Tailscale: ChromeOS+crostini installation steps are confusing and crash crostini

[dg9999cn]

I try to install tailscale in chromeos at its linux terminal by using debian stretch. When run tailscale up, I got the following error;sudo tailscale up
logtail started
Program starting: v0.97-45-g02c73501: []string{"tailscale", "up"}
LogID: 802........................a85
Failed to connect to connect to tailscaled. (safesocket.Connect: dial unix /var/run/tailscale/tailscaled.sock: connect: no such file or directory)

┆Issue is synchronized with this Asana task by Unito

[bradfitz]

You need to be running tailscaled before you can run tailscale.

[skarra]

Just to be clear, per the Linux installation instructions there is no explicit action to start tailscaled.

I ran into the same issue as OP in Crostini on a corp Pixelbook. I am not sure if something is blocked per our corp policy, or something about Crostini itself. Also on a "proper" debian box your instructions just worked; which indicates tailscaled failed to launch in Corstini.

@bradfitz - is tailscale known to work with Crostini?

[bradfitz]

Yes, I've heard tailscale works in Crostini. @apenwarr uses it IIRC, and we've heard a number of reports of people using it successfully. I haven't tried it myself as I don't have a ChromeOS device at the moment.

There's no explicit docs to start tailscaled because apt-get install tailscale's post-install step should be doing that automatically. I don't know which distro/init system Crostini uses. Perhaps it's different enough that the post-install isn't working.

/cc @danderson

[dg9999cn]

You need to be running tailscaled before you can run tailscale.

Sorry, I am not English native speaking.
Do you mean to sudo tailscaled before sudo tailscale up?
This is what I got, still don't work.
why there is /home/bradfitz/?

~$ sudo tailscaled
2020/04/04 19:13:45 logpolicy.Read /root/.cache/Tailscale/tailscaled.log.conf: open /root/.cache/Tailscale/tailscaled.log.conf: no such file or directory
logtail started
Program starting: v0.97-45-g02c73501: []string{"tailscaled"}
LogID: 5d.............41
17.8M/31.9M Starting userspace wireguard engine.
17.8M/31.9M external packet routing via --tun=tailscale0 enabled
17.9M/31.9M CreateTUN ok.
18.1M/31.9M Routine: event worker - started
18.2M/31.9M Interface set up
magicsock.Conn: starting endpoint update (initial)
18.3M/32.3M Device closing
19.0M/33.0M UDP bind has been updated
19.0M/33.0M Routine: event worker - stopped
magicsock.Conn.determineEndpoints: updateNetInfo: got STUN error: context canceled; missing replies from: derp1.tailscale.com:3478, derp2.tailscale.com:3478, derp3.tailscale.com:3478, derp4.tailscale.com:3478
magicsock.Conn: endpoint update (initial) failed: got STUN error: context canceled; missing replies from: derp1.tailscale.com:3478, derp2.tailscale.com:3478, derp3.tailscale.com:3478, derp4.tailscale.com:3478
18.9M/33.0M Interface closed
18.9M/33.0M NewUserspaceEngineAdv: exec: "iptables": executable file not found in $PATH
panic: close of closed channel

goroutine 1 [running]:
github.com/tailscale/wireguard-go/tun.(*NativeTun).Close(0x4000112200, 0x1a, 0x400001e0a0)
/home/bradfitz/src/tailscale.io/wireguard-go/tun/tun_linux.go:377 +0xc4
tailscale.com/wgengine.NewUserspaceEngine(0x40000feaa0, 0x56a93a, 0xa, 0x0, 0x6, 0x73, 0x4000157ec8, 0x1)
/home/bradfitz/src/tailscale.io/oss/wgengine/userspace.go:88 +0x2b0
main.main()
/home/bradfitz/src/tailscale.io/oss/cmd/tailscaled/tailscaled.go:73 +0x710

~$ sudo tailscale up
logtail started
Program starting: v0.97-45-g02c73501: []string{"tailscale", "up"}
LogID: 802........a85
Failed to connect to connect to tailscaled. (safesocket.Connect: dial unix /var/run/tailscale/tailscaled.sock: connect: no such file or directory)

[bradfitz]

18.9M/33.0M NewUserspaceEngineAdv: exec: "iptables": executable file not found in $PATH

Install iptables. I filed #254 so our packages depend on that and so apt-get will auto-install it.

[dg9999cn]

After install iptables, Control connection done. Ping works, wget works. I can see my device in admin console. but I can't access my other device A(100.x.x.x) via chrome in chromeos. My other device A(100.x.x.x) is web server.
I install tailscale in a raspberry device B(buster raspbian), I can It access webserver A via raspberry device B.
I guess it's about the linux and chrome is separated in some way in chromeos design.
~$ ping 100.x.x.x
PING 100.x.x.x 56(84) bytes of data.
64 bytes from 100.x.x.x: icmp_seq=1 ttl=64 time=15.0 ms

[bradfitz]

I guess it's about the linux and chrome is separated in some way in chromeos design.

Yes. In Crostini, only the sandbox can access the Tailscale network, not Chrome itself.

This will be fixed with our upcoming Android app.