How to setup Tailscale on NETGEAR READYNAS Devices

READYNAS-Tailscale.md

How to setup Tailscale on NETGEAR READYNAS Devices

Download and Extract Tailscale

1. Go to the the Tailscale Linux Download Website and select 'Other' as the distro.
2. Enable SSH on the NAS, and SSH into the admin account
3. Do su and type in the admin password
4. Download the stable release for 'arm' not arm64 in the admin home directory
5. Unpack the archive with tar xvf tailscale_VERSION_ARCH.tgz

Moving files into locations

1. tailscale -> /usr/bin
2. tailscaled -> /usr/sbin
3. systemd/tailscaled.service -> /etc/systemd/system

Chmoding files to execute

1. chmod +x /usr/bin/tailscale
2. chmod +x /usr/sbin/tailscaled

Editing the systemd service to work

1. Remove lines 4 & 5 (the Wants= line and After= line)
2. Remove line 8 (the EnvironmentFile= line)
3. Remove everything after tailscaled.sock on the line starting with ExecStart=

The file should look like this

Starting / Enabling the service

1. systemctl start tailscaled
2. tailscale up
3. systemctl enable tailscaled

Done! 🎉

Tell me if anything is broken or doesn't work.

For anyone using the ReadyNAS 212, I did the following to get things humming away on my NAS. ReadyNAS 212 runs Debian 8 (Jessie). This can be confirmed by running cat /etc/os-release, which should give an output similar to this:

root@NAS:~# cat /etc/os-release
PRETTY_NAME="ReadyNASOS 6.10.10"
NAME="Debian GNU/Linux"
VERSION_ID="8"
VERSION="8 (jessie)"
ID=debian
HOME_URL="http://www.debian.org/"
SUPPORT_URL="http://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

Here are the modified instructions for ReadyNAS 212:

---

Install Tailscale on Netgear ReadyNAS 212

Download and Extract Tailscale

1. Go to the the Tailscale static binaries download page and copy the link to the 'arm' version (not arm64 - I had troubles with the 64-bit binary).
2. Enable SSH on the NAS, and SSH in as root user using the admin password
3. Make sure you're connected as the root user by running:

su -

4. Download the Tailscale arm binary to your current working directory using cURL (replace with the url you copied in step 1):

curl -O https://pkgs.tailscale.com/stable/tailscale_1.90.9_arm.tgz

5. Unpack the archive (replace version as required):

tar xvf tailscale_1.90.9_arm.tgz

Moving files into locations

1. Enter the unpacked directory (replace version as required):
   cd tailscale_1.90.9_arm
2. Move the service files where they need to live:

mv tailscale /usr/bin
mv tailscaled /usr/sbin
mv systemd/* /etc/systemd/system

3. Remove the archive and the leftover files as they are no longer required:

cd ../
rm -dfr tailscale_1.90.9_arm # replace version as required
rm tailscale_1.90.9_arm.tgz # replace version as required

Chmoding files to execute

1. Make the service files executable:

chmod +x /usr/bin/tailscale
chmod +x /usr/sbin/tailscaled

Fixing the tailscaled service to work on ReadyNAS

1. Edit your tailscaled.service file:

nano /etc/systemd/system/tailscaled.service

it should look like this:

[Unit]
Description=Tailscale node agent
Documentation=https://tailscale.com/kb/

[Service]
ExecStart=/usr/sbin/tailscaled --state=/var/lib/tailscale/tailscaled.state --socket=/run/tailscale/tailscaled.sock
ExecStopPost=/usr/sbin/tailscaled --cleanup

Restart=on-failure

RuntimeDirectory=tailscale
RuntimeDirectoryMode=0755
StateDirectory=tailscale
StateDirectoryMode=0700
CacheDirectory=tailscale
CacheDirectoryMode=0750
Type=notify

[Install]
WantedBy=multi-user.target

2. Make sure the service permissions are sensible and accessible to the root user:

chmod 644 /etc/systemd/system/tailscaled.service
chown root:root /etc/systemd/system/tailscaled.service

3. Create the state directory so tailscale can persist data properly:

mkdir -p /var/lib/tailscale

Starting / Enabling the service

1. Tell systemd to re-read units, enable, and then start the tailscale service:

systemctl daemon-reload
systemctl enable tailscaled
systemctl start tailscaled
systemctl status tailscaled --no-pager -l

If this has all worked, you should see the tailscale service status as active (running)

Done! 🎉

Complete the setup by running tailscale up and follow the prompts!

Hello [tux7k], Thanks for your reply. I don't know much about the innards of Linux. From the text of the error message, and some update attempts, some kenel component needs to be updated — which is very tricky, if not hopeless. But you knowledge of Linux is surely far deeper than mine. If you ever find a way, please post it here and send me an e-mail.

@rlsx The ReadyNAS kernal doesn't have the iptables NAT table/module available, so exit node, subnet routing, and stateful filtering aren't going to be possible on the ReadyNAS without rebuilding or patching the kernal yourself.. which is just crazy overkill (and likely not even possible) on a blackbox appliance like this.

You can get rid of the warning by running tailscale with netfilter mode turned off:

tailscale up --reset --netfilter-mode=off

but it's not going to do anything to make exit nodes/subnet routing possible it'll just give you a quieter health report by disabling Tailscale's automatic iptables manipulation.