tailscale-docker-userspace

Configures Tailscale in Docker containers using userspace networking and SOCKS5.

Updated Jul 7, 2026
One-click install
npx skills add https://github.com/TitoPrausee/nexus-toti --skill tailscale-docker-userspace
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tailscale-docker-userspace
Source: https://github.com/TitoPrausee/nexus-toti/tree/main/data/skills/devops/tailscale-docker-userspace
Command: npx skills add https://github.com/TitoPrausee/nexus-toti --skill tailscale-docker-userspace

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you run Tailscale inside a Docker container when the host does not provide /dev/net/tun, avoiding the common failure that blocks normal VPN setup.

Core Features & Use Cases

  • Userspace Networking Setup: Starts tailscaled in userspace mode so Tailscale can run without privileged kernel tunneling.
  • Container VPN Access: Lets you authenticate the container and reach Tailscale resources from inside isolated Docker environments.
  • Operational Guidance: Covers startup, status checks, persistence after restart, and common Docker-specific limitations.
  • Use Case: Use it when you need a development container or service container to join your Tailscale network securely without enabling full device-level networking.

Quick Start

Use the tailscale-docker-userspace skill to configure Tailscale in my Docker container with userspace networking, authenticate it, and confirm that the VPN connection works.

Frequently Asked Questions about tailscale-docker-userspace

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run Tailscale in Docker when /dev/net/tun is unavailable?

You can run Tailscale in Docker without /dev/net/tun by enabling userspace-networking mode, manually starting the tailscaled daemon, and routing container traffic through a SOCKS5 proxy to access VPN resources.

What is userspace networking in Tailscale and when do I need it for containers?

Userspace networking is a Tailscale mode that operates without privileged kernel tunneling. You need it for containerized development or isolated services where the host environment blocks standard VPN setup by not exposing /dev/net/tun.

How do I authenticate a Docker container to my Tailscale network?

Authenticate a Docker container to your Tailscale network by starting the tailscaled daemon in userspace mode inside the container, then completing the standard Tailscale login flow to securely join the network without device-level privileges.

Can I use Tailscale with Docker without privileged kernel tunneling?

Yes, you can use Tailscale with Docker without privileged kernel tunneling by applying userspace-networking mode, which starts a custom tailscaled daemon and uses SOCKS5-based access to reach Tailscale resources from isolated environments.

Does Tailscale VPN access in Docker persist after container restarts?

Tailscale VPN access in Docker can persist after container restarts, but requires applying specific operational guidance for status checks and state persistence to maintain the userspace-networking connection across the container lifecycle.