In a container (so without privileges & systemd) using tailscale is a bit different.
Launch (ideally in screen or tmux) :
tailscaled --tun=userspace-networking --socks5-server=localhost:1055 --outbound-http-proxy-listen=localhost:1055
Then in another terminal
tailscale up --authkey=tskey-auth-SPECIFICKEY