From 571405c4b6ebdd609c0b30aa368bbc84852b57a9 Mon Sep 17 00:00:00 2001
From: Paul Visscher <paulv@sfconservancy.org>
Date: Mon, 3 Nov 2025 21:54:30 -0500
Subject: [PATCH] add tool to build tailscale debs

---
 tailscale-build/README.md           | 12 ++++++++++++
 tailscale-build/mk-tailscale-deb.sh | 25 +++++++++++++++++++++++++
 2 files changed, 37 insertions(+)
 create mode 100644 tailscale-build/README.md
 create mode 100755 tailscale-build/mk-tailscale-deb.sh

diff --git a/tailscale-build/README.md b/tailscale-build/README.md
new file mode 100644
index 0000000..aec9034
--- /dev/null
+++ b/tailscale-build/README.md
@@ -0,0 +1,12 @@
+This is a script to build tailscale from source and create a corresponding debian package.
+
+To run:
+
+```
+git clone https://github.com/tailscale/tailscale/
+cd tailscale
+git checkout SOME_VERSION # eg v1.90.0
+bash ../mk-tailscale-deb.sh
+```
+
+A file named `conservancy-tailscale_VERSION_amd64.deb` should be created in the current directory.
diff --git a/tailscale-build/mk-tailscale-deb.sh b/tailscale-build/mk-tailscale-deb.sh
new file mode 100755
index 0000000..e71a94d
--- /dev/null
+++ b/tailscale-build/mk-tailscale-deb.sh
@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+
+set -e
+
+eval "$(./build_dist.sh shellvars)"
+ARCH=amd64
+NAME=conservancy-tailscale
+
+echo "[ ] packaging ${NAME}_${VERSION_SHORT}_${ARCH}.deb"
+
+./build_dist.sh tailscale.com/cmd/tailscale
+./build_dist.sh tailscale.com/cmd/tailscaled
+
+go run ./cmd/mkpkg \
+    --out=${NAME}_${VERSION_SHORT}_${ARCH}.deb \
+    --name=${NAME} \
+    --version=${VERSION_SHORT} \
+    --type=deb \
+    --arch=${ARCH} \
+    --postinst=./release/deb/debian.postinst.sh \
+    --postrm=./release/deb/debian.postrm.sh \
+    --prerm=./release/deb/debian.prerm.sh \
+    --description="The easiest, most secure, cross platform way to use WireGuard + oauth2 + 2FA/SSO" \
+    --configs=./cmd/tailscaled/tailscaled.defaults:/etc/default/tailscaled \
+    --files=./tailscale:/usr/bin/tailscale,./tailscaled:/usr/sbin/tailscaled,./cmd/tailscaled/tailscaled.service:/lib/systemd/system/tailscaled.service