TAILMON TAILMON v1.0.20 -July 27, 2024- WireGuard-based Tailscale Installer, Configurator and Monitor (Now available in AMTM!)

[peanstein]

I was hoping I get get a better understanding of the difference having tailscale installed on my RT-AX86S running 3004.388.6_2 and on my Truenas Scale 24.10.2. Is the exit node required for both or is that only needed on one of the 2 installations?

In my router tailscal settings, I advertised my subnet and seems to be running fine, and shows as connected to the tailscal devices page.
In my Truenas system, I advertised my subnet as well as selected it to be an exit node. It also shows as connected in tailscal devices page.

I have tailscale on two laptops, as well as two android phones. Everything connects fine via VPN when outside my intranet (cell network). I can access my Truenas system as well as router login page.

Do I have everything configured correctly or should I configure things differently?

Thanks!

 

[jksmurf]

@Viktor Jaep, do you think it would be possible to add a user selectable option that auto-checks for and then auto-updates both Tailmon and separately, the same for Tailscale?

I was inspired by relatively recent developments in MerlinAU along those lines….

 

[jksmurf]

Is the exit node required for both or is that only needed on one of the 2 installations?

Do I have everything configured correctly or should I configure things differently?

I’m hoping someone considerably more experienced like Colin Taylor will drop by, but I’ll give it a go. The answer is, it depends. If you want to keep it super simple, set up one subnet router and exit node on one device, the most powerful one on your tailnet.

A next step would be to add the other device as a subnet router but not to have the subnet active e.g. I have an RPi4 running TS setup so that I can enable it as ‘advertising’ if there’s an issue with my Router’s TS implementation.

The next step would be to have both running TS, each with its respective subnet routers advertising, one being the primary subnet router and the other acting as a failover. There is an order of subnet router use, see TS docs but it’s generally chronological order of setup date.

I’m less experienced on exit nodes and a lot of the capabilities surrounding country-specific exit nodes e.g. are beyond the personal plan. Having two exit nodes is definitely possible on the personal plan (and even a good idea for coffee shop use e.g. ), for those wanting to send specific traffic out a specified exit node.

So as I said in the beginning, it really depends (on what your needs are). It may be that you don’t know what is actually possible and if you do a wee bit of hunting around you end up using capabilities you were not even aware existed . HTH.

 

[Viktor Jaep]

@Viktor Jaep, do you think it would be possible to add a user selectable option that auto-checks for and then auto-updates both Tailmon and separately, the same for Tailscale?

I was inspired by relatively recent developments in MerlinAU along those lines….

I like those suggestions a lot, @jksmurf! I'll add these to my to-do list.

 

[Kenji]

Hello everyone, I use Tailmon on my Asus router and it works very well.

This is connected to the Fritzbox via an access point. Now I access my LAN externally with my mobile phone as an exit note (asus router) and that works. by the way, I also use a pihole that filters out everything.

Now my question, is it possible to activate the Mullvad VPN plugin on the Asus router with Tailmon so that I can get into the one vpn no matter where I access it externally? this saves me having to activate the VPN Mullvad on my mobile phone.

Internet - Fritzbox (Asus router (exit point with Mullvad VPN), Pihole)

lg.

 

[Brenneke]

I just installed TAILMON and do not find how I can set "Tailscale SSH" for devices in my tailnet.
Did I miss it?

 

[jksmurf]

I just installed TAILMON and do not find how I can set "Tailscale SSH" for devices in my tailnet.
Did I miss it?

All credit to @ColinTaylor here, this was an offline conversation we had when Tailmon was in its infancy and being tested, with @Viktor Jaep et al.

To Enable/Add/Run:

1. Assuming you have Tailmon installed and running correctly, from the Router’s command-line, using Putty or similar, issue the command tailscale set --ssh; this adds the SSH option to the Router Machine menu.
2. Run the SSH option, you get a dialogue box with 'root' as the default.
3. Change 'root' to other, type in the login of your machine, click to log in to SSH
4. You will get a Browser to login to to your Tailnet; then the familiar SSH Window will turn up.
   
   Make sure you do NOT have another SSH window running to the Router or the SSH session will fail (it did for me).
   
   
5. You should see the 'ephemeral' SSH "machine" in your tailnet.

https://imgur.com/a/QWdq0LI

To Disable and Remove:

1. First remove the 'ephemeral' machine. I do not know if that option disappears if you issue tailscale set --ssh=false first. I do not know how long they last for aka 'ephemeral'... but mine stayed overnight ...
2. Then from an SSH window issue tailscale set --ssh=false. See pics.

https://imgur.com/a/POicjF1

NOTE: If you just issue tailscale set --ssh=false it removes the SSH option from the Router machine, but appears to keep the ephemeral machine(s). I think I had two because I incorrectly tried to log in as root the first time.

You can probably re-enage these ephemeral machine(s) by just issuing tailscale set --ssh again.

Troubleshooting removal:

When you run tailscale set --ssh=false the SSH option disappears from the Admin Console but Tailmon may still report (idle) SSH devices.

So, how do you get rid of these device lines completely?

To remove, simply go back to the admin console. Do you see two ephemeral machines? Remove them.

I believe this is correct, just based on observations/trials.

Separately

While you’re at it, try Taildrop too (Send with Tailscale):

https://imgur.com/a/WB1ZngU

 

[Brenneke]

All credit to @ColinTaylor here, this was an offline conversation we had when Tailmon was in its infancy and being tested, with @Viktor Jaep et al.

To Enable/Add/Run:

1. Assuming you have Tailmon installed and running correctly, from the Router’s command-line, using Putty or similar, issue the command tailscale set --ssh; this adds the SSH option to the Router Machine menu.
2. Run the SSH option, you get a dialogue box with 'root' as the default.
3. Change 'root' to other, type in the login of your machine, click to log in to SSH
4. You will get a Browser to login to to your Tailnet; then the familiar SSH Window will turn up.
   
   Make sure you do NOT have another SSH window running to the Router or the SSH session will fail (it did for me).
   
   
5. You should see the 'ephemeral' SSH "machine" in your tailnet.

https://imgur.com/a/QWdq0LI

To Disable and Remove:

1. First remove the 'ephemeral' machine. I do not know if that option disappears if you issue tailscale set --ssh=false first. I do not know how long they last for aka 'ephemeral'... but mine stayed overnight ...
2. Then from an SSH window issue tailscale set --ssh=false. See pics.

https://imgur.com/a/POicjF1

NOTE: If you just issue tailscale set --ssh=false it removes the SSH option from the Router machine, but appears to keep the ephemeral machine(s). I think I had two because I incorrectly tried to log in as root the first time.

You can probably re-enage these ephemeral machine(s) by just issuing tailscale set --ssh again.

Troubleshooting removal:

When you run tailscale set --ssh=false the SSH option disappears from the Admin Console but Tailmon may still report (idle) SSH devices.

So, how do you get rid of these device lines completely?

To remove, simply go back to the admin console. Do you see two ephemeral machines? Remove them.

I believe this is correct, just based on observations/trials.

Separately

While you’re at it, try Taildrop too (Send with Tailscale):

https://imgur.com/a/WB1ZngU

Ohhh.....
When I had regular Tailscale installed prior to TAILMON I could just do "tailscale up --ssh" normally and it worked perfectly.
Everything you just shared, is this because of TAILMON? If so I will uninstall.

 

[jksmurf]

Ohhh.....
When I had regular Tailscale installed prior to TAILMON I could just do "tailscale up --ssh" normally and it worked perfectly.
Everything you just shared, is this because of TAILMON? If so I will uninstall.

Look, I was just giving you an option, with as much detail as possible, that might help others too.

EDIT: No it’s nothing to do with Tailmon AFAIK, but may be due to the way Tailscale is installed on the Router via Entware. I found this site, which uses the tailscale set --ssh implementation as a result of the 'init' script which I believe the entware install also uses for Tailscale, although I’m not 100% sure (@ColinTaylor might be able to confirm).

I actually tried to use tailscale up --ssh initially during the conversation with Colin, but was advised to use tailscale set --ssh. I don’t see that being any more complicated TBH, but of course if Tailmon doesn’t meet your requirements, you’re free to uninstall it.

[EDIT] You could always try to enable Custom mode and add --ssh to your existing tailscale up command line. See post below.

 

[jksmurf]

Now my question, is it possible to activate the Mullvad VPN plugin on the Asus router with Tailmon so that I can get into the one vpn no matter where I access it externally? this saves me having to activate the VPN Mullvad on my mobile phone.

...

lg.

Hi,

I am hoping someone more expert on Tailscale (or Mullvad) would swing by to help but absent that I’ve had a look at what’s possible. Seems like you need to purchase a Mullvad App (5 devices) to integrate with Tailscale, I have posted some set up details below if you haven'ty seen these, HTH.

• Tailscale Docs with Background on Tailscale+Mullvad
• Simplest Tailscale+Mullvad setup resource
• More advanced details on the same

Please do us let us know how you get on (and how you did it), you’re a bit of a Guinea pig here I think, unless someone has done it but not let on...

 

[jksmurf]

Ohhh.....
When I had regular Tailscale installed prior to TAILMON I could just do "tailscale up --ssh" normally and it worked perfectly.
Everything you just shared, is this because of TAILMON? If so I will uninstall.

Hi Brenneke,

I was thinking about this overnight as it bugged me a wee bit. If "tailscale up --ssh" worked for you with Tailscale on the Router that was not installed using Tailmon, I am guessing it should work in Tailmon too.

So, with this in mind, have you tried entering your "tailscale up --ssh" option in a Custom Tailscale Commandline?

i.e. from the Tailmon Menu, select (C), then (3), then (3), then (e), then after restart TS prompt, (y), then (4), then replace your current commandline that runs "tailscale up --ARGUMENTS" (normally set by Tailmon) to e.g. for my machine:

--ssh --advertise-routes=192.168.9.0/24

then (e), (y) to restart. You can amend the line via the (O) option later if you make an error. See sequence (roughly in order) in the 18# screenshots on imgur.

It appears to work for me, although I had to wait a little while (and go into the Tailmon screen to check the SSH Connection was listed) but I was able to connect via SSH using the Custom commandline which adds arguments to tailscale up. I reverted to Kernel mode and removed the ephemeral SSH instance using the procedure noted above (see also pics in the post above).

I did have a bit of an issue when I reverted to just Kernel mode in that the connection remained disconnected, showing "Tailscale is stopped".
I could not get it restarted despite selecting (U) for Up, and changing to Kernel or Userspace mode; nor via a Router reboot. When I tried (T) from the main menu I got an error about Tailscale needing a --reset. Fortunately @Viktor Jaep already included such an animal in the main menu (C), then select (I), so I reset it (whereupon it connected again), and then I changed to my preferred Kernel mode. The green SSH flag also disappeared from the Admin Console as expected. All good.

@Viktor Jaep provided this works sufficiently well (maybe @ColinTaylor or @Brenneke can advise after they try it on their own machines) if the "--ssh" argument is something you think would be a good default addition to the built-in set of Custom Options, that other users could add?, do you think you could add it in? Or simply not enough use?

k.

https://imgur.com/a/kF95W4s

 

[Nesalex]

HI. I have a TAILMON script installed from AMTM in my asus merlin FW which I use to connect devices. After Sunday's reboot of the RT-AC68U router, TAILMON does not want to start. When I log in via SSH and start TAILMON, I see an attempt to constantly start the service. On the console, I only see constantly repeating attempts to start the service with the result FAILURE. I ended the TAIL process via SCMERLIN-KILLPROCESS. Now I do not receive emails notifying me of FAILURE until the next router reboot. The problem is that when I start TAILMON, it automatically starts to start the service cyclically and I cannot get into the settings via C or other letters.

 

[jksmurf]

HI. I have a TAILMON script installed from AMTM in my asus merlin FW which I use to connect devices. After Sunday's reboot of the RT-AC68U router, TAILMON does not want to start. When I log in via SSH and start TAILMON, I see an attempt to constantly start the service. On the console, I only see constantly repeating attempts to start the service with the result FAILURE. I ended the TAIL process via SCMERLIN-KILLPROCESS. Now I do not receive emails notifying me of FAILURE until the next router reboot. The problem is that when I start TAILMON, it automatically starts to start the service cyclically and I cannot get into the settings via C or other letters.

I might have had this issue before at one stage.
IIRC I did one of these things (cannot recall which worked, sorry)

1. D, T, R (TS Down, TS Stop Service, Restart). I am not sure you can get to this menu, if you cannot get to C.
2. C, I, which does a reset for you; or
3. C, 8, which installs Entware dependencies; or
4. I did a repair install of Entware; from amtm, ep, 4, 2. This might mean you have to set up some configs again but at least you can get past the error.

You won't be able to do 2 or 3 if you cannot get to C.

You could, all going pear-shaped, from the command line (not in Tailmon), simply try issuing

tailscale --reset

Let us know how you get on.

 

[Nesalex]

I might have had this issue before at one stage.
IIRC I did one of these things (cannot recall which worked, sorry)

1. D, T, R (TS Down, TS Stop Service, Restart). I am not sure you can get to this menu, if you cannot get to C.
2. C, I, which does a reset for you; or
3. C, 8, which installs Entware dependencies; or
4. I did a repair install of Entware; from amtm, ep, 4, 2. This might mean you have to set up some configs again but at least you can get past the error.

You won't be able to do 2 or 3 if you cannot get to C.

You could, all going pear-shaped, from the command line (not in Tailmon), simply try issuing

tailscale --reset

Let us know how you get on.

OK. It works. Thanks for the answer and advice. The command did not help. Reinstalling all EPs helped. Thanks for the advice. I noticed another warning. This TAIL runs on my old RT-AC68u and it gives me a message, see photo. I have the latest version of FW merlin and all packages are updated. What should I do or how to update this if possible?

 

[jksmurf]

What should I do or how to update this if possible?

What you should do in future, and I do not mean to be rude here, is read the introductory posts that @Viktor Jaep has spent a lot of time and effort putting together for this Addon. In particular you need to read this one, regarding updates to the tailscale binaries.

Having done so, and having searched the forum, if you are still not clear come back and tell us what you’ve done and where you are stuck, we’re really happy to help folks who show they’ve tried, whatever their level of expertise.

Having said that I had forgotten how old the tailscale binary version was for the architecture on the RT-AC68U, which is armv7sf-k2.6. The entware repository for that architecture does indeed show Tailscale v1.46 at first install, so that’s good, nothing astray there. Note that entware is EOL for that architecture but it doesn’t really matter for Tailmon as Viktor did a great job of facilitating users to always be able to update the important bit, the tailscale binaries.

On to the update, as I said, the post I linked above shows the (C) Configuration menu has an update function where you press (P) “U(P)date binary to latest version” and follow the instructions. That simple.

Hopefully that works out for you.

btw I noticed on your screenshot you have subnets but you have not checked they are to be used (I can see that from the blue text subnets!). If you want access via that router I.e. you have no other default subnet, then you will need to enable it from the Tailscale admin page. See screen caps below.

 

[Nesalex]

What you should do in future, and I do not mean to be rude here, is read the introductory posts that @Viktor Jaep has spent a lot of time and effort putting together for this Addon. In particular you need to read this one, regarding updates to the tailscale binaries.

Having done so, and having searched the forum, if you are still not clear come back and tell us what you’ve done and where you are stuck, we’re really happy to help folks who show they’ve tried, whatever their level of expertise.

Having said that I had forgotten how old the tailscale binary version was for the architecture on the RT-AC68U, which is armv7sf-k2.6. The entware repository for that architecture does indeed show Tailscale v1.46 at first install, so that’s good, nothing astray there. Note that entware is EOL for that architecture but it doesn’t really matter for Tailmon as Viktor did a great job of facilitating users to always be able to update the important bit, the tailscale binaries.

On to the update, as I said, the post I linked above shows the (C) Configuration menu has an update function where you press (P) “U(P)date binary to latest version” and follow the instructions. That simple.

Hopefully that works out for you.

btw I noticed on your screenshot you have subnets but you have not checked they are to be used (I can see that from the blue text subnets!). If you want access via that router I.e. you have no other default subnet, then you will need to enable it from the Tailscale admin page. See screen caps below.

I appreciate your willingness to answer a little more extensively.

I tried updating the binary via the C menu and updating P after the initial installation, but nothing changed, just like today. After the update, it prompts me to restart the TAIL service. When I restart, it understandably breaks my connection because I'm connecting remotely. After restarting TAIL, the binary version is unchanged.

On to the second point. I don't need to access devices on the network. The only use of TAIL is that I sometimes need to connect to my remote router, which is on the local network of another internet provider. TAILSCALE is an amazing tool that allowed me to do that. After the initial installation, I noticed an outdated binary, but since I couldn't update it, I didn't solve it. Now that we've solved my problem, I asked about it because I forgot about it at the time. Maybe I could completely remove TAIL and install it again and the binary update would start working, but unfortunately I don't have enough time for that now. Firstly, I don't know how to do it and secondly, I have to read and go through the installation and setup again, although if I remember correctly it wasn't that difficult...

Maybe I'll be able to visit the place where the RT-AC68u is located in the near future and take a better look at it.

Once again, many thanks for this valuable advice. Have a nice day.

 

[jksmurf]

I appreciate your willingness to answer a little more extensively.

Thank you.

I tried updating the binary via the C menu and updating P after the initial installation, but nothing changed, just like today.

I am just starting to wonder if, because your architecture installs the tailscale_nohf version of tailscale, whether the directory structure is different or cause a slight issue when doing updates in Tailmon.

After @ColinTaylor and @Viktor Jaep got the older architecture installing OK, I never tried to follow this through with anyone who had such a machine, whether the updates also worked and I do not have this router. It would be nice to nail it down though.

There's a few things we could try, in order of lower to higher risk/difficulty:

1. Wait for Colin/Viktor to explain properly what is happening;
2. From the CLI, simply run 'tailscale update'; restart the tailscale daemon (restart Tailscale essentially, it will do this by itself if you have configured Tailmon to do so);
3. Manually replace the binaries, see below.
4. I suggest, in case you find it on the 'net, not to install "opkg install tailscale_nohf", unless you know exactly what it does. I do not.

Manual binary update:

• Go here: https://pkgs.tailscale.com/stable/#static
• Download the latest package, for my Router it is arm64, so currently I use tailscale_1.80.3_arm64.tgz; however for the AC68U, which is armv7, I am not 100% sure, I would need Colin to clarify, possibly 'arm' so for the RT-AC68U likely tailscale_1.80.3_arm.tgz??. Refer also [EDIT2] below.
• Extract the binaries tailscale and tailscaled only.
• WinSCP to your remote router and navigate to where the current binaries are (on my machine, which is newer achitecture, it is /opt/bin/). The caveat being that if you are using Tailscale to navigate to that machine, you won't be able to copy the files across, until you stop the daemon (i.e. stop TS running). I suggest to use Wireguard or another TS instance that runs on the same subnet and is a subnet router), but allows you access via WinSCP to the Router.

After the update, it prompts me to restart the TAIL service. When I restart, it understandably breaks my connection because I'm connecting remotely. After restarting TAIL, the binary version is unchanged.

Yes, that little WTF is happening pause can be worrisome; especially remotely .

On to the second point. I don't need to access devices on the network. The only use of TAIL is that I sometimes need to connect to my remote router, which is on the local network of another internet provider. TAILSCALE is an amazing tool that allowed me to do that.

OK

After the initial installation, I noticed an outdated binary, but since I couldn't update it, I didn't solve it. Now that we've solved my problem, I asked about it because I forgot about it at the time. Maybe I could completely remove TAIL and install it again and the binary update would start working, but unfortunately I don't have enough time for that now. Firstly, I don't know how to do it and secondly, I have to read and go through the installation and setup again, although if I remember correctly it wasn't that difficult...

Maybe I'll be able to visit the place where the RT-AC68u is located in the near future and take a better look at it.

Once again, many thanks for this valuable advice. Have a nice day.

No problem. I must admit, there's not a lot of information out there for these older architectures.

This isn't my field at all and my level of expertise simply isn't high enough to say with confidence "this will work".

k.

[EDIT1] If you do get to your router, please check you have the latest FW update, as I believe this contains the latest amtm. Then try uninstalling Tailmon AND entware completely. Reboot, then reinstall entware again, then Tailmon.

[]EDIT2] I deleted the original edit 2; strongly suggest you do not try to update the tailscale binaries manually for this armv7-k26 architecture until the underlying entware install is completed correctly (and then you could use Tailmon to perform the update).

 

[jksmurf]

[EDIT1] If you do get to your router, please check you have the latest FW update, as I believe this contains the latest amtm. Then try uninstalling Tailmon AND entware completely. Reboot, then reinstall entware again, then Tailmon.

I’ve been doing a bit more looking into this and I think this is what might have happened.

You probably installed Tailmon using an older version of entware that was on your router, which installs an older Tailscale binary that does not seem to update well (at all) using “tailscale update”, which is all that Tailmon (C), (P) does.

In Oct 2024 @thelonelycoder confirmed the maurer repo for armv7-k26 based devices (RT-AC68U) is included in entware installations in amtm. Fortunately the maurer repo has an updated version of Tailscale for the initial install, v1.68.2-1 which seems to be able to be updated, which the version installed from the entware repo, v1.46 does not. The entware repo for armv7sf-k2.6 devices was no longer updated after 25 Feb 24.

So, for your RT-AC68U, try this:

• If you haven’t yet, update your RT-AC68U to the latest Merlin FW
• Uninstall Tailmon completely
• Uninstall entware completely
• Reboot just to be sure
• Check amtm for updates just to be sure
• Reinstall entware
• Reinstall Tailmon; you should now see v1.68.2-1 of Tailscale has been installed.
• Use Tailmon (C) (P) to update Tailscale. Hopefully, you will get the latest version. **

** As noted to me by @ColinTaylor the entware-based install of Tailmon is specifically compiled for the router architecture. So, whilst updates from within Tailmon, or via the CLI command “tailscale update” (same thing) generally work (they do for me), there’s no guarantee this will work, or if it does, that it will continue to do so for your router for future updates. See caveats here from ColinTaylor.

As always, please let us know how it works out. Not many people have tailscale on your older model router, so it’s always good to have a data point on an issue and a confirmed solution.

k.

Notes:

1. Links included in this note are mainly for background and future reference. Apart from the link to the Asus Merlin FW for your Router, you do not need to look at any of them to complete your install.
2. Thanks to @ColinTaylor and @Viktor Jaep for pointing me in the right direction.
3. As regards your issue of the Tailscale connection being broken during the update, I believe if you open Tailmon using “Screen” (C), (M), it will still do the subsequent updates (C), (P) in the background. See pic.

 

[Viktor Jaep]

Notes:

1. Links included in this note are mainly for background and future reference. Apart from the link to the Asus Merlin FW for your Router, you do not need to look at any of them to complete your install.
2. Thanks to @ColinTaylor and @Viktor Jaep for pointing me in the right direction.
3. As regards your issue of the Tailscale connection being broken during the update, I believe if you open Tailmon using “Screen” (C), (M), it will still do the subsequent updates (C), (P) in the background. See pic.

Truly appreciate your attention to detail and sleuthing abilities in all this, @jksmurf! You rock!

 

[Nesalex]

I’ve been doing a bit more looking into this and I think this is what might have happened.

You probably installed Tailmon using an older version of entware that was on your router, which installs an older Tailscale binary that does not seem to update well (at all) using “tailscale update”, which is all that Tailmon (C), (P) does.

In Oct 2024 @thelonelycoder confirmed the maurer repo for armv7-k26 based devices (RT-AC68U) is included in entware installations in amtm. Fortunately the maurer repo has an updated version of Tailscale for the initial install, v1.68.2-1 which seems to be able to be updated, which the version installed from the entware repo, v1.46 does not. The entware repo for armv7sf-k2.6 devices was no longer updated after 25 Feb 24.

So, for your RT-AC68U, try this:

• If you haven’t yet, update your RT-AC68U to the latest Merlin FW
• Uninstall Tailmon completely
• Uninstall entware completely
• Reboot just to be sure
• Check amtm for updates just to be sure
• Reinstall entware
• Reinstall Tailmon; you should now see v1.68.2-1 of Tailscale has been installed.
• Use Tailmon (C) (P) to update Tailscale. Hopefully, you will get the latest version. **

** As noted to me by @ColinTaylor the entware-based install of Tailmon is specifically compiled for the router architecture. So, whilst updates from within Tailmon, or via the CLI command “tailscale update” (same thing) generally work (they do for me), there’s no guarantee this will work, or if it does, that it will continue to do so for your router for future updates. See caveats here from ColinTaylor.

As always, please let us know how it works out. Not many people have tailscale on your older model router, so it’s always good to have a data point on an issue and a confirmed solution.

k.

Notes:

1. Links included in this note are mainly for background and future reference. Apart from the link to the Asus Merlin FW for your Router, you do not need to look at any of them to complete your install.
2. Thanks to @ColinTaylor and @Viktor Jaep for pointing me in the right direction.
3. As regards your issue of the Tailscale connection being broken during the update, I believe if you open Tailmon using “Screen” (C), (M), it will still do the subsequent updates (C), (P) in the background. See pic.

5.

I finally got around to testing with a negative result.

1. Uninstalled TAIL.
2. Uninstalled EP with a complete AMTM reset, so I removed all the packages I had there. The router was restarted.
3. The router firmware is on the latest available version.
4. Forced an AMTM update – I’m not exactly sure what that means because no update was available, but there was an option for "force update" so I guess it just reinstalled AMTM.
5. Installed EP.
6. Installed TAIL – after installation, it had the same binary as before.
7. The update did not go through, see the photo.

​