Following up on #66: instead of documenting /opt/tailscale/tailscale for sudo (and non-interactive shells that don't source /etc/profile.d), we could bind-mount /opt/bin to /usr/local/bin via a oneshot systemd service on boot.

Since /usr/local/bin is in standard $PATH and secure_path, tailscale and sudo tailscale work out of the box. Also, since /etc/systemd/system is preserved by SteamOS atomic updates, this survives OS updates without manual re-runs.

——

Update:
run0 bash tailscale.sh and run0 tailscale update is better