{action.yml,.github}: add support for macOS

Add support for running the action on macOS-based GitHub runners.

Updates TODO

Author: mpminardi

.github/workflows/tailscale.yml

@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
   push:
     branches:
-      - main
+      - 'mpminardi/mac-support'
   pull_request:
     branches:
       - '*'
@@ -13,7 +13,7 @@ jobs:
   build:
     strategy:
       matrix:
-        os: [ubuntu-latest, windows-latest]
+        os: [ubuntu-latest, windows-latest, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
       - name: Check out code

action.yml

@@ -52,10 +52,10 @@ runs:
     using: 'composite'
     steps:
       - name: Check Runner OS
-        if: ${{ runner.os != 'Linux' && runner.os != 'Windows' }}
+        if: ${{ runner.os != 'Linux' && runner.os != 'Windows' && runner.os != 'macOS'}}
         shell: bash
         run: |
-          echo "::error title=⛔ error hint::Support Linux or Windows Only"
+          echo "::error title=⛔ error hint::Support Linux, Windows, and macOS Only"
           exit 1
       - name: Check Auth Info Empty
         if: ${{ inputs.authkey == '' && (inputs['oauth-secret'] == '' || inputs.tags == '') }}
@@ -140,8 +140,30 @@ runs:
           Start-Process "C:\Windows\System32\msiexec.exe" -Wait -ArgumentList @('/quiet', '/l*v tailscale.log', '/i', 'tailscale.msi')
           Add-Content $env:GITHUB_PATH "C:\Program Files\Tailscale\"
           Remove-Item tailscale.msi -Force;
-      - name: Start Tailscale Daemon - Linux
-        if: ${{ runner.os == 'Linux' }}
+      - name: Checkout Tailscale repo - macOS
+        # TODO: checkout proper tag
+        if: ${{ runner.os == 'macOS' }}
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          repository: tailscale/tailscale
+          path: ${{ github.workspace }}/tailscale
+          ref: v1.76.6
+      - name: Build Tailscale binaries - macOS
+        if: ${{ runner.os == 'macOS' }}
+        shell: bash
+        run: |
+          cd tailscale
+          export TS_USE_TOOLCHAIN=1
+          ./build_dist.sh ./cmd/tailscale
+          ./build_dist.sh ./cmd/tailscaled
+          sudo mv tailscale tailscaled /usr/local/bin
+      - name: Install timeout - macOS
+        if: ${{ runner.os == 'macOS' }}
+        shell: bash
+        run:
+          brew install coreutils  # for 'timeout'
+      - name: Start Tailscale Daemon - non-Windows
+        if: ${{ runner.os != 'Windows' }}
         shell: bash
         env:
           ADDITIONAL_DAEMON_ARGS: ${{ inputs.tailscaled-args }}
@@ -153,7 +175,7 @@ runs:
             STATE_ARGS="--statedir=${STATEDIR}"
             mkdir -p "$STATEDIR"
           fi
-          sudo -E tailscaled ${STATE_ARGS} ${ADDITIONAL_DAEMON_ARGS} 2>~/tailscaled.log &
+          sudo -E tailscaled ${STATE_ARGS} ${ADDITIONAL_DAEMON_ARGS} 2>&1 | tee ~/tailscaled.log &
           # And check that tailscaled came up. The CLI will block for a bit waiting
           # for it. And --json will make it exit with status 0 even if we're logged
           # out (as we will be). Without --json it returns an error if we're not up.
@@ -167,17 +189,17 @@ runs:
           TIMEOUT: ${{ inputs.timeout }}
         run: |
           if [ -z "${HOSTNAME}" ]; then
-            if [ "${{ runner.os }}" == "Linux" ]; then
-              HOSTNAME="github-$(cat /etc/hostname)"
-            elif [ "${{ runner.os }}" == "Windows" ]; then
+            if [ "${{ runner.os }}" == "Windows" ]; then
               HOSTNAME="github-$COMPUTERNAME"
+            else 
+              HOSTNAME="github-$(hostname)"
             fi
           fi
           if [ -n "${{ inputs['oauth-secret'] }}" ]; then
             TAILSCALE_AUTHKEY="${{ inputs['oauth-secret'] }}?preauthorized=true&ephemeral=true"
             TAGS_ARG="--advertise-tags=${{ inputs.tags }}"
           fi
-          if [ "${{ runner.os }}" == "Linux" ]; then
+          if [ "${{ runner.os }}" != "Windows" ]; then
             MAYBE_SUDO="sudo -E"
           fi
           timeout --verbose --kill-after=1s ${TIMEOUT} ${MAYBE_SUDO} tailscale up ${TAGS_ARG} --authkey=${TAILSCALE_AUTHKEY} --hostname=${HOSTNAME} --accept-routes ${ADDITIONAL_ARGS}