chore: bump tailscale to v1.102.3

[tropibot]

Automated version bump triggered by release v1.102.3.

Changes

• upstream version (tailscale/tailscale) → v1.102.3
• UPSTREAM_VERSION → v1.102.3

Supersedes: #46

[tropibot]

Dappnode bot has built and pinned the built packages to an IPFS node, for commit: 1f6f9e3

This is a development version and should only be installed for testing purposes.

1. Package tailscale.dnp.dappnode.eth

Install link

Hash: /ipfs/QmP4JNvNiJkRRpui6duQsc98hxoPh8kow9V3MUVo3o3XJo

(by dappnodebot/build-action)

[tropibot]

⚠️ Package harness completed with warnings

Both versions stabilized; advisory log analysis found a critical candidate-only signature

Package	Verdict	Reason	Duration	Cleanup
tailscale.dnp.dappnode.eth	⚠️ Warning	Candidate containers stable (candidate_containers_stable)	3m 28s	✅ Passed

Run overview

Context	Value
Pull request	dappnode/DAppNodePackage-tailscale#47
Tested commit	1f6f9e3bbd59
Candidate artifact	Install on DAppNode · /ipfs/QmP4JNvNiJkRRpui6duQsc98hxoPh8kow9V3MUVo3o3XJo
Baseline request	automatic
Worker	worker-01
Run ID	gh-pr-47-1f6f9e3bbd59-f90547ae7bd5078d
Execution	2026-08-26T16:07:36.409328148+00:00 → 2026-08-26T16:11:04.828208014+00:00 (✅ Completed)

Baseline vs candidate

Check	Baseline	Candidate
Version	0.3.0	0.3.1
Install	✅ Passed · 31s	✅ Passed · 13s
Hard check	✅ Passed · 5 stable samples	✅ Passed · 5 stable samples
Containers	1 observed	1 observed
Stabilization	22s	22s
Log collection	✅ Passed · 1 container	✅ Passed · 1 container

Container comparison

• Added: none
• Removed: none
• Baseline inventory: DAppNodePackage-tailscale.tailscale.dnp.dappnode.eth
• Candidate inventory: DAppNodePackage-tailscale.tailscale.dnp.dappnode.eth
• Baseline non-running states: none
• Candidate non-running states: none
• Deterministic regressions: ✅ none

Container inventory

Baseline

Container	Service	State	Image	Created
DAppNodePackage-tailscale.tailscale.dnp.dappnode.eth	tailscale	✅ Running	tailscale.tailscale.dnp.dappnode.eth:0.3.0	1787760489

Candidate

Container	Service	State	Image	Created
DAppNodePackage-tailscale.tailscale.dnp.dappnode.eth	tailscale	✅ Running	tailscale.tailscale.dnp.dappnode.eth:0.3.1	1787760525

Runtime analysis _advisory

❌ Critical — Heuristic and Nexus analysis: Baseline log shows a clean Tailscale startup. Candidate log shows new runtime regressions: IPv6 netfilter unavailable, IP forwarding disabled while subnet routing is enabled, and a read-only sysctl preventing src_valid_mark. Tailscaled still reaches Running, but routing/firewall behavior appears degraded.

Analyzer	Status	Summary
Composite	❌ Critical	Heuristic and Nexus analysis: Baseline log shows a clean Tailscale startup. Candidate log shows new runtime regressions: IPv6 netfilter unavailable, IP forwarding disabled while subnet routing is enabled, and a read-only sysctl preventing src_valid_mark. Tailscaled still reaches Running, but routing/firewall behavior appears degraded.
Heuristic	✅ Clean	No configured candidate-only suspicious signature was found
Nexus	❌ Critical	Baseline log shows a clean Tailscale startup. Candidate log shows new runtime regressions: IPv6 netfilter unavailable, IP forwarding disabled while subnet routing is enabled, and a read-only sysctl preventing src_valid_mark. Tailscaled still reaches Running, but routing/firewall behavior appears degraded.
Baseline evidence	✅ Clean	No configured suspicious signature was found
Candidate evidence	✅ Clean	No configured suspicious signature was found

Severity	Container	Finding	Evidence
❌ Critical	DAppNodePackage-tailscale.tailscale.dnp.dappnode.eth	Not present in baseline. Tailscale advertises subnet routes but IP forwarding is disabled, so routed traffic may fail.	health(warnable=ip-forwarding-off): error: Subnet routing is enabled, but IP forwarding is disabled. Check that IP forwarding is enabled on your machine.
⚠️ Warning	DAppNodePackage-tailscale.tailscale.dnp.dappnode.eth	Baseline reported v6filter=true/v6nat=true; candidate falls back to v6filter=false/v6nat=false, reducing IPv6 firewall coverage.	router: ip6tables filtering is not supported on this host: running [/usr/sbin/ip6tables -t filter -S --wait]: exit status 3: modprobe: can't change directory to '/lib/modules': No such file or directory; ip6tables v1.8.11 (legacy): can't initialize ip6tables table `filter': Table does not exist (do you need to insmod?); Perhaps ip6tables or your kernel needs to be upgraded.; router: netfilter running in iptables mode v6 = true, v6filter = false, v6nat = false
⚠️ Warning	DAppNodePackage-tailscale.tailscale.dnp.dappnode.eth	Not present in baseline. Tailscale cannot set src_valid_mark because /proc/sys is read-only, so the connmark-based rp_filter workaround may be ineffective.	router: warning: failed to enable src_valid_mark: sysctl(net.ipv4.conf.all.src_valid_mark=1): open /proc/sys/net/ipv4/conf/all/src_valid_mark: read-only file system

Cleanup and diagnostics

Check	Result
Cleanup	✅ Passed
Leftover packages	none
Cleanup error	none

✅ No run errors were recorded.

---

_{Deterministic checks decide the verdict. Runtime log analysis is advisory. TropiBot publishes bounded summaries and never posts raw logs.}

[3alpha]

/package-harness retry

[tropibot]

✅ Package-harness retry completed

The existing report comment was updated with the retry result for tailscale.dnp.dappnode.eth.

[3alpha]

/package-harness retry

[tropibot]

✅ Package-harness retry completed

The existing report comment was updated with the retry result for tailscale.dnp.dappnode.eth.

[3alpha]

/package-harness retry

[tropibot]

✅ Package-harness retry completed

The existing report comment was updated with the retry result for tailscale.dnp.dappnode.eth.