2020-02-03 18:35:52 +00:00
|
|
|
// Copyright (c) 2020 Tailscale Inc & AUTHORS All rights reserved.
|
|
|
|
// Use of this source code is governed by a BSD-style
|
|
|
|
// license that can be found in the LICENSE file.
|
|
|
|
|
|
|
|
package ipn
|
|
|
|
|
|
|
|
import (
|
|
|
|
"errors"
|
|
|
|
)
|
|
|
|
|
|
|
|
// ErrStateNotExist is returned by StateStore.ReadState when the
|
2020-02-11 05:46:45 +00:00
|
|
|
// requested state ID doesn't exist.
|
|
|
|
var ErrStateNotExist = errors.New("no state with given ID")
|
2020-02-03 18:35:52 +00:00
|
|
|
|
2020-09-30 04:51:25 +01:00
|
|
|
const (
|
2020-09-28 23:28:26 +01:00
|
|
|
// MachineKeyStateKey is the key under which we store the machine key,
|
2021-10-28 18:40:44 +01:00
|
|
|
// in its key.NodePrivate.MarshalText representation.
|
2020-09-28 23:28:26 +01:00
|
|
|
MachineKeyStateKey = StateKey("_machinekey")
|
|
|
|
|
2020-09-30 04:51:25 +01:00
|
|
|
// GlobalDaemonStateKey is the ipn.StateKey that tailscaled
|
|
|
|
// loads on startup.
|
|
|
|
//
|
|
|
|
// We have to support multiple state keys for other OSes (Windows in
|
|
|
|
// particular), but right now Unix daemons run with a single
|
|
|
|
// node-global state. To keep open the option of having per-user state
|
|
|
|
// later, the global state key doesn't look like a username.
|
|
|
|
GlobalDaemonStateKey = StateKey("_daemon")
|
ipn, ipnserver, cmd/tailscale: add "server mode" support on Windows
This partially (but not yet fully) migrates Windows to tailscaled's
StateStore storage system.
This adds a new bool Pref, ForceDaemon, defined as:
// ForceDaemon specifies whether a platform that normally
// operates in "client mode" (that is, requires an active user
// logged in with the GUI app running) should keep running after the
// GUI ends and/or the user logs out.
//
// The only current applicable platform is Windows. This
// forced Windows to go into "server mode" where Tailscale is
// running even with no users logged in. This might also be
// used for macOS in the future. This setting has no effect
// for Linux/etc, which always operate in daemon mode.
Then, when ForceDaemon becomes true, we now write use the StateStore
to track which user started it in server mode, and store their prefs
under that key.
The ipnserver validates the connections/identities and informs that
LocalBackend which userid is currently in charge.
The GUI can then enable/disable server mode at runtime, without using
the CLI.
But the "tailscale up" CLI was also fixed, so Windows users can use
authkeys or ACL tags, etc.
Updates #275
2020-10-12 22:28:21 +01:00
|
|
|
|
|
|
|
// ServerModeStartKey's value, if non-empty, is the value of a
|
|
|
|
// StateKey containing the prefs to start with which to start the
|
|
|
|
// server.
|
|
|
|
//
|
|
|
|
// For example, the value might be "user-1234", meaning the
|
|
|
|
// the server should start with the Prefs JSON loaded from
|
|
|
|
// StateKey "user-1234".
|
|
|
|
ServerModeStartKey = StateKey("server-mode-start-key")
|
2020-09-30 04:51:25 +01:00
|
|
|
)
|
|
|
|
|
2020-02-03 18:35:52 +00:00
|
|
|
// StateStore persists state, and produces it back on request.
|
|
|
|
type StateStore interface {
|
2020-02-11 05:46:45 +00:00
|
|
|
// ReadState returns the bytes associated with ID. Returns (nil,
|
|
|
|
// ErrStateNotExist) if the ID doesn't have associated state.
|
2020-02-03 18:35:52 +00:00
|
|
|
ReadState(id StateKey) ([]byte, error)
|
2020-02-11 05:46:45 +00:00
|
|
|
// WriteState saves bs as the state associated with ID.
|
2020-02-03 18:35:52 +00:00
|
|
|
WriteState(id StateKey, bs []byte) error
|
|
|
|
}
|