jails Has Anybody Had Success with Tailscale in a Jail?

I'm moving a lot of my personal ifra to BSD and part of my workflow involves using tailscale to connect in to containers, each of which has a separate server program running. WHen I try to run tailscaled on a jailed machine, I get the following:


Bash:
root@poop:~ # tailscaled
2026/05/01 14:21:24 [unexpected] policy requires hardware attestation, but device does not support it: --hardware-attestation is not supported on this platform or in this build of tailscaled
2026/05/01 14:21:24 monitor: devd dial error: dial unixpacket /var/run/devd.seqpacket.pipe: connect: no such file or directory, falling back to polling method
logtail started
Program starting: v1.96.4, Go 1.26.2: []string{"tailscaled"}
LogID: 3fe563d48f541e9c9195fc8e8cab755c88135877653211f600ff77207d6fb249
logpolicy: using system state directory "/var/db/tailscale"
dns: using dns.openresolvManager
ifconfig destroy: exit status 1
ifconfig: interface tailscale0 does not exist
wgengine.NewUserspaceEngine(tun "tailscale0") ...
no TUN failure diagnostics for OS "freebsd"
wgengine.NewUserspaceEngine(tun "tailscale0") error: tstun.New("tailscale0"): open /dev/tun: no such file or directory
flushing log.
logger closing down
getLocalBackend error: createEngine: tstun.New("tailscale0"): open /dev/tun: no such file or directory
root@poop:~ #

Is this possible or am I trying to do something that shouldn't be done?
 
unhide /dev/tun*.

Alternative: use tailscale in your host and port forwarding (e.g.: pf). It's not different than using a real interface.
 
Back
Top