DYNR/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-08-05 00:15:26 -04:00
Code Issues 23.5k Packages Projects Releases 10 Wiki Activity

[GH-ISSUE #5084] v0.62.0 Embedded IdP Deadlock behind External Reverse Proxy (Two-VM Setup) & Missing IdP UI in Standalone Mode #10456

New Issue
Open
opened 2026-08-05 01:25:58 -04:00 by saavagebueno · 4 comments
saavagebueno commented 2026-08-05 01:25:58 -04:00
Owner
Copy Link

Originally created by @Der-Papst on GitHub (Jan 10, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5084

I am setting up a self-hosted NetBird instance using the new Embedded IdP feature (introduced in v0.62.0). I have encountered a "chicken-and-egg" deadlock during the Management service startup because of my external reverse proxy architecture.

When EmbeddedIdP is enabled, the Management service attempts to validate its own OIDC configuration by making a network request to its public domain (https://netbird.example.com/...). This request travels out to my external proxy and loops back to the container. However, since the Management service is blocked waiting for this check to finish, it is not yet serving traffic. The proxy receives a "Connection Refused" or timeout, returns a 502 Bad Gateway to the Management service, and the service retries indefinitely or panics.

Architecture:

VM 1 (Proxy Host): Runs Traefik (External). Terminates SSL (443) and forwards traffic via H2C (HTTP/2 cleartext) to VM 2.

VM 2 (NetBird Host): Runs the NetBird Docker stack with a local Caddy acting as an internal router on Port 80.

Steps to Reproduce:

Configure management.json with "EmbeddedIdP": { "Enabled": true, ... }.

Set HttpConfig endpoints to the public domain (https://netbird.example.com/...).

Start the container (docker compose up).

Observe the boot loop in logs.

Observed Logs (The 502 Loop):

Plaintext

2026-01-10T12:19:56Z INFO [context: SYSTEM] management/cmd/management.go:157: loading OIDC configuration from the provided IDP configuration endpoint https://netbird.example.com/oauth2/.well-known/openid-configuration
Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://netbird.example.com/oauth2/.well-known/openid-configuration Get "https://netbird.example.com/oauth2/.well-known/openid-configuration": remote error: tls: internal error
...
(Repeats indefinitely or crashes with 502 Bad Gateway)
Observed Logs (The Panic - if HttpConfig is removed to bypass check): If I remove the HttpConfig block to try and bypass the check, the service crashes immediately:

Plaintext

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]
goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig(...)
Configuration (Traefik - VM1):

YAML

netbird-backend:
  loadBalancer:
    serversTransport: netbird-grpc-transport
    servers:
      - url: "h2c://192.168.X.X:80" # Points to VM2 internal IP

Configuration (Management.json - VM2):

JSON

"HttpConfig": {
    "AuthIssuer": "https://netbird.example.com/oauth2",
    "AuthAudience": "netbird-dashboard",
    "OIDCConfigEndpoint": "https://netbird.example.com/oauth2/.well-known/openid-configuration"
},
"EmbeddedIdP": {
    "Enabled": true,
    "Issuer": "https://netbird.example.com/oauth2",
    ...
}

Workaround Used: I was forced to disable EmbeddedIdP and run a Standalone Dex container. This works perfectly because Dex starts independently, breaking the dependency loop.

The Request: While the Standalone Dex workaround fixes the crash, it causes the NetBird Dashboard to hide the new "Identity Providers" UI tab, which I specifically wanted to use for configuring Entra ID easily.

Fix: Can we add a flag (e.g., --skip-oidc-startup-check) to the Management service so it trusts the config without trying to curl itself?

Feature: Can we force-enable the "Identity Providers" UI menu even when using a custom/standalone IdP?Describe the problem

A clear and concise description of what the problem is.

To Reproduce

Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior

A clear and concise description of what you expected to happen.

Are you using NetBird Cloud?

Please specify whether you use NetBird Cloud or self-host NetBird's control plane.

NetBird version

netbird version

Is any other VPN software installed?

If yes, which one?

Debug output

To help us resolve the problem, please attach the following anonymized status output

netbird status -dA

Create and upload a debug bundle, and share the returned file key:

netbird debug for 1m -AS -U

Uploaded files are automatically deleted after 30 days.

Alternatively, create the file only and attach it here manually:

netbird debug for 1m -AS

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @Der-Papst on GitHub (Jan 10, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5084 I am setting up a self-hosted NetBird instance using the new Embedded IdP feature (introduced in v0.62.0). I have encountered a "chicken-and-egg" deadlock during the Management service startup because of my external reverse proxy architecture. When EmbeddedIdP is enabled, the Management service attempts to validate its own OIDC configuration by making a network request to its public domain (https://netbird.example.com/...). This request travels out to my external proxy and loops back to the container. However, since the Management service is blocked waiting for this check to finish, it is not yet serving traffic. The proxy receives a "Connection Refused" or timeout, returns a 502 Bad Gateway to the Management service, and the service retries indefinitely or panics. Architecture: VM 1 (Proxy Host): Runs Traefik (External). Terminates SSL (443) and forwards traffic via H2C (HTTP/2 cleartext) to VM 2. VM 2 (NetBird Host): Runs the NetBird Docker stack with a local Caddy acting as an internal router on Port 80. Steps to Reproduce: Configure management.json with "EmbeddedIdP": { "Enabled": true, ... }. Set HttpConfig endpoints to the public domain (https://netbird.example.com/...). Start the container (docker compose up). Observe the boot loop in logs. Observed Logs (The 502 Loop): Plaintext 2026-01-10T12:19:56Z INFO [context: SYSTEM] management/cmd/management.go:157: loading OIDC configuration from the provided IDP configuration endpoint https://netbird.example.com/oauth2/.well-known/openid-configuration Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://netbird.example.com/oauth2/.well-known/openid-configuration Get "https://netbird.example.com/oauth2/.well-known/openid-configuration": remote error: tls: internal error ... (Repeats indefinitely or crashes with 502 Bad Gateway) Observed Logs (The Panic - if HttpConfig is removed to bypass check): If I remove the HttpConfig block to try and bypass the check, the service crashes immediately: Plaintext panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig(...) Configuration (Traefik - VM1): YAML netbird-backend: loadBalancer: serversTransport: netbird-grpc-transport servers: - url: "h2c://192.168.X.X:80" # Points to VM2 internal IP Configuration (Management.json - VM2): JSON "HttpConfig": { "AuthIssuer": "https://netbird.example.com/oauth2", "AuthAudience": "netbird-dashboard", "OIDCConfigEndpoint": "https://netbird.example.com/oauth2/.well-known/openid-configuration" }, "EmbeddedIdP": { "Enabled": true, "Issuer": "https://netbird.example.com/oauth2", ... } Workaround Used: I was forced to disable EmbeddedIdP and run a Standalone Dex container. This works perfectly because Dex starts independently, breaking the dependency loop. The Request: While the Standalone Dex workaround fixes the crash, it causes the NetBird Dashboard to hide the new "Identity Providers" UI tab, which I specifically wanted to use for configuring Entra ID easily. Fix: Can we add a flag (e.g., --skip-oidc-startup-check) to the Management service so it trusts the config without trying to curl itself? Feature: Can we force-enable the "Identity Providers" UI menu even when using a custom/standalone IdP?**Describe the problem** A clear and concise description of what the problem is. **To Reproduce** Steps to reproduce the behavior: 1. Go to '...' 2. Click on '....' 3. Scroll down to '....' 4. See error **Expected behavior** A clear and concise description of what you expected to happen. **Are you using NetBird Cloud?** Please specify whether you use NetBird Cloud or self-host NetBird's control plane. **NetBird version** `netbird version` **Is any other VPN software installed?** If yes, which one? **Debug output** To help us resolve the problem, please attach the following anonymized status output netbird status -dA Create and upload a debug bundle, and share the returned file key: netbird debug for 1m -AS -U *Uploaded files are automatically deleted after 30 days.* Alternatively, create the file only and attach it here manually: netbird debug for 1m -AS **Screenshots** If applicable, add screenshots to help explain your problem. **Additional context** Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2026-08-05 01:25:58 -04:00
saavagebueno commented 2026-08-05 01:25:58 -04:00
Author
Owner
Copy Link

@braginini commented on GitHub (Jan 10, 2026):

The HttpConfig is part of the "old idp way". It shouldn't be combined with the EmbeddedIdP config. We will add a check for that. This is also true for the IdpManager config.

Why are you specifying the HttpConfig in your setup?

<!-- gh-comment-id:3733864570 --> @braginini commented on GitHub (Jan 10, 2026): The HttpConfig is part of the "old idp way". It shouldn't be combined with the EmbeddedIdP config. We will add a check for that. This is also true for the IdpManager config. Why are you specifying the HttpConfig in your setup?
saavagebueno commented 2026-08-05 01:25:59 -04:00
Author
Owner
Copy Link

@Der-Papst commented on GitHub (Jan 11, 2026):

The HttpConfig is part of the "old idp way". It shouldn't be combined with the EmbeddedIdP config. We will add a check for that. This is also true for the IdpManager config.

Why are you specifying the HttpConfig in your setup?

In my first trys i actually disnt use the http section but when configuring a setup with external proxy I consistently ran into an issue with managment. Only after i used the http section that is used as well in the getting-starter-with-dex.sh and seperated dex into a dedicated conatiner it worked with a proxy. Here are the logs without http section.felix@netbirdMGMT:~$ docker logs netbird-management
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0001923c0, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001ab140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc000193220, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc000189720, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0001960a0, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001ab140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0000f8820, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001ab140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0000f88c0, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc000192460, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0001897c0, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e]

goroutine 1 [running]:
github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c})
/home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e
github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?})
/home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175
github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc000192280, 0xa, 0xa})
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b
github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/netbirdio/netbird/management/cmd.Execute(...)
/home/runner/work/netbird/netbird/management/cmd/root.go:53
main.main()
/home/runner/work/netbird/netbird/management/main.go:17 +0x26
felix@netbirdMGMT:~$

<!-- gh-comment-id:3734338632 --> @Der-Papst commented on GitHub (Jan 11, 2026): > The HttpConfig is part of the "old idp way". It shouldn't be combined with the EmbeddedIdP config. We will add a check for that. This is also true for the IdpManager config. > > Why are you specifying the HttpConfig in your setup? In my first trys i actually disnt use the http section but when configuring a setup with external proxy I consistently ran into an issue with managment. Only after i used the http section that is used as well in the getting-starter-with-dex.sh and seperated dex into a dedicated conatiner it worked with a proxy. Here are the logs without http section.felix@netbirdMGMT:~$ docker logs netbird-management panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0001923c0, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001ab140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc000193220, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc000189720, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0001960a0, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001ab140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0000f8820, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001ab140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0000f88c0, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc000192460, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc0001897c0, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x78 pc=0x195347e] goroutine 1 [running]: github.com/netbirdio/netbird/management/cmd.loadMgmtConfig({0x22ce848, 0xc0001a9140}, {0x203a04f, 0x1c}) /home/runner/work/netbird/netbird/management/cmd/management.go:154 +0x17e github.com/netbirdio/netbird/management/cmd.init.func3(0x3198a00, {0x20149fe?, 0x4?, 0x20144f2?}) /home/runner/work/netbird/netbird/management/cmd/management.go:57 +0x175 github.com/spf13/cobra.(*Command).execute(0x3198a00, {0xc000192280, 0xa, 0xa}) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:925 +0x80b github.com/spf13/cobra.(*Command).ExecuteC(0x3198ce0) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5 github.com/spf13/cobra.(*Command).Execute(...) /home/runner/go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992 github.com/netbirdio/netbird/management/cmd.Execute(...) /home/runner/work/netbird/netbird/management/cmd/root.go:53 main.main() /home/runner/work/netbird/netbird/management/main.go:17 +0x26 felix@netbirdMGMT:~$
saavagebueno commented 2026-08-05 01:25:59 -04:00
Author
Owner
Copy Link

@braginini commented on GitHub (Jan 11, 2026):

/home/runner/work/netbird/netbird/management/cmd/management.go:154

this is v0.61.2 that you are running. The EmbeddedIdP support was introduced in v0.62.0. I recommend upgrading to the latest:
docker compose pull

<!-- gh-comment-id:3734498911 --> @braginini commented on GitHub (Jan 11, 2026): > /home/runner/work/netbird/netbird/management/cmd/management.go:154 this is v0.61.2 that you are running. The EmbeddedIdP support was introduced in v0.62.0. I recommend upgrading to the latest: `docker compose pull`
saavagebueno commented 2026-08-05 01:25:59 -04:00
Author
Owner
Copy Link

@renne commented on GitHub (Mar 25, 2026):

Having that problem with v0.67.0/v2.34.2, too.

Public VPS -> Docker (Traefik -> dashboard, management, signaling, relay), Netbird client -> Internet -> VM (Netbird client -> Docker (Nextcloud with OIDC Identity Provider app).

<!-- gh-comment-id:4130257829 --> @renne commented on GitHub (Mar 25, 2026): Having that problem with v0.67.0/v2.34.2, too. Public VPS -> Docker (Traefik -> dashboard, management, signaling, relay), Netbird client -> Internet -> VM (Netbird client -> Docker (Nextcloud with [OIDC Identity Provider](https://github.com/H2CK/oidc) app).
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2021 Q4
2021 Q4
2022 Q1
2022 Q1
2022 Q1
2022 Q1
2022 Q1
2022 Q1
accessibility
accessibility
accessibility
acl
acl
acl
agent
agent
agent
agent
agent
agent
Android
Android
Android
Android
Android
Android
api
api
api
authentik
authentik
authentik
automation
automation
automation
azure
azure
azure
battery-usage
battery-usage
battery-usage
bug
cache
cache
cache
client
client
client
client-ui
client-ui
client-ui
cloud
cloud
cloud
cloud-only
cloud-only
cloud-only
cloudflare
cloudflare
cloudflare
community
community
community
compatibility
compatibility
compatibility
config-idp
config-idp
config-idp
config-issue
config-issue
config-issue
connection
connection
connection
contribution
contribution
contribution
coturn
coturn
coturn
cross-vpn
cross-vpn
cross-vpn
dashboard
dashboard
dashboard
data-usage
data-usage
data-usage
distribution
distribution
distribution
dns
dns
dns
docker
docker
docker
documentation
documentation
documentation
duplicate
duplicate
duplicate
enhancement
enhancement
event-stream
event-stream
event-stream
feature-request
feature-request
feature-request
freebsd
freebsd
freebsd
getting-started
getting-started
getting-started
go
go
go
good first issue
good first issue
good first issue
gui
gui
gui
help wanted
help wanted
help wanted
home-assistant
home-assistant
home-assistant
idp
idp
idp
inconsistency
inconsistency
inconsistency
integration
integration
integration
integrations
integrations
integrations
ios
ios
ios
ipv6
ipv6
ipv6
jwt
jwt
jwt
k8s
k8s
k8s
keycloak
keycloak
keycloak
linux
linux
linux
login
login
login
macos
macos
macos
management-service
management-service
management-service
Medium
Medium
Medium
missing-docs
missing-docs
missing-docs
mobile
mobile
mobile
moved-internal
moved-internal
moved-internal
needs-review
needs-review
needs-review
netbird-ui
netbird-ui
netbird-ui
networking
networking
networking
new-platform
new-platform
new-platform
nginx
nginx
nginx
notification
notification
notification
okta
okta
okta
openwrt
openwrt
openwrt
P2
P2
P2
packaging
packaging
packaging
peer-management
peer-management
peer-management
peer-management
peer-management
peer-management
peer-management
peer-management
peer-management
performance
performance
performance
postgres
postgres
postgres
posture-checks
posture-checks
posture-checks
psk
psk
psk
pull-request
Mirrored from GitHub Pull Request
 question
question
question
refactor
refactor
refactor
relay
relay
relay
release
release
release
rfc
rfc
rfc
routes
routes
routes
security
security
security
security-improvement
security-improvement
security-improvement
security-related
security-related
security-related
self-hosting
self-hosting
self-hosting
server
server
server
signal
signal
signal
sleep-issue
sleep-issue
sleep-issue
ssh
ssh
ssh
ssl
ssl
ssl
status
status
status
store
store
store
synology
synology
synology
system-compatibility-issue
system-compatibility-issue
system-compatibility-issue
test-suite
test-suite
test-suite
third-party-integration
third-party-integration
third-party-integration
triage
triage
triage
triage
triage
triage
triage-needed
triage-needed
triage-needed
troubleshooting
troubleshooting
troubleshooting
UX
UX
UX
waiting-feedback
waiting-feedback
waiting-feedback
windows
windows
windows
wontfix
wontfix
wontfix
zitadel
zitadel
zitadel
No Label triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
dynr-servers saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#10456
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?