Arch Linux User Repository

Nice, this time it works for me (using Manjaro)! I just installed the package and had to start the perimeter81helper service:

systemctl start perimeter81helper

thx!

Added the following into perimeter81helper.service under [Service] section and was able to use it without problems.

ProtectHome=true
ProtectSystem=true
InaccessiblePaths=-/media -/mnt

What it does: hides user home folders from services; mounts /usr as read only; hides any other mounted disks

Got the same problem as other user had with 100% CPU of process named p81daemonhelper after starting service on this version. Started strace on it and looks like this piece of code tries to lstat my whole filesystem. I have a BTRFS with snapshots so I have a lot of files and since service is launched as root - it tries to enumerate all of that, eats CPU and doesn't allow to make connections. We need to somehow restrict perimeter services permissions - maybe launch under a restricted user?

GUI displayed after

# systemctl start perimeter81helper

I have not executed /opt/Perimeter81/after-install.sh, briefly checked content.

It copies binaries

cp /opt/Perimeter81/artifacts/daemon-creator /usr/bin/p81-helper-daemon-creator

that monitors sleep /usr/lib/systemd/system-sleep/perimeter81

#!/bin/sh
case $1/$2 in
  post/*)
    /usr/bin/p81-helper-daemon-creator system-resume
    ;;
  pre/*)
    /usr/bin/p81-helper-daemon-creator system-sleep
    ;;
esac

and network /etc/NetworkManager/dispatcher.d/50-perimeter81:

#!/bin/bash -e
if [[ $1 == "tun0" ]] || [[ $1 == "ipsec0" ]] || [[ $1 == "p81" ]]; then 
  exit 0
fi

logger -s "P81 INTERFACE $1 $2"

case "$2" in
  up)
    /usr/bin/p81-helper-daemon-creator network-interface-up
    ;;
  down)
    /usr/bin/p81-helper-daemon-creator network-interface-down
    ;;
esac

And it adds wireguard kernel modules for some old kernels (3.10, 4.18). These modules definitely not needed for Arch:

$ find /lib/modules -iname wireguard
/lib/modules/6.12.10-arch1-1/kernel/drivers/net/wireguard

Update required

-pkgver=9.0.1.843
+pkgver=10.0.1.885

Peremiter downloads list sha256 checksum

10.0.1.885
fbc109d03d1e65e1e20fb4f1f6b590ea0fa596b4f86a701ddf88b06e97e91c89

We should use it:

-md5sums=(
-  '54711cd4f1dd4927535e76b3ee5e9c41'
-  '089b611fb1ecbd3e39e2d2d391743205'
-  '64c25ccc5446c93c6073a418f664d3d5'
-)
+sha256sums=('fbc109d03d1e65e1e20fb4f1f6b590ea0fa596b4f86a701ddf88b06e97e91c89'
+            'c1fa2c85ae4e58cb2e5b1058f4f68ca43ca8e295e9159f0e14ebcedc97e27f89'
+            'c505b227d3f2222305800c16805f29b8da3bf841bf71df36674a695528bd0731')

Hello,

my perimeter tells me, 10.0.1.885 is the new version.

But the update-Button does not work.

Can you give me some hints on the topic please?

I am getting the same error like @pliavi after calling "after-install.sh":

...
Installing kmod-wireguard...
rm: cannot remove '/etc/depmod.d/kmod-wireguard.conf': Permission denied
touch: cannot touch '/etc/depmod.d/kmod-wireguard.conf': Permission denied
override wireguard * weak-updates/wireguard
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
Done installing kmod-wireguard...

No idea, how to fixe that missing script "weak-modules".

@lukashenko: What exactly did you do? Just calling the demon as you said, does not change at least anything on my side :-(

I'm trying to make it work without success, the app does not open, the process is running but nothing appears in the screen. No error in the logs, but if I try to run the after-install.sh I get this:

...
override wireguard * weak-updates/wireguard
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
Done installing kmod-wireguard...

Tried to install kmod, but still happening.

For those looking for an answer: I just made it work by running the ExecStart command:

/opt/Perimeter81/artifacts/daemon -f "artifacts/daemon" -l "/var/log/perimeter81helper.log" -e "/var/log/perimeter81helper-error.log" --env "/opt/Perimeter81/artifacts"

Hello there!

What are the steps as of today to get this working?

I've tried: yay -S peritmeter81 && rm -rf /opt/Perimeter81 with no success.

When it comes to my debugging efforts:

1) The perimeter81 command executed on the terminal is seen as an unknown command.

2) I found a perimeter81_agent.sh file was created. When I run cat perimeter81_agent.sh there's only this text written into the file: "404: Not Found".

Am I missing anything? I'm using Cinnamon + Dinit in case it makes any difference.

I could use a place where to check some logs if that's possible.