Highlights
Headscale (custom control server) support
- New Control Server action to set a self-hosted Headscale URL; log in with a preauth key or a browser link
- No restart needed — machine name and serves are preserved across control-plane switches
- With a custom control server, serves use plain
http://(Headscale can't provision TLS certs) and Funnel is unavailable - Login, machine-name, and control-server changes converge the daemon through a single
tailscale upcall and re-apply serves automatically once logged in, so serves survive slow or interactive logins - Serve URL tiles no longer freeze: store/status files are written atomically, and URLs fall back to the tailnet IP when MagicDNS is unavailable
Tailscale updated from v1.98.9 to v1.98.10
All Platforms
- Tailscale SSH Unix socket forwarding now respects symlink permissions. Fixes TS-2026-004.
- Tailscale SSH no longer allows UIDs or numeric-only usernames. Fixes TS-2026-006.
What else
- build: upgrade
start-sdkto 2.0.9 (interface-resolution changes for StartOS 0.4's plugin host)
Requirements
This release requires StartOS 0.4.0-beta.10 or later.