I want to install Tailscale in KairOS, what should I do?

[east4ming]

The distribution I chose is debian from the official kairos repositories. and tried to download and install tailscale directly from the web by installing cloud-config.yaml during the kairos installation.

yaml as follows:

#cloud-config

hostname: "master-0"
# Define the user accounts on the node.
users:
  - name: "casey" # The username for the user.
     ...
  
stages:
  boot:
    - name: "Install tailscale"
      commands:
        - |
          set -ex
          curl -fsSL https://dl.tailscale.com/stable/tailscale_1.68.1_amd64.deb -o /tmp/tailscale.deb && dpkg -i /tmp/tailscale.deb
k3s:
  enabled: true # Set to true to enable K3s.
  args:
    - --disable "servicelb"
    - --disable-cloud-controller
    - --vpn-auth "name=tailscale,joinKey=tskey-auth-....."

However, the boot stages report an error that the relevant directory is read-only and the installation fails. What should I do?

I've seen the author mention a tailscale success story, but I haven't found the details.

Thanks

[andreyrd]

You can do it by building a custom container image:

Containerfile using rockylinux:9-standard-amd64-generic-v3.1.3-k3sv1.31.0-k3s1 as the example base image:

FROM quay.io/kairos/rockylinux:9-standard-amd64-generic-v3.1.3-k3sv1.31.0-k3s1

# Install Tailscale
RUN dnf install -y 'dnf-command(config-manager)'
RUN dnf config-manager --add-repo https://pkgs.tailscale.com/stable/rhel/9/tailscale.repo
RUN dnf install tailscale -y
RUN systemctl enable tailscaled

Build this container, push it somewhere you can access during install, and pass it in --source oci:repo/image:tag flag for kairos-agent upgrade or kairos-agent manual-install.

See https://kairos.io/docs/advanced/customizing/