headscale-prebuilt (0.29.2+efs8-2) efs-focal; urgency=medium

  * Correct a few minor packaging details.
  * headscale.service: Run `configtest` before reload, so it will fail if
    the config cannot be parsed. (Also do it before start, for consistency,
    though this has no real effect, as the service would fail anyway.)
  * headscale.service: Change the service model from simple to
    exec. Slightly more correct, but no noticeable change.

 -- Peter Samuelson <psamuelson@axcient.com>  Thu, 10 Sep 2026 19:29:09 -0500

headscale-prebuilt (0.29.2+efs8-1) efs-focal; urgency=medium

  * Build headscale package using Sergey's binary 0.29.2-v8.
    - v4: Policy: cache user + user->nodes indexes.
      + Eliminates an O(K·N) users scan
    - v5: drop the proactive authCache.Remove after FinishAuth().
      + Fixes a race causing some SSO login failures
    - v6: hoist ReduceNodes outer-node matcher checks out of the peer loop.
      + ~2× speedup on the peer visibility path
    - v7: Policy: cache Group.resolve output (the IPSet itself).
      + CPU usage: 2.7 -> 0.6 cores
    - v8: BuildPeerMap: replace per-pair canAccess scan with per-node
      src/dst bitmasks and a bitwise-AND pair loop.
      + CPU usage: 0.6 -> 0.05 cores

 -- Peter Samuelson <psamuelson@axcient.com>  Thu, 27 Aug 2026 12:20:33 -0500
