netbird

mirror of https://github.com/netbirdio/netbird.git synced 2026-10-10 07:29:06 +02:00

Files

T

jnfrati 62bebb6cbb [relay] Align the UBI image with the shared UBI pattern

Main now ships UBI variants of the client, combined server and proxy that
share one license collector and one image layout, and the Red Hat
certification workflow expects every certified image to carry both amd64
and arm64. The relay variant predated that, kept its own copy of the
license script, built amd64 only, and ran as UID 65532 on the privileged
default port :443, so it would not start under OpenShift or rootless Podman.

Use release_files/collect-licenses.sh and build amd64 and arm64 like the
other UBI images. Run as 1000:0 with a group-0 writable /var/lib/netbird
for Let's Encrypt data, and default the listener to :8443 so an arbitrary
non-root UID can bind it; the relay's Let's Encrypt flow uses TLS-ALPN on
that same listener, so no separate challenge port is needed.

2026-10-09 12:14:20 +02:00

cmd

[relay] only trust X-Real-Ip headers from configured trusted proxies (#6833 )

2026-07-20 18:15:03 +02:00

healthcheck

Add health-check agent recognition to avoid error logs (#4917 )

2025-12-15 10:28:25 +01:00

metrics

[client, relay] Expose relay transport and connection errors in status and metrics (#6342 )

2026-06-17 15:41:48 +02:00

protocol

[server] Add health check HTTP endpoint for Relay server (#4297 )