Tailscale for codespaces

Author: nooobcoder

.devcontainer/.codespace.Dockerfile

@@ -0,0 +1,25 @@
+# Copyright (c) 2021 Tailscale Inc & AUTHORS All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+FROM mcr.microsoft.com/vscode/devcontainers/universal:linux as builder
+USER root
+
+# Magic DNS in a container where /etc/resolv.conf is a bind mount needed
+# extra support, currently on a development branch.
+WORKDIR /go/src/tailscale
+COPY . ./
+RUN git clone https://github.com/tailscale/tailscale.git && cd tailscale && \
+    go mod download && \
+    go install -mod=readonly ./cmd/tailscaled ./cmd/tailscale
+COPY . ./
+
+FROM mcr.microsoft.com/vscode/devcontainers/universal:linux
+USER root
+
+RUN apt-get update && apt-get install -y curl gpg dnsutils
+COPY tailscaled /etc/init.d
+COPY --from=builder /go/bin/tailscaled /usr/sbin/tailscaled
+COPY --from=builder /go/bin/tailscale /usr/bin/tailscale
+
+RUN mkdir -p /var/run/tailscale /var/cache/tailscale /var/lib/tailscale

.devcontainer/devcontainer.json

@@ -0,0 +1,11 @@
+{
+  "name": "Tailscale-enabled Codespace",
+  "dockerFile": ".codespace.Dockerfile",
+  "context": "..",
+  "runArgs": [
+    "--cap-add=NET_ADMIN",
+    "--cap-add=NET_RAW",
+    "--device=/dev/net/tun"
+  ],
+  "postStartCommand": "/etc/init.d/tailscaled start",
+}

tailscaled.service

@@ -1,7 +1,4 @@
 #!/bin/sh
-# Copyright (c) 2021 Tailscale Inc & AUTHORS All rights reserved.
-# Use of this source code is governed by a BSD-style
-# license that can be found in the LICENSE file.
 
 ### BEGIN INIT INFO
 # Provides:             tailscaled
@@ -32,10 +29,10 @@ export PATH="${PATH:+$PATH:}/usr/sbin:/sbin"
 case "$1" in
   start)
         log_daemon_msg "Starting Tailscale VPN" "tailscaled" || true
-        if start-stop-daemon --start --quiet --oknodo --pidfile /run/tailscaled.pid --background \
-                --exec sudo /usr/sbin/tailscaled -- --state=/var/lib/tailscale/tailscaled.state \
+        if start-stop-daemon --start --quiet --oknodo --chuid 0:0 --pidfile /run/tailscaled.pid --background \
+                --exec /usr/sbin/tailscaled -- --state=/var/lib/tailscale/tailscaled.state \
                 --socket=/run/tailscale/tailscaled.sock --port 41641; then
-            sudo -E tailscale up --hostname=gitpod --authkey=${TAILSCALE_AUTHKEY} --netfilter-mode=off
+            tailscale up --authkey=${TAILSCALE_AUTHKEY} --netfilter-mode=off
             log_end_msg 0 || true
         else
             log_end_msg 1 || true