v0.3.3

What's Changed

• Open the plugin socket without waiting for Docker; release v0.3.3 by Moritz Mazetti (@Radiergummi) in #128

Full Changelog: v0.3.2...v0.3.3

Fixed

• With TSLINK_ISOLATE_HOST_TAILNET on, the plugin no longer comes up disabled after a host reboot. It listed Docker's bridge networks before opening its socket, and Docker, which answers no API call involving plugins until the socket is open, gave up waiting and disabled it. The plugin now starts with the bridges Docker listed last, saved in the data directory as bridges, and lists them once Docker answers.

Release checks

On fa5ca3d (docs/releasing.md): CI green (34 checks); weekly fuzz run within 7 days (2026-10-12); red team on the testbed (Docker 29.9.0, kernel 6.8) passed; test/security/report.sh reports nothing missing. No guarantee is marked Manual:.

Guarantees and their tests

• G1: pkg/docker/driver_test.go:792 pkg/docker/isolation_test.go:50 pkg/docker/isolation_test.go:78 pkg/docker/isolation_test.go:124 pkg/docker/isolation_test.go:156 pkg/netutil/bypass_test.go:12 pkg/netutil/container_test.go:56 pkg/netutil/isolate_test.go:91 pkg/netutil/isolate_test.go:178 pkg/netutil/isolate_traffic_test.go:256 pkg/netutil/procs_test.go:212 pkg/netutil/repair_traffic_test.go:132 pkg/netutil/tailnet_test.go:83 test/integration/run.sh:382 test/integration/run.sh:384 test/integration/run.sh:386 test/integration/run.sh:388 test/integration/run.sh:391
• G2: pkg/netutil/isolate_test.go:205 pkg/netutil/isolate_traffic_test.go:179 pkg/netutil/isolate_traffic_test.go:211 pkg/netutil/procs_test.go:212 pkg/netutil/repair_traffic_test.go:132 test/integration/run.sh:461 test/integration/run.sh:462 test/integration/run.sh:465
• G4: pkg/core/config_test.go:143 pkg/core/network_test.go:309 pkg/core/network_test.go:354 pkg/core/statedir_fuzz_test.go:86 pkg/core/statedir_fuzz_test.go:107
• G5: pkg/docker/credentials_test.go:41 pkg/tailscale/authkey_test.go:144 pkg/tailscale/authkey_test.go:163 pkg/tailscale/logout_test.go:262 pkg/tailscale/resolver_test.go:264 pkg/tailscale/up_test.go:66 pkg/tailscale/up_test.go:107 pkg/tailscale/up_test.go:131 test/integration/run.sh:588 test/integration/run.sh:589 test/integration/run.sh:590 test/integration/run.sh:591