tailscale fails after upgrade to 24.03

tsanft

I performed the update to 24.03 from 23.09 on my NG 6100, it seemed to upgrade just fine, but Tailscale is now refusing to run with the following error.

Error executing command (/usr/local/bin/tailscale status)

Health check:

- not in map poll

unexpected state: NoState

I have reinstalled the package (while retaining configuration) and the same thing happens. It has worked flawlessly for over 2 years and several release.

Any help is appreciated.

tsanft

After finding no other information, did a config wipe and clean install and reconfigured Tailscale, it is working now, but a bit frustrating. Fortunately I was local to this system and could configure it. My remote systems are stuck at the older version until I get physical access to them, since I can’t trust the upgrade.

chudak

@tsanft

I started seeing this as well today

Somehow it is related to Kea DHCP

chudak

https://redmine.pfsense.org/issues/14977

atlassol

I haven't done any more research than this, but after having the same problem,

I uninstalled the Tailscale package, make a backup of the configuration after the upgrade to 24.03, and then edited the configuration file to remove the <tailscaleauth> and <tailscale> entities from the backed up XML config file and reloaded it as a Restore.

I then created a new Auth key for it in the Tailscale Admin and proceeded to reinstall Tailscale.

This time it worked. Comparing the XML entities from XML file from the 23.09 version of pfsense with the one from 24.03, there were only two changes (apart from the different Auth key in the <tailscaleauth> entity:

In the v23.09 backup, the entity contained these values:

	<tailscale>
		<config>
			...
			<acceptroutes>on</acceptroutes>
			...
			<syslogenable>on</syslogenable>
			...
		</config>
	</tailscale>

After reinstalling the package in the v24.03 instance, these entity attributes were blank/empty.

I have other things to work on with deadlines, so I don't have any more time to investigate this further.

But I'd be interested if someone just wanted to edit the config.xml file to remove these two values and try it again without having to remove and reinstall the package.

sandie

#metoo
I started to face similar problem in 24.03 today:

Error executing command (/usr/local/bin/tailscale status)
# Health check:
#     - not in map poll

unexpected state: NoState

The funny thing is I did not change much. To resolve a problem I did "tailscale login", took link and went to Tailscale portal to login device.
I had some weird problems and noticed that things go crazy when I have Settings / Device management / Device Approval = Manually approve new devices in Tailscale portal enabled.
This settings seems to cause some side effects (?) so pfSense may be having problems with device registration (?). After disabling Approval for new devices I successfully reconnected pfSense. Problem was gone, but...

The funny thing is that now my pfSense box is logged in to Tailscale, but node is NOT visible as Exit Node in client apps. And tailscale portal says it is perfect Exit Node and that it is Connected (green).
I also see in pfSense that service was NOT correctly started:

So I am lost totally. Here is info how tailscale was started:

# ps auxw | grep tailscale
root   86716   0.0  0.0   12776   2276  -  Is   02:26    0:00.00 daemon: /usr/local/bin/tailscaled[86882] (daemon)
root   86882   0.0  0.1 1280356  51336  -  I    02:26    0:01.37 /usr/local/bin/tailscaled -port 41641 -tun tailscale0 -statedir /usr/local/pkg/tailscale/state
root   71790   0.0  0.0   12760   2432  0  S+   02:51    0:00.00 grep tailscale

Should not command line contain some extra argument to advertise exit node? Well....

chudak

TS has been especially bad behaved today, not resolving names etc.
So bad in fact that I switched to OpenVPN

Not sure why