packages/net/netbird, branch master

netbird: update to 0.66.2, patch for Go 1.26 build

2026-03-08T23:55:06Z

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.66.2 NetBird `v0.66.x` adds support for exposing a local HTTP service from the CLI with the `netbird expose`[1] command, but only for self-hosted deployments. Cloud support is coming. [1]: https://docs.netbird.io/manage/reverse-proxy/expose-from-cli --- `0.65.x` highlights Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.65.3 NetBird `v0.65.x` now includes a built-in reverse proxy[1], but only for self-hosted deployments and is currently in beta. Cloud support is coming soon. Important: pre-shared keys or Rosenpass are currently incompatible with the reverse proxy feature. [1]: https://docs.netbird.io/manage/reverse-proxy --- `v0.63.x` highlights Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.63.0 NetBird now supports private DNS zones[1]. [1]: https://docs.netbird.io/manage/dns/custom-zones --- `v0.62.x` highlights Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.62.3 Upstream minimum Go requirement raised from `v1.24.x` to `v1.25.x`, see the go.mod[1]. [1]: https://github.com/netbirdio/netbird/blob/v0.62.3/go.mod#L3-L5 --- Building `netbird` with Go 1.26.x fails with errors: ``` [...] /builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:22:2: WaitReasonSelect redeclared in this block /builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:22:2: other declaration of WaitReasonSelect /builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:23:2: WaitReasonChanReceive redeclared in this block /builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:23:2: other declaration of WaitReasonChanReceive /builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:24:2: WaitReasonSemacquire redeclared in this block /builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:24:2: other declaration of WaitReasonSemacquire [...] ``` Upstream Issue: https://github.com/netbirdio/netbird/issues/5290 Upstream PR: https://github.com/netbirdio/netbird/pull/5447 Signed-off-by: Wesley Gimenes

netbird: update to 0.61.2 (breaking change)

2026-03-08T23:55:06Z

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.61.2 The second release of `netbird` that introduces a breaking change[1]. A backport will be provided for OpenWrt 25.12 but not for OpenWrt 24.10, since OpenWrt 25.12 has not been released yet. NetBird adds **fine-grained SSH access control**[2]. Self-hosters must update both the `management` and `dashboard`[3]. [1]: https://forum.netbird.io/t/upcoming-breaking-changes-to-netbird-ssh/401 [2]: https://docs.netbird.io/manage/peers/ssh#fine-grained-access-control [3]: https://docs.netbird.io/manage/peers/ssh#v0-61-0 Signed-off-by: Wesley Gimenes

netbird: move state file to reduce storage wear

2026-03-08T23:55:06Z

Add `NB_DNS_STATE_FILE="/var/lib/netbird/state.json"` to the init environment. This moves the state from the directory `/root/.config/netbird` to the file `/var/lib/netbird/state.json` to avoid storage wear. Note: the file is not preserved across reboots. The state file contains information such as locally disabled routes and other data primarily useful for desktop clients. In OpenWrt setups, these changes are normally handled by the NetBird `management` server. This matches the behavior prior to `netbird` v0.52.x, I have not received any reports that this file caused problems before, so it is unlikely to cause issues now. The previous state file `/root/.config/netbird/state.json` can be removed. Signed-off-by: Wesley Gimenes

netbird: update to 0.60.8 (breaking change)

2025-12-20T19:34:13Z

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.60.8 This is the first `netbird` release that introduces a breaking change[1]. Therefore, versions after the `0.60.x` will not be backported to OpenWrt 24.10. They will be backported to OpenWrt 25.12, because that release has not been officially launched yet. By default netbird now creates/updates[2] `/etc/ssh/ssh_config.d/99-netbird.conf` for use with `openssh-client`. OpenWrt uses `dropbear`, and this behavior may cause storage wear. This behavior has been disabled with `NB_DISABLE_SSH_CONFIG="1"`[3] in the init file. [1]: https://forum.netbird.io/t/netbird-v0-60-0-released/334#p-610-upgrade-compatibility-notes-4 [2]: https://docs.netbird.io/manage/peers/ssh#native-ssh-clients-open-ssh [3]: https://github.com/netbirdio/netbird/blob/v0.60.8/client/ssh/config/manager.go#L167-L172 Signed-off-by: Wesley Gimenes

netbird: update to 0.59.13

2025-12-20T19:34:13Z

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.59.13 Signed-off-by: Wesley Gimenes

netbird: update to 0.59.12

2025-11-11T04:49:13Z

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.59.12 Signed-off-by: Wesley Gimenes

netbird: update to 0.58.2

2025-10-01T15:07:57Z

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.58.2 Signed-off-by: Wesley Gimenes

netbird: update to 0.57.1

2025-09-18T19:14:54Z

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.57.1 Signed-off-by: Wesley Gimenes

netbird: switch to profile-based configuration

2025-09-10T22:09:49Z

Add support for `netbird` profiles feature [1] (introduced in 0.52.2). Use `NB_STATE_DIR="/root/.config/netbird"` in the init file instead of the previous `NB_CONFIG="/etc/netbird/config.json"`, and update Makefile configuration paths accordingly. Rationale: `netbird` saves state/configuration under `/var` by default. On OpenWrt, `/var` is a symlink to `/tmp` (a volatile location), which would cause config loss after reboot or reflash. Using `/root/.config/netbird` avoids this, it's a valid upstream directory not used by default. `netbird` will migrate existing configurations. This change will not be backported to preserve the current meaning of "stable" in OpenWrt and to avoid (unlikely but possible) breakage of existing installations. [1]: https://docs.netbird.io/how-to/profiles Signed-off-by: Wesley Gimenes

netbird: update to 0.55.1

2025-09-10T22:09:49Z

changelog: https://github.com/netbirdio/netbird/releases/tag/v0.55.1 Signed-off-by: Wesley Gimenes