OpenWrt Tailscale Repository

Opkg feed for Tailscale

Tailscale packages

Backport of the latest Tailscale to OpenWrt 19.07.

These are built as combined binaries and compressed with UPX to reduce disk space, and are patched to not conflict with mwan3.

Browse

Installation

Add this repository feed by following the instructions below or manually download and install the correct ipk file from the above link.

NOTE: It is normal for the installation to give an error about a failed log upload after finishing when the service starts.

NOTE: This repository signs its package index. For signature verification, add the signing key before updating feeds:

wget -O /tmp/openwrt-tailscale.pub https://lanrat.github.io/openwrt-tailscale-repo/keys/public.pub
opkg-key add /tmp/openwrt-tailscale.pub
rm /tmp/openwrt-tailscale.pub

If you prefer to skip signature verification, you can use option check_signature 0 in your feed line instead (see legacy instructions below).

Prerequisites: HTTPS connections to GitHub require SSL support. Install these packages first if not already present:

opkg install ca-bundle ca-certificates libustream-openssl

Web UI

Navigate to System -> Software

Add the following feed to /etc/opkg/customfeeds.conf

src/gz openwrt-tailscale https://lanrat.github.io/openwrt-tailscale-repo/packages/19.07

Update the feeds

Search for tailscale, and install it.

CLI

opkg install ca-bundle ca-certificates libustream-openssl
wget -O /tmp/openwrt-tailscale.pub https://lanrat.github.io/openwrt-tailscale-repo/keys/public.pub
opkg-key add /tmp/openwrt-tailscale.pub
rm /tmp/openwrt-tailscale.pub
echo "src/gz openwrt-tailscale https://lanrat.github.io/openwrt-tailscale-repo/packages/19.07" >> "/etc/opkg/customfeeds.conf"
opkg update
opkg install tailscale

Without signature verification (legacy)

If your router does not support opkg-key or you prefer not to verify signatures:

echo "src/gz openwrt-tailscale https://lanrat.github.io/openwrt-tailscale-repo/packages/19.07 option check_signature 0" >> "/etc/opkg/customfeeds.conf"

Configuration

After installation tailscaled should already be running and waiting for you to login and configure it.

For example:

tailscale up --accept-dns=false --advertise-routes=10.0.0.0/24 --advertise-exit-node

What about OpenWrt 21.02+?

Tailscale is already in the default feeds for newer versions of OpenWrt.