Setup Tailscale on an immutable Linux system (e.g. GNOME OS or Fedora Silverblue)

main.sh

#!/bin/bash

sudo podman run -d \
  --name=tailscaled \
  --restart=always \
  -v tailscale-data:/var/lib/tailscale \
  -v /dev/net/tun:/dev/net/tun \
  -v /run:/run \
    -v /etc/passwd:/etc/passwd:ro \
  -v /etc/group:/etc/group:ro \
  --network=host \
  --cap-add=NET_ADMIN \
  --cap-add=NET_RAW \
  -e TS_STATE_DIR=/var/lib/tailscale \
  docker.io/tailscale/tailscale \
  tailscaled --state=/var/lib/tailscale/tailscaled.state
sudo systemctl enable --now podman-restart

sudo podman exec tailscaled tailscale set --operator=${USER}
  
# Now manage the Tailscale daemon via https://flathub.org/apps/dev.deedles.Trayscale or https://flathub.org/apps/org.fkoehler.KTailctl