Replies: 6 comments 9 replies
-
|
Hi, @squeaktoy. Not all functions require Cloud connection, see Available Functions (
What is your Netdata version? Can you show There was a bug in a nightly version but it was fixed over a week ago. |
Beta Was this translation helpful? Give feedback.
-
|
After updating to 1..45.4, I still cannot use the |
Beta Was this translation helpful? Give feedback.
-
There it says:
I don't understand this. For example, both the Processes and Systemd-journal functions should be strictly read-only - so why is there a concern about "executing routines on the node"? Why doesn't other functions, like Block-devices or Mount-points, have this "problem"? It feels like some functions are just arbitrary set to require Cloud, just to force people to create and connect their local nodes to a Cloud account... Edit: additionally, "Processes", which requires Cloud, is handled by the plugin "apps". The documentation of "apps" even says:
(https://github.com/netdata/netdata/tree/master/src/collectors/apps.plugin#security) |
Beta Was this translation helpful? Give feedback.
-
|
Just like most open source services, if it was actually "for security purposes", they can literally make it possible to register a local account and solve the entire issue once and for all. |
Beta Was this translation helpful? Give feedback.
-
|
Having to register your account ON THE CLOUD on its own is a big f*ck you to security. |
Beta Was this translation helpful? Give feedback.
-
^^ This. Might seem blunt but how true it is, honestly. I emailed Netdata using their Contact Us option – a few reps on Reddit said invite people wanting to discuss plan options and figure out s solution that works for them to use the contact form. I did so, and gave my argument, including my willingness to agree to create a Netdata Cloud account and link up my devices, IF I could secure my account with additional layers or security and also be able to link up all of my local devices under their free plan. 2 weeks later, I have not received a reply. They're milking home users who probably aren't even their big money makers, and all of this new required plan stuff wasn't a thing a few years ago. If I was making money off their products, sure, I'll pay for it then, but I don't. I barely make enough money to pay myself, and some months, I don't even have money to do that. One of the reps, somewhere on Reddit, had stated sometime ago, that Netdata is open source and anyone can modify the code, and for that matter, I could create my own account service. Yeah, ok, because I have that level of programming experience to roll my own accounts solution. |
Beta Was this translation helpful? Give feedback.
-
|
Can we have any way (runtime is preferred, but compile time is also OK) to force-allow access to local functions like systemd-journald? This function can be disabled by default, but overridable with sudo rights. |
Beta Was this translation helpful? Give feedback.
-
|
any updates? |
Beta Was this translation helpful? Give feedback.
-
|
for real like forcing us to use their cloud services, like i can just go use a different metric monitoring, well time to uninstall. |
Beta Was this translation helpful? Give feedback.
-
|
Bump! |
Beta Was this translation helpful? Give feedback.
-
|
I've also been troubled by this issue and found a possible workaround. You need to fork the netdata code, modify the diff --git a/src/database/rrdfunctions-inflight.c b/src/database/rrdfunctions-inflight.c
index a14234bff431c5..885960b283d26c 100644
--- a/src/database/rrdfunctions-inflight.c
+++ b/src/database/rrdfunctions-inflight.c
@@ -438,48 +438,6 @@ int rrd_function_run(RRDHOST *host, BUFFER *result_wb, int timeout_s,
return code;
}
- if(!http_access_user_has_enough_access_level_for_endpoint(user_access, rdcf->access)) {
-
- if((rdcf->access & HTTP_ACCESS_SIGNED_ID) && !(user_access & HTTP_ACCESS_SIGNED_ID))
- code = rrd_call_function_error(result_wb,
- "You need to be authenticated via Netdata Cloud Single-Sign-On (SSO) "
- "to access this feature. Sign-in on this dashboard, "
- "or access your Netdata via https://app.netdata.cloud.",
- HTTP_ACCESS_PERMISSION_DENIED_HTTP_CODE(user_access));
-
- else if((rdcf->access & HTTP_ACCESS_SAME_SPACE) && !(user_access & HTTP_ACCESS_SAME_SPACE))
- code = rrd_call_function_error(result_wb,
- "You need to login to the Netdata Cloud space this agent is claimed to, "
- "to access this feature.",
- HTTP_ACCESS_PERMISSION_DENIED_HTTP_CODE(user_access));
-
- else if((rdcf->access & HTTP_ACCESS_COMMERCIAL_SPACE) && !(user_access & HTTP_ACCESS_COMMERCIAL_SPACE))
- code = rrd_call_function_error(result_wb,
- "This feature is only available for commercial users and supporters "
- "of Netdata. To use it, please upgrade your space. "
- "Thank you for supporting Netdata.",
- HTTP_ACCESS_PERMISSION_DENIED_HTTP_CODE(user_access));
-
- else {
- HTTP_ACCESS missing_access = (~user_access) & rdcf->access;
- char perms_str[1024];
- http_access2txt(perms_str, sizeof(perms_str), ", ", missing_access);
-
- char msg[2048];
- snprintfz(msg, sizeof(msg), "This feature requires additional permissions: %s.", perms_str);
-
- code = rrd_call_function_error(result_wb, msg,
- HTTP_ACCESS_PERMISSION_DENIED_HTTP_CODE(user_access));
- }
-
- dictionary_acquired_item_release(host->functions, host_function_acquired);
-
- if(result_cb)
- result_cb(result_wb, code, result_cb_data);
-
- return code;
- }
-
if(timeout_s <= 0)
timeout_s = rdcf->timeout;Configuring a complete build and packaging environment is cumbersome, but the compilation process can be handled on GitHub Actions. Although the pipeline may fail due to the absence of an official GPG key, you can still download the compiled deb package, like: https://github.com/lyc8503/netdata/actions/runs/17618181095/job/50056891375 Two important points to note:
Regardless, I've been using Netdata on my HomeLab for over seven years now. Its diagnostic capabilities and detailed metrics help me quickly resolve complex issues. I really like it. Though recent changes, including the tight coupling with Netdata Cloud and the removal of the open-source v1 dashboard, have left me somewhat disappointed. We hope Netdata will become more user-friendly for individual users in terms of its product and design, rather than rushing to promote Netdata Cloud and expensive subscription plans. |
Beta Was this translation helpful? Give feedback.
-
|
nice one! people certainly need a docker image of that! |
Beta Was this translation helpful? Give feedback.
-
I found some metrics missing when running in docker (even after mounting all required files), so I install Netdata directly on host. If you'd like to have a docker image, you can pull the Netdata repo, make the modification above and build it locally. It should be much easier to build locally with Docker. Dockerfile is located at |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
I'm running Netdata in my own local network, yet the web UI says the following on some tabs like Top:
I'm on my local network, so why is Netdata stopping me from viewing info about my own computer? How can I disable this requirement to sign in? I don't want to have an account on a third-party server just to view my own computer's information.
It also says something about "claimed agents". I tried the
netdata-claim.shscript, but it says:So how am I going to use Netdata functions now without Cloud support? I would rather not connect to third-party servers. Anyone have an idea what to do here?
Beta Was this translation helpful? Give feedback.
All reactions