gokrazy VS tailscale

Switching to gokrazy[0] was the best thing I did for my Raspberry Pi uptimes. I think a lot of that is because it defaults to using read-only partitions so the common issue of SD cards falling over when you run apt upgrade no longer happens.

But I also think that gokrazy's simplicity and design helps it be just a solid, reliable foundation to build on top of.

[0]: https://gokrazy.org/

The idea there sounds a lot like https://gokrazy.org/, which builds a minimal go userland, wrapping one or more user provided go applications, and bundles in a linux kernel.

Targets mostly at single board computers, and I think it downloads pre-built kernels (and bootloaters if needed), rather than trying to build them directly, since getting a working cross compilation toolchain set up and plumbed into the kernel compilation process is still a pain.

I've personally only used yocto/open-embedded for that which does nicely handle building the cross-compilation toolchain, kernel image, and modules. But it is kinda overkill for that task, being designed to build a whole userland too.

reminds me of https://github.com/gokrazy/gokrazy which does similar things.

https://gokrazy.org/ would like a word

Fun! We have support for running on gokrazy (https://gokrazy.org/) already, and that's probably where Unikernel Linux is more applicable for us, for when people just want a "Tailscale appliance" image.

I'll email you.

gokrazy exists! https://github.com/gokrazy/gokrazy

https://github.com/gokrazy/gokrazy for one example

Tailscale - Built on WireGuard. Easy to use. Control server is closed source. Client code available with a BSD3 license + separate patents file.

Tailscale

I'm using the GitHub version of tailscaled on one of my Macs as a background daemon launched at boot. To upgrade to the latest version, try the following:

Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It enables encrypted point-to-point connections using the open source WireGuard® protocol, which means only devices on your private network can communicate with each other.

Might be possible to do using a VPN as long as you can get broadcast/multicast packets forwarded.

Tailscale unfortunately doesn't support it...yet?

https://github.com/tailscale/tailscale/issues/1013

Tailscale - Make depaware output patch compatible

Tailscale is another way of doing it. I'm using it to access my Pi's Samba shares from my phone but it works from Windows as well.