Skip to content

Unable to get Tailscale to work #58

@ninjanerdbgm

Description

@ninjanerdbgm

I am trying to get Tailscale hooked into Headscale, but I noticed that after adding the API key and restarting tailscale, it wasn't listed in the bindings:

$ sudo docker exec -it headscale headscale --user 1 preauthkeys create
2025-10-20T18:40:14-07:00 WRN An updated version of Headscale has been found (0.27.0-beta.1 vs. your current 0.26.1). Check it out https://github.com/juanfont/headscale/releases

2025-10-20T18:40:14-07:00 TRC expiration has been set expiration=3600000
<API_KEY>
$ vi .env
$ sudo docker compose restart tailscale
[+] Restarting 1/1
 ✔ Container tailscale  Started                                                                                                                                                                              1.5s
$ sudo docker exec -it headscale headscale nodes list
2025-10-20T18:41:13-07:00 WRN An updated version of Headscale has been found (0.27.0-beta.1 vs. your current 0.26.1). Check it out https://github.com/juanfont/headscale/releases

ID | Hostname | Name | MachineKey | NodeKey | User | IP addresses | Ephemeral | Last seen | Expiration | Connected | Expired

$ sudo docker exec -it headscale headscale nodes list-routes
2025-10-20T18:42:01-07:00 WRN An updated version of Headscale has been found (0.27.0-beta.1 vs. your current 0.26.1). Check it out https://github.com/juanfont/headscale/releases

ID | Hostname | Approved | Available | Serving (Primary)

$

Looking at the logs, it looks like it's constantly trying and failing to log in (403 Forbidden):

boot: 2025/10/21 01:51:32 [warning] failed to symlink socket: file exists
	To interact with the Tailscale CLI please use `tailscale --socket="/tmp/tailscaled.sock"`
boot: 2025/10/21 01:51:32 Running 'tailscale up'
Warning: IPv6 forwarding is disabled.
Subnet routes and exit nodes may not work correctly.
See https://tailscale.com/s/ip-forwarding
Warning: UDP GRO forwarding is suboptimally configured on eth0, UDP forwarding throughput capability will increase with a configuration change.
See https://tailscale.com/s/ethtool-config-udp-gro
2025/10/21 01:51:32 Start
2025/10/21 01:51:32 Backend: logs: be:0c9cb19045c6758c3585d4b172a17d6a8eab9d96b9f60ab6922ef705fc0ef7a2 fe:
2025/10/21 01:51:32 Switching ipn state NoState -> NeedsLogin (WantRunning=true, nm=false)
2025/10/21 01:51:32 blockEngineUpdates(true)
2025/10/21 01:51:32 health(warnable=warming-up): error: Tailscale is starting. Please wait.
2025/10/21 01:51:32 health(warnable=wantrunning-false): ok
2025/10/21 01:51:32 control: client.Shutdown ...
2025/10/21 01:51:32 control: updateRoutine: exiting
2025/10/21 01:51:32 control: mapRoutine: exiting
2025/10/21 01:51:32 control: authRoutine: exiting
2025/10/21 01:51:32 control: Client.Shutdown done.
2025/10/21 01:51:32 StartLoginInteractiveAs("root"): url=false
2025/10/21 01:51:32 control: client.Login(2)
2025/10/21 01:51:32 control: LoginInteractive -> regen=true
2025/10/21 01:51:32 control: doLogin(regen=true, hasUrl=false)
2025/10/21 01:51:37 health(warnable=warming-up): ok
2025/10/21 01:51:52 health(warnable=login-state): error: You are logged out. The last login error was: fetch control key: 403 Forbidden
2025/10/21 01:51:52 Received error: fetch control key: 403 Forbidden
2025/10/21 01:51:52 control: LoginInteractive -> regen=true
2025/10/21 01:51:52 control: doLogin(regen=true, hasUrl=false)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions