tailscale script requires Debian 12 LXC but fails because the Debian 12 image does not include curl

[bwinterfp]

✅ Have you read and understood the above guidelines?

yes

📜 What is the name of the script you are using?

add-tailscale-lxc

📂 What was the exact command used to execute the script?

bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/add-tailscale-lxc.sh)"

⚙️ What settings are you using?

• Default Settings
• Advanced Settings

🖥️ Which Linux distribution are you using?

Debian 12

📝 Provide a clear and concise description of the issue.

The script fails to run because the LXC does not have curl installed because the Debian 12 LXC I downloaded via Proxmox CT Templates portal dis not include curl.

To fix I had to remove the bad apt source file (can't run apt update with it there):
rm /etc/apt/sources.list.d/tailscale.list
And then:
apt update && apt install -y curl
The install script then ran fine.

🔄 Steps to reproduce the issue.

Install the tailscale script as per instructions:
https://community-scripts.github.io/ProxmoxVE/scripts?id=add-tailscale-lxc

❌ Paste the full error output (if available).

W: GPG error: https://pkgs.tailscale.com/stable/debian bookworm InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 458CA832957F5868

Only because curl wasn't available and /etc/apt/sources.list.d/tailscale.list could not be retrieved.

🖼️ Additional context (optional).

No response

[MickLesk]

All LXC include curl, its an core dependency in our Script Base

[bwinterfp]

I would have thought so but that error happened in a brand new LXC deployment using debian-12-standard_12.7-1_amd64.tar.zst

[bwinterfp]

I can't make this stuff up! Here's another new LXC I just spun up to test this.

Creating filesystem with 2097152 4k blocks and 524288 inodes
Filesystem UUID: 027d0853-7a6a-475c-8e58-7caa693e885f
Superblock backups stored on blocks: 
	32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632
extracting archive '/var/lib/pve/local-btrfs/template/cache/debian-12-standard_12.7-1_amd64.tar.zst'
Total bytes read: 521902080 (498MiB, 398MiB/s)
Detected container architecture: amd64
Creating SSH host key 'ssh_host_ecdsa_key' - this may take some time ...
done: SHA256:eG2wN4kNpfSyb6rT6YH4A4rGTCI8g9bVhuO8ziUc5DU root@test
Creating SSH host key 'ssh_host_ed25519_key' - this may take some time ...
done: SHA256:fYjuMz706/cMuU1uBz9Bu1zFPGBsDolYpNkNN02Pfj8 root@test
Creating SSH host key 'ssh_host_dsa_key' - this may take some time ...
done: SHA256:qzusr5RZe13tPIVECcG5Gf6rpiZoYUtVmd815ICi0Mw root@test
Creating SSH host key 'ssh_host_rsa_key' - this may take some time ...
done: SHA256:KOCMsMh+WkD3jXXL2NgdiQIAFbtxnnTBaLOwlAnxQew root@test
TASK OK

root@test:~# cat /etc/debian_version 
12.7
root@test:~# 

[MickLesk]

Which LXC do you have created? Bash call please. That Not look Like our scripts

[bwinterfp]

It's in the original bug report if you scroll up:

bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/add-tailscale-lxc.sh)"

[bwinterfp]

LXC is a Debian 12 - your scripts don't create the LXC container for this app, it has to be added to an existing LXC which is a new Debian 12 image.

[bwinterfp]

Your script from here:
https://community-scripts.github.io/ProxmoxVE/scripts?id=add-tailscale-lxc

[bwinterfp]

This is the line in the script:

curl -fsSL https://pkgs.tailscale.com/stable/$ID/$VER.noarmor.gpg | tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null

[bwinterfp]

If curl is not being included in the latest Debian 12 image downloaded from the PVE CT Templates page (which this script says it requires) then maybe a wget piped

wget would work:

wget -q -O - --no-check-certificate https://pkgs.tailscale.com/stable/$ID/$VER.noarmor.gpg | tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null

root@tailscale01:~# ID=$(grep "^ID=" /etc/os-release | cut -d"=" -f2)
root@tailscale01:~# VER=$(grep "^VERSION_CODENAME=" /etc/os-release | cut -d"=" -f2)
root@tailscale01:~# wget -q -O - --no-check-certificate https://pkgs.tailscale.com/stable/$ID/$VER.noarmor.gpg | tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
root@tailscale01:~# ls -la /usr/share/keyrings/tailscale-archive-keyring.gpg
-rw-r--r-- 1 root root 2288 May 31 11:10 /usr/share/keyrings/tailscale-archive-keyring.gpg
root@tailscale01:~# apt-get update
Hit:1 http://security.debian.org bookworm-security InRelease
Hit:2 http://deb.debian.org/debian bookworm InRelease
Hit:3 http://deb.debian.org/debian bookworm-updates InRelease
Get:4 https://pkgs.tailscale.com/stable/debian bookworm InRelease
Fetched 6581 B in 1s (4491 B/s)
Reading package lists... Done
root@tailscale01:~#

[bwinterfp]

PR raised: #4864

[bwinterfp]

Just installed the backrest LXC and it does create a new Debian LXC and again, no curl:

root@backrest01:~# curl
-bash: curl: command not found
root@backrest01:~# cat /etc/debian_version 
12.11
root@backrest01:~# 

[MickLesk]

No, we dont Support wget in this Case. The LXC is not from us, the maximum is, when we add to Website "curl is needed" all other are not a Bug

[bwinterfp]

The LXC is not from us, the maximum is

Sorry, I don't understand. What is 'the maximum'?

I am well aware the LXC is not yours, the script is. Your script does not work with the required Debian 12 LXC template because that template does not ship with curl. How do you expect your script to work? My PR fixes it by using the ubiquitous wget binary.