1# Builds the official Tailscale v1.102.3 source at its verified commit with the2# narrow PortlistServices eventbus fix. Upstream issue: #18297.34FROM golang:1.26-alpine AS build5ARG TAILSCALE_COMMIT=53a0d659afa51835dd7a9283873cca44261454f86ARG VERSION_LONG=1.102.37ARG VERSION_SHORT=1.102.38ARG VERSION_GIT_HASH=53a0d659afa51835dd7a9283873cca44261454f89WORKDIR /go/src/tailscale10RUN apk add --no-cache git ca-certificates11RUN git init . \12 && git remote add origin https://github.com/tailscale/tailscale.git \13 && git fetch --depth=1 origin ${TAILSCALE_COMMIT} \14 && git checkout --detach ${TAILSCALE_COMMIT}15COPY tailscale-portlist.patch /tmp/tailscale-portlist.patch16RUN git apply /tmp/tailscale-portlist.patch17RUN go mod download18RUN go install \19 github.com/aws/aws-sdk-go-v2/aws \20 github.com/aws/aws-sdk-go-v2/config \21 gvisor.dev/gvisor/pkg/tcpip/adapters/gonet \22 gvisor.dev/gvisor/pkg/tcpip/stack \23 golang.org/x/crypto/ssh \24 golang.org/x/crypto/acme \25 github.com/coder/websocket \26 github.com/mdlayher/netlink27ARG TARGETARCH28RUN GOARCH=${TARGETARCH} go install \29 -tags=ts_kube,ts_package_container \30 -ldflags="-X tailscale.com/version.longStamp=${VERSION_LONG} -X tailscale.com/version.shortStamp=${VERSION_SHORT} -X tailscale.com/version.gitCommitStamp=${VERSION_GIT_HASH}" \31 ./cmd/tailscale ./cmd/tailscaled ./cmd/containerboot3233# Keep the official container filesystem, entry command, and runtime support.34FROM tailscale/tailscale@sha256:8c42c4574ab066384fcb72f69e086a2ff1dd3652eb6f56856cee34bcf0d2f68035COPY --from=build /go/bin/* /usr/local/bin/