": {
             "settingPage": "index.html"
         }
     }
-}
+}

arm_ROOT/app/Tailscale_VPN

@@ -1,10 +1,28 @@
 #!/bin/sh
 
-    echo "Starting Service"
-    chmod 777 /usr/local/packages/Tailscale_VPN/lib/tailscale
-    chmod 777 /usr/local/packages/Tailscale_VPN/lib/tailscaled
-    /usr/local/packages/Tailscale_VPN/lib/tailscaled &
-    echo "Service Started"
-    echo "Scroll to Bottom for link"
-    /usr/local/packages/Tailscale_VPN/lib/tailscale up --accept-routes
-    wait
+echo "Starting Service"
+
+# Define paths
+APP_DIR="/usr/local/packages/Tailscale_VPN"
+STATE_DIR="$APP_DIR/localdata"
+
+# Create localdata directory if it doesn't exist
+mkdir -p "$STATE_DIR"
+
+# Set permissions
+chmod 777 "$APP_DIR/lib/tailscale"
+chmod 777 "$APP_DIR/lib/tailscaled"
+
+# Start tailscaled with state stored in localdata
+"$APP_DIR/lib/tailscaled" \
+    --state="$STATE_DIR/tailscaled.state" \
+    --socket="$STATE_DIR/tailscaled.sock" &
+
+echo "Service Started"
+sleep 2
+echo "Scroll to Bottom for link"
+
+# Run tailscale up with the socket in localdata
+"$APP_DIR/lib/tailscale" --socket="$STATE_DIR/tailscaled.sock" up --accept-routes
+
+wait

arm_ROOT/app/manifest.json

@@ -12,11 +12,11 @@
           },
             "vendorUrl": "https://www.tailscale.com",
             "runMode": "once",
-            "version": "1.90.2",
+            "version": "1.94.2",
             "architecture": "armv7hf"
         },
         "configuration": {
             "settingPage": "index.html"
         }
     }
-}
+}