Umbrel — Discussion, issues, solutions

[cygan]

big thanks vv181!
but how can i increase my inbound connections on my umbrel node?

Code:

"connections": 11,
  "connections_in": 1,
  "connections_out": 10,

on my other full node (Bitcoin core) i have ~60 inbound connections at the moment

Code:

"connections": 72,
  "connections_in": 61,
  "connections_out": 11,

[1714959455]

1714959455

[vv181]

big thanks vv181!
but how can i increase my inbound connections on my umbrel node?

Code:

"connections": 11,
  "connections_in": 1,
  "connections_out": 10,

I suspect the only inbound connection you got is coming from Electrs, you can verify it using bitcoin-cli getpeerinfo and search "subver": "electrs",

At least, that is the issue I also encounter on my Raspibolt node, which I suppose Umbrel does only run over Tor connection. It usually happens because I got a bad internet connection, and it is usually fixed by just restarting the Tor service. After that, I leave it half an hour or just a couple of hours, and then the node usually got the inbound connections back.

I don't know for sure about your node, but you can also try to restart the Tor service if you want:

Code:

cd ~/umbrel && docker-compose restart tor

[erictan90]

Hello, I am a newbie. I am running Bitcoin Core but I can’t get the inbound connections because I can’t open port 8333.
Is this Umbrel no need to open any port and can get the inbound connections?

[cygan]

Hello, I am a newbie. I am running Bitcoin Core but I can’t get the inbound connections because I can’t open port 8333.
Is this Umbrel no need to open any port and can get the inbound connections?

to have port 8333 enabled, you need to open it in your router... which router do you have?
since the umbrel node runs over the tor network, only one inboud connection is possible here - correct me if this is not the case

[DaveF]

As @cygan said by default Umbrel is running on TOR and you cannot disable that for now.
You *do not* need to use port forwarding it all just goes through the TOR network for connections to the outside world.

However, you should have more then 1 connection.

-Dave

[erictan90]

As @cygan said by default Umbrel is running on TOR and you cannot disable that for now.
You *do not* need to use port forwarding it all just goes through the TOR network for connections to the outside world.

However, you should have more then 1 connection.

-Dave

Are you sure Umbrel with Tor will have many inbound connections?

[erictan90]

Hello, I am a newbie. I am running Bitcoin Core but I can’t get the inbound connections because I can’t open port 8333.
Is this Umbrel no need to open any port and can get the inbound connections?

to have port 8333 enabled, you need to open it in your router... which router do you have?
since the umbrel node runs over the tor network, only one inboud connection is possible here - correct me if this is not the case

I will use a new router soon. I will try to open the port again. However, it is too hard for me.
I will be happy to use Umbrel if I am sure it is receiving many inbound connections (not 1 only as you said) without open port.

[DaveF]

As @cygan said by default Umbrel is running on TOR and you cannot disable that for now.
You *do not* need to use port forwarding it all just goes through the TOR network for connections to the outside world.

However, you should have more then 1 connection.

-Dave

Are you sure Umbrel with Tor will have many inbound connections?

Not 100% sure since I have tinkered with mine a lot, all I can say is mine DID before I took it offline last month.
Take a look here: https://community.getumbrel.com/t/is-there-a-way-to-increase-the-number-of-peers/5150

You might want to post a question there too and see. The community is active and willing to help.

Side note, before opening ports make sure you understand the security implications of letting ANY inbound traffic into your network.

-Dave

[cygan]

as you have already seen and read here👉https://bitcointalk.org/index.php?topic=5356129.msg59271490#msg59271490, i have installed 2 rpi 4 in my triton case ... on the one runs the umbrel full node and what should be operated on the second rpi 4, i am still undecided and would like to read from you a few suggestions and opinions...
what would be in mind that i already run 2 full nodes on the second rpi 4 useful to install and start?

[cygan]

umbrel has released a new version today.
the 0.4.15 includes a few updates to the already available apps and also 3 new apps jam, snowflake and bleskomat

Yep, you heard it right. @joinmarket is finally here — and with a beautiful, simple UI of new the Jam app.
Increase the privacy of your Bitcoin with CoinJoin transactions, or earn a yield by making your Bitcoin available to CoinJoin with others without giving up custody.🔥

By simply running Snowflake Tor Proxy on your Umbrel, you can help Ukrainian and Russian journalists, activists, and civilians connect to an uncensored internet via @torproject and bypass Russia's Tor censorship. It's easy and extremely impactful. 💪

With the new Bleskomat Server app, you can connect a @bleskomat Bitcoin & Lightning ATM directly to the Lightning node on your Umbrel.⚡

https://twitter.com/getumbrel/status/1498665787523231744

[erictan90]

big thanks vv181!
but how can i increase my inbound connections on my umbrel node?

Code:

"connections": 11,
  "connections_in": 1,
  "connections_out": 10,

I suspect the only inbound connection you got is coming from Electrs, you can verify it using bitcoin-cli getpeerinfo and search "subver": "electrs",

At least, that is the issue I also encounter on my Raspibolt node, which I suppose Umbrel does only run over Tor connection. It usually happens because I got a bad internet connection, and it is usually fixed by just restarting the Tor service. After that, I leave it half an hour or just a couple of hours, and then the node usually got the inbound connections back.

I don't know for sure about your node, but you can also try to restart the Tor service if you want:

Code:

cd ~/umbrel && docker-compose restart tor

hi, how many inbound connections after you restart the Tor?

[vv181]

hi, how many inbound connections after you restart the Tor?

I missed your post, sorry. After I restarted my node IIRC it gradually got 10+ connections.

A further precaution note of Umbrel security disclosure.

Recently there is a known NPM package security vulnerability, node-ipc[1]. In short, the malicious package will overwrite all the files if the user's IP comes from Russia or Belarus. While the Umbrel node may or may not be affected, it is worth noting the precatory security measure from the Umbrel developers.

And while that issue is already being addressed and even if somehow the Umbrel node is affected, I believe it won't fully affect the whole system since Umbrel systems are containerized and the only thing I can see is it only may impact the umbrel-dashboard app since the nested dependencies contained the malicious package. Also, noting the node ran on Tor and the Exit relay of those IPs is few, so mostly, it will hardly get affected.

After all, since as on the security disclosure Umbrel mentioned using a bunch of 3rd party dependencies, this snipped quote is worth consideration for future Umbrel development:

While this is an attack with protest-driven motivations, it highlights a larger issue facing the software supply chain: the transitive dependencies in your code can have a huge impact on your security.

More info about the vuln: https://gist.github.com/MidSpike/f7ae3457420af78a54b38a31cc0c809c and Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine.

[1] https://security.snyk.io/vuln/SNYK-JS-NODEIPC-2426370

[cygan]

what do you think about all the apps that umbrel offers in its app store?
do any of you here use some of them and what about the security of the whole umbrel node? i can imagine that this might compromise the security a bit...
behaves then similarly as, if one would install on its mobile phone various apps...

[vv181]

what do you think about all the apps that umbrel offers in its app store?

I don't know too much about it, but according to their app framework repository page, each app is also containerized/isolated. Though it may doesn't make any sense considering the essential app which handles the low-level bitcoin apps or the whole system itself are built with security tradeoffs.

[cygan]

what do you think about all the apps that umbrel offers in its app store?

I don't know too much about it, but according to their app framework repository page, each app is also containerized/isolated. Though it may doesn't make any sense considering the essential app which handles the low-level bitcoin apps or the whole system itself are built with security tradeoffs.

are they now, in your opinion, safe on the umbrel node when you install them or should you have any major concerns?

[vv181]

what do you think about all the apps that umbrel offers in its app store?

I don't know too much about it, but according to their app framework repository page, each app is also containerized/isolated. Though it may doesn't make any sense considering the essential app which handles the low-level bitcoin apps or the whole system itself are built with security tradeoffs.

are they now, in your opinion, safe on the umbrel node when you install them or should you have any major concerns?

Yes, as above mentioned, Umbrel apps are going through a review and modification process by the Umbrel developers' to adjust the configuration/security concern.

And if we are referencing the vuln and somehow the apps contained the dependency, I believe as of now it won't do any major harm.

[cygan]

okay, i'll install a few apps tomorrow
can you maybe recommend a few apps from the umbrel app store that are a must have for every Bitcoin node?

[cygan]

okay, thank you.
have now decided for two apps and installed the 'mempool' and the 'tor snowflake proxy' app on my umbrel node

[cygan]

umbrel has again released a new version, which also includes two new apps.
one is the agora and the other is the sparkkiosk app.
to update your node to the new version just click on the update button in your umbrel webif.

Umbrel 0.4.17 is here with 2 brand new apps in the Umbrel App Store, updated apps, and more.

💰 Sell your files for #Bitcoin with Agora
🖨️ Create and print LNURL QR codes for your kiosk or café with sparkkiosk

Login to your Umbrel to update!

https://twitter.com/getumbrel/status/1511316135316439043

[DaveF]

Has anyone here gotten Umbrel to work on a Debian machine?
I followed their docs and had nothing but issues.
Using their pre-burned RPi image was perfect with no issues. But what should have been a quick Linux build would not start. No error, no output, no nothing....just a blinking cursor.

-Dave