Github/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-08-30 18:41:37 -07:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 3ce095719a Describe the approval no-match result and the cursor-skip key as they behave embedded-vnc Viktor Liu 2026-08-30 05:56:59 +02:00
  • 12040b1be0 Refuse an ambiguous X display and settle the approval timeout race under one claim Viktor Liu 2026-08-29 17:25:02 +02:00
  • fecd7cfff5 Attach to the X server on the active VT and keep a retryable DXGI frame from tearing down the capturer Viktor Liu 2026-08-29 16:59:05 +02:00
  • 15d6e3bea9 Keep DXGI on an idle desktop, honour the FreeBSD pitch when swizzling, close the handler-drain race Viktor Liu 2026-08-29 16:25:07 +02:00
  • 5f739ef0ac Reject an unsupported VNC session id and say why a cursor rect was skipped Viktor Liu 2026-08-29 16:09:47 +02:00
  • d0d8813dcb Fail an approval request fast when no subscriber received the prompt Viktor Liu 2026-08-29 16:00:36 +02:00
  • e104cef490 Require a real first DXGI frame and read the FreeBSD framebuffer at its true pitch Viktor Liu 2026-08-29 15:51:19 +02:00
  • 9ec27f9d7f Authenticate the daemon and its VNC agent to each other without sending the token Viktor Liu 2026-08-29 15:45:09 +02:00
  • ba104a11ad Encode one framebuffer update at a single negotiated pixel format Viktor Liu 2026-08-29 13:56:54 +02:00
  • 8d6b7b6175 Leave the VNC approver nil when there is no broker to ask Viktor Liu 2026-08-29 13:49:47 +02:00
  • 9672e04ce6 Scope crash recovery to Linux, drain connection handlers before teardown Viktor Liu 2026-08-29 13:43:12 +02:00
  • d8236002c7 Honour the negotiated pixel format for the cursor, enqueue key edges reliably, drop racy test writes Viktor Liu 2026-08-29 12:40:14 +02:00
  • d196b23de6 Stop narrowing the shared runtime dir, close the injector on stop, allowlist VNC metrics Viktor Liu 2026-08-29 10:29:17 +02:00
  • 827098c3d2 Compare cursor serials by identity so returning to an earlier cursor updates Viktor Liu 2026-08-29 10:25:09 +02:00
  • 1ecd1dab8b Collect auth requirements for bidirectional source peers and fix follow-up review findings Viktor Liu 2026-08-29 09:57:07 +02:00
  • 312b73f771 Persist virtual session processes for crash recovery and identify them by start time Viktor Liu 2026-08-29 09:48:45 +02:00
  • 8b2db16c84 Route resource endpoints through the shared policy peer filter Viktor Liu 2026-08-29 09:37:17 +02:00
  • fb9c0ef602 Make session key authorization atomic, unblock the encoder on teardown, drop agent privileges unconditionally Viktor Liu 2026-08-29 09:12:33 +02:00
  • 95e86deeb8 Resolve VNC authorized users on the components path and fix uinput, X11 and macOS input gaps Viktor Liu 2026-08-29 09:04:02 +02:00
  • 4a0fe09ced Merge branch 'main' into embedded-vnc Viktor Liu 2026-08-29 08:42:02 +02:00
  • 432d249cde Accept bare marker protocols, reject msb_right framebuffers, split the policy row conversion Viktor Liu 2026-08-29 08:24:36 +02:00
  • 11733fd718 [infrastructure] Improve domain, Docker Compose, and license validation in self-hosted scripts (#7339) main Bethuel Mmbaga 2026-08-28 18:11:57 +03:00
  • 36df4d1f3c Merge remote-tracking branch 'origin/main' into dmitri-refactor-peer-updates dmitri-refactor-peer-updates Dmitri Dolguikh 2026-08-28 16:52:59 +02:00
  • 353251d886 [management] fix posture check evaluation for direct peers in policy definition (#7348) Pascal Fischer 2026-08-28 16:46:42 +02:00
  • 611a9291cd [management] fix posture check flip evaluation for affected peers calc (#7347) Pascal Fischer 2026-08-28 15:39:48 +02:00
  • 2694b07506 Windows runtime chrome re-theming plus apply serialization feat/desktop-ui-light-mode TechHutTV 2026-08-28 13:29:25 +02:00
  • 48a2a7a5b7 [client] Discover interfaces lazily in stdnet instead of at construction fix_stdnet_lazy_interfaces riccardom 2026-08-28 12:07:36 +02:00
  • 8cdd4e790c Theme review fixes plus macOS window outline fix TechHutTV 2026-08-28 12:04:15 +02:00
  • 6a2df1db80 desktop UI light mode TechHutTV 2026-08-28 11:38:03 +02:00
  • 7a8a308f95 Merge remote-tracking branch 'origin/main' into dmitri-refactor-peer-updates Dmitri Dolguikh 2026-08-28 10:15:55 +02:00
  • 89c6e84a41 [client, ios] Fix context cancellation during restart (#7329) Zoltan Papp 2026-08-28 09:33:08 +02:00
  • f5d821ccb2 Describe session auth as SSH and VNC, cover the conflicting key path, fix de and ru wording Viktor Liu 2026-08-27 21:08:20 +02:00
  • 913a1c6033 Fix framebuffer layout handling, capturer lifecycle and macOS pointer state races Viktor Liu 2026-08-27 21:08:20 +02:00
  • 5986929dc3 Carry the VNC session key through the network map DB path Viktor Liu 2026-08-27 21:08:20 +02:00
  • 071bd94d14 Close view-only input, approval-responder and inbound-block gaps in the VNC path Viktor Liu 2026-08-27 21:07:03 +02:00
  • 47b6fac78a [management] Require the stale-write update to succeed in the resurrection test fix/custom-domain-validation mlsmaycon 2026-08-27 18:46:22 +00:00
  • d97ac90c99 [management] Pin that a late validation write cannot recreate a deleted domain mlsmaycon 2026-08-27 18:18:18 +00:00
  • 1d5ac0bb68 [management] Stop an unauthorized caller from validating a domain mlsmaycon 2026-08-27 17:54:42 +00:00
  • 4d7ca23184 Split the status summary into per-section helpers and scope retrackConn to service mode Viktor Liu 2026-08-27 19:49:39 +02:00
  • 8997670c15 Regenerate the daemon proto with the protoc version the tree was generated with Viktor Liu 2026-08-27 19:40:35 +02:00
  • 9990a18516 [management] Return a conflict when a duplicate domain insert loses the race mlsmaycon 2026-08-27 17:37:39 +00:00
  • c804bee088 Put the approval prompt's Deny and Allow buttons on one row Viktor Liu 2026-08-27 18:36:12 +02:00
  • 64d808ee63 Split the VNC, routing and metrics flag copying out of the config request builders Viktor Liu 2026-08-27 18:36:12 +02:00
  • 90483da26b Address review findings on the VNC server, session auth and capture decoder Viktor Liu 2026-08-27 18:33:52 +02:00
  • fa47b32b92 [client] Scope the iOS file drop listener to the tunnel interface file-share Zoltán Papp 2026-08-27 17:58:25 +02:00
  • 604fb3bb04 [management] Refuse services on unvalidated custom domains mlsmaycon 2026-08-08 05:18:11 +00:00
  • 6620219939 [client] Add catch-all NRPT rule when NetBird is the primary DNS resolver (#7071) Riccardo Manfrin 2026-08-27 16:18:49 +02:00
  • 898539381c [client] Scope the iOS file drop dial to the tunnel interface Zoltán Papp 2026-08-27 16:10:25 +02:00
  • f7e186fbd0 Merge branch 'main' into embedded-vnc Viktor Liu 2026-08-27 16:01:14 +02:00
  • c239352a7f [client] Fail closed in InvokingUser when the sudo user lookup fails fix/sudo-up-profile-resolution Zoltán Papp 2026-08-27 16:01:01 +02:00
  • 951e5d3e28 Update bind Zoltán Papp 2026-08-27 15:47:49 +02:00
  • fd585b073f make linter happy Dmitri Dolguikh 2026-08-27 15:44:50 +02:00
  • d2298fa79a [client] Tolerate the warning deadline's second precision in the renewal check fix/session-expiration-dialog-autoclose Zoltán Papp 2026-08-27 15:41:20 +02:00
  • c19b5f865e [client] Derive the expiration dialog countdown from the deadline Zoltán Papp 2026-08-27 15:31:49 +02:00
  • 9b510eb060 extract peer update loop into a dedicated struct and wrap it in tests Dmitri Dolguikh 2026-08-27 15:23:49 +02:00
  • 1dd28a227a [client] Compare session renewals against the exact deadline in the expiration dialog Zoltán Papp 2026-08-27 15:01:44 +02:00
  • b58d888d84 Surface catalog models in the scoped provider list for unrestricted callers agent-network-roles mlsmaycon 2026-08-27 12:34:15 +00:00
  • fd1940dad8 Give the guardrail model tests their own policy rows mlsmaycon 2026-08-27 12:32:29 +00:00
  • 6ec052d797 [client] Close the session-expiration dialog only on an actual session renewal Zoltán Papp 2026-08-27 14:20:58 +02:00
  • 50fca7ee23 Appease codespell in the guardrail model test comment mlsmaycon 2026-08-27 12:11:50 +00:00
  • 9286c58ed2 Cut self-scoped provider model lists to the caller's effective set mlsmaycon 2026-08-27 12:10:05 +00:00
  • 63c26be72f [client] Add local Prometheus metrics endpoint (#6689) Viktor Liu 2026-08-27 20:53:06 +09:00
  • e52a076ab9 Fix SonarCloud code smells in netbird-macos.sh feat/remote-jobs-optin-mdm mlsmaycon 2026-08-27 11:47:53 +00:00
  • 8ed7c06629 Merge branch 'main' into agent-network/provider-credential-check agent-network/provider-credential-check Maycon Santos 2026-08-27 13:36:42 +02:00
  • f8681347dd [client] Arm the account prompt only from the wait that owns the flow fix/pkce-flow-session-extend Zoltán Papp 2026-08-27 13:06:21 +02:00
  • 32d1546d00 sync pb file mlsmaycon 2026-08-27 12:53:22 +02:00
  • 680d87d44a Merge branch 'debug-bundle-anonymize-level-upload-url' into feat/remote-jobs-optin-mdm mlsmaycon 2026-08-27 12:53:09 +02:00
  • 0bb270c76a sync pb file debug-bundle-anonymize-level-upload-url mlsmaycon 2026-08-27 12:50:20 +02:00
  • b074013284 Merge branch 'main' into debug-bundle-anonymize-level-upload-url mlsmaycon 2026-08-27 12:49:31 +02:00
  • edf5b0b2f2 [client] Guard OAuth flow mutations by the flow that owns the wait Zoltán Papp 2026-08-27 12:47:34 +02:00
  • f7da113ac7 [client] Port the file drop bindings to iOS Zoltán Papp 2026-08-27 12:43:54 +02:00
  • 125fb08e15 [client] Fail closed instead of reading root's config when the sudo user lookup fails Zoltán Papp 2026-08-27 12:33:57 +02:00
  • 0fd24a5a74 [client] Load the extend-session hint from the resolved profile Zoltán Papp 2026-08-27 12:33:57 +02:00
  • fbd98d0f6b [client] Return a sentinel error instead of nil-nil for the missing daemon RPC Zoltán Papp 2026-08-27 12:28:53 +02:00
  • 5294f5be35 Reuse filterEnabledProviders in the authorized-provider selection mlsmaycon 2026-08-27 10:25:17 +00:00
  • 2a9c8dd8ac Adds observability and fixes cross cases feat-post_quantum_ml_kem riccardom 2026-08-27 12:16:20 +02:00
  • 9015b68b66 Add comment to explain working boundaries riccardom 2026-08-24 13:58:22 +02:00
  • e24d9e3c16 UDPv4 is sufficient! we always have 100.x overlay. IPv6 is additive riccardom 2026-08-07 17:23:49 +02:00
  • 6b417e7c1b Addresses CI fixes riccardom 2026-08-07 17:03:32 +02:00
  • 47e6aaec0a Addresses CI fixes riccardom 2026-08-07 16:27:31 +02:00
  • 5f90751c49 Addresses CI fixes riccardom 2026-08-07 16:24:17 +02:00
  • 4406b072c8 Addresses CI fixes riccardom 2026-08-07 16:08:52 +02:00
  • 29395f3827 [client] pqkem: split handshaker Listen into per-message handlers riccardom 2026-08-07 16:02:55 +02:00
  • a11c929b28 [client] pqkem: don't let the responder's delayed update revert the PSK riccardom 2026-08-07 13:09:06 +02:00
  • 87a9c9d09f [client] pqkem: gate controller re-offer to kick the KEM exactly once riccardom 2026-08-06 18:04:30 +02:00
  • 8ba00b2c34 [client] pqkem: make signalling bootstrap idempotent through awaitingRekey riccardom 2026-08-06 18:04:07 +02:00
  • 03ce49df16 Introduces a forced imparity on MLKEM bootstrap. riccardom 2026-08-06 15:42:27 +02:00
  • d4d7441fab Revert "Introduces a forced WG handshake on initial MLKEM bootstrap." riccardom 2026-08-06 15:15:43 +02:00
  • 118569878d Introduces a forced WG handshake on initial MLKEM bootstrap. riccardom 2026-08-06 14:42:07 +02:00
  • d533598935 Anticipates PSK before WG does handshake so it finds it to set it riccardom 2026-08-05 16:39:55 +02:00
  • 089f0f7648 Skip default port send in signal proto riccardom 2026-08-04 18:33:13 +02:00
  • 0254b2e718 Allow non strict mode riccardom 2026-08-04 18:04:10 +02:00
  • b5ada4a71f Adds PQ connection tests riccardom 2026-08-04 16:24:36 +02:00
  • 93153fe1e9 Remove obvious comments; leave only the why of things riccardom 2026-08-04 15:29:15 +02:00
  • 56b3c15584 Be more explicit on names that is a fake key to ensure we don't communicate with others in strict mode riccardom 2026-08-04 15:30:15 +02:00
  • 9f769a53f2 Adds test to validate compromised keys are not accepted riccardom 2026-08-04 15:16:00 +02:00
  • a06cbd42d6 Prioritize Kem over RP riccardom 2026-08-04 15:14:42 +02:00
  • 80bbdf13cb pqkem: concurrency tests (recovery + race) riccardom 2026-07-31 13:11:06 +02:00
  • 57d3e07f18 pqkem: recover from persistent rekey failure by re-bootstrapping over signal riccardom 2026-07-31 10:47:07 +02:00
  • 85f1a6f69f Discriminate initial from rekey failure riccardom 2026-07-30 16:41:05 +02:00