Keep Tailscale up-to-date on your GL.iNet router with ease!
If you find this tool helpful, consider supporting its development:
This script automatically fetches and installs the latest Tailscale version, optimized specifically for GL.iNet routers. Keep your Tailscale installation current with just one command!
Created by Admon for the GL.iNet community. Tested on nearly all GL.iNet routers with firmware 4.x.
🎖️ Community Maintained – Part of the GL.iNet Toolbox project
⚠️ Independent Project – Not officially affiliated with GL.iNet or Tailscale
- 🚀 Automatic Updates – Fetches and installs the latest Tailscale version
- 📦 Tiny Version Support – Uses optimized tiny binaries to save space
- 🗜️ UPX Compression – Further reduces binary size when needed
- 🔒 Tailscale SSH Ready – Enables secure SSH access to the router via Tailscale
- 🎯 Version Selection – Install specific Tailscale versions
- 🔧 Stateful Filtering – Auto-configures for exit node compatibility
- 🛡️ Safe Restore – Restore original firmware binaries if needed
- ⚡ Flexible Options – Multiple flags for customized installations
| Requirement | Details |
|---|---|
| Router | GL.iNet router with firmware 4.x (including GL-BE9300 Flint 3) |
| Architecture | arm64, armv7, mips, mipsle, or x86_64 |
| Free Space | At least 15 MB (can be bypassed with --ignore-free-space) |
Run the updater without cloning the repository:
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.sh
⚠️ Important: Do not run this script as a cron job! Manual execution is recommended.
The update-tailscale.sh script supports the following arguments:
| Argument | Description |
|---|---|
--ignore-free-space |
Bypasses the free space check. Use with caution on low-storage devices! |
--force |
Skips all confirmation prompts and makes installation permanent. Ideal for unattended installations. |
--force-upgrade |
Forces upgrade even if the current version is already up to date. Useful for reinstalling the same version. |
--restore |
Restores original firmware binaries (/usr/sbin/tailscaled and /usr/sbin/tailscale). |
--no-upx |
Skips UPX compression. Binaries will be larger but installation is faster. |
--no-download |
Skips downloading binaries. Use pre-downloaded archive at /tmp/tailscale.tar.gz. |
--no-tiny |
Uses full Tailscale binaries instead of tiny version. Not recommended for GL.iNet routers. |
--select-release |
Displays available releases and lets you choose a specific version. |
--testing |
Uses prerelease/testing versions from the testing branch. |
--ssh |
Enables Tailscale SSH feature after installation. |
--log |
Shows timestamps in all log messages. Useful for debugging and tracking execution time. |
--ascii |
Uses ASCII characters ([OK], [X], [!], [->]) instead of emojis for compatibility with older terminals. |
--help |
Displays help message with all available arguments. |
Update to the latest stable release:
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.shInstall prerelease versions from the testing branch for early access to new features:
sh update-tailscale.sh --testing
⚠️ Warning: Testing versions are experimental and may contain bugs or unstable features. Use at your own risk!
Install a specific Tailscale version (useful if the latest version has issues):
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.sh --select-releaseThe script will display available releases for you to choose from.
⚠️ Warning: Downgrading Tailscale is not officially supported and may cause unexpected behavior.
Skip all prompts and make the installation permanent:
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.sh --forceCombine with --ignore-free-space for devices with limited storage:
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.sh --force --ignore-free-spaceRevert to the original firmware binaries:
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.sh --restore
⚠️ Caution: This does not restore configuration files and may result in a broken installation.
Enable timestamps for debugging or tracking execution time:
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.sh --logUse ASCII characters instead of emojis for compatibility with older terminals:
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.sh --asciiCombine both options:
wget -q https://get.admon.me/tailscale -O update-tailscale.sh ; sh update-tailscale.sh --log --asciiThe script automatically adds --stateful-filtering=false to the gl_tailscale script. This is required for proper exit node functionality on GL.iNet routers.
The modification is:
- ✅ Applied automatically
- ✅ Permanent (survives firmware upgrades)
- ✅ No manual configuration needed
If you agree to enable Tailscale SSH during installation (manually or by using --ssh), the script will automatically configure Tailscale SSH after updating. You can read more about Tailscale SSH here.
⚠️ Warning: If you are connected to your router via Tailscale SSH, you will be disconnected when SSH support is enabled. This might cause the script to terminate prematurely. It is recommended to run the script via local SSH or via GoodCloud SSH terminal.
By default, the script uses optimized tiny binaries that:
- 🔹 Significantly reduce storage footprint
- 🔹 Maintain full functionality
- 🔹 Skip UPX compression (already optimized)
- 🔹 Are recommended for all GL.iNet routers
Use --no-tiny if you need the full-sized binaries.
For standard (non-tiny) binaries, UPX compression:
- 🔹 Substantially reduces binary size
- 🔹 Is recommended for storage-limited devices
- 🔹 Requires
xz(auto-installed if missing) - 🔹 Can be disabled with
--no-upx
Need assistance or have questions?
- 💬 Join the discussion on GL.iNet Forum – Community support
- 💬 Join GL.iNet Discord – Real-time chat
- 🐛 Report issues on GitHub – Bug reports and feature requests
- 📧 Contact via forum private message – For private inquiries
This script is provided as-is without any warranty. Use it at your own risk.
It may potentially:
- 🔥 Break your router, computer, or network
- 🔥 Cause unexpected system behavior
- 🔥 Even burn down your house (okay, probably not, but you get the idea)
You have been warned!
Always read the documentation carefully and understand what a script does before running it.
Special thanks to:
- lwbt – UPX compression & tiny-tailscale feature
- Aubermean – Clarification of
--stateful-filtering=false(#1) - All the testers and feedback providers in the GL.iNet forum!
- Copilot – Yeah, I am using AI to help write code. But I review and test everything thoroughly!
Want to contribute? Pull requests are welcome!
This project is proudly supported by:
Termius - The SSH client that works everywhere
Termius provides powerful SSH client solutions for developers and system administrators. Perfect for managing your GL.iNet router and other infrastructure from anywhere.
This project is licensed under the MIT License – see the LICENSE file for details.
This project is part of a comprehensive collection of tools for GL.iNet routers.
Explore more tools and utilities:
Discover AdGuard Home Updater, ACME Certificate Manager, and more community-driven projects!
Made with ❤️ by Admon for the GL.iNet Community
⭐ If you find this useful, please star the repository!
Last updated: 2025-11-23
![@github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=64&v=4){kind=small}
![@github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=64&v=4){kind=small}
