Skip to content

v0.3.0 — CLI diagnostics and application proxies

Choose a tag to compare

View all tags
@abruption abruption released this 18 Oct 00:07
· 23 commits to main since this release
v0.3.0
60a2abf

What's new

  • Socket-aware CLI and diagnostics: dots-ts cli forwards Tailscale commands through the installation socket. Read-only doctor separates installed files, processes, socket response, backend authentication, proxy state and optional TCP reachability. Unsafe required-file symlinks are reported as unhealthy.
  • Opt-in application proxies: localhost SOCKS5 and HTTP CONNECT listeners are disabled by default. Configure desired state, then explicitly apply it from an independent Dots terminal, with daemon identity checks, bounded readiness and rollback.
  • Private HTTPS API guide: English/Korean examples cover explicit proxy routing, TLS trust, bearer authentication and network/application denials. The bounded example requires curl 8.4.0+ and clears inherited CA overrides.
  • Installation guidance: proxy-aware GitHub downloads, complete four-file installation and staged updates preserving existing identity.

Implemented in #24, with download documentation from #22. Tailscale remains pinned to 1.102.4.

Installation and upgrade

Download the ZIP/tar.gz source archive, or download all four files into the same directory:

  • tailscale-setup.sh
  • shim.py
  • dots-ts
  • dots_proxy.py

The two-file installation used by v0.2.0 is insufficient for this release. For an existing installation, follow the staged update/rollback instructions and preserve Tailscale state, SSH identity and proxy configuration. Publishing this release does not automatically upgrade your Dots environment.

Guides: English · 한국어

API recipe: English · 한국어

Verification and limits

  • 149 offline tests passed on Linux Python 3.11/3.13; the candidate suite also passed in Dots. Bash syntax and ShellCheck passed.
  • Live native SOCKS5/HTTP forwarding, explicit enable/disable and final strict-host-key SSH recovery passed.
  • A dedicated tailnet HTTPS API passed ten checks across both proxies: valid credentials, missing/wrong credentials, forbidden endpoint and untrusted certificate rejection.
  • A separate live network-policy experiment verified reachable → denied with server alive → reachable after original-policy restoration. Temporary credentials and API listeners were removed.

See the PR's dated evidence for precise revisions and scope. Automatic startup/recovery after VM replacement is not provided. The tested direct Dots Bash environment had read-only workspace access and no visibility of the GUI/SSH daemon socket; use the documented independent terminal for apply/recovery. Natural VM replacement, long-duration failure recovery and live forced-failure rollback remain research in #20.

Release commit and checksums

This release packages 60a2abf412a4929685e55c18ca90e0077bf3092f. Release-commit CI.

SHA256SUMS is also attached as a download.

4e848ead4aa540baacf2b9796d2bd2a8197fc67acaa1580c1c262663d8977290  dots-tailscale-v0.3.0.zip
1fad688fee774c599088cf25f4d8648838f87ef53eaa8117261b38dce5bc8a95  dots-tailscale-v0.3.0.tar.gz
f4116452ab0a894e0f26d0dfcfd05e81a56143cb95aab5a64e3d1f0722f2438b  tailscale-setup.sh
05b0d03e522599758905978248bb4667da95b933de68b18b9dec3b910b0409ed  shim.py
e60ffa4c5e68ccb7a000333de6b3ad2cc11112e3c70f118a2eee66457c6101ce  dots-ts
fa1da2050db3b87dd790ea905dc83bd4f6758fa562a67a03a45662530d95e904  dots_proxy.py
Assets 9
Loading