{"slug":"install-tailscale-on-linux","title":"Install Tailscale on Linux","tags":["tailscale","setup"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Install Tailscale on Linux\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nYou can install the Tailscale client on a variety of Linux distributions using either our automated install script or distribution-specific package managers. This topic covers both mainstream distributions and those with alternative package management systems. For detailed, version-specific instructions for supported platforms, refer to the [Tailscale Packages - stable track](https://pkgs.tailscale.com/stable) page.\r\n\r\n## [Mainstream distributions](https://tailscale.com/docs/install/linux\\#mainstream-distributions)\r\n\r\nIf you're installing the client on a distribution of Linux that contains a package manager such as `apt`, `yum`, or `zypper`, run the following command:\r\n\r\n```bash\r\ncurl -fsSL https://tailscale.com/install.sh | sh\r\n```\r\n\r\nThis is the same script available on our [Download](https://tailscale.com/download/linux) page. If you prefer not to use `curl | sh`, visit the [Tailscale Packages - stable track](https://pkgs.tailscale.com/stable) page for manual installation instructions for your distribution.\r\n\r\nAfter installation completes, start the Tailscale client:\r\n\r\n```bash\r\nsudo tailscale up\r\n```\r\n\r\nThe output will display a URL that you can use to authenticate to your Tailscale network (known as a tailnet). After you authenticate, check the [Machines](https://login.tailscale.com/admin/machines) page of the admin console to confirm the device appears in your tailnet.\r\n\r\nThis method works on the following distributions:\r\n\r\n- Ubuntu-based distributions\r\n- Debian-based distributions\r\n- Red Hat Enterprise Linux (RHEL), CentOS, Fedora, and derivatives\r\n- Raspberry Pi OS\r\n- Amazon Linux\r\n- openSUSE and SUSE Linux Enterprise\r\n- Oracle Linux\r\n- VMware Photon OS\r\n\r\nIf there is a distribution that you would like us to officially support, contact [Tailscale Support](https://tailscale.com/contact/support) so that we can consider adding official support for the distribution.\r\n\r\n## [Other distributions](https://tailscale.com/docs/install/linux\\#other-distributions)\r\n\r\nYou can install the Tailscale client on distributions with alternative package managers.\r\n\r\n- [Arch Linux](https://tailscale.com/docs/install/arch)\r\n- [NixOS](https://tailscale.com/docs/install/nixos)\r\n\r\n## [Static binaries](https://tailscale.com/docs/install/linux\\#static-binaries)\r\n\r\nFor other Linux distributions not covered by the install script, we provide static binaries as an alternative.\r\n\r\nTo install a static binary version of the Tailscale client:\r\n\r\n1. [Download](https://pkgs.tailscale.com/stable/#static) the static binaries for your CPU architecture.\r\n\r\n2. Unpack the archive:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n```shell\r\ntar xvf tailscale__.tgz\r\n```\r\n\r\n\r\n\r\nFor example, if you've downloaded version 1.90.6 of the Tailscale client for AMD64, the command is `tar xvf tailscale_1.90.6_amd64.tgz`.\r\n\r\n3. Start [tailscaled daemon](https://tailscale.com/docs/reference/tailscaled):\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n```shell\r\nsudo tailscaled --state=tailscaled.state\r\n```\r\n\r\n\r\n\r\nIf you want to configure systemd to run tailscaled automatically, a service configuration is available in the `systemd/` subdirectory of the unpacked archive.\r\n\r\n4. Start the Tailscale client:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n```shell\r\nsudo tailscale up\r\n```\r\n\r\n\r\nThe output will display a URL that you can use to authenticate to your tailnet. After you authenticate, check the [Machines](https://login.tailscale.com/admin/machines) page of the admin console to confirm the device appears in your tailnet.\r\n\r\n## [Verify the installation](https://tailscale.com/docs/install/linux\\#verify-the-installation)\r\n\r\nWhen you add a machine to a tailnet, it's assigned a Tailscale IPv4 and IPv6 address. This helps other machines, nodes, and devices know how to reach it over the secure tailnet.\r\n\r\nTo display the Tailscale IPv4 and IPv6 addresses for your device, run:\r\n\r\n```shell\r\ntailscale ip\r\n```\r\n\r\nCheck the connection status:\r\n\r\n```bash\r\ntailscale status\r\n```\r\n\r\n## [Further exploration](https://tailscale.com/docs/install/linux\\#further-exploration)\r\n\r\n### [Disable key expiry](https://tailscale.com/docs/install/linux\\#disable-key-expiry)\r\n\r\nDevices in a tailnet periodically re-authenticate to stay secure through device key expiry, which requires re-authentication after a set period. For devices that should remain continuously connected, such as servers, Raspberry Pis, media centers, smart home hubs, Docker hosts, and NAS devices, you can disable key expiry to avoid any unnecessary disruptions.\r\n\r\nTo disable key expiry for a device, go to the [Machines](https://login.tailscale.com/admin/machines) page of the admin console, select the ![ellipsis icon](https://tailscale.com/files/images/icons/fa-ellipsis-h.svg) icon next to the device, then select **Disable key expiry**.\r\n\r\nDisabling key expiry reduces security and can expose your network if the device or key is compromised. Only do this for trusted devices and revoke the key immediately if the device is lost or replaced. For more information, refer to [Key expiry](https://tailscale.com/docs/features/access-control/key-expiry).\r\n\r\nIf your device's key is already expired, you can use the following command to force re-authentication:\r\n\r\n```bash\r\nsudo tailscale up --force-reauth\r\n```\r\n\r\n### [Use Tailscale SSH](https://tailscale.com/docs/install/linux\\#use-tailscale-ssh)\r\n\r\n[Tailscale SSH](https://tailscale.com/docs/features/tailscale-ssh) lets you manage SSH access to your machine, secure SSH access through your tailnet without exposing SSH to the public internet.\r\n\r\nYou can enable Tailscale SSH on your machine by running the following:\r\n\r\n```bash\r\ntailscale set --ssh\r\n```\r\n\r\n### [Install unstable versions](https://tailscale.com/docs/install/linux\\#install-unstable-versions)\r\n\r\nWe offer unstable versions of the Tailscale client for users who want to test new features and fixes before they're distributed to the wider community. If you'd like to help test new features, you can download and install unstable clients from the [Tailscale Packages - unstable track](https://pkgs.tailscale.com/unstable) page.\r\n\r\nFor more information, refer to [Tailscale client versions and release tracks](https://tailscale.com/docs/reference/tailscale-client-versions).\r\n\r\n## [Troubleshooting](https://tailscale.com/docs/install/linux\\#troubleshooting)\r\n\r\n### [Issues using the install script](https://tailscale.com/docs/install/linux\\#issues-using-the-install-script)\r\n\r\nIf the install script fails, it displays diagnostic output information in the terminal session. Include this output when contacting our [support team](https://tailscale.com/contact/support).\r\n\r\n### [Missing kernel modules](https://tailscale.com/docs/install/linux\\#missing-kernel-modules)\r\n\r\nTailscale requires the `tun` kernel module. Most distributions include this by default. If you encounter errors about missing `tun`, load it manually:\r\n\r\n```bash\r\nsudo modprobe tun\r\n```\r\n\r\nTo load it automatically on boot, add `tun` to `/etc/modules` or `/etc/modules-load.d/tun.conf`.\r\n\r\n### [Disable logging](https://tailscale.com/docs/install/linux\\#disable-logging)\r\n\r\nBy default, Tailscale sends logs to Tailscale servers about device connectivity to a tailnet. We use this data to diagnose and troubleshoot issues when users reach out to Tailscale with an issue. To disable logging:\r\n\r\nEdit `/etc/default/tailscaled` and add:\r\n\r\n```markup\r\nTS_NO_LOGS_NO_SUPPORT=true\r\n```\r\n\r\nOr add `--no-logs-no-support` to the `FLAGS` variable.\r\n\r\nDisabling logs may prevent Tailscale from providing technical support.\r\n\r\n## [Distribution and version links](https://tailscale.com/docs/install/linux\\#distribution-and-version-links)\r\n\r\nYou can find individual topics for Linux distributions below.\r\n\r\n### [Ubuntu](https://tailscale.com/docs/install/linux\\#ubuntu)\r\n\r\n- [Ubuntu 16.04 LTS (xenial)](https://tailscale.com/docs/install/ubuntu/ubuntu-1604)\r\n- [Ubuntu 18.04 LTS (bionic)](https://tailscale.com/docs/install/ubuntu/ubuntu-1804)\r\n- [Ubuntu 19.10 (eoan)](https://tailscale.com/docs/install/ubuntu/ubuntu-1910)\r\n- [Ubuntu 20.04 LTS (focal)](https://tailscale.com/docs/install/ubuntu/ubuntu-2004)\r\n- [Ubuntu 20.10 (groovy)](https://tailscale.com/docs/install/ubuntu/ubuntu-2010)\r\n- [Ubuntu 21.04 (hirsute)](https://tailscale.com/docs/install/ubuntu/ubuntu-2104)\r\n- [Ubuntu 21.10 (impish)](https://tailscale.com/docs/install/ubuntu/ubuntu-2110)\r\n- [Ubuntu 22.04 (jammy)](https://tailscale.com/docs/install/ubuntu/ubuntu-2204)\r\n- [Ubuntu 22.10 (kinetic)](https://tailscale.com/docs/install/ubuntu/ubuntu-2210)\r\n- [Ubuntu 23.04 (lunar)](https://tailscale.com/docs/install/ubuntu/ubuntu-2304)\r\n- [Ubuntu 23.10 (mantic)](https://tailscale.com/docs/install/ubuntu/ubuntu-2310)\r\n- [Ubuntu 24.04 (noble)](https://tailscale.com/docs/install/ubuntu/ubuntu-2404)\r\n- [Ubuntu 24.10 (oracular)](https://tailscale.com/docs/install/ubuntu/ubuntu-2410)\r\n- [Ubuntu 25.04 (plucky)](https://tailscale.com/docs/install/ubuntu/ubuntu-2504)\r\n- [Ubuntu 25.10 (questing)](https://tailscale.com/docs/install/ubuntu/ubuntu-2510)\r\n\r\n### [Debian](https://tailscale.com/docs/install/linux\\#debian)\r\n\r\n- [Debian Trixie (stable)](https://tailscale.com/docs/install/debian/debian-trixie)\r\n- [Debian Bookworm (oldstable)](https://tailscale.com/docs/install/debian/debian-bookworm)\r\n- [Debian Bullseye (oldoldstable)](https://tailscale.com/docs/install/debian/debian-bullseye)\r\n- [Debian Buster (archived)](https://tailscale.com/docs/install/debian/debian-buster)\r\n- [Debian Sid (unstable)](https://tailscale.com/docs/install/debian/debian-sid)\r\n- [Debian Stretch (archived)](https://tailscale.com/docs/install/debian/debian-trixie)\r\n- [Raspberry Pi OS (Trixie)](https://tailscale.com/docs/install/rpi/rpi-trixie)\r\n- [Raspberry Pi OS (Bookworm)](https://tailscale.com/docs/install/rpi/rpi-bookworm)\r\n- [Raspberry Pi OS (Bullseye)](https://tailscale.com/docs/install/rpi/rpi-bullseye)\r\n- [Raspberry Pi OS (Buster)](https://tailscale.com/docs/install/rpi)\r\n- [Raspberry Pi OS (Stretch)](https://tailscale.com/docs/install/rpi/rpi-stretch)\r\n\r\n### [CentOS](https://tailscale.com/docs/install/linux\\#centos)\r\n\r\n- [CentOS 7](https://tailscale.com/docs/install/centos/centos-7)\r\n- [CentOS 8](https://tailscale.com/docs/install/centos/centos-8)\r\n- [CentOS Stream 9](https://tailscale.com/docs/install/centos/centos-stream-9)\r\n- [CentOS Stream 10](https://tailscale.com/docs/install/centos/centos-stream-10)\r\n\r\n### [openSUSE](https://tailscale.com/docs/install/linux\\#opensuse)\r\n\r\n- [openSUSE Leap 15.1](https://tailscale.com/docs/install/opensuse/opensuse-leap-15-1)\r\n- [openSUSE Leap 15.2](https://tailscale.com/docs/install/opensuse/opensuse-leap-15-2)\r\n- [openSUSE Leap 15.3](https://tailscale.com/docs/install/opensuse/opensuse-leap-15-3)\r\n- [openSUSE Leap 15.4](https://tailscale.com/docs/install/opensuse/opensuse-leap-15-4)\r\n- [openSUSE Leap 15.5](https://tailscale.com/docs/install/opensuse/opensuse-leap-15-5)\r\n- [openSUSE Leap 15.6](https://tailscale.com/docs/install/opensuse/opensuse-leap-15-6)\r\n- [openSUSE Leap 16.0](https://tailscale.com/docs/install/opensuse/opensuse-leap-16.0)\r\n- [openSUSE Tumbleweed](https://tailscale.com/docs/install/opensuse/opensuse-tumbleweed)\r\n\r\n### [Oracle Linux](https://tailscale.com/docs/install/linux\\#oracle-linux)\r\n\r\n- [Oracle Linux 7](https://tailscale.com/docs/install/oracle-linux/oracle-linux-7)\r\n- [Oracle Linux 8](https://tailscale.com/docs/install/oracle-linux/oracle-linux-8)\r\n- [Oracle Linux 9](https://tailscale.com/docs/install/oracle-linux/oracle-linux-9)\r\n- [Oracle Linux 10](https://tailscale.com/docs/install/oracle-linux/oracle-linux-10)\r\n\r\n### [Red Hat® Enterprise Linux](https://tailscale.com/docs/install/linux\\#red-hat-enterprise-linux)\r\n\r\n- [RHEL 8](https://tailscale.com/docs/install/rhel/rhel-8)\r\n- [RHEL 9](https://tailscale.com/docs/install/rhel/rhel-9)\r\n- [RHEL 10](https://tailscale.com/docs/install/rhel/rhel-10)\r\n\r\n### [Fedora Linux](https://tailscale.com/docs/install/linux\\#fedora-linux)\r\n\r\n- [Fedora](https://tailscale.com/docs/install/fedora/fedora-1) (version 40 and earlier)\r\n- [Fedora](https://tailscale.com/docs/install/fedora/fedora-2) (version 41 and later)\r\n\r\n### [Other](https://tailscale.com/docs/install/linux\\#other)\r\n\r\n- [Amazon Linux 2](https://tailscale.com/docs/install/amazon-linux-2)\r\n- [Arch Linux](https://tailscale.com/docs/install/arch)\r\n- [NixOS](https://tailscale.com/docs/install/nixos)\r\n- [Static binaries](https://tailscale.com/docs/install/static)\r\n\r\nIf you are interested in support for another platform or architecture, run the script above then [contact us](https://tailscale.com/contact/support) by creating a feature request on GitHub, and include the output of the `install.sh` script.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"

Install Tailscale on Linux

\n

Last validated: Jan 5, 2026

\n

You can install the Tailscale client on a variety of Linux distributions using either our automated install script or distribution-specific package managers. This topic covers both mainstream distributions and those with alternative package management systems. For detailed, version-specific instructions for supported platforms, refer to the Tailscale Packages - stable track page.

\n

Mainstream distributions

\n

If you're installing the client on a distribution of Linux that contains a package manager such as apt, yum, or zypper, run the following command:

\n
curl -fsSL https://tailscale.com/install.sh | sh\n
\n

This is the same script available on our Download page. If you prefer not to use curl | sh, visit the Tailscale Packages - stable track page for manual installation instructions for your distribution.

\n

After installation completes, start the Tailscale client:

\n
sudo tailscale up\n
\n

The output will display a URL that you can use to authenticate to your Tailscale network (known as a tailnet). After you authenticate, check the Machines page of the admin console to confirm the device appears in your tailnet.

\n

This method works on the following distributions:

\n\n

If there is a distribution that you would like us to officially support, contact Tailscale Support so that we can consider adding official support for the distribution.

\n

Other distributions

\n

You can install the Tailscale client on distributions with alternative package managers.

\n\n

Static binaries

\n

For other Linux distributions not covered by the install script, we provide static binaries as an alternative.

\n

To install a static binary version of the Tailscale client:

\n
    \n
  1. \n

    Download the static binaries for your CPU architecture.

    \n
    2. \n
  2. \n

    Unpack the archive:

    \n
    3. \n
\n
tar xvf tailscale_<version>_<architecture>.tgz\n
\n

For example, if you've downloaded version 1.90.6 of the Tailscale client for AMD64, the command is tar xvf tailscale_1.90.6_amd64.tgz.

\n
    \n
  1. Start tailscaled daemon:
    2. \n
\n
sudo tailscaled --state=tailscaled.state\n
\n

If you want to configure systemd to run tailscaled automatically, a service configuration is available in the systemd/ subdirectory of the unpacked archive.

\n
    \n
  1. Start the Tailscale client:
    2. \n
\n
sudo tailscale up\n
\n

The output will display a URL that you can use to authenticate to your tailnet. After you authenticate, check the Machines page of the admin console to confirm the device appears in your tailnet.

\n

Verify the installation

\n

When you add a machine to a tailnet, it's assigned a Tailscale IPv4 and IPv6 address. This helps other machines, nodes, and devices know how to reach it over the secure tailnet.

\n

To display the Tailscale IPv4 and IPv6 addresses for your device, run:

\n
tailscale ip\n
\n

Check the connection status:

\n
tailscale status\n
\n

Further exploration

\n

Disable key expiry

\n

Devices in a tailnet periodically re-authenticate to stay secure through device key expiry, which requires re-authentication after a set period. For devices that should remain continuously connected, such as servers, Raspberry Pis, media centers, smart home hubs, Docker hosts, and NAS devices, you can disable key expiry to avoid any unnecessary disruptions.

\n

To disable key expiry for a device, go to the Machines page of the admin console, select the \"ellipsis icon next to the device, then select Disable key expiry.

\n

Disabling key expiry reduces security and can expose your network if the device or key is compromised. Only do this for trusted devices and revoke the key immediately if the device is lost or replaced. For more information, refer to Key expiry.

\n

If your device's key is already expired, you can use the following command to force re-authentication:

\n
sudo tailscale up --force-reauth\n
\n

Use Tailscale SSH

\n

Tailscale SSH lets you manage SSH access to your machine, secure SSH access through your tailnet without exposing SSH to the public internet.

\n

You can enable Tailscale SSH on your machine by running the following:

\n
tailscale set --ssh\n
\n

Install unstable versions

\n

We offer unstable versions of the Tailscale client for users who want to test new features and fixes before they're distributed to the wider community. If you'd like to help test new features, you can download and install unstable clients from the Tailscale Packages - unstable track page.

\n

For more information, refer to Tailscale client versions and release tracks.

\n

Troubleshooting

\n

Issues using the install script

\n

If the install script fails, it displays diagnostic output information in the terminal session. Include this output when contacting our support team.

\n

Missing kernel modules

\n

Tailscale requires the tun kernel module. Most distributions include this by default. If you encounter errors about missing tun, load it manually:

\n
sudo modprobe tun\n
\n

To load it automatically on boot, add tun to /etc/modules or /etc/modules-load.d/tun.conf.

\n

Disable logging

\n

By default, Tailscale sends logs to Tailscale servers about device connectivity to a tailnet. We use this data to diagnose and troubleshoot issues when users reach out to Tailscale with an issue. To disable logging:

\n

Edit /etc/default/tailscaled and add:

\n
TS_NO_LOGS_NO_SUPPORT=true\n
\n

Or add --no-logs-no-support to the FLAGS variable.

\n

Disabling logs may prevent Tailscale from providing technical support.

\n

Distribution and version links

\n

You can find individual topics for Linux distributions below.

\n

Ubuntu

\n\n

Debian

\n\n

CentOS

\n\n

openSUSE

\n\n

Oracle Linux

\n\n

Red Hat® Enterprise Linux

\n\n

Fedora Linux

\n\n

Other

\n\n

If you are interested in support for another platform or architecture, run the script above then contact us by creating a feature request on GitHub, and include the output of the install.sh script.

\n

\"Project

\n

Ask AI

\n

reCAPTCHA

\n

Recaptcha requires verification.

\n

protected by reCAPTCHA

\n"}