SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-07-01 19:52:38 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

netbird ssh on OpenWrt not working #845

New Issue
Closed
opened 2025-11-20 05:18:30 -05:00 by saavagebueno · 8 comments
saavagebueno commented 2025-11-20 05:18:30 -05:00
Owner
Copy Link

Originally created by @mrbluecoat on GitHub (May 4, 2024).

Describe the problem

NetBird SSH on NetBird 0.27.3-r1 on OpenWrt isn't working

To Reproduce

Steps to reproduce the behavior:

  1. Login to OpenWrt as root
  2. Run opkg update && opkg install netbird
  3. Run netbird up to join your account as a peer
  4. Add CGNAT CIDR to firewall:
cat >> /etc/config/firewall <<EOF

config  zone
        option  name        'NetBird'
        option  input       'ACCEPT'
        option  output      'ACCEPT'
        option  forward     'REJECT'
        option  subnet      '100.64.0.0/10'

EOF
  1. In https://app.netbird.io/peers click the three-dots button to the right of the OpenWrt peer row and select Enable SSH Access
  2. In another peer terminal, try sudo netbird ssh your-openwrt-device.netbird.cloud (using your actual OpenWrt peer address)

Expected behavior

SSH login is granted. Instead I get:

Error: dial tcp 100.x.x.x:44338: connect: connection refused
Couldn't connect. Please check the connection status or if the ssh server is enabled on the other peer
You can verify the connection by running:

 netbird status

On the OpenWrt server:

# netbird status
Daemon version: 0.27.3
CLI version: 0.27.3
Management: Connected
Signal: Connected
Relays: 0/2 Available
Nameservers: 0/0 Available
FQDN: openwrt.netbird.cloud
NetBird IP: 100.x.x.x/16
Interface type: Userspace
Quantum resistance: false
Routes: -
Peers count: 1/1 Connected

Are you using NetBird Cloud?

Yes

NetBird version

0.27.3-r1 on OpenWrt server
0.27.4 on Ubuntu client

** Notes **

ssh root@your-openwrt-device.netbird.cloud (using your actual OpenWrt peer address) works fine, leveraging the default Dropbear SSH server on OpenWrt

Originally created by @mrbluecoat on GitHub (May 4, 2024). **Describe the problem** [NetBird SSH](https://docs.netbird.io/how-to/cli#ssh) on [NetBird 0.27.3-r1 on OpenWrt](https://pkgs.staging.openwrt.org/packages?name=netbird&branch=master&repo=&arch=aarch64_generic&origin=&maintainer=) isn't working **To Reproduce** Steps to reproduce the behavior: 1. Login to OpenWrt as root 2. Run `opkg update && opkg install netbird` 3. Run `netbird up` to join your account as a peer 4. Add CGNAT CIDR to firewall: ``` cat >> /etc/config/firewall <<EOF config zone option name 'NetBird' option input 'ACCEPT' option output 'ACCEPT' option forward 'REJECT' option subnet '100.64.0.0/10' EOF ``` 5. In https://app.netbird.io/peers click the three-dots button to the right of the OpenWrt peer row and select `Enable SSH Access` 6. In another peer terminal, try `sudo netbird ssh your-openwrt-device.netbird.cloud` (using your actual OpenWrt peer address) **Expected behavior** SSH login is granted. Instead I get: ``` Error: dial tcp 100.x.x.x:44338: connect: connection refused Couldn't connect. Please check the connection status or if the ssh server is enabled on the other peer You can verify the connection by running: netbird status ``` On the OpenWrt server: ``` # netbird status Daemon version: 0.27.3 CLI version: 0.27.3 Management: Connected Signal: Connected Relays: 0/2 Available Nameservers: 0/0 Available FQDN: openwrt.netbird.cloud NetBird IP: 100.x.x.x/16 Interface type: Userspace Quantum resistance: false Routes: - Peers count: 1/1 Connected ``` **Are you using NetBird Cloud?** Yes **NetBird version** 0.27.3-r1 on OpenWrt server 0.27.4 on Ubuntu client ** Notes ** `ssh root@your-openwrt-device.netbird.cloud` (using your actual OpenWrt peer address) works fine, leveraging the default Dropbear SSH server on OpenWrt
saavagebueno added the dashboard label 2025-11-20 05:18:30 -05:00
saavagebueno commented 2025-11-20 05:18:31 -05:00
Author
Owner
Copy Link

@lixmal commented on GitHub (May 5, 2024):

Have you enabled ssh on the peer: https://docs.netbird.io/how-to/cli#up

@lixmal commented on GitHub (May 5, 2024): Have you enabled ssh on the peer: https://docs.netbird.io/how-to/cli#up
saavagebueno commented 2025-11-20 05:18:31 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (May 5, 2024):

@heisbrot I think that we should indicate in the web UI that the user should ensure that the client app should be started with the netbird up --allow-server-ssh flag to explicitly permit SSH.

@braginini commented on GitHub (May 5, 2024): @heisbrot I think that we should indicate in the web UI that the user should ensure that the client app should be started with the `netbird up --allow-server-ssh` flag to explicitly permit SSH.
saavagebueno commented 2025-11-20 05:18:31 -05:00
Author
Owner
Copy Link

@mrbluecoat commented on GitHub (May 5, 2024):

Oh, interesting. You are correct that I assumed the UI step was all that was required on the server side. +1 for braginini recommendation.

Out of curiosity, what does the UI Enable SSH Access action do?

@mrbluecoat commented on GitHub (May 5, 2024): Oh, interesting. You are correct that I assumed the UI step was all that was required on the server side. +1 for braginini recommendation. Out of curiosity, what does the UI `Enable SSH Access` action do?
saavagebueno commented 2025-11-20 05:18:32 -05:00
Author
Owner
Copy Link

@mrbluecoat commented on GitHub (May 6, 2024):

netbird up --allow-server-ssh worked like a charm, thanks. Is there a way to apply this setting via a config file rather than a CLI argument? (OpenWrt custom builds leverage files for configuration rather than runtime arguments.)

@mrbluecoat commented on GitHub (May 6, 2024): `netbird up --allow-server-ssh` worked like a charm, thanks. Is there a way to apply this setting via a config file rather than a CLI argument? (OpenWrt custom builds leverage files for configuration rather than runtime arguments.)
saavagebueno commented 2025-11-20 05:18:32 -05:00
Author
Owner
Copy Link

@mrbluecoat commented on GitHub (May 6, 2024):

P.S. I see where you can use an environment variable export NB_ALLOW_SERVER_SSH=true via https://docs.netbird.io/how-to/cli#environment-variables. I think I can use this and $HOME/.profile for my needs: https://forum.openwrt.org/t/set-environment-variable/36723/2

@mrbluecoat commented on GitHub (May 6, 2024): P.S. I see where you can use an environment variable `export NB_ALLOW_SERVER_SSH=true` via https://docs.netbird.io/how-to/cli#environment-variables. I think I can use this and `$HOME/.profile` for my needs: https://forum.openwrt.org/t/set-environment-variable/36723/2
saavagebueno commented 2025-11-20 05:18:32 -05:00
Author
Owner
Copy Link

@mrbluecoat commented on GitHub (May 6, 2024):

Even better, I found you can set it via "ServerSSHAllowed": true in /etc/netbird/config.json

@mrbluecoat commented on GitHub (May 6, 2024): Even better, I found you can set it via `"ServerSSHAllowed": true` in `/etc/netbird/config.json`
saavagebueno commented 2025-11-20 05:18:32 -05:00
Author
Owner
Copy Link

@XMethues commented on GitHub (Jun 15, 2024):

How did you download the latest version of netbird for openwrt?

@XMethues commented on GitHub (Jun 15, 2024): How did you download the latest version of netbird for openwrt?
saavagebueno commented 2025-11-20 05:18:32 -05:00
Author
Owner
Copy Link

@mrbluecoat commented on GitHub (Jun 15, 2024):

@Tatametheus I didn't: 0.27.3-r1 on OpenWrt server

@mrbluecoat commented on GitHub (Jun 15, 2024): @Tatametheus I didn't: `0.27.3-r1 on OpenWrt server`
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label dashboard
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#845
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?