fix: Add NetBird CLI to core developer role

Install NetBird CLI for remote console access via package managers:
- Fedora: YUM repository (pkgs.netbird.io/yum)
- Ubuntu: APT repository (pkgs.netbird.io/debian)
- macOS: Homebrew tap (netbirdio/tap/netbird)

CLI only - not VPN/UI components.

Author: Derek

ansible/roles/dfe_developer_core/tasks/main.yml

@@ -54,6 +54,11 @@
     file: openvpn.yml
   tags: ['openvpn', 'vpn']
 
+- name: Install NetBird CLI
+  ansible.builtin.include_tasks:
+    file: netbird.yml
+  tags: ['netbird', 'remote']
+
 - name: Install Claude Code CLI
   ansible.builtin.include_tasks:
     file: claude.yml

ansible/roles/dfe_developer_core/tasks/netbird.yml

@@ -0,0 +1,83 @@
+---
+# NetBird CLI installation (for remote console access)
+# CLI only - not the VPN/UI components
+
+# ============================================================================
+# FEDORA - Add YUM repository and install
+# ============================================================================
+
+- name: Install NetBird CLI (Fedora)
+  block:
+    - name: Add NetBird repository
+      ansible.builtin.yum_repository:
+        name: netbird
+        description: NetBird
+        baseurl: https://pkgs.netbird.io/yum/
+        enabled: true
+        gpgcheck: false
+        gpgkey: https://pkgs.netbird.io/yum/repodata/repomd.xml.key
+        repo_gpgcheck: true
+
+    - name: Install NetBird CLI
+      ansible.builtin.dnf:
+        name: netbird
+        state: present
+
+  when: ansible_distribution == 'Fedora'
+
+# ============================================================================
+# UBUNTU - Add APT repository and install
+# ============================================================================
+
+- name: Install NetBird CLI (Ubuntu)
+  block:
+    - name: Download NetBird GPG key
+      ansible.builtin.get_url:
+        url: https://pkgs.netbird.io/debian/public.key
+        dest: /tmp/netbird.key
+        mode: '0644'
+
+    - name: Convert NetBird GPG key to keyring format
+      ansible.builtin.shell: |
+        gpg --dearmor < /tmp/netbird.key > /usr/share/keyrings/netbird-archive-keyring.gpg
+      args:
+        creates: /usr/share/keyrings/netbird-archive-keyring.gpg
+
+    - name: Remove temporary key file
+      ansible.builtin.file:
+        path: /tmp/netbird.key
+        state: absent
+
+    - name: Add NetBird repository
+      ansible.builtin.apt_repository:
+        repo: "deb [signed-by=/usr/share/keyrings/netbird-archive-keyring.gpg] https://pkgs.netbird.io/debian stable main"
+        filename: netbird
+        state: present
+
+    - name: Install NetBird CLI
+      ansible.builtin.apt:
+        name: netbird
+        state: present
+        update_cache: true
+
+  when: ansible_distribution == 'Ubuntu'
+
+# ============================================================================
+# macOS - Install via Homebrew
+# ============================================================================
+
+- name: Install NetBird CLI (macOS)
+  block:
+    - name: Tap NetBird Homebrew repository
+      community.general.homebrew_tap:
+        name: netbirdio/tap
+        state: present
+
+    - name: Install NetBird CLI
+      community.general.homebrew:
+        name: netbirdio/tap/netbird
+        state: present
+
+  become: false
+  environment: "{{ homebrew_env }}"
+  when: ansible_distribution == 'MacOSX'

ansible/roles/dfe_developer_core/tasks/verify.yml

@@ -83,6 +83,21 @@
   failed_when: verify_openvpn.rc != 0
   when: ansible_distribution == 'MacOSX'
 
+- name: Verify NetBird CLI (Linux)
+  ansible.builtin.command: netbird version
+  register: verify_netbird
+  changed_when: false
+  failed_when: verify_netbird.rc != 0
+  when: ansible_distribution in ['Fedora', 'Ubuntu']
+
+- name: Verify NetBird CLI (macOS)
+  ansible.builtin.command: netbird version
+  environment: "{{ homebrew_env }}"
+  register: verify_netbird
+  changed_when: false
+  failed_when: verify_netbird.rc != 0
+  when: ansible_distribution == 'MacOSX'
+
 - name: Verify Claude Code CLI
   ansible.builtin.command: "{{ dfe_user_home }}/.npm-global/bin/claude --version"
   register: verify_claude
@@ -130,6 +145,7 @@
       - semantic-release: {{ verify_semrel.stdout | default('installed') }}
       - Linear CLI: {{ verify_linear.stdout | default('installed') }}
       - OpenVPN: {{ verify_openvpn.stdout | default('installed') }}
+      - NetBird CLI: {{ verify_netbird.stdout | default('installed') }}
       - Claude Code CLI: {{ verify_claude.stdout | default('installed') }}
       - Gitleaks: {{ verify_gitleaks.stdout | default('installed') }}
       - act: {{ verify_act.stdout | default('installed') }}