SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-05-27 10:32:35 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Unable to SSH on Windows #2394

New Issue
Open
opened 2025-11-20 07:09:10 -05:00 by saavagebueno · 1 comment
saavagebueno commented 2025-11-20 07:09:10 -05:00
Owner
Copy Link

Originally created by @Exitium-DEV on GitHub (Oct 20, 2025).

Describe the problem

When using Netbird SSH in an elevated terminal:
Error: failed to run raw terminal: The parameter is incorrect.

To Reproduce

Steps to reproduce the behavior:

  1. Self-host Netbird (may be relevant)
  2. Add peer with --allow-server-ssh
  3. Add Windows peer
  4. From Windows peer, netbird ssh sshPeer in an elevated terminal

Expected behavior

SSH to begin

Are you using NetBird Cloud?

Self-Host

NetBird version

Server

root@209d4c4e052c:/go/bin# ./netbird-mgmt -v
netbird-mgmt version 0.59.7

Client

PS C:\Users\Exitium> netbird version
0.59.7

Is any other VPN software installed?

No

Debug output

To help us resolve the problem, please attach the following anonymized status output

PS C:\Users\Exitium> netbird status -dA
Peers detail:
 dns.internal.anon-akqrB.domain:
  NetBird IP: 100.84.0.1
  Public key: DlZAQYlRUYd48O1+Yw13l/mYeOLyQGgCwup82gALz3Q=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): srflx/srflx
  ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:45604
  Relay server address: rel://manage.anon-akqrB.domain:33080
  Last connection update: 12 minutes, 37 seconds ago
  Last WireGuard handshake: 1 minute, 47 seconds ago
  Transfer status (received/sent) 69.3 KiB/36.2 KiB
  Quantum resistance: false (remote didn't enable quantum resistance)
  Networks: -
  Latency: 21.9622ms

 admin-phone.internal.anon-akqrB.domain:
  NetBird IP: 100.84.24.182
  Public key: LKaCu9RfHzWoGnZkCJeD2OsPpZiJYikEBRA7onBiCHM=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): srflx/host
  ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/192.168.0.10:37838
  Relay server address: rel://manage.anon-akqrB.domain:33080
  Last connection update: 12 minutes, 37 seconds ago
  Last WireGuard handshake: 1 minute, 44 seconds ago
  Transfer status (received/sent) 1.6 KiB/1.4 KiB
  Quantum resistance: false (remote didn't enable quantum resistance)
  Networks: -
  Latency: 9.7624ms

 mothership.internal.anon-akqrB.domain:
  NetBird IP: 100.84.130.228
  Public key: ol8jNvVJnW73iYp00H1OJI+r/HYa+tARKeVjzuRKem8=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): srflx/prflx
  ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:51820
  Relay server address: rel://manage.anon-akqrB.domain:33080
  Last connection update: 12 minutes, 37 seconds ago
  Last WireGuard handshake: 2 minutes, 1 seconds ago
  Transfer status (received/sent) 33.7 KiB/35.6 KiB
  Quantum resistance: true
  Networks: -
  Latency: 29.0348ms

Events:
  [INFO] SYSTEM (87656583-71b5-433c-84b3-d3705562336c)
    Message: Network map updated
    Time: 10 hours, 40 minutes ago
  [INFO] SYSTEM (020beb06-b70c-41a2-8c3e-6dc37870e92d)
    Message: Network map updated
    Time: 10 hours, 39 minutes ago
  [INFO] SYSTEM (83cddc96-f04e-4aec-9d56-5c1bb08e3f6c)
    Message: Network map updated
    Time: 10 hours, 27 minutes ago
  [INFO] SYSTEM (42d35eb8-1999-4830-9d8e-46dc454707a2)
    Message: Network map updated
    Time: 10 hours, 26 minutes ago
  [WARNING] DNS (fbc2c7e6-f557-4510-815b-c577bd6a941b)
    Message: All upstream servers failed (probe failed)
    Time: 10 hours, 25 minutes ago
    Metadata: upstreams: 100.84.0.1:53
  [INFO] SYSTEM (3e1002ad-9183-4d9f-bc6d-b4e4bdcc5275)
    Message: Network map updated
    Time: 10 hours, 25 minutes ago
  [INFO] SYSTEM (b89f7794-cc5f-4b66-9f23-c4cc54508e10)
    Message: Network map updated
    Time: 10 hours, 20 minutes ago
  [INFO] SYSTEM (5eb2c32b-bd81-4e42-ae68-93adf31660bd)
    Message: Network map updated
    Time: 10 hours, 20 minutes ago
  [WARNING] DNS (146c39b2-f346-4435-90f9-2dcc21208a4d)
    Message: All upstream servers failed (probe failed)
    Time: 12 minutes, 38 seconds ago
    Metadata: upstreams: 100.84.0.1:53
  [INFO] SYSTEM (762609ec-4a32-4d09-9538-2185fe9db826)
    Message: Network map updated
    Time: 12 minutes, 38 seconds ago
OS: windows/amd64
Daemon version: 0.59.7
CLI version: 0.59.7
Profile: default
Management: Connected to https://manage.anon-akqrB.domain:33073
Signal: Connected to http://manage.anon-akqrB.domain:10000
Relays:
  [stun:manage.anon-akqrB.domain:3478] is Available
  [turn:manage.anon-akqrB.domain:3478?transport=udp] is Available
  [rel://manage.anon-akqrB.domain:33080] is Available
Nameservers:
  [100.84.0.1:53] for [.] is Available
FQDN: admin-desktop.internal.anon-akqrB.domain
NetBird IP: 100.84.194.13/16
Interface type: Userspace
Quantum resistance: true (permissive)
Lazy connection: false
Networks: -
Forwarding rules: 0
Peers count: 3/3 Connected

Create and upload a debug bundle, and share the returned file key:

26d7161074327fe3095563c79ac20dd26320a4aa85b386995372820ef1dbc8e9/0393912b-6cb2-4581-850c-f07ab26e73ea

Uploaded files are automatically deleted after 30 days.

Screenshots

Not Required

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones) (a few open, all stale and not in this format)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @Exitium-DEV on GitHub (Oct 20, 2025). **Describe the problem** When using Netbird SSH in an elevated terminal: `Error: failed to run raw terminal: The parameter is incorrect.` **To Reproduce** Steps to reproduce the behavior: 1. Self-host Netbird (may be relevant) 2. Add peer with `--allow-server-ssh` 3. Add Windows peer 4. From Windows peer, `netbird ssh sshPeer` in an elevated terminal **Expected behavior** SSH to begin **Are you using NetBird Cloud?** Self-Host **NetBird version** Server ``` root@209d4c4e052c:/go/bin# ./netbird-mgmt -v netbird-mgmt version 0.59.7 ``` Client ``` PS C:\Users\Exitium> netbird version 0.59.7 ``` **Is any other VPN software installed?** No **Debug output** To help us resolve the problem, please attach the following anonymized status output ``` PS C:\Users\Exitium> netbird status -dA Peers detail: dns.internal.anon-akqrB.domain: NetBird IP: 100.84.0.1 Public key: DlZAQYlRUYd48O1+Yw13l/mYeOLyQGgCwup82gALz3Q= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): srflx/srflx ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:45604 Relay server address: rel://manage.anon-akqrB.domain:33080 Last connection update: 12 minutes, 37 seconds ago Last WireGuard handshake: 1 minute, 47 seconds ago Transfer status (received/sent) 69.3 KiB/36.2 KiB Quantum resistance: false (remote didn't enable quantum resistance) Networks: - Latency: 21.9622ms admin-phone.internal.anon-akqrB.domain: NetBird IP: 100.84.24.182 Public key: LKaCu9RfHzWoGnZkCJeD2OsPpZiJYikEBRA7onBiCHM= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): srflx/host ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/192.168.0.10:37838 Relay server address: rel://manage.anon-akqrB.domain:33080 Last connection update: 12 minutes, 37 seconds ago Last WireGuard handshake: 1 minute, 44 seconds ago Transfer status (received/sent) 1.6 KiB/1.4 KiB Quantum resistance: false (remote didn't enable quantum resistance) Networks: - Latency: 9.7624ms mothership.internal.anon-akqrB.domain: NetBird IP: 100.84.130.228 Public key: ol8jNvVJnW73iYp00H1OJI+r/HYa+tARKeVjzuRKem8= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): srflx/prflx ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:51820 Relay server address: rel://manage.anon-akqrB.domain:33080 Last connection update: 12 minutes, 37 seconds ago Last WireGuard handshake: 2 minutes, 1 seconds ago Transfer status (received/sent) 33.7 KiB/35.6 KiB Quantum resistance: true Networks: - Latency: 29.0348ms Events: [INFO] SYSTEM (87656583-71b5-433c-84b3-d3705562336c) Message: Network map updated Time: 10 hours, 40 minutes ago [INFO] SYSTEM (020beb06-b70c-41a2-8c3e-6dc37870e92d) Message: Network map updated Time: 10 hours, 39 minutes ago [INFO] SYSTEM (83cddc96-f04e-4aec-9d56-5c1bb08e3f6c) Message: Network map updated Time: 10 hours, 27 minutes ago [INFO] SYSTEM (42d35eb8-1999-4830-9d8e-46dc454707a2) Message: Network map updated Time: 10 hours, 26 minutes ago [WARNING] DNS (fbc2c7e6-f557-4510-815b-c577bd6a941b) Message: All upstream servers failed (probe failed) Time: 10 hours, 25 minutes ago Metadata: upstreams: 100.84.0.1:53 [INFO] SYSTEM (3e1002ad-9183-4d9f-bc6d-b4e4bdcc5275) Message: Network map updated Time: 10 hours, 25 minutes ago [INFO] SYSTEM (b89f7794-cc5f-4b66-9f23-c4cc54508e10) Message: Network map updated Time: 10 hours, 20 minutes ago [INFO] SYSTEM (5eb2c32b-bd81-4e42-ae68-93adf31660bd) Message: Network map updated Time: 10 hours, 20 minutes ago [WARNING] DNS (146c39b2-f346-4435-90f9-2dcc21208a4d) Message: All upstream servers failed (probe failed) Time: 12 minutes, 38 seconds ago Metadata: upstreams: 100.84.0.1:53 [INFO] SYSTEM (762609ec-4a32-4d09-9538-2185fe9db826) Message: Network map updated Time: 12 minutes, 38 seconds ago OS: windows/amd64 Daemon version: 0.59.7 CLI version: 0.59.7 Profile: default Management: Connected to https://manage.anon-akqrB.domain:33073 Signal: Connected to http://manage.anon-akqrB.domain:10000 Relays: [stun:manage.anon-akqrB.domain:3478] is Available [turn:manage.anon-akqrB.domain:3478?transport=udp] is Available [rel://manage.anon-akqrB.domain:33080] is Available Nameservers: [100.84.0.1:53] for [.] is Available FQDN: admin-desktop.internal.anon-akqrB.domain NetBird IP: 100.84.194.13/16 Interface type: Userspace Quantum resistance: true (permissive) Lazy connection: false Networks: - Forwarding rules: 0 Peers count: 3/3 Connected ``` Create and upload a debug bundle, and share the returned file key: ``` 26d7161074327fe3095563c79ac20dd26320a4aa85b386995372820ef1dbc8e9/0393912b-6cb2-4581-850c-f07ab26e73ea ``` *Uploaded files are automatically deleted after 30 days.* **Screenshots** Not Required **Additional context** Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) (a few open, all stale and not in this format) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2025-11-20 07:09:10 -05:00
saavagebueno commented 2025-11-20 07:09:10 -05:00
Author
Owner
Copy Link

@lixmal commented on GitHub (Oct 20, 2025):

Thanks for the proper report. This will be fixed with https://github.com/netbirdio/netbird/pull/4015

@lixmal commented on GitHub (Oct 20, 2025): Thanks for the proper report. This will be fixed with https://github.com/netbirdio/netbird/pull/4015
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2394
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?