Run Tailscale commands without sudo
Set the Tailscale operator user once, then run serve and funnel from a deploy account without sudo. What the setting changes, and what still needs root.
#sudo
Filtering by topic #sudo · clear
Why nano won't save: permission denied
A save that fails in nano has four usual causes. Check the file owner, the parent directory, a read only or full filesystem, then your uid in a container.
Audit what commands users ran on your server
Shell history is not an audit trail. Compare sudo logging, session recording, shell hooks and auditd execve rules, then ship the logs off the box.
sudo-rs on Ubuntu: what changes for sudoers
Ubuntu 26.04 makes sudo-rs the default sudo. Here is the sudoers delta that matters: wildcard argument rules stop matching, and what to write instead.