Tailscale CLI on Linux

Install

curl -fsSL https://tailscale.com/install.sh | sh
sudo systemctl enable --now tailscaled

Join Tailnet

sudo tailscale up

With auth key and hostname:

sudo tailscale up --authkey tskey-auth-xxxxx --hostname my-node

Use routes advertised by other nodes (laptop, VPS, etc.):

sudo tailscale up --accept-routes

Check status

tailscale status
tailscale ip -4
tailscale ping <hostname>
sudo systemctl status tailscaled

Advertise routes (subnet router on Proxmox LXC/VM)

Tailscale inside an LXC/VM bridged to vmbr0 — exposes lab subnets to the Tailnet.

Enable forwarding:

echo 'net.ipv4.ip_forward = 1' | sudo tee /etc/sysctl.d/99-tailscale.conf
sudo sysctl -p /etc/sysctl.d/99-tailscale.conf

Advertise one or more subnets (comma-separated):

sudo tailscale up \
  --hostname homelab-gw \
  --advertise-routes=192.168.10.0/24,192.168.99.0/24 \
  --accept-routes

Approve routes in admin console → machine → Edit route settings.

Remote clients need --accept-routes to reach those IPs.

Verify from client:

tailscale status
ping 192.168.10.50

Disconnect

sudo tailscale down
sudo tailscale logout    # leave Tailnet, needs re-auth