[BUG] Headscale creation seems to be failing in CI

[artis3n]

https://juanfont.github.io/headscale/running-headscale-container/

https://github.com/artis3n/ansible-role-tailscale/actions/runs/7929963271/job/21655266348?pr=431#step:6:159

PLAY [Prepare] *****************************************************************
  
  TASK [Create Headscale user] ***************************************************
  fatal: [localhost]: FAILED! => {"changed": false, "msg": "The container \"headscale\" has been paused (409 Client Error for http+docker://localhost/v1.43/containers/headscale/exec: Conflict (\"Container b3f5931963c608185e186bd9caa868305ef3c17ac28f8562087de7ec3c42233f is not running\"))"}

[McSim85]

this is relevant
#430 (comment)

reproducible in the GH CodeSpace

[artis3n]

make test-default works fine on the main branch, docker images shows:

headscale/headscale                              latest    6743c056e988   9 months ago   104MB

Running docker system prune -a and re-running the test, I can now reproduce the failure.

headscale/headscale                     latest    861be0ca204e   N/A          78.1MB

Significant size difference in the container.

Latest tag seems to align with unstable, which is not what we want. 0.23.0 also released at the same time, and digests match latest and unstable.

On the repo, an alpha version of v0.23.0 released yesterday: https://github.com/juanfont/headscale/releases/tag/v0.23.0-alpha4

So it seems the docker image incorrectly pins this to a release v0.23.0 version.

juanfont/headscale#1760 is the upstream issue about Headscale being broken.

It seems like the best option right now is to pin to the previous release, 0.22, or 0.22.3.

[artis3n]

Per juanfont/headscale#1763, latest is a safe tag to use, they just had a CI bug. It is actively being fixed so I'll give it a day or so for the headscale folks to fix the upstream tags, which should make the existing configuration work without issue. If needed, this weekend I'll pin headscale to 0.22