tailscale / tailscale

The easiest, most secure way to use WireGuard and 2FA.
https://tailscale.com
BSD 3-Clause "New" or "Revised" License
16.89k stars 1.28k forks source link

cmd/containerboot: wait on tailscaled process only #11897

Closed irbekrm closed 3 weeks ago

irbekrm commented 3 weeks ago

See #11893 for context- this fixes a race condition in iptables mode where containerboot was running wait syscall against all its subprocesses and causing iptables commands ran with go.Run crash the container.

Containerboot now waits on tailscaled process only - there is no other process running in the container post-start that we should be attempting to clean up.

Updates tailscale/tailscale#11893