Offer Debian repository to keep Headscale installations up to date #542

Open
opened 2025-12-29 02:19:43 +01:00 by adam · 16 comments
Owner

Originally created by @renne on GitHub (Aug 12, 2023).

Why

Currently the workflow of security checking of Headscale hosts is quite frustrating.

  1. Regularly log into host and run dpkg -l | grep -i headscale to see which Headscale version is installed.
  2. Go to the releases page of this Github repository.
  3. Check most current release version of Headscale.
  4. Download most current release version of Headscale.
  5. Run sudo dpkg --install headscale.deb to update Headscale.

Description

Offer a package repository for Debian/Ubuntu which can be added to APT.
That allows to either run apt update && apt upgrade or even use unattended-upgrades to update Headscale.

Originally created by @renne on GitHub (Aug 12, 2023). ## Why Currently the workflow of security checking of Headscale hosts is quite frustrating. 1. Regularly log into host and run `dpkg -l | grep -i headscale` to see which Headscale version is installed. 2. Go to the releases page of this Github repository. 3. Check most current release version of Headscale. 4. Download most current release version of Headscale. 5. Run `sudo dpkg --install headscale.deb` to update Headscale. ## Description Offer a package repository for Debian/Ubuntu which can be added to APT. That allows to either run `apt update && apt upgrade` or even use unattended-upgrades to update Headscale.
adam added the enhancementhelp wantedno-stale-bot labels 2025-12-29 02:19:43 +01:00
Author
Owner

@mich2k commented on GitHub (Sep 19, 2023):

Following this, I tought the headscale deb was embedding the hs repository too

@mich2k commented on GitHub (Sep 19, 2023): Following this, I tought the headscale deb was embedding the hs repository too
Author
Owner

@kradalby commented on GitHub (Sep 24, 2023):

Hi, we do not have capacity to maintain this, we are happy to receive help from someone who can and are willing to maintain this. I have marked this issue with "help wanted".

@kradalby commented on GitHub (Sep 24, 2023): Hi, we do not have capacity to maintain this, we are happy to receive help from someone who can and are willing to maintain this. I have marked this issue with "help wanted".
Author
Owner

@github-actions[bot] commented on GitHub (Dec 24, 2023):

This issue is stale because it has been open for 90 days with no activity.

@github-actions[bot] commented on GitHub (Dec 24, 2023): This issue is stale because it has been open for 90 days with no activity.
Author
Owner

@renne commented on GitHub (Dec 25, 2023):

Anti stale ;-)

@renne commented on GitHub (Dec 25, 2023): Anti stale ;-)
Author
Owner

@DaAwesomeP commented on GitHub (Jan 7, 2024):

It is maybe possible to do with a GitHub CI workflow + GitHub Pages (existing build workflows push to a repo hosted on GitHub Pages).

Example writeup: https://jon.sprig.gs/blog/post/2835
Example workflow: https://github.com/terminate-notice/terminate-notice.github.io/blob/main/.github/workflows/repo.yml

@DaAwesomeP commented on GitHub (Jan 7, 2024): It is maybe possible to do with a GitHub CI workflow + GitHub Pages (existing build workflows push to a repo hosted on GitHub Pages). Example writeup: https://jon.sprig.gs/blog/post/2835 Example workflow: https://github.com/terminate-notice/terminate-notice.github.io/blob/main/.github/workflows/repo.yml
Author
Owner

@github-actions[bot] commented on GitHub (Apr 7, 2024):

This issue is stale because it has been open for 90 days with no activity.

@github-actions[bot] commented on GitHub (Apr 7, 2024): This issue is stale because it has been open for 90 days with no activity.
Author
Owner

@renne commented on GitHub (Apr 7, 2024):

Maybe Headscale can be added to the Tailscale repositories?

@renne commented on GitHub (Apr 7, 2024): Maybe Headscale can be added to the Tailscale repositories?
Author
Owner

@github-actions[bot] commented on GitHub (Jul 7, 2024):

This issue is stale because it has been open for 90 days with no activity.

@github-actions[bot] commented on GitHub (Jul 7, 2024): This issue is stale because it has been open for 90 days with no activity.
Author
Owner

@renne commented on GitHub (Jul 8, 2024):

Stale ping.

@renne commented on GitHub (Jul 8, 2024): Stale ping.
Author
Owner

@kradalby commented on GitHub (Jul 8, 2024):

It is maybe possible to do with a GitHub CI workflow + GitHub Pages (existing build workflows push to a repo hosted on GitHub Pages).

Example writeup: jon.sprig.gs/blog/post/2835 Example workflow: terminate-notice/terminate-notice.github.io@main/.github/workflows/repo.yml

If someone wants to try this, we are open to have it set up, but two potential problems:

  • How much maintenance is it?
  • Will we hit Github bandwidth/transfer limits?
@kradalby commented on GitHub (Jul 8, 2024): > It is maybe possible to do with a GitHub CI workflow + GitHub Pages (existing build workflows push to a repo hosted on GitHub Pages). > > Example writeup: [jon.sprig.gs/blog/post/2835](https://jon.sprig.gs/blog/post/2835) Example workflow: [terminate-notice/terminate-notice.github.io@`main`/.github/workflows/repo.yml](https://github.com/terminate-notice/terminate-notice.github.io/blob/main/.github/workflows/repo.yml?rgh-link-date=2024-01-07T19%3A42%3A49Z) If someone wants to try this, we are open to have it set up, but two potential problems: - How much maintenance is it? - Will we hit Github bandwidth/transfer limits?
Author
Owner

@macthecadillac commented on GitHub (Jul 20, 2024):

You guys can use Open Build Service. I've seen plenty of Debian/Fedora repositories hosted there. I never did this myself but I think this could be useful: https://en.opensuse.org/openSUSE:Build_Service_Debian_builds

@macthecadillac commented on GitHub (Jul 20, 2024): You guys can use Open Build Service. I've seen plenty of Debian/Fedora repositories hosted there. I never did this myself but I think this could be useful: https://en.opensuse.org/openSUSE:Build_Service_Debian_builds
Author
Owner

@kradalby commented on GitHub (Jul 23, 2024):

Thats not a bad idea, my main concern with using an external service is that if they shut down, we have to find a new service because if we start offering this, it will no longer be acceptable to not offer it.

@kradalby commented on GitHub (Jul 23, 2024): Thats not a bad idea, my main concern with using an external service is that if they shut down, we have to find a new service because if we start offering this, it will no longer be acceptable to not offer it.
Author
Owner

@macthecadillac commented on GitHub (Jul 23, 2024):

It's quite unimaginable that OBS will shut down in the foreseeable future since it is tied to openSUSE--OBS is to openSUSE as AUR is to Arch. It has also been around for a very long time (openSUSE Build Service reached 1.0 in 2008, so they've been around for at least that long). Granted, every time we rely on some external service there is a chance they get shut down, but the same goes with Github or its build actions, which depends on the whims of Microsoft as much as OBS is on SUSE.

If you worry about the longevity of openSUSE Build Service, there is also Ubuntu's PPA. I don't know if they support building for Debian though.

The least risky way is to contribute to Debian directly, but becoming a Debian maintainer can be a chore (speaking from experience haha)

@macthecadillac commented on GitHub (Jul 23, 2024): It's quite unimaginable that OBS will shut down in the foreseeable future since it is tied to openSUSE--OBS is to openSUSE as AUR is to Arch. It has also been around for a very long time (openSUSE Build Service reached 1.0 in 2008, so they've been around for at least that long). Granted, every time we rely on some external service there is a chance they get shut down, but the same goes with Github or its build actions, which depends on the whims of Microsoft as much as OBS is on SUSE. If you worry about the longevity of openSUSE Build Service, there is also Ubuntu's PPA. I don't know if they support building for Debian though. The least risky way is to contribute to Debian directly, but becoming a Debian maintainer can be a chore (speaking from experience haha)
Author
Owner

@heldchen commented on GitHub (Oct 23, 2024):

as a new potential headscale user, looking for an apt repository was the first thing I did as it makes integrating it into our existing ansible infrastructure management much easier.

a community member seems to have created an unofficial repo (https://github.com/allddd/headscale-apt) maybe they would be willing to contribute to the official project?

@heldchen commented on GitHub (Oct 23, 2024): as a new potential headscale user, looking for an apt repository was the first thing I did as it makes integrating it into our existing ansible infrastructure management much easier. a community member seems to have created an unofficial repo (https://github.com/allddd/headscale-apt) maybe they would be willing to contribute to the official project?
Author
Owner

@theothertom commented on GitHub (Nov 14, 2024):

I'd be happy to explore getting something building in OBS if that would be valuable - I've done a bit there before.

@theothertom commented on GitHub (Nov 14, 2024): I'd be happy to explore getting something building in OBS if that would be valuable - I've done a bit there before.
Author
Owner

@github-actions[bot] commented on GitHub (Feb 13, 2025):

This issue is stale because it has been open for 90 days with no activity.

@github-actions[bot] commented on GitHub (Feb 13, 2025): This issue is stale because it has been open for 90 days with no activity.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#542