Skip to main content

​
pan tailscale

Reach this machine over Tailscale: see where Tailscale stands, walk the setup from a terminal, and list the other Overdeck machines on your tailnet. Settings → Anywhere → Set up Tailscale does the same in the dashboard. See Tailscale for what each step does.

​
pan tailscale status

Prints the mode (system, app or userspace), version, backend state, MagicDNS name, signed-in account, HTTPS certificates, the Serve address (or off), whether token sign-in is required, and the next setup step with what to do about it. When Tailscale is running it also lists the Overdeck machines on the tailnet.
When Tailscale is not installed it prints Tailscale is not installed. Run `pan tailscale setup`. and exits 0. status always exits 0; it only reads.

​
pan tailscale setup

Reads Tailscale’s state, acts on the next step, and repeats until Tailscale is ready (at most 8 steps):
  • Install, start the daemon, operator: runs the command in your terminal with its output and input passed through, so you type any sudo password yourself. A platform Overdeck cannot install on prints the instructions and a link instead.
  • Sign in: prints Open this link to sign in: <url> and waits up to 10 minutes for the sign-in to finish. If sign-in is denied because this user is not the Tailscale operator, setup runs sudo tailscale set --operator=<you> and tries sign-in once more.
  • Turn on HTTPS: prints the link to the tailnet DNS settings and exits 1. Run pan tailscale setup again after turning on MagicDNS and HTTPS certificates.
  • Turn on HTTPS access, protect the dashboard: asks the running dashboard to turn on protected Serve HTTPS (POST /api/tailscale/serve). That also turns on Require a token to sign in; new browsers must pair.
  • Ready: prints the Serve address, the pan pair --url hint, and the Overdeck machines on the tailnet, then exits 0.
The Serve step goes through the dashboard because the token sign-in and trusted-address caches live in the dashboard process. --userspace stops with exit 1 and an explanation in this release, because userspace mode is off until it passes a live check (see Userspace mode).

​
Exit codes

​
Errors

  • No running dashboard at the Serve step: Overdeck dashboard is not running; start it with `pan up`., exit 1.
  • A dashboard that rejects this machine’s internal token (for example a pan serve server): The dashboard rejected this machine's internal token. `pan tailscale setup` needs a dashboard started by `pan up`., exit 1.
  • A step that stays the same after its action and one retry: Setup is still at "<step>". with what to do, exit 1.