Skip to main content
emisar

Tailscale

v0.1.9

Inspect the host's Tailscale node via the tailscale CLI: tailnet status and peer/online map, network connectivity (netcheck DERP latency, port-mapping), ping to peers, whois lookups, this node's tailnet IPs, version, available exit nodes, MagicDNS/DNS config, and the current prefs (advertised routes, configured exit node). Read-only.

9 allowed by default
Pack ID
tailscale
Vendor
emisar
OS
linux
Actions
9
Required binaries. Install these on the host before relying on the pack. An action that calls a missing binary fails at run time.
tailscale

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below before copying it into the runner's packs dir. That hash covers the exact bytes this page was built from, so a tampered copy is rejected. The command reloads a running daemon itself, so you don't need to restart it manually.

on the runner host 
sudo emisar pack install tailscale --hash sha256:0ec0a4d544d15c1d9a04865a9b969d6742cbf89410d6fde876f9346fea7c25b1

Setup

Reads the local host's Tailscale state via the tailscale CLI — no credentials needed. On standard Linux installs, tailscaled authorizes these read-only LocalAPI calls for ordinary local users.

Notes

  • Every action in this pack is read-only — it only reads tailnet/node state and never changes configuration, routes, or the exit node.
  • On standard Linux tailscaled accepts read-only CLI requests from ordinary local users; do not set --operator for this pack because that grants configuration authority these actions do not need.
  • TLS cert expiry is intentionally NOT in this pack: tailscale cert issues/renews a certificate (a mutator), so it would not be read-only. To check a cert's expiry read-only, use emisar's ssl-local or network-tls pack instead.

Verify it works

Runs tailscale.version, a low-risk read that confirms the pack can reach its target. Run it on the host once the pack is installed; pack install runs it for you.

on the runner host 
sudo emisar pack verify tailscale

Install and configure a pack walks through the whole sequence on a host.

Actions 9 total

View on GitHub
  • tailscale.debug_prefs exec low Low: read-only or trivially reversible

    tailscale debug prefs

    Show current node prefs as JSON, including AdvertiseRoutes (this node's advertised subnet routes) and ExitNodeIP/ExitNodeID (the configured exit node, if any). Read-only print of the in-memory prefs.

    View source on GitHub
  • tailscale.dns_status exec low Low: read-only or trivially reversible

    tailscale dns status

    Show MagicDNS and DNS configuration for this node — nameservers, search domains, split-DNS routes, and whether MagicDNS is enabled.

    View source on GitHub
  • tailscale.exit_node_list exec low Low: read-only or trivially reversible

    tailscale exit-node list

    List available exit nodes on the tailnet (hostname, country, city, status). Succeeds with no rows when the tailnet has no exit nodes (a benign empty state); a real failure (tailscaled down / not logged in) still reports failed.

    View source on GitHub
  • tailscale.ip exec low Low: read-only or trivially reversible

    tailscale ip

    Show this node's tailnet IPs (IPv4 and IPv6).

    View source on GitHub
  • tailscale.netcheck exec low Low: read-only or trivially reversible

    tailscale netcheck --format=json

    Show network connectivity report as JSON — DERP latency, UDP reachability, IPv4/IPv6 support, port-mapping (UPnP/PMP/PCP), and PreferredDERP.

    View source on GitHub
  • tailscale.ping exec low Low: read-only or trivially reversible

    Ping a Tailscale peer

    Ping a remote tailnet peer and show each reply's path (direct or DERP) and latency. Send count probes (default 5, max 20), waiting up to five seconds per probe, and succeed if any reply arrives. Resolution and LocalAPI errors still fail; a local-node target is reported without sending peer probes.

    View source on GitHub
  • tailscale.status exec low Low: read-only or trivially reversible

    tailscale status --json

    Show tailnet status as JSON — the peer/online map: Self, Peer{}, Online, ExitNodeStatus, TailscaleIPs, and Health.

    View source on GitHub
  • tailscale.version exec low Low: read-only or trivially reversible

    tailscale version --json

    Show Tailscale client version and build info as JSON.

    View source on GitHub
  • tailscale.whois exec low Low: read-only or trivially reversible

    tailscale whois --json <ip>

    Show which tailnet node and user own a Tailscale IP — returns the node, user, and capabilities as JSON.

    View source on GitHub
← Back to registry
Pack reference  Publish your own