netbird icon indicating copy to clipboard operation
netbird copied to clipboard

Auto-Update functionality for netbird client

Open giezi opened this issue 2 years ago • 13 comments

Is your feature request related to a problem? Please describe. Client Updates are currently manual.

Describe the solution you'd like It would be great if the netbird client had an auto update function. Users who don't want to should be able to disable it and update the client manually with a button in the client settings.

giezi avatar May 03 '23 07:05 giezi

yes this feature would be super nice because if you have like 100 peers the update stuff is very nasty especially on clients with users.

support-tt avatar May 03 '23 08:05 support-tt

if your os packaging system can do it for you (rpm, deb) from it's repo. android, ios also do it (will do it). what else?

lfarkas avatar May 08 '23 11:05 lfarkas

if your os packaging system can do it for you (rpm, deb) from it's repo. android, ios also do it (will do it). what else?

yes for linux thats works but in Windows you have to do it manually. Another point from my experience client user never click on update if the admin doesnt advise to do it so a "force" update button for the admin would be awesome maybe with a option to force update on the whole linux client (apt upgrade ...)

support-tt avatar May 08 '23 11:05 support-tt

if your os packaging system can do it for you (rpm, deb) from it's repo. android, ios also do it (will do it). what else?

MacOS - I don't know if netbird would like to enter the Mac App Store... An auto-update of just the client would also be useful for Linux systems which are used for subnet routing.

giezi avatar May 08 '23 11:05 giezi

auto update overwrite some file on the filesystem. in a normal os the filesystem integrity is very critical. which means replacing a file which checksum is calculated at build time is a security nightmare. of i know for windows the security is never been so critical, but from a security software... may be a beta version can do it, may be some as playground it can be done, but in a real production environment it's never a option... to show a popup or log a notice it's ok. to automatically do the update it's not.

lfarkas avatar May 08 '23 11:05 lfarkas

auto update overwrite some file on the filesystem. in a normal os the filesystem integrity is very critical. which means replacing a file which checksum is calculated at build time is a security nightmare. of i know for windows the security is never been so critical, but from a security software... may be a beta version can do it, may be some as playground it can be done, but in a real production environment it's never a option... to show a popup or log a notice it's ok. to automatically do the update it's not.

Of course, the auto-update functionality should be an optional feature.

giezi avatar May 08 '23 11:05 giezi

+1 From our side as well. It is now a nightmare to manage. If at least the Windows client would trigger/ask users to update to new version that would help enormously already.

Rob787 avatar Nov 25 '24 11:11 Rob787

auto update overwrite some file on the filesystem. in a normal os the filesystem integrity is very critical. which means replacing a file which checksum is calculated at build time is a security nightmare. of i know for windows the security is never been so critical, but from a security software... may be a beta version can do it, may be some as playground it can be done, but in a real production environment it's never a option... to show a popup or log a notice it's ok. to automatically do the update it's not.

From an Enterprise perspective, being able to push upgrades from the management console to a given machine, or group of machines, to a specified version (meaning that we can run a couple of versions behind release if desired, for example), would be a great feature to have.

By groups of machines, I mean being able to allocate upgrades to machines:

  1. in a specific network, or
  2. currently running a specific version or
  3. currently running a version older than a given release, or
  4. machines matching a given tag within Netbird (a basic tagging API would probably be a prerequisite for this - did I miss one? There doesn't seem to be one referred to in the API docs, at a glance.)

ruairinewman avatar Mar 30 '25 14:03 ruairinewman

Hi, Is this feature planned for release, or will it not be implemented? We have over 100 users, and doing manual updates is quite a pain.

Dyc9 avatar Oct 28 '25 16:10 Dyc9

I've been testing NetBird for a couple of months on the side really, and I love it, but the lack of any sort of automatic or remote update is going to prevent me going any further at this time - I'm sure it'll come and when it does I'll be back 💯 Keep up the great work!

GENnetuk-DEV avatar Nov 21 '25 10:11 GENnetuk-DEV

I feel there were 3 Updates in the last week. Auto-Update is so needed. Thanks

pete1019 avatar Nov 30 '25 07:11 pete1019

For Windows would suggest an Upgrade Helper Service which should be part of the Client's automatic update process.

A service that monitors and attempts to reinstall the client if an upgrade fails, such as during a system restart or failed upgrade to rollback.

Kofl avatar Nov 30 '25 07:11 Kofl

Just in case it helps someone while a native auto-update is being discussed here:

I’ve published a small set of helper scripts that implement delayed / staged auto-updates for NetBird on the client side (Windows, macOS, Linux). They don’t depend on the NetBird dashboard and are built around the OS package managers / installers:

Windows Linux macOS

Key ideas:

  • no auto-install (only upgrade if NetBird is already present),
  • new versions must “age” N days before being installed (to avoid short-lived/broken releases),
  • daily scheduled checks (Task Scheduler / systemd timer / launchd),
  • logs and simple local state (JSON) on each machine.

These are not a replacement for a first-class auto-update feature in NetBird itself, but they’ve been useful to keep clients reasonably up to date with some safety margin.

NetHorror avatar Dec 10 '25 08:12 NetHorror