[24.10] netbird: update to 0.36.7

[wehagy]

Draft PR, need testing

Compile and run tested

Maintainer: Me

Package architecture	Target	Subtarget	Brand	Model	Hardware Version	OpenWrt version
x86_64	x86	64	QEMU (x86_64)	qemu-system-x86_64	qemu-9.1.2-3.fc41	OpenWrt 24.10-SNAPSHOT r28470-315facfce6

Tests checklist:

• Connection to the NetBird Cloud Dashboard (not self-hosted).
• Firewall configured with nftables.
• Connection established in P2P mode.
• wireguard kernel mode active.
• Routes configured between my homelab and my cloud server.
• netbird DNS server functioning correctly.
• NAT operational (not needed by me at this time, may consider testing in the future).
• Permissions rules is enforced (not needed by me at this time, may consider testing in the future).

Description

• Changelog:
  • Update to 0.36.7
    • Full changelog: netbirdio/netbird@v0.36.3...v0.36.7
      • Cherry picked from 7ff04e9
      • PR #25782
    • Breaking change:
      • N/A

---

Additional information

x86_64 is running in a container using incus.
The package(s) was compiled with the container sdk.
The OpenWrt image(s) was built using the container imagebuilder or distrobuilder.

You can view my repository with the patch applied and the automated build here:
This repository is temporary and will be removed or modified after the merge.

• https://github.com/wehagy/owpib/tree/netbird/update

You can find my artifacts here:

• https://github.com/wehagy/owpib/actions/runs/13381190846

[wehagy]

Unrelated CI Errors:

• https://github.com/openwrt/packages/actions/runs/13381144766/job/37369817431?pr=26002#step:17:47

 Updated list of available packages in /var/opkg-lists/packages_ci
Downloading file:///ci/Packages.sig
Signature check passed.
 * opkg_download: Failed to download https://downloads.openwrt.org/releases/24.10-SNAPSHOT/targets/x86/64/kmods/6.6.58-1-cccdb39f40ab0d2ddc0a71725516d8a8/Packages.gz, wget returned 8.
Error: Process completed with exit code 1.

[jclds139]

I'd just like to add that this update contains workarounds that resolve several painful bugs (see netbirdio/netbird#2530 and netbirdio/netbird#2116) that have been breaking the current package for many of us. Hoping this can get merged and included in a release soon!

[wehagy]

From what I can see, these bugs affect a third-party OpenWrt downstreams, unfortunaly I can make nothing to help, this comment netbirdio/netbird#2116 (comment) show that the issue is resolved by using an official OpenWrt image. In fact, the latest stable release, OpenWrt 24.10, has been updated with netbird v0.36.3, which was released just a month ago.

packages/net/netbird/Makefile

Line 4 in 2e747ea

PKG_VERSION:=0.36.3

I don't recommend using the older stable release, OpenWrt 23.05, as it will soon reach its end of life and is stuck on a very outdated version of netbird v0.24.3 probably forever.

packages/net/netbird/Makefile

Line 4 in bf07cf7

PKG_VERSION:=0.24.3

[jclds139]

Unfortunately, I'm running into those same issues with a proper 24.10.0 install. Currently, I have to manually add the environment variables NB_DISABLE_CUSTOM_ROUTING=true and NB_SKIP_SOCKET_MARK=true or else netbird is constantly timing out trying to connect to the management api.

My point was to whoever does the reviews that there are needed bugfixes currently held up by this PR.

[wehagy]

Strange my test and stable environment is working normally, you are running a fresh OpenWrt with only netbird installed? If not, what packages you install? Do you mind to show your netbird logs? cat /var/log/netbird/client.log.

[jclds139]

I have a whole bunch of extra packages on my home network, but I actually have a guess where the problem may be coming from: I had `sqm-scripts` and `mwan3` installed, both of which pull in `iptables`. Even after forcing `iptables-nft` instead of legacy the issue persists, but I do start to get occasional error messages about `iptables` errors. I'm suspecting netbird is using `iptables` instead of `nftables` and that's probably causing most of these issues. For some reason, when both are installed it's picking `iptables` and there doesn't seem to be a way to force `nftables` instead. I'll let you know how it goes.

…

On Wed, Feb 19, 2025, 18:16 Wesley Gimenes ***@***.***> wrote: Strange my test and stable environment is working normally, you are running a fresh OpenWrt with only netbird installed? If not, what packages you install? Do you mind to show your netbird logs? cat /var/log/netbird/client.log. — Reply to this email directly, view it on GitHub <#26002 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEDNSOM5DYK5NRAEJHV3D6L2QUGFBAVCNFSM6AAAAABXKN34QGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRZHE3TMMRZGM> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***> [image: wehagy]*wehagy* left a comment (openwrt/packages#26002) <#26002 (comment)> Strange my test and stable environment is working normally, you are running a fresh OpenWrt with only netbird installed? If not, what packages you install? Do you mind to show your netbird logs? cat /var/log/netbird/client.log. — Reply to this email directly, view it on GitHub <#26002 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEDNSOM5DYK5NRAEJHV3D6L2QUGFBAVCNFSM6AAAAABXKN34QGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRZHE3TMMRZGM> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[jclds139]

Update: can confirm, the issue is resolved once there is no iptables binary on the system. I'm not sure if that's something that should be documented somewhere or if it's an issue to raise upstream, though.
Unfortunately, while I can remove mwan3 and thus iptables* on one of my routers, I have several others that rely on the failover functionality from mwan3. Do you know any way to get netbird to use nftables even though iptables-nft is also available? I suspect that may also solve the issue.