Skip to content

netbird: update to 0.66.2 (breaking change)#28721

Merged
wehagy merged 3 commits into
openwrt:openwrt-25.12from
wehagy:openwrt-25.12/netbird/update
Mar 10, 2026
Merged

netbird: update to 0.66.2 (breaking change)#28721
wehagy merged 3 commits into
openwrt:openwrt-25.12from
wehagy:openwrt-25.12/netbird/update

Conversation

@wehagy
Copy link
Copy Markdown
Member

@wehagy wehagy commented Mar 9, 2026

📦 Package Details

Maintainer: me
(You can find this by checking the history of the package Makefile.)

Description:

Backport of PR for 25.12:


🧪 Run Testing Details

@egc112, can you please confirm it's working in OpenWrt 25.12? #28721 (comment)


✅ Formalities

  • I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

If your PR contains a patch:

  • It can be applied using git am
  • It has been refreshed to avoid offsets, fuzzes, etc., using
    make package/<your-package>/refresh V=s
  • It is structured in a way that it is potentially upstreamable
    (e.g., subject line, commit description, etc.)
    We must try to upstream patches to reduce maintenance burden.

wehagy added 3 commits March 8, 2026 21:02
Add `NB_DNS_STATE_FILE="/var/lib/netbird/state.json"` to the init
environment. This moves the state from the directory
`/root/.config/netbird` to the file `/var/lib/netbird/state.json` to
avoid storage wear. Note: the file is not preserved across reboots.

The state file contains information such as locally disabled routes and
other data primarily useful for desktop clients. In OpenWrt setups,
these changes are normally handled by the NetBird `management` server.
This matches the behavior prior to `netbird` v0.52.x, I have not
received any reports that this file caused problems before, so it is
unlikely to cause issues now.

The previous state file `/root/.config/netbird/state.json` can be removed.

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 696c2b6)
Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.61.2

The second release of `netbird` that introduces a breaking change[1].
A backport will be provided for OpenWrt 25.12 but not for OpenWrt 24.10,
since OpenWrt 25.12 has not been released yet.

NetBird adds **fine-grained SSH access control**[2].

Self-hosters must update both the `management` and `dashboard`[3].

[1]: https://forum.netbird.io/t/upcoming-breaking-changes-to-netbird-ssh/401
[2]: https://docs.netbird.io/manage/peers/ssh#fine-grained-access-control
[3]: https://docs.netbird.io/manage/peers/ssh#v0-61-0

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit 291dacc)
Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.66.2

NetBird `v0.66.x` adds support for exposing a local HTTP service
from the CLI with the `netbird expose`[1] command, but only for
self-hosted deployments. Cloud support is coming.

[1]: https://docs.netbird.io/manage/reverse-proxy/expose-from-cli

---

`0.65.x` highlights

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.65.3

NetBird `v0.65.x` now includes a built-in reverse proxy[1], but only for
self-hosted deployments and is currently in beta. Cloud support is
coming soon.

Important: pre-shared keys or Rosenpass are currently incompatible with
the reverse proxy feature.

[1]: https://docs.netbird.io/manage/reverse-proxy

---

`v0.63.x` highlights

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.63.0

NetBird now supports private DNS zones[1].

[1]: https://docs.netbird.io/manage/dns/custom-zones

---

`v0.62.x` highlights

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.62.3

Upstream minimum Go requirement raised from `v1.24.x` to `v1.25.x`,
see the go.mod[1].

[1]: https://github.com/netbirdio/netbird/blob/v0.62.3/go.mod#L3-L5

---

Building `netbird` with Go 1.26.x fails with errors:

```
[...]
/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:22:2: WaitReasonSelect redeclared in this block
	/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:22:2: other declaration of WaitReasonSelect
/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:23:2: WaitReasonChanReceive redeclared in this block
	/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:23:2: other declaration of WaitReasonChanReceive
/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go126.go:24:2: WaitReasonSemacquire redeclared in this block
	/builder/dl/go-mod-cache/gvisor.dev/gvisor@v0.0.0-20251031020517-ecfcdd2f171c/pkg/sync/runtime_constants_go125.go:24:2: other declaration of WaitReasonSemacquire
[...]
```

Upstream Issue: netbirdio/netbird#5290
Upstream PR: netbirdio/netbird#5447

Signed-off-by: Wesley Gimenes <wehagy@proton.me>
(cherry picked from commit df6533b)
@KA2107
Copy link
Copy Markdown

KA2107 commented Mar 9, 2026

@wehagy I think you need to add [25.12] to the title, otherwise this issue might get closed by someone thinking this is a duplicate of #28589 .

@wehagy
Copy link
Copy Markdown
Member Author

wehagy commented Mar 9, 2026

Thanks for the reminder, but I'm trying to forget the prefix. Old habits die hard, and thanks to George, after the bot runs this will be automatically tagged.

@github-actions github-actions Bot added the OpenWrt 25.12 Issues/PR on branch 25.12 label Mar 9, 2026
@egc112
Copy link
Copy Markdown
Contributor

egc112 commented Mar 10, 2026

Totally missed it but yes working in 25.12 so it looks good to go.

root@MT-6000:~# ubus call system board
{
        "kernel": "6.12.71",
        "hostname": "MT-6000",
        "system": "ARMv8 Processor rev 4",
        "model": "GL.iNet GL-MT6000",
        "board_name": "glinet,gl-mt6000",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "25.12-SNAPSHOT",
                "firmware_url": "https://downloads.openwrt.org/",
                "revision": "r32718-274f6e5ab8",
                "target": "mediatek/filogic",
                "description": "OpenWrt 25.12-SNAPSHOT r32718-274f6e5ab8",
                "builddate": "1772795262"
        }
}

root@MT-6000:~# netbird status
OS: linux/arm64
Daemon version: 0.66.2
CLI version: 0.66.2
Profile: default
Management: Connected
Signal: Connected
Relays: 4/4 Available
Nameservers: 1/1 Available
FQDN: mt-6000.netbird.cloud
NetBird IP: 100.105.81.16/16
Interface type: Kernel
Quantum resistance: false
Lazy connection: false
SSH Server: Enabled
Networks: -
Peers count: 1/8 Connected

Will you make the announcement in the support thread ? Otherwise I can do it 🙂

@wehagy wehagy merged commit 6f585a2 into openwrt:openwrt-25.12 Mar 10, 2026
12 checks passed
@wehagy wehagy deleted the openwrt-25.12/netbird/update branch March 10, 2026 23:10
@wehagy
Copy link
Copy Markdown
Member Author

wehagy commented Mar 10, 2026

@egc112, thanks for confirming it works. I made the announcement: https://forum.openwrt.org/t/netbird-support-discussion-thread/237831/62?u=wehagy. Feel free to add anything if I missed something 😉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants