Linux: AirVPN Suite 2.0.0 preview available

[Staff 10063]

On 5/31/2024 at 12:01 PM, 183aTr78f9o said:

After 7 days (20+ suspend/resume), I couldn't reproduce the problem with:

ExecStartPre=/usr/bin/sleep 5

Hello!

Can you please test the new beta 2? The problem you reported has been addressed through a different approach. The "sleep 5" solution is aleatory and relatively unsafe in our opinion so we decided for another solution. Feel free to keep us posted!

Kind regards
 

[183aTr78f9o 21]

3 hours ago, Staff said:

Hello!

Can you please test the new beta 2? The problem you reported has been addressed through a different approach. The "sleep 5" solution is aleatory and relatively unsafe in our opinion so we decided for another solution. Feel free to keep us posted!

Kind regards
 

Hello,

I've been using beta 2 for 4 days now. Can confirm that the issue seems to be fixed. I suspended/resumed 5 times since then and bluetit always reconnected successfully after resuming. This is of course without

ExecStartPre=/usr/bin/sleep 5

since /etc/systemd/system/bluetit-resume.service was overwritten after updating to beta 2. I ran
 

systemctl daemon-reload

and even rebooted the machine just to make sure that it was no longer used.

Will keep testing and report back if the issue occurs again, so far so good.

Thanks.

[fsy 36]

On 12/19/2024 at 10:29 AM, Staff said:

Hello!

Please test the new beta 2. This somehow devised workaround should be no more necessary, not even on Wayland based environments, not even for browser. Only exception is Konqueror, that defies all the work by airsu and cuckoo. When Konqueror is launched, it always asks the KIO manager for a fork of the initial instance. Just in case you want to run Konqueror as a browser whose traffic must be outside the VPN tunnel, please take care to kill any previous instance before starting Konqueror through cuckoo. As an alternative for a Qt framework based browser that doesn't pose this issue, Falkon can be considered, as it does not depend on KIO.

Kind regards
 

All good so far on Fedora!

[colorman 27]

Now running Open Suse Leap 15.6 and getting this error when installing.
Whether I try the Legacy or the 2.0.0 version.

Wachtwoord:
localhost:~ # journalctl -xeu bluetit.service
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ The process /sbin/bluetit could not be executed and failed.
░░  
░░ The error number returned by this process is 8.
Jan 06 14:33:20 localhost systemd[1]: bluetit.service: Control process exited, code=exited, status=203/EXEC
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ An ExecStart= process belonging to unit bluetit.service has exited.
░░  
░░ The process' exit code is 'exited' and its exit status is 203.
Jan 06 14:33:20 localhost systemd[1]: bluetit.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ The unit bluetit.service has entered the 'failed' state with result 'exit-code'.
Jan 06 14:33:20 localhost systemd[1]: Failed to start AirVPN Bluetit Daemon.
░░ Subject: A start job for unit bluetit.service has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ A start job for unit bluetit.service has finished with a failure.
░░  
░░ The job identifier is 12154 and the job result is failed.
Jan 06 14:42:14 localhost systemd[1]: Starting AirVPN Bluetit Daemon...
░░ Subject: A start job for unit bluetit.service has begun execution
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ A start job for unit bluetit.service has begun execution.
░░  
░░ The job identifier is 14274.
Jan 06 14:42:14 localhost (bluetit)[16147]: bluetit.service: Failed to execute /sbin/bluetit: Exec format error
Jan 06 14:42:14 localhost (bluetit)[16147]: bluetit.service: Failed at step EXEC spawning /sbin/bluetit: Exec format error
░░ Subject: Process /sbin/bluetit could not be executed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ The process /sbin/bluetit could not be executed and failed.
░░  
░░ The error number returned by this process is 8.
Jan 06 14:42:14 localhost systemd[1]: bluetit.service: Control process exited, code=exited, status=203/EXEC
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ An ExecStart= process belonging to unit bluetit.service has exited.
░░  
░░ The process' exit code is 'exited' and its exit status is 203.
Jan 06 14:42:14 localhost systemd[1]: bluetit.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ The unit bluetit.service has entered the 'failed' state with result 'exit-code'.
Jan 06 14:42:14 localhost systemd[1]: Failed to start AirVPN Bluetit Daemon.
░░ Subject: A start job for unit bluetit.service has failed
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░  
░░ A start job for unit bluetit.service has finished with a failure.
lines 355-418/420 100%


 

localhost:/thuis/Downloads/AirVPN-Suite # systemctl status bluetit.service
× bluetit.service - AirVPN Bluetit Daemon
    Loaded: loaded (/etc/systemd/system/bluetit.service; enabled; preset: disabled)
    Active: failed (Result: exit-code) since Mon 2025-01-06 14:33:20 CET; 15s ago
  Duration: 28min 35.193s
   Process: 14726 ExecStart=/sbin/bluetit (code=exited, status=203/EXEC)
       CPU: 1ms

Jan 06 14:33:20 localhost systemd[1]: Starting AirVPN Bluetit Daemon...
Jan 06 14:33:20 localhost (bluetit)[14726]: bluetit.service: Failed to execute /sbin/bluetit: Exec format error
Jan 06 14:33:20 localhost (bluetit)[14726]: bluetit.service: Failed at step EXEC spawning /sbin/bluetit: Exec format error
Jan 06 14:33:20 localhost systemd[1]: bluetit.service: Control process exited, code=exited, status=203/EXEC
Jan 06 14:33:20 localhost systemd[1]: bluetit.service: Failed with result 'exit-code'.
Jan 06 14:33:20 localhost systemd[1]: Failed to start AirVPN Bluetit Daemon
 

[Staff 10063]

1 hour ago, colorman said:

Jan 06 14:33:20 localhost (bluetit)[14726]: bluetit.service: Failed at step EXEC spawning /sbin/bluetit: Exec format error

Hello!

It looks like an architecture error. Can you please check whether you have installed the correct package? Please make sure you download the proper package for your OpenSUSE architecture (x86-64, aarch64 etc.).

Kind regards
 

[colorman 27]

1 hour ago, Staff said:

Hello!

It looks like an architecture error. Can you please check whether you have installed the correct package? Please make sure you download the proper package for your OpenSUSE architecture (x86-64, aarch64 etc.).

Kind regards
 

It works, first removed the old package.
Then installed it.
But I use it as I am used to, via the console with (allowuservpnprofiles on)
I find all the new options too difficult unfortunately.
Will try soon.

Thanks Colorman

[tgbdPWJH2f8M 0]

I had this "ERROR: Cannot allow system DNS to pass through network filter" error message. 

I changed the /etc/airvpn/bluetit.rc setting `networklockpersist` from `off` to `on`, and it worked fine.  I have ufw installed.

Linux Mint 21.3 Virginia
Linux 6.8.0-50-generic #51~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC
x86_64

 

[Staff 10063]

1 hour ago, tgbdPWJH2f8M said:

I had this "ERROR: Cannot allow system DNS to pass through network filter" error message. 

I changed the /etc/airvpn/bluetit.rc setting `networklockpersist` from `off` to `on`, and it worked fine.  I have ufw installed.

Linux Mint 21.3 Virginia
Linux 6.8.0-50-generic #51~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC
x86_64

 

Hello!

After the problem occurred, please send us the output of:

sudo journalctl | grep bluetit

If you wish to test with ufw disabled:

sudo ufw disable

Kind regards


 

[shaunography 0]

The Airvpn Suite installer currently fails on fedora atomic spins like Silverblue because the /sbin directory is not writeable. Is there a recommended way to install it on such distros? (updated systemd unit file or somesuch)

Also it would be good to package this up for Homebrew, as this would also work on atomic desktops like Silverblue.

[leechko 0]

Tried to migrate from a working 1.3.0 install by simply installing 2.0.0 beta 2 over it, following the same installation steps (answered all prompts of the installer 'yes', except for airvpn user creation), then modified '/etc/airvpn/bluetit.rc' to switch from 'openvpn' to 'wireguard' (added a single line for 'airvpntype').

To my surprise, this worked immediately (didn't even have to restart bluetit). I had a working wireguard connection for about an hour. However, after rebooting this VM (Lubuntu 22.04.1), I could no longer connect. Tried switching back to 'openvpn' to no avail. I reverted to 1.3.0 by reinstalling it and 'openvpn' works again as expected.

I can provide the logs during the entire process described above, but the following happened after that first reboot with 2.0.0 beta 2 installed (and the same happens after each bluetit.service restart):
 

Quote

jan 28 22:09:20 lubuntu bluetit[721]: Starting Bluetit - AirVPN WireGuard/OpenVPN3 Service 2.0.0 beta 2 - 12 December 2024
jan 28 22:09:20 lubuntu bluetit[721]: OpenVPN core 3.11 AirVPN (20240912) linux x86_64 64-bit
jan 28 22:09:20 lubuntu bluetit[721]: Copyright (C) 2012- OpenVPN Inc. All rights reserved.
jan 28 22:09:20 lubuntu bluetit[721]: SSL Library: OpenSSL 3.0.2 15 Mar 2022
jan 28 22:09:20 lubuntu bluetit[721]: WireGuard Client 1.0.0 AirVPN Linux x86_64 64-bit
jan 28 22:09:20 lubuntu bluetit[738]: Bluetit daemon started with PID 738
jan 28 22:09:20 lubuntu bluetit[738]: External network is reachable via IPv4 gateway 192.168.1.1 through interface ens33
jan 28 22:09:21 lubuntu bluetit[738]: Successfully connected to D-Bus
jan 28 22:09:21 lubuntu bluetit[738]: Reading run control directives from file /etc/airvpn/bluetit.rc
jan 28 22:09:21 lubuntu bluetit[738]: IPv6 is available in this system
jan 28 22:09:21 lubuntu bluetit[738]: Default VPN type for AirVPN connections is set to WireGuard
jan 28 22:09:21 lubuntu bluetit[738]: Bluetit successfully initialized and ready
jan 28 22:09:22 lubuntu bluetit[738]: Requesting network IP and country to AirVPN ipleak.net via secure connection
jan 28 22:09:32 lubuntu bluetit[738]: ERROR: Cannot detect system location: Cannot resolve ipleak.net
jan 28 22:09:32 lubuntu bluetit[738]: Starting AirVPN WireGuard boot connection
jan 28 22:09:32 lubuntu bluetit[738]: AirVPN Manifest updater thread started
jan 28 22:09:32 lubuntu bluetit[738]: Default AirVPN Manifest update interval is 15 minutes
jan 28 22:09:32 lubuntu bluetit[738]: AirVPN Manifest update suspended: AirVPN boot connection initialization in progress
jan 28 22:09:32 lubuntu bluetit[738]: Trying to load the local instance of AirVPN Manifest
jan 28 22:09:32 lubuntu bluetit[738]: Network filter and lock are using nftables
jan 28 22:09:32 lubuntu bluetit[738]: Kernel module nf_tables is already loaded
jan 28 22:09:32 lubuntu bluetit[738]: AirVPN Manifest successfully retrieved from local instance
jan 28 22:09:32 lubuntu bluetit[738]: Network filter successfully initialized
jan 28 22:09:32 lubuntu bluetit[738]: Private network is allowed to pass the network filter
jan 28 22:09:43 lubuntu bluetit[738]: Session network filter and lock successfully enabled. Private network is allowed.
jan 28 22:09:43 lubuntu bluetit[738]: Adding AirVPN bootstrap server *************/32 to network filter
jan 28 22:09:43 lubuntu bluetit[738]: Adding AirVPN bootstrap server *************/32 to network filter
jan 28 22:09:43 lubuntu bluetit[738]: Adding AirVPN bootstrap server *************/32 to network filter
jan 28 22:09:43 lubuntu bluetit[738]: Adding AirVPN bootstrap server *************/32 to network filter
jan 28 22:09:44 lubuntu bluetit[738]: Adding AirVPN bootstrap server *************/128 to network filter
jan 28 22:09:44 lubuntu bluetit[738]: Adding AirVPN bootstrap server *************/32 to network filter
jan 28 22:09:44 lubuntu bluetit[738]: Adding AirVPN bootstrap server bootme.org/32 to network filter
jan 28 22:09:44 lubuntu bluetit[738]: /sbin/nft - Unknown error 256 (stderr: Error: Could not resolve hostname: Name or service not known
jan 28 22:09:44 lubuntu bluetit[738]: Updating AirVPN Manifest
jan 28 22:09:44 lubuntu bluetit[738]: ERROR: cannot add AirVPN bootstrap server bootme.org/32 to the network filter
jan 28 22:09:44 lubuntu bluetit[738]: ERROR: Cannot allow AirVPN bootstrap servers to pass through the network filter
jan 28 22:09:44 lubuntu bluetit[738]: Logging in AirVPN user *************
jan 28 22:09:44 lubuntu bluetit[738]: Trying connection to AirVPN bootstrap server at http://*************
jan 28 22:09:44 lubuntu bluetit[738]: Trying connection to AirVPN bootstrap server at http://*************
jan 28 22:09:44 lubuntu bluetit[738]: ERROR: Cannot detect user location: Please use "country" directive in /etc/airvpn/bluetit.rc
jan 28 22:09:44 lubuntu bluetit[738]: AirVPN user ************* successfully logged in
jan 28 22:09:44 lubuntu bluetit[738]: Selected user key: Default
jan 28 22:09:44 lubuntu bluetit[738]: Starting WireGuard connection to AirVPN server Caelum, Vienna (Austria)
jan 28 22:09:44 lubuntu bluetit[738]: Local interface lo - IPv4 127.0.0.1IPv6 ::1
jan 28 22:09:44 lubuntu bluetit[738]: Local interface ens33 - IPv4 192.168.1.***IPv6 *************
jan 28 22:09:44 lubuntu bluetit[738]: Default IPv4 gateway via 192.168.1.1 dev ens33
jan 28 22:09:44 lubuntu bluetit[738]: Starting WireGuard boot connection
jan 28 22:09:45 lubuntu bluetit[738]: AirVPN Manifest successfully retrieved from server
jan 28 22:09:45 lubuntu bluetit[738]: AirVPN Manifest update interval is now set to 30 minutes
jan 28 22:09:45 lubuntu bluetit[738]: Successfully loaded kernel module wireguard
jan 28 22:09:45 lubuntu bluetit[738]: WireGuard client successfully created and initialized.
jan 28 22:09:45 lubuntu bluetit[738]: Network lock set to 'nftables' by Bluetit policy
jan 28 22:09:45 lubuntu bluetit[738]: Allowing system DNS ************* to pass through the network filter
jan 28 22:09:48 lubuntu bluetit[738]: WireGuard Connect thread exception: /sbin/nft - Unknown error 256 (stderr: Error: Could not resolve hostname: Name or service not known
jan 28 22:09:48 lubuntu bluetit[738]: WireGuard is currently busy in a pending process. Connection cannot be stopped at this moment.
jan 28 22:09:48 lubuntu bluetit[738]: Logging out AirVPN user *************
jan 28 22:09:49 lubuntu bluetit[738]: Session network filter and lock are now disabled
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (1/10)
jan 28 22:09:49 lubuntu bluetit[738]: Kernel module wireguard is already loaded
jan 28 22:09:49 lubuntu bluetit[738]: WireGuard client successfully created and initialized.
jan 28 22:09:49 lubuntu bluetit[738]: Network lock set to 'nftables' by Bluetit policy
jan 28 22:09:49 lubuntu bluetit[738]: WireGuard is currently busy in a pending process. Connection cannot be started at this moment.
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (2/10)
jan 28 22:09:49 lubuntu bluetit[738]: ERROR: VPN is already connected and running. (WireGuard) Start request aborted.
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (3/10)
jan 28 22:09:49 lubuntu bluetit[738]: ERROR: VPN is already connected and running. (WireGuard) Start request aborted.
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (4/10)
jan 28 22:09:49 lubuntu bluetit[738]: ERROR: VPN is already connected and running. (WireGuard) Start request aborted.
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (5/10)
jan 28 22:09:49 lubuntu bluetit[738]: ERROR: VPN is already connected and running. (WireGuard) Start request aborted.
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (6/10)
jan 28 22:09:49 lubuntu bluetit[738]: ERROR: VPN is already connected and running. (WireGuard) Start request aborted.
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (7/10)
jan 28 22:09:49 lubuntu bluetit[738]: ERROR: VPN is already connected and running. (WireGuard) Start request aborted.
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (8/10)
jan 28 22:09:49 lubuntu bluetit[738]: ERROR: VPN is already connected and running. (WireGuard) Start request aborted.
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'
jan 28 22:09:49 lubuntu bluetit[738]: Retrying VPN Connection (9/10)
jan 28 22:09:49 lubuntu bluetit[738]: ERROR: VPN is already connected and running. (WireGuard) Start request aborted.
jan 28 22:09:49 lubuntu bluetit[738]: Sending event 'event_end_of_session'

What am I doing wrong? Edited ... by leechko

[Staff 10063]

7 hours ago, leechko said:

What am I doing wrong?

Hello!

Perhaps nothing wrong, this looks like a Bluetit bug which causes a critical error to the latest nft version (so it went unnoticed with the previous nft versions). If this is the problem we suspect, then it has been fixed and the new, imminent beta 3 will include the patch. As soon as Suite 2.0.0 beta 3 is out please test it and let us know whether it solves the problem.

If you need urgently to run AirVPN Suite 2.0.0 beta 2, you should be able to fix the issue by editing your /etc/hosts file (root privileges required) and adding the following line:
82.196.3.205  bootme.org

Thank you very much for your tests!

Kind regards
 

[leechko 0]

'/sbin/nft --version' gives me 'nftables v1.0.2 (Lester Gooch)', a Feb 2022 release, according to project's website. Latest is v1.1.1, Oct 2024.

I think I'm out of luck on this one, but I'll try the new release when it comes out anyway.

[Staff 10063]

30 minutes ago, leechko said:

'/sbin/nft --version' gives me 'nftables v1.0.2 (Lester Gooch)', a Feb 2022 release, according to project's website. Latest is v1.1.1, Oct 2024.

I think I'm out of luck on this one, but I'll try the new release when it comes out anyway.

Hello!

It is possible that we are interpreting the problem incorrectly. However, by editing the /etc/hosts file you should be able to resolve the issue. The next beta 3 is expected to be out in a few days.

Kind regards