Skip to content

Tailscale permission error for openclaw user #34

Description

@hemslo

When use tailscale_enabled: true as variable to run playbook, and update openclaw config

    "tailscale": {
      "mode": "serve",
      "resetOnExit": false
    }

Then openclaw shows error log:

serve failed: Command failed: /usr/bin/tailscale serve --bg --yes 18789
sending serve config: Access denied: serve config denied

Use 'sudo tailscale serve --bg --yes 18789'.
To not require root, use 'sudo tailscale set --operator=$USER' once.

After exec sudo tailscale set --operator=openclaw then restart server, tailscale is working

serve enabled: https://...

Did I miss anything for permission config?

I also notieced tailscale_authkey set in vars.yml is not working, still have to open tailscale url and manually setup in browser, that means my tailscale authkey is unused, which is fine as it works.

Metadata

Metadata

Assignees

No one assigned

    Labels

    P2Normal priority bug or improvement with limited blast radius.clawsweeper:linked-pr-openClawSweeper found an open linked pull request for this issue.clawsweeper:needs-product-decisionClawSweeper marked this issue as needing a product or behavior decision.clawsweeper:needs-security-reviewClawSweeper marked this issue as needing security-sensitive review.clawsweeper:no-new-fix-prClawSweeper does not recommend queueing a new automated fix PR for this issue.clawsweeper:source-reproClawSweeper found a high-confidence source-level issue reproduction.impact:securityThis issue is about security boundaries, credentials, authz, sandboxing, or sensitive data.issue-rating: 🦞 diamond lobsterVery strong issue quality with high-confidence source-level or clear reproduction.

    Type

    No type

    Fields

    Priority

    None yet

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions