installation script broken #6171
Answered
by
momsi
momsi
asked this question in
Issue Triage
Before posting
Affected areaSelf-hosting / Deployment Deployment typeSelf-hosted - quickstart script Operating system or environmentLinux, Docker NetBird version and upgrade statuscannot say, unable to deploy Did this work before?Yes, this worked before Regression detailsgetting started script seemed to work in Febuary 2026. SummaryI am unable to deploy self hosted Netbird with the getting-started.sh as described on https://docs.netbird.io/selfhosted/selfhosted-quickstart#installation-script I encountered errors and tried solutions mentioned in #6059 #5248 #5892 #5793 Current behaviorgetting-started.sh keeps looping this step:
Possible solutions from #6059 #5248 #5892 #5793 did not help Expected behaviorgetting-started.sh successfully starting all containers. Steps to reproduceuse getting-started.sh Environment and topologyServer running nixos. Self-hosted details, if availableUsing Logs, status output, or debug evidence❯ curl -fsSL https://github.com/netbirdio/netbird/releases/latest/download/getting-started.sh | bash
The NETBIRD_DOMAIN variable cannot be empty.
Enter the domain you want to use for NetBird (e.g. netbird.my-domain.com): bird.example.com
Which reverse proxy will you use?
[0] Traefik (recommended - automatic TLS, included in Docker Compose)
[1] Existing Traefik (labels for external Traefik instance)
[2] Nginx (generates config template)
[3] Nginx Proxy Manager (generates config + instructions)
[4] External Caddy (generates Caddyfile snippet)
[5] Other/Manual (displays setup documentation)
Enter choice [0-5] (default: 0):
Enter your email for Let's Encrypt certificate notifications.
Email address: info@example.com
Do you want to enable the NetBird Proxy service?
The proxy allows you to selectively expose internal NetBird network resources
to the internet. You control which resources are exposed through the dashboard.
Enable proxy? [y/N]: y
Do you want to enable CrowdSec IP reputation blocking?
CrowdSec checks client IPs against a community threat intelligence database
and blocks known malicious sources before they reach your services.
A local CrowdSec LAPI container will be added to your deployment.
Enable CrowdSec? [y/N]: y
Rendering initial files...
Starting NetBird services
Starting core services...
[+] Running 31/31
✔ traefik Pulled 10.0s
✔ d17f077ada11 Pull complete 4.1s
✔ 7d2ed1a90b67 Pull complete 4.5s
✔ a6bfd24ce880 Pull complete 8.4s
✔ 967d47916374 Pull complete 8.5s
✔ dashboard Pulled 8.7s
✔ 422ed46b1a92 Pull complete 0.7s
✔ 6ce15007e18a Pull complete 6.0s
✔ 2951f32a5392 Pull complete 6.0s
✔ 352f1791404f Pull complete 6.1s
✔ 6ec7e4e3dd7d Pull complete 6.1s
✔ e765ce7212ce Pull complete 6.2s
✔ 1b2a006ca118 Pull complete 6.2s
✔ 9a1eb1807481 Pull complete 6.2s
✔ 7ed8250668e8 Pull complete 6.3s
✔ f2a4c1c408b3 Pull complete 6.3s
✔ a921f900fcd6 Pull complete 7.1s
✔ netbird-server Pulled 9.2s
✔ 4d88d96e89e5 Pull complete 4.7s
✔ a9a781a80573 Pull complete 6.7s
✔ 4ebf2d60dfe9 Pull complete 7.7s
✔ crowdsec Pulled 10.5s
✔ a447a5de8f4e Pull complete 2.6s
✔ 1a29907a7ab3 Pull complete 2.9s
✔ 2eace8f5a490 Pull complete 5.3s
✔ 503a806e84b8 Pull complete 5.4s
✔ c9476ac00791 Pull complete 5.5s
✔ 8078d6ded353 Pull complete 5.5s
✔ 27efa6a16787 Pull complete 7.1s
✔ 92ff199a1c8c Pull complete 7.2s
✔ 6ee559aeaeef Pull complete 9.0s
[+] Running 5/5
✔ Network netbird_netbird Created 0.0s
✔ Container netbird-traefik Started 1.1s
✔ Container netbird-dashboard Started 1.1s
✔ Container netbird-server Started 1.1s
✔ Container netbird-crowdsec Started 1.1s
Waiting for NetBird server to become ready . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Taking too long. Checking logs...
netbird-traefik | 172.30.0.1 - - [16/May/2026:12:08:59 +0000] "GET /oauth2/.well-known/openid-configuration HTTP/2.0" 502 11 "-" "-" 53 "netbird-backend@docker" "http://172.30.0.4:80" 0ms
netbird-traefik | 172.30.0.1 - - [16/May/2026:12:09:01 +0000] "GET /oauth2/.well-known/openid-configuration HTTP/2.0" 502 11 "-" "-" 54 "netbird-backend@docker" "http://172.30.0.4:80" 0ms
netbird-traefik | 172.30.0.1 - - [16/May/2026:12:09:03 +0000] "GET /oauth2/.well-known/openid-configuration HTTP/2.0" 502 11 "-" "-" 55 "netbird-backend@docker" "http://172.30.0.4:80" 0ms
netbird-traefik | 172.30.0.1 - - [16/May/2026:12:09:05 +0000] "GET /oauth2/.well-known/openid-configuration HTTP/2.0" 502 11 "-" "-" 56 "netbird-backend@docker" "http://172.30.0.4:80" 0ms
netbird-traefik | 172.30.0.1 - - [16/May/2026:12:09:07 +0000] "GET /oauth2/.well-known/openid-configuration HTTP/2.0" 502 11 "-" "-" 57 "netbird-backend@docker" "http://172.30.0.4:80" 0ms
netbird-traefik | 172.30.0.1 - - [16/May/2026:12:09:09 +0000] "GET /oauth2/.well-known/openid-configuration HTTP/2.0" 502 11 "-" "-" 58 "netbird-backend@docker" "http://172.30.0.4:80" 0ms
netbird-traefik | 172.30.0.1 - - [16/May/2026:12:09:11 +0000] "GET /oauth2/.well-known/openid-configuration HTTP/2.0" 502 11 "-" "-" 59 "netbird-backend@docker" "http://172.30.0.4:80" 0ms
netbird-traefik | 2026-05-16T12:09:12Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-70b4a7f8cff85ca2f236fe918541314c5ddacc33eaf6c6b1bd96df41dd61ea55 providerName=docker serviceName=netbird-server
netbird-traefik | 2026-05-16T12:09:12Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4" '\x00' "" "c1c53a2828663c197b9f84012401dc8f5543a0985f5caf04d641da00c8bf8006"}) for container "/netbird-server". container=netbird-server-netbird-70b4a7f8cff85ca2f236fe918541314c5ddacc33eaf6c6b1bd96df41dd61ea55 providerName=docker serviceName=netbird-server
netbird-traefik | 2026-05-16T12:09:12Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-70b4a7f8cff85ca2f236fe918541314c5ddacc33eaf6c6b1bd96df41dd61ea55 providerName=docker serviceName=netbird-server-h2c
netbird-traefik | 2026-05-16T12:09:12Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4" '\x00' "" "c1c53a2828663c197b9f84012401dc8f5543a0985f5caf04d641da00c8bf8006"}) for container "/netbird-server". container=netbird-server-netbird-70b4a7f8cff85ca2f236fe918541314c5ddacc33eaf6c6b1bd96df41dd61ea55 providerName=docker serviceName=netbird-server-h2c
netbird-traefik | 2026-05-16T12:09:12Z WRN Could not find network named "netbird" for container "/netbird-dashboard". Maybe you're missing the project's prefix in the label? container=dashboard-netbird-10f4201f4a9ab4422c106e15c29d9109a1dbfc820bc1a9c1e909ee2b4edda5d8 providerName=docker serviceName=dashboard
netbird-traefik | 2026-05-16T12:09:12Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.2" '\x00' "" "c1c53a2828663c197b9f84012401dc8f5543a0985f5caf04d641da00c8bf8006"}) for container "/netbird-dashboard". container=dashboard-netbird-10f4201f4a9ab4422c106e15c29d9109a1dbfc820bc1a9c1e909ee2b4edda5d8 providerName=docker serviceName=dashboard
netbird-traefik | 2026-05-16T12:09:12Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-70b4a7f8cff85ca2f236fe918541314c5ddacc33eaf6c6b1bd96df41dd61ea55 providerName=docker serviceName=netbird-server-h2c
netbird-traefik | 2026-05-16T12:09:12Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4" '\x00' "" "c1c53a2828663c197b9f84012401dc8f5543a0985f5caf04d641da00c8bf8006"}) for container "/netbird-server". container=netbird-server-netbird-70b4a7f8cff85ca2f236fe918541314c5ddacc33eaf6c6b1bd96df41dd61ea55 providerName=docker serviceName=netbird-server-h2c
netbird-traefik | 2026-05-16T12:09:12Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-70b4a7f8cff85ca2f236fe918541314c5ddacc33eaf6c6b1bd96df41dd61ea55 providerName=docker serviceName=netbird-server
netbird-traefik | 2026-05-16T12:09:12Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4" '\x00' "" "c1c53a2828663c197b9f84012401dc8f5543a0985f5caf04d641da00c8bf8006"}) for container "/netbird-server". container=netbird-server-netbird-70b4a7f8cff85ca2f236fe918541314c5ddacc33eaf6c6b1bd96df41dd61ea55 providerName=docker serviceName=netbird-server
netbird-traefik | 2026-05-16T12:09:12Z WRN Could not find network named "netbird" for container "/netbird-dashboard". Maybe you're missing the project's prefix in the label? container=dashboard-netbird-10f4201f4a9ab4422c106e15c29d9109a1dbfc820bc1a9c1e909ee2b4edda5d8 providerName=docker serviceName=dashboard
netbird-traefik | 2026-05-16T12:09:12Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.2" '\x00' "" "c1c53a2828663c197b9f84012401dc8f5543a0985f5caf04d641da00c8bf8006"}) for container "/netbird-dashboard". container=dashboard-netbird-10f4201f4a9ab4422c106e15c29d9109a1dbfc820bc1a9c1e909ee2b4edda5d8 providerName=docker serviceName=dashboard
netbird-traefik | 172.30.0.1 - - [16/May/2026:12:09:13 +0000] "GET /oauth2/.well-known/openid-configuration HTTP/2.0" 502 11 "-" "-" 60 "netbird-backend@docker" "http://172.30.0.4:80" 0ms
netbird-server | 2026-05-16T12:09:12.622Z INFO combined/cmd/root.go:306: Signal server created
netbird-server | 2026-05-16T12:09:12.622Z INFO management/server/store/store.go:381: using SQLite store engine
netbird-server | 2026-05-16T12:09:12.624Z INFO management/server/store/sql_store.go:107: Setting transaction timeout to 5m0s
netbird-server | 2026-05-16T12:09:12.625Z INFO management/server/store/sql_store.go:121: Set max open db connections to 1, max idle to 1, max lifetime to 1h0m0s, max idle time to 3m0s
netbird-server | 2026-05-16T12:09:12.632Z INFO management/server/migration/migration.go:148: No records in table peers, no migration needed
netbird-server | 2026-05-16T12:09:12.632Z INFO management/server/migration/migration.go:148: No records in table peers, no migration needed
netbird-server | 2026-05-16T12:09:12.633Z INFO management/server/migration/migration.go:263: No plain setup keys found in table setup_keys, no migration needed
netbird-server | 2026-05-16T12:09:12.633Z INFO management/server/migration/migration.go:301: Migration of plain setup key to hashed setup key completed
netbird-server | 2026-05-16T12:09:12.634Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_resources, no migration needed
netbird-server | 2026-05-16T12:09:12.634Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_resources completed
netbird-server | 2026-05-16T12:09:12.634Z INFO management/server/migration/migration.go:344: No rows with empty enabled found in table network_routers, no migration needed
netbird-server | 2026-05-16T12:09:12.634Z INFO management/server/migration/migration.go:358: Migration of empty enabled to default value in table network_routers completed
netbird-server | 2026-05-16T12:09:12.635Z INFO management/server/migration/migration.go:344: No rows with empty name found in table users, no migration needed
netbird-server | 2026-05-16T12:09:12.635Z INFO management/server/migration/migration.go:358: Migration of empty name to default value in table users completed
netbird-server | 2026-05-16T12:09:12.636Z INFO management/server/migration/migration.go:344: No rows with empty email found in table users, no migration needed
netbird-server | 2026-05-16T12:09:12.636Z INFO management/server/migration/migration.go:358: Migration of empty email to default value in table users completed
netbird-server | 2026-05-16T12:09:12.679Z INFO management/server/migration/migration.go:399: index idx_account_ip already exists on table peers
netbird-server | 2026-05-16T12:09:12.679Z INFO management/server/migration/migration.go:399: index idx_account_dnslabel already exists on table peers
netbird-server | 2026-05-16T12:09:12.679Z INFO management/server/migration/migration.go:399: index idx_peers_key_unique already exists on table peers
netbird-server | 2026-05-16T12:09:12.680Z INFO management/internals/server/server.go:417: resolve domains: fresh install detected, using default domain "netbird.selfhosted"
. . . . . .Related issues or discussionsImpactunable to deploy netbird Additional contextNo response |
Answered by
momsi
May 24, 2026
Replies: 1 comment 3 replies
|
I haven't been able to reproduce this on a clean NixOS install, but it seemed like Traefik could not find your NetBird network. Can you send the firewall related settings of your Nix config? Does this work if you disable the firewall temporarily? You can easily disable the firewall to test this by adding |
3 replies
|
Thanks for your suggestion. I tried with a disabled firewall and still no joy... exactly the same logs as above. Is it right that it says |
|
Yeah, weird. If you open the generated config.yaml does it have the correct domain or does it still say "netbird.selfhosted"? Could you try running |
|
I found the issue.... I reinstalled my VPS from a minimal working config, and added parts until it broke... the issue for me was:
I use this to prevent docker from opening ports and exposing services on its own. When removing the option netbird deploys just fine. Sorry, the error was definitely on my side, I was of the impression other also had issues since there were a bunch of other open issues. By any chance, you have a tip on how else to prevent docker from exposing mapped ports? |
Answer selected by
momsi
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I found the issue.... I reinstalled my VPS from a minimal working config, and added parts until it broke... the issue for me was:
virtualisation.docker.extraOptions = "--iptables=false --ip6tables=false";I use this to prevent docker from opening ports and exposing services on its own. When removing the option netbird deploys just fine.
Sorry, the error was definitely on my side, I was of the impression other also had issues since there were a bunch of other open issues.
By any chance, you have a tip on how else to prevent docker from exposing mapped ports?