[GH-ISSUE #5190] Quick start script embedded idp key exchange failure #10742

Open
opened 2026-08-05 01:27:08 -04:00 by saavagebueno · 1 comment
Owner

Originally created by @Pooyahmti on GitHub (Jan 27, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5190

Describe the problem

I try to install netbird using the quick start guide and external Traefik but i get error form management container

Starting NetBird services

[+] Running 5/5
 ✔ Volume "*****_netbird_management"  Created                                                                                                            0.0s
 ✔ Container netbird-signal            Started                                                                                                            0.4s
 ✔ Container netbird-relay             Started                                                                                                            0.5s
 ✔ Container netbird-management        Started                                                                                                            0.4s
 ✔ Container netbird-dashboard         Started                                                                                                            0.4s
Waiting for Management server to become ready . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Taking too long. Checking logs...
netbird-management  | 2026-01-27T08:07:39Z INFO management/server/migration/migration.go:424: executing index creation: CREATE UNIQUE INDEX IF NOT EXISTS idx_peers_key_unique ON peers (key)
netbird-management  | 2026-01-27T08:07:39Z INFO management/server/migration/migration.go:429: successfully created index idx_peers_key_unique on table peers
netbird-management  | 2026-01-27T08:07:39Z INFO management/server/geolocation/database.go:34: Geolocation database file GeoLite2-City_20251230.mmdb not found, file will be downloaded
netbird-management  | 2026-01-27T08:07:43Z INFO management/server/geolocation/database.go:34: Geolocation database file geonames_20251230.db not found, file will be downloaded
netbird-management  | 2026-01-27T08:07:47Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/
netbird-management  | 2026-01-27T08:07:47Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090
netbird-management  | 2026-01-27T08:07:47Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing.
netbird-management  | 2026-01-27T08:07:47Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
netbird-management  | 2026-01-27T08:07:47Z INFO management/server/activity/store/sql_store.go:262: using sqlite as activity event store engine
netbird-management  | 2026-01-27T08:07:47Z INFO management/server/activity/store/sql_store.go:291: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
netbird-management  | 2026-01-27T08:07:47Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax
netbird-management  | 2026-01-27T08:07:48Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://***********/oauth2
netbird-management  | 2026-01-27T08:07:48Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms
netbird-management  | 2026-01-27T08:07:48Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax
netbird-management  | 2026-01-27T08:07:48Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms
netbird-management  | 2026-01-27T08:07:48Z INFO management/server/account.go:238: single account mode enabled, accounts number 0
netbird-management  | 2026-01-27T08:07:48Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused
netbird-management  | 2026-01-27T08:07:48Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073
netbird-management  | 2026-01-27T08:07:48Z INFO management/internals/server/server.go:187: management server version 0.64.1
netbird-management  | 2026-01-27T08:07:48Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .^C

To Reproduce

Run Traefik
Run curl -fsSL https://github.com/netbirdio/netbird/releases/latest/download/getting-started.sh | bash
Choose Traefik as Reverse-Proxy

Expected behavior

Since idp is embedded, the management should be able to communicate on localhost

NetBird version

0.64.1

Additional context

After the containers come up if i run shell inside the management container and run
curl http://localhost:80/oauth2/keys I get 200 response.
I think a race condition is happening.

Originally created by @Pooyahmti on GitHub (Jan 27, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5190 **Describe the problem** I try to install netbird using the quick start guide and external Traefik but i get error form management container ``` Starting NetBird services [+] Running 5/5 ✔ Volume "*****_netbird_management" Created 0.0s ✔ Container netbird-signal Started 0.4s ✔ Container netbird-relay Started 0.5s ✔ Container netbird-management Started 0.4s ✔ Container netbird-dashboard Started 0.4s Waiting for Management server to become ready . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Taking too long. Checking logs... netbird-management | 2026-01-27T08:07:39Z INFO management/server/migration/migration.go:424: executing index creation: CREATE UNIQUE INDEX IF NOT EXISTS idx_peers_key_unique ON peers (key) netbird-management | 2026-01-27T08:07:39Z INFO management/server/migration/migration.go:429: successfully created index idx_peers_key_unique on table peers netbird-management | 2026-01-27T08:07:39Z INFO management/server/geolocation/database.go:34: Geolocation database file GeoLite2-City_20251230.mmdb not found, file will be downloaded netbird-management | 2026-01-27T08:07:43Z INFO management/server/geolocation/database.go:34: Geolocation database file geonames_20251230.db not found, file will be downloaded netbird-management | 2026-01-27T08:07:47Z INFO management/internals/server/modules.go:45: geolocation service has been initialized from /var/lib/netbird/ netbird-management | 2026-01-27T08:07:47Z INFO management/server/telemetry/app_metrics.go:193: enabled application metrics and exposing on http://0.0.0.0:9090 netbird-management | 2026-01-27T08:07:47Z WARN management/internals/server/boot.go:108: TrustedPeers are configured to default value '0.0.0.0/0', '::/0'. This allows connection IP spoofing. netbird-management | 2026-01-27T08:07:47Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms netbird-management | 2026-01-27T08:07:47Z INFO management/server/activity/store/sql_store.go:262: using sqlite as activity event store engine netbird-management | 2026-01-27T08:07:47Z INFO management/server/activity/store/sql_store.go:291: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s netbird-management | 2026-01-27T08:07:47Z WARN management/internals/controllers/network_map/controller/controller.go:84: failed to parse NB_EXPERIMENT_NETWORK_MAP, using default value false: strconv.ParseBool: parsing "": invalid syntax netbird-management | 2026-01-27T08:07:48Z INFO management/server/idp/embedded.go:200: embedded Dex IDP initialized with issuer: https://***********/oauth2 netbird-management | 2026-01-27T08:07:48Z INFO management/server/account_request_buffer.go:45: set account request buffer interval to 100ms netbird-management | 2026-01-27T08:07:48Z WARN management/internals/controllers/network_map/controller/controller.go:626: failed to parse peer update interval, using default value 1ms: strconv.Atoi: parsing "": invalid syntax netbird-management | 2026-01-27T08:07:48Z INFO management/internals/controllers/network_map/controller/controller.go:642: set peer update buffer interval to 1ms netbird-management | 2026-01-27T08:07:48Z INFO management/server/account.go:238: single account mode enabled, accounts number 0 netbird-management | 2026-01-27T08:07:48Z ERRO [keysLocation: http://localhost:80/oauth2/keys] shared/auth/jwt/validator.go:76: could not get keys from location: Get "http://localhost:80/oauth2/keys": dial tcp [::1]:80: connect: connection refused netbird-management | 2026-01-27T08:07:48Z INFO management/internals/server/server.go:149: running gRPC backward compatibility server: [::]:33073 netbird-management | 2026-01-27T08:07:48Z INFO management/internals/server/server.go:187: management server version 0.64.1 netbird-management | 2026-01-27T08:07:48Z INFO management/internals/server/server.go:188: running HTTP server and gRPC server on the same port: [::]:80 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .^C ``` **To Reproduce** Run Traefik Run `curl -fsSL https://github.com/netbirdio/netbird/releases/latest/download/getting-started.sh | bash` Choose Traefik as Reverse-Proxy **Expected behavior** Since idp is embedded, the management should be able to communicate on localhost **NetBird version** `0.64.1` **Additional context** After the containers come up if i run shell inside the management container and run `curl http://localhost:80/oauth2/keys` I get 200 response. I think a race condition is happening.
saavagebueno added the triage-needed label 2026-08-05 01:27:08 -04:00
Author
Owner

@kwakubiney commented on GitHub (Jan 27, 2026):

Thanks for the report. On reading the code, looks like a 'non critical' race which happens when using the embedded IDP. 2381e216e4 removes that log for now!

<!-- gh-comment-id:3807120825 --> @kwakubiney commented on GitHub (Jan 27, 2026): Thanks for the report. On reading the code, looks like a 'non critical' race which happens when using the embedded IDP. https://github.com/netbirdio/netbird/commit/2381e216e421379f9cbb70c372fcdefe32b7cc58 removes that log for now!
Sign in to join this conversation.
No Label triage-needed
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#10742