tailscale-docker

Configure Tailscale in Docker containers using userspace networking and SOCKS5 proxy.

Updated Jul 7, 2026
One-click install
npx skills add https://github.com/TitoPrausee/nexus-toti --skill tailscale-docker
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tailscale-docker
Source: https://github.com/TitoPrausee/nexus-toti/tree/main/data/skills/devops/tailscale-docker
Command: npx skills add https://github.com/TitoPrausee/nexus-toti --skill tailscale-docker

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the problem of using Tailscale inside Docker containers that do not have access to a TUN device or kernel module support.

Core Features & Use Cases

  • Userspace Networking Setup: Runs Tailscale in userspace mode so containerized environments can join a tailnet without privileged network access.
  • Authenticated VPN Access: Guides the login and startup flow needed to connect a container to your Tailscale network reliably.
  • Practical Container Operations: Covers status checks, SOCKS5-based routing, and restart considerations for ephemeral Docker workloads.
  • Use Case: Ideal for a self-hosted service container that needs secure access to internal resources without exposing host-level networking capabilities.

Quick Start

Ask for help setting up Tailscale in my Docker container using userspace networking and include the authentication, status check, and restart steps.

Frequently Asked Questions about tailscale-docker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run Tailscale in Docker without /dev/net/tun?

To run Tailscale in Docker without /dev/net/tun, configure userspace networking mode. This allows the container to join your tailnet and route traffic via a SOCKS5 proxy without requiring kernel module support or privileged network access.

Can I use Tailscale userspace networking for authenticated VPN access in a container?

Yes, Tailscale userspace networking provides authenticated VPN access inside containers. It guides the login and startup flow to connect a Docker workload to your tailnet securely without exposing host-level networking capabilities.

What is the best way to route remote service traffic from a Docker container through Tailscale?

The best way to route remote service traffic from a Docker container through Tailscale is by using the SOCKS5 proxy flow. This userspace networking approach securely connects your containerized workloads to internal resources without needing a TUN device.

Does Tailscale in Docker require privileged network access or kernel tunnel modules?

No, running Tailscale in Docker using userspace networking does not require privileged network access or kernel tunnel modules. It operates without /dev/net/tun, making it ideal for restricted or ephemeral container environments.

How do I manage container operations like status checks and restarts for Tailscale?

To manage container operations for Tailscale, use the provided practical container operations steps. This covers status checks, SOCKS5-based routing configurations, and restart considerations specifically tailored for ephemeral Docker workloads using userspace networking.