This ACAP packages the scripts and files required to install the Tailscale VPN client on Axis Cameras.
Current version 1.84.0
https://tailscale.com/changelog/
The "ROOT" versions require root privileges on the camera and will not work on OS 12 up.
If you like my work and want to help me to keep maintaining it, a sponsor would be amazing, every bit helps.
I have added a new "custom" version (Tailscale_VPN_Custom_1_84_0_aarch64.eap) which allows you to set a custom server and auth key for use of headscale.
Click the three dots then "settings" to add your details. If you get a tls error restart the app.
Please give it a try and let me know if it works well or if you have issues.
We have found a way to run the Tailscale ACAP without root privileges allowing it to run on Axis OS 12.
Please note this new version runs in user space networking mode and therefore has some limitations, most notably the camera will not be able to connect out to other Tailscale nodes. This does not affect the normal use case of using Tailscale to connect to the camera. If you require full functionality, please do not upgrade to Axis OS 12 and use the version marked "ROOT".
The changes are implemented from version 1.68.1 of the acap.
Thank you for your continued support.
Adding a VPN client directly to the camera allows secure remote access to the device without requiring any other equipment or network configuration. Tailscale achieves this in a secure, simple to setup and easy to use way. Tailscale is based on WireGuard VPN tunneling technology.
https://tailscale.com/blog/how-tailscale-works/
https://github.com/tailscale/tailscale
The Tailscale ACAP is compatable with Axis cameras with arm and aarch64 based Soc's.
curl --anyauth "*" -u <username>:<password> <device ip>/axis-cgi/basicdeviceinfo.cgi --data "{\"apiVersion\":\"1.0\",\"context\":\"Client defined request ID\",\"method\":\"getAllProperties\"}"
where <device ip> is the IP address of the Axis device, <username> is the root username and <password> is the root password. Please
note that you need to enclose your password with quotes (') if it contains special characters.
The recommended way to install this ACAP is to use the pre built eap file. Go to "Apps" on the camera and click "Add app".
The Tailscale ACAP will run a script on startup that sets the required permissions and starts the service and app. Once started click "Open" to see the output of the logs for further instructions and obtain the authetication URL.
When uninstalling the ACAP, all changes and files are removed from the camera.
You will need a tailscale.com account to use the ACAP
The eap files will be updated from time to time and simply installing the new version over the old will update all files.
It's also possible to build and use a locally built image as all necesary files are provided.
Replace binaries "tailscale" and "tailscaled" in lib folder with new versions. Make sure you use the files for the correct Soc.
Latest versions can be found at
https://pkgs.tailscale.com/stable/#static
To build, From main directory of the version you want (arm/aarch64)
docker build --tag <package name> .
docker cp $(docker create <package name>):/opt/app ./build
Thanks to wesQ3 there is now also a version in the "all" folder with a script that simplifies the build process with the following changes.
-
Architecture specific build directories are not required, target arch is now an argument
-
manifest files are templated as part of the build
-
Tailscale binaries are downloaded as part of the build