From d02617f878ced9bd1842a4ec9a12659b00e913d7 Mon Sep 17 00:00:00 2001
From: Philip Taron <philip.taron@gmail.com>
Date: Thu, 8 Jan 2026 08:54:41 -0800
Subject: [PATCH] tailscale: move tests to passthru

The upstream tests take a long time to run and are often flaky. Too many people need to get tailscale in order to update their system. We'll still run them in nixpkgs-review for tailscale version updates, but will not do so in normal builds.
---
 pkgs/by-name/ta/tailscale/package.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/by-name/ta/tailscale/package.nix b/pkgs/by-name/ta/tailscale/package.nix
index 7c61ba61c9d7..704ff4a1c306 100644
--- a/pkgs/by-name/ta/tailscale/package.nix
+++ b/pkgs/by-name/ta/tailscale/package.nix
@@ -84,6 +84,9 @@ buildGoModule (finalAttrs: {
   # panic: httptest: failed to listen on a port: listen tcp6 [::1]:0: bind: operation not permitted
   __darwinAllowLocalNetworking = true;
 
+  # Tests are in the `tests` passthru derivation because they are flaky, frequently causing build failures.
+  doCheck = false;
+
   preCheck = ''
     # feed in all tests for testing
     # subPackages above limits what is built to just what we
@@ -215,6 +218,7 @@ buildGoModule (finalAttrs: {
   passthru.tests = {
     inherit (nixosTests) headscale;
     inherit tailscale-nginx-auth;
+    tests = finalAttrs.finalPackage.overrideAttrs { doCheck = true; };
   };
 
   meta = {