[PR #11716] [MERGED] Netbird (addon): add systemd ordering to start after Docker #9696

Closed
opened 2026-02-26 17:31:23 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/community-scripts/ProxmoxVE/pull/11716
Author: @MickLesk
Created: 2/9/2026
Status: Merged
Merged: 2/9/2026
Merged by: @michelroegl-brunner

Base: mainHead: fix/netbird-docker-race-condition


📝 Commits (1)

  • 57640d8 fix(netbird): add systemd ordering to start after Docker

📊 Changes

1 file changed (+9 additions, -0 deletions)

View changed files

📝 tools/addon/add-netbird-lxc.sh (+9 -0)

📄 Description

✍️ Description

When Docker is installed in the same LXC, Docker sets the FORWARD chain policy to DROP on startup. If Netbird starts before Docker finishes initializing its iptables rules, Docker overrides the Netbird routing rules, causing traffic routing to fail despite the tunnel being up.

Fixes #11354

Prerequisites (X in brackets)

  • Self-review completed – Code follows project standards.
  • Tested thoroughly – Changes work as expected.
  • No security risks – No hardcoded secrets, unnecessary privilege escalations, or permission issues.

🛠️ Type of Change (X in brackets)

  • 🐞 Bug fix – Resolves an issue without breaking functionality.
  • New feature – Adds new, non-breaking functionality.
  • 💥 Breaking change – Alters existing functionality in a way that may require updates.
  • 🆕 New script – A fully functional and tested script or script set.
  • 🌍 Website update – Changes to website-related JSON files or metadata.
  • 🔧 Refactoring / Code Cleanup – Improves readability or maintainability without changing functionality.
  • 📝 Documentation update – Changes to README, AppName.md, CONTRIBUTING.md, or other docs.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/community-scripts/ProxmoxVE/pull/11716 **Author:** [@MickLesk](https://github.com/MickLesk) **Created:** 2/9/2026 **Status:** ✅ Merged **Merged:** 2/9/2026 **Merged by:** [@michelroegl-brunner](https://github.com/michelroegl-brunner) **Base:** `main` ← **Head:** `fix/netbird-docker-race-condition` --- ### 📝 Commits (1) - [`57640d8`](https://github.com/community-scripts/ProxmoxVE/commit/57640d8abdb6a861f1a33eba87942c9788a152d2) fix(netbird): add systemd ordering to start after Docker ### 📊 Changes **1 file changed** (+9 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `tools/addon/add-netbird-lxc.sh` (+9 -0) </details> ### 📄 Description <!--🛑 New scripts must be submitted to [ProxmoxVED](https://github.com/community-scripts/ProxmoxVED) for testing. PRs without prior testing will be closed. --> ## ✍️ Description When Docker is installed in the same LXC, Docker sets the FORWARD chain policy to DROP on startup. If Netbird starts before Docker finishes initializing its iptables rules, Docker overrides the Netbird routing rules, causing traffic routing to fail despite the tunnel being up. ## 🔗 Related Issue Fixes #11354 ## ✅ Prerequisites (**X** in brackets) - [x] **Self-review completed** – Code follows project standards. - [ ] **Tested thoroughly** – Changes work as expected. - [x] **No security risks** – No hardcoded secrets, unnecessary privilege escalations, or permission issues. --- ## 🛠️ Type of Change (**X** in brackets) - [x] 🐞 **Bug fix** – Resolves an issue without breaking functionality. - [ ] ✨ **New feature** – Adds new, non-breaking functionality. - [ ] 💥 **Breaking change** – Alters existing functionality in a way that may require updates. - [ ] 🆕 **New script** – A fully functional and tested script or script set. - [ ] 🌍 **Website update** – Changes to website-related JSON files or metadata. - [ ] 🔧 **Refactoring / Code Cleanup** – Improves readability or maintainability without changing functionality. - [ ] 📝 **Documentation update** – Changes to `README`, `AppName.md`, `CONTRIBUTING.md`, or other docs. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-02-26 17:31:23 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/ProxmoxVE#9696
No description provided.