Maycon Santos
3d3de0f1dd
remove wintun.dll and use new sign-pipelines version
2023-04-11 15:27:45 +02:00
Maycon Santos
306e02d32b
Update calculate server state ( #796 )
...
Refactored updateServerStates and calculateState
added some checks to ensure we are not sending connecting on context canceled
removed some state updates from the RunClient function
2023-04-10 18:22:25 +02:00
Maycon Santos
84467c1531
test all and remove files
2023-04-09 01:11:48 +02:00
Maycon Santos
44b7afc06b
use cmd
2023-04-09 00:58:15 +02:00
Maycon Santos
dea45633a6
store the output
2023-04-09 00:45:05 +02:00
Maycon Santos
14939202f0
add timeout and p 1
2023-04-09 00:17:04 +02:00
Maycon Santos
c5a8cc59a8
use id
2023-04-08 23:57:50 +02:00
Maycon Santos
3d3400ab43
use windwos latest
2023-04-08 23:54:14 +02:00
Maycon Santos
cdf5368d20
run with psexec
2023-04-08 23:52:12 +02:00
Maycon Santos
0803f16a49
debug update powershell.config.json
2023-04-08 22:20:21 +02:00
Maycon Santos
b6aafd8f09
debug update powershell.config.json
2023-04-08 22:19:11 +02:00
Maycon Santos
4c9fc9850c
debug update powershell.config.json
2023-04-08 22:15:02 +02:00
Maycon Santos
0e9d5807d6
debug update powershell.config.json
2023-04-08 22:13:50 +02:00
Maycon Santos
b5a3248f9f
debug remove powershell.config.json
2023-04-08 22:06:42 +02:00
Maycon Santos
5e1dfb28c0
debug
2023-04-08 21:25:33 +02:00
Maycon Santos
d1fe03a2d4
debug
2023-04-08 21:23:00 +02:00
Maycon Santos
bb453d334b
remove DisableWinCompat file
2023-04-08 21:10:30 +02:00
Maycon Santos
56737bab6c
remove DisableWinCompat file
2023-04-08 21:08:09 +02:00
Maycon Santos
37d20671a9
remove step
2023-04-08 20:58:39 +02:00
Maycon Santos
3f717eb759
Merge remote-tracking branch 'origin/feature/bind' into feature/bind
2023-04-08 20:51:51 +02:00
Maycon Santos
f9f8cbdcaa
test windows 2019
2023-04-08 20:51:38 +02:00
Maycon Santos
b556736b31
build cache
2023-04-08 13:29:47 +02:00
Maycon Santos
01e19a7c67
set unrestricted policy
2023-04-08 13:12:13 +02:00
Maycon Santos
9494cbdf24
import PSScheduledJob
2023-04-08 13:04:16 +02:00
Maycon Santos
9c09b13a25
import module in the same step
2023-04-08 12:56:23 +02:00
Maycon Santos
8bb999cf2a
using https://github.com/mkellerman/Invoke-CommandAs
2023-04-08 12:53:03 +02:00
Maycon Santos
565b8ce1c7
use paexec and use always to build cache
2023-04-08 11:25:57 +02:00
Maycon Santos
e96a975737
extension
2023-04-08 11:14:48 +02:00
Maycon Santos
8585e3ccf7
test moving the bin to temp folder
2023-04-08 11:09:21 +02:00
Maycon Santos
cd002c6400
building a test bin
2023-04-08 11:03:31 +02:00
Maycon Santos
0629697db1
use sysinternals choco package
2023-04-08 10:59:29 +02:00
Maycon Santos
25a92a0052
check other command
2023-04-08 00:48:55 +02:00
Maycon Santos
9c51d85cb4
copy acl
2023-04-07 19:25:21 +02:00
Maycon Santos
9865179207
get acl
2023-04-07 19:17:42 +02:00
Maycon Santos
56f10085f4
dir out
2023-04-07 19:06:28 +02:00
Maycon Santos
a7574907ae
use powershell command
2023-04-07 19:04:25 +02:00
Maycon Santos
71e81533bc
list workspace dir
2023-04-07 18:45:52 +02:00
Maycon Santos
23b92e2615
add concurrency setting to workflows
...
it helps minimize github action views and stop outdated jobs
2023-04-07 18:41:05 +02:00
Maycon Santos
9158a4653a
use workspace path
2023-04-07 18:28:22 +02:00
Maycon Santos
ccbf749171
psexec accept eula
2023-04-07 18:24:30 +02:00
Maycon Santos
dea7e8d4e7
download wintun and psexec
...
use rsrc tool to generate syso files
2023-04-07 18:20:08 +02:00
Maycon Santos
8f9826b207
Fix export path for certificate files ( #794 )
...
assign the value for NETBIRD_LETSENCRYPT_DOMAIN
in the base.setup.env file
2023-04-07 10:34:17 +02:00
Maycon Santos
1057cd211d
Add scope and id token environment variables ( #785 )
2023-04-05 21:57:47 +02:00
Maycon Santos
32b345991a
Support remote scope and use id token configuration ( #784 )
...
Some IDP requires different scope requests and
issue access tokens for different purposes
This change allow for remote configurable scopes
and the use of ID token
2023-04-05 17:46:34 +02:00
Maycon Santos
e903522f8c
Configurable port defaults from setup.env ( #783 )
...
Allow configuring management and signal ports from setup.env
Allow configuring Coturn range from setup.env
2023-04-05 15:22:06 +02:00
Maycon Santos
ea88ec6d27
Roolback configurable port defaults from setup.env
2023-04-05 11:42:14 +02:00
Maycon Santos
2be1a82f4a
Configurable port defaults from setup.env
...
Allow configuring management and signal ports from setup.env
Allow configuring Coturn range from setup.env
2023-04-05 11:39:22 +02:00
Maycon Santos and Givi Khojanashvili
fe1ea4a2d0
Check multiple audience values ( #781 )
...
Some IDP use different audience for different clients.
This update checks HTTP and Device authorization flow audience values.
---------
Co-authored-by: Givi Khojanashvili <gigovich@gmail.com >
2023-04-04 16:40:56 +02:00
Maycon Santos
f14f34cf2b
Add token source and device flow audience variables ( #780 )
...
Supporting new dashboard option to configure a source token.
Adding configuration support for setting
a different audience for device authorization flow.
fix custom id claim variable
2023-04-04 15:56:02 +02:00
Maycon Santos
dfb7960cd4
Fix pre-shared key query name for android configuration ( #773 )
2023-03-29 10:41:14 +02:00
Maycon Santos
a27fe4326c
Add JWT middleware validation failure log ( #760 )
...
We will log the middleware log now, but in the next
releases we should provide a generic error that can be
parsed by the dashboard.
2023-03-23 18:26:41 +01:00
Maycon Santos
628b497e81
Adjustments for the change server flow ( #756 )
...
Check SSO support by calling the internal.GetDeviceAuthorizationFlowInfo
Rename LoginSaveConfigIfSSOSupported to SaveConfigIfSSOSupported
Receive device name as input for setup-key login
have a default android name when no context value is provided
log non parsed errors from management registration calls
2023-03-23 16:35:06 +01:00
Maycon Santos
731d3ae464
Exchange proxy mode via signal ( #727 )
...
Before defining if we will use direct or proxy connection we will exchange a
message with the other peer if the modes match we keep the decision
from the shouldUseProxy function otherwise we skip using direct connection.
Added a feature support message to the signal protocol
2023-03-16 16:46:17 +01:00
Maycon Santos
0e9610c5b2
Refactor/clean shouldUseProxy ( #722 )
...
make code more readable by split code into smaller functions
add CandidateTypePeerReflexive check
Add shouldUseProxy tests
2023-03-06 17:33:54 +01:00
Maycon Santos
ea3899e6d6
Update ICE to version 2.3.1 ( #720 )
...
It resolves a TLS relay issue with servername
fixes #719
2023-03-05 16:42:49 +01:00
Maycon Santos
b52afe8d42
Update pion/ICE and its dependencies ( #703 )
...
Among other improvements, it fixes a memory leak with
srfx conn channels not being closed
it also make use of new pion/transport Net interface
https://github.com/pion/ice/pull/471
2023-02-24 19:30:23 +01:00
Maycon Santos
d4214638a0
Update service pkg with log directory fix ( #692 )
...
This service pkg update includes directory check and creation
2023-02-16 18:04:14 +01:00
Maycon Santos
aecee361d0
Use new sign pipeline v0.0.5 ( #679 )
2023-02-13 12:13:28 +01:00
Maycon Santos
64dbd5fbfc
Refactor Management and Admin URL config ( #674 )
...
avoid sending admin or management URLs on service start
as it doesn't have an input
Parse management and admin URL when needed
Pass empty admin url on commands to prevent default overwrite
2023-02-07 11:40:05 +01:00
Maycon Santos
b5217350cf
Revert preshared-key shorthand flag ( #671 )
...
This prevents conflict with the
ssh command shorthand flag
add some init tests
2023-02-06 10:35:37 +01:00
Maycon Santos
4406d50c18
Check if peer name change before update labels ( #658 )
2023-01-20 10:07:37 +01:00
Maycon Santos
5e3502bb83
Enable CGO in goreleaser for management ( #657 )
...
Update the debug docker image file
update goreleaser version
Install and reference CGO OS deps
2023-01-19 15:03:10 +01:00
Maycon Santos
793e4f1f29
Allow empty groups for DNS setting ( #656 )
...
We should allow passing empty group slice for DisabledManagementGroups to reset any setting.
Fix DNS settings activities message
2023-01-18 14:01:50 +01:00
Maycon Santos
dcf6533ed5
Adding --external-ip-map and --dns-resolver-address and shorthand flags ( #652 )
...
Adding --external-ip-map and --dns-resolver-address to up command and shorthand option to global flags.
Refactor get and read config functions with new ConfigInput type.
updated cobra package to latest release.
2023-01-17 19:16:50 +01:00
Maycon Santos
12ae2e93fc
Adding DNS settings for accounts ( #655 )
...
Allow users to set groups in which the DNS management is disabled
Added API, activity store, and network map sync test
2023-01-17 17:34:40 +01:00
Maycon Santos
e5adc1eb23
Use macOS v11 to build UI release ( #648 )
...
This allows us to run clients on older macOS versions
2023-01-10 16:49:24 +01:00
Maycon Santos
ca62f6787a
Use configuration input struct ( #645 )
...
As we will be passing more flags to configure
local agents, we need a more flexible type
2023-01-08 12:57:28 +01:00
Maycon Santos
27f4993ce3
Add netbird installer project ( #637 )
2023-01-08 11:33:04 +01:00
Maycon Santos
d18966276a
Store the previous applied dns configuration hash ( #628 )
...
This prevents changing the system
DNS config when there is nothing to new
It also prevents issues with network change on google chrome
2022-12-16 17:00:20 +01:00
Maycon Santos
6b32e2dc07
Validate single account domain input ( #624 )
2022-12-13 13:43:29 +01:00
Maycon Santos
c0a62b6ddc
Add DNS domain to getting started scripts ( #625 )
2022-12-13 13:42:43 +01:00
Maycon Santos
7dfef091bb
Properly parse dns resolver address ( #622 )
...
Prevent panic when address is empty. Common with older managers, where
resolver is disabled by default as
we receive an empty dns config
2022-12-13 12:26:48 +01:00
Maycon Santos
93fcfeae91
Export single account domain variable
2022-12-08 19:45:33 +01:00
Maycon Santos
6f610dca89
Filter routes to sync from same HA group ( #618 )
...
An additional check and filter for routes that are part
of the same HA group where the peer is a routing peer
2022-12-08 15:15:50 +01:00
Maycon Santos
eec24fc730
Use latest tag for dashboard ( #617 )
...
Using the latest tag will align with the
dashboard's new release cycle that relies on tags
2022-12-08 15:15:17 +01:00
Maycon Santos
0be46c083d
Generate validation certificate from mandatory JWK fields ( #614 )
...
When there is no X5c we will use N and E fields of
a JWK to generate the public RSA and a Pem certificate
2022-12-07 22:06:43 +01:00
Maycon Santos
0fbfec4ce4
Remove wiretrustee conflict checks ( #615 )
2022-12-07 18:53:48 +01:00
Maycon Santos
d43f0200a6
Handle peer deletion and state update ( #611 )
...
If peer is deleted in the console,
we set its state as needs login
On Down command we clean any previous state errors
this prevents need for daemon restart
Removed state error wrapping when engine exits, log is enough
2022-12-06 15:37:30 +01:00
Maycon Santos
a387e3cfc2
Add network routes distribution groups ( #606 )
...
Updated tests, API, and account manager methods
Sync routes to peers in the distribution groups
Added store upgrade by adding the All group to routes that don't have them
2022-12-06 10:11:57 +01:00
Maycon Santos
d2d5d4b4b9
Update go version ( #603 )
...
Removed ioctl code and remove exception from lint action
2022-12-04 13:22:21 +01:00
Maycon Santos
d029136d3d
Add security policy file ( #600 )
2022-12-02 13:54:22 +01:00
Maycon Santos
a6d2f673ad
Add contribution guide ( #595 )
...
* Add contribution guide
* update code of conduct contact email
* add PR template
2022-12-02 13:31:31 +01:00
Maycon Santos
0cf0dc048b
Update issue templates ( #597 )
2022-12-02 13:31:15 +01:00
Maycon Santos
a814715ef8
Add resolvconf configurator for linux ( #592 )
2022-11-29 14:51:18 +01:00
Maycon Santos
4a30b66503
Check if system is our manager when resolvconf ( #590 )
...
Sometimes resolvconf will manage the /etc/resolv.conf file
And systemd-resolved still the DNS manager
2022-11-29 13:37:50 +01:00
Maycon Santos
ae500b63a7
User custom loopback address ( #589 )
...
We will probe a set of addresses and port
to define the one available for our DNS service
if none is available, we return an error
2022-11-29 11:49:18 +01:00
Maycon Santos
20a73e3e14
Sync peers FQDN ( #584 )
...
Use stdout and stderr log path only if on Linux and attempt to create the path
Update status system with FQDN fields and
status command to display the domain names of remote and local peers
Set some DNS logs to tracing
update readme file
2022-11-26 13:29:50 +01:00
Maycon Santos
a78fd69f80
Feature/dns client configuration ( #563 )
...
Added host configurators for Linux, Windows, and macOS.
The host configurator will update the peer system configuration
directing DNS queries according to its capabilities.
Some Linux distributions don't support split (match) DNS or custom ports,
and that will be reported to our management system in another PR
2022-11-23 13:39:42 +01:00
Maycon Santos
d63a9ce4a7
Return peer's FQDN via API ( #567 )
...
Added a temp method to retrieve the dns domain
2022-11-21 11:14:42 +01:00
Maycon Santos
9cb66bdb5d
Update last run time and active count ( #568 )
...
* Update last run time and active count
We will collect the active peer min and max versions
* Get UI client usage
2022-11-18 16:35:13 +01:00
Maycon Santos
157137e4ad
Use a single way to generate network map ( #550 )
2022-11-08 11:38:40 +01:00
Maycon Santos
7d7e576775
Set report caller when info or higher ( #555 )
2022-11-08 10:56:13 +01:00
Maycon Santos
7e262572a4
Move dns label generation to store ( #552 )
2022-11-08 10:31:34 +01:00
Maycon Santos
1f845f466c
Add account copy test ( #549 )
2022-11-07 17:37:28 +01:00
Maycon Santos
270f0e4ce8
Feature/dns protocol ( #543 )
...
Added DNS update protocol message
Added sync to clients
Update nameserver API with new fields
Added default NS groups
Added new dns-name flag for the management service append to peer DNS label
2022-11-07 15:38:21 +01:00
Maycon Santos
e8d82c1bd3
Feature/dns-server ( #537 )
...
Adding DNS server for client
Updated the API with new fields
Added custom zone object for peer's DNS resolution
2022-11-03 18:39:37 +01:00
Maycon Santos
126af9dffc
Return gateway address if not nil ( #533 )
...
If the gateway address would be nil which is
the case on macOS, we return the preferredSrc
added tests for getExistingRIBRouteGateway function
update log message
2022-10-31 11:54:34 +01:00
Maycon Santos
4cdf2df660
Update sign pipeline version to 0.0.4 ( #531 )
...
This version has a fix for the
macOS UI client architecture
2022-10-31 11:03:42 +01:00
Maycon Santos
9a4c9aa286
Add active peers count per OS ( #526 )
...
* Add active peers count per OS
* increase iface tests timeout
2022-10-26 14:48:40 +02:00
Maycon Santos
04e4407ea7
Add anonymous usage metrics collection ( #508 )
...
This will help us understand usage on self-hosted deployments
The collection may be disabled by using the flag --disable-anonymous-metrics or
NETBIRD_DISABLE_ANONYMOUS_METRICS in setup.env
2022-10-16 13:33:46 +02:00