tailscale (1.102.3-0+scutarius.harma3) adam; urgency=medium

  * Org-tagged version (spec 2026-09-06-release-channels-design.md sec. 8);
    no source change.

 -- Kristof Csillag <kristof.csillag@deai-labs.com>  Tue, 08 Sep 2026 08:45:09 +0200

tailscale (1.102.3-0scutarius2) adam; urgency=medium

  * init script: "start" on an already-running daemon is now a no-op that
    exits 0. It used to run "tailscaled --cleanup" first -- which tears down
    the netfilter rules, routes and DNS configuration of the LIVE daemon --
    and then exit 1 because start-stop-daemon had nothing to start.
    "start-stop-daemon --start" also gained --oknodo.
  * init script: an unknown action exits 2 (LSB "invalid argument"), not 3,
    and PATH puts the system directories first.
  * preinst: the pidfile is only acted on when the process it names is running
    one of the UNOWNED binaries being taken over. It previously matched every
    candidate directory including /usr/sbin, so a re-run could have killed the
    packaged daemon itself. preinst and postrm now honour DPKG_ROOT.
  * copyright: the BSD-3-Clause text is included verbatim, and vendor/* names
    its licences explicitly (Expat, BSD-3-Clause, Apache-2.0, MPL-2.0) instead
    of "various".
  * New: logrotate for /var/log/tailscaled.log (weekly, 4, copytruncate --
    the daemon holds the fd open and has no reopen action).
  * rules: /var/lib/tailscale ships 0700 (it holds the node's private key);
    dh_auto_configure and dh_auto_install are neutralised so upstream's
    Makefile can never run; dh_auto_test honours DEB_BUILD_OPTIONS=nocheck.

 -- Kristof Csillag <kristof.csillag@deai-labs.com>  Sun, 06 Sep 2026 23:56:47 +0200

tailscale (1.102.3-0scutarius1) adam; urgency=medium

  * First Scutarius package of tailscale: upstream v1.102.3
    (53a0d659afa51835dd7a9283873cca44261454f8) plus the owner's patch
    net/dns: recompile DNS config when the OS base config changes on disk
    (976d76d1520302062da483e8b9ea924d9a04354d).
  * Packaging is ours (no Debian or Devuan package exists): sysvinit script,
    /etc/default/tailscaled from upstream, vendored Go modules as an orig
    component tarball, built offline with golang-1.26-go from the freia slice.
  * preinst takes over a hand-installed tailscale (stops it, renames the
    binaries on PATH to .disabled, moves its init script to /var/backups,
    keeps /var/lib/tailscale).
  * Spec: docs/superpowers/specs/2026-09-06-tailscale-package-design.md.

 -- Kristof Csillag <kristof.csillag@deai-labs.com>  Sun, 06 Sep 2026 21:19:39 +0200
