Whether to enable ulogd, a userspace logging daemon for netfilter/iptables related logging.

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Hardened service:

• runs as a dedicated user with minimal set of permissions (see caveats),
• restricts daemon configuration socket access to dedicated user group (you can grant access to it with users.users."<user>".extraGroups = [ netbird-‹name› ]),

Even though the local system resources access is restricted:

• CAP_NET_RAW, CAP_NET_ADMIN and CAP_BPF still give unlimited network manipulation possibilites,
• older kernels don't have CAP_BPF and use CAP_SYS_ADMIN instead,

Known security features that are not (yet) integrated into the module:

• 2024-02-14: rosenpass is an experimental feature configurable solely through --enable-rosenpass flag on the netbird up command, see the docs

Whether to enable Trusted Platform 2 userspace resource manager daemon .

Whether to enable SCX service, a daemon to run schedulers from userspace.

Whether to enable ucarp, userspace implementation of CARP.

Whether to enable OpenRazer drivers and userspace daemon .

Whether to enable kmscon as the virtual console instead of gettys. kmscon is a kms/dri-based userspace virtual terminal implementation

Whether to enable OP-TEE userspace supplicant.

Whether to enable Bolt, a userspace daemon to enable security levels for Thunderbolt 3 on GNU/Linux

Enable /dev/random, /dev/urandom and /proc/sys/kernel/random/* userspace wrapper.

The interface name for tunnel traffic

Whether to enable ryzen_monitor_ng, a userspace application for setting and getting Ryzen SMU (System Management Unit) parameters via the ryzen_smu kernel driver

Whether to enable Declare the support for derivations that require an Nvidia GPU to be available, e.g. derivations with requiredSystemFeatures = [ "cuda" ]

Networking-related command-line options that should be passed to qemu

Data Plane Development Kit is a framework for fast packet processing in data plane applications running on a wide variety of CPU architectures

Endpoint IP or hostname of the peer, followed by a colon, and then a port number of the peer