Tailscale CLI install guide please

I would like to install tailscale on my PIFI, but unfamiliar with OpenWrt. Not asking for GUI support at this time. However, it would be extremely helpful if you could provide a guide with step by step instructions to install tailscale on the PIFI. I am a PIFI kit owner.

Thanks so much.

I’ll set it up on mine then add the steps to the docs and link here

Can I ask if Pi 4 or Pi 5 out of interest?

I’m using a Pi4. Thanks so much! :slight_smile:

^ Here’s a video and here’s the guide where you can copy/paste commands: pifi.org/tailscale

P.S Fully plan to integrate this natively in firmware and app so it won’t be needed to install manually. But it’s a fairly copy/paste job for now. Let me know how you get on!

This is fantastic! Thanks so much for taking the time to provide this tailscale tutorial. I can’t wait to try this, but before I proceed I do have a question regarding step 3.3:

3.3 Run this command to make the app/LuCI compatible with Tailscale
tailscale up --advertise-routes=10.0.0.0/24,10.0.1.0/24 --accept-routes --advertise-exit-node

My purpose for having tailscale on the Pifi is to replace my vpn connection with the tailscale connection. When I connect to the Pifi from any device whether that is my phone, laptop, tablet, etc, I want each device to have access to my home LAN resources such as NAS, media server, etc and use an existing exit node on my tailnet. The exit node on my tailnet is on my home LAN and routes all outbound wan traffic to my vpn server.

I want to avoid having to install tailscale app on all my devices as they increase battery drain. Rather, I want to join the pifi network which is connected to tailscale and access LAN resources and the internet.

To achieve this functionality, would I replace your command 3.3 with this command?
tailscale up --exit-node=<exit-node-ip|name> --exit-node-allow-lan-access

Thank you!

Update, I did replace your command 3.3 with
tailscale up --exit-node=<exit-node-ip|name> --exit-node-allow-lan-access

When a device is connected to Pifi, I am able to access my LAN resources, but unable to access the internet for Wan traffic through my exit node. All outbound internet traffic is not working. When my phone is connected to Pifi, it says connected, but no internet access.
tailscale down and internet access returns. With tailscale up I lose internet access. It appears to be either firewall, dns or misconfiguration somewhere.

Also, on tailscale dashboard under Pifi node, is this warning:

Security update available

This machine is running a version with a known security vulnerability. It’s recommended to update to 1.82.5.

/etc/config/network or /etc/config/firewall will show configurations for any potential misconfiguration

You can also restore the default firewall/network for PiFi (sans-tailscale support) by:

cp /etc/sysp/defaults/restoreconfig/network /etc/config;
uci commit network;
cp /etc/sysp/defaults/restoreconfig/firewall /etc/config;
uci commit firewall;
service network reload;
service firewall reload

That will clear any of the changes to firewall and network and should bring online post-misconfiguration

**
Security update
I’ll try and share a script with you tomorrow. I’ll also do a bit more testing as I’ll bring official tailscale support without needing any config as I think this would be a great addition.

1 Like

Thank you. I 100% agree it would be a great addition to PiFi. Note, GL.iNet travel routers are moving in the same direction, adding official support to many of their routers. Their GUI approach looks impressive. I just don’t like their hardware and would love to see similar functionality eventually come to the PiFi app. In the meantime, I’m happy to add tailscale via the CLI and look forward to receiving your script. Thanks again for your support. Much much appreciated! :smile:

Hi, I understand you’re super busy, but politely checking in on tailscale. Thanks.

Do apologise, slipped my mind

Will send over updated guide today

Great, thanks so much! Looking forward to receiving it. :slight_smile: