Search the Community

Hi, I’m currently testing AirVPN/Eddie on Fedora 44 with KDE Plasma/Wayland and SELinux enforcing. I have run into two issues that seem Fedora/Linux specific. The main problem concerns the option “Don’t ask elevation every run.” If this option is disabled, Eddie works normally: I enter my password once, Network Lock works, and the VPN connection is established without problems. If I enable “Don’t ask elevation every run”, Eddie installs/uses the persistent systemd elevated helper, but after reboot Network Lock fails and Eddie is unable to connect. I already added the recommended firewalld setting: NftablesTableOwner=no to: /etc/firewalld/firewalld.conf and restarted firewalld. SELinux appears to be blocking the persistent elevated helper. Relevant AVC messages include: avc: denied { rename } for comm="eddie-cli-eleva" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=lnk_file There are also denials involving cleanup of Eddie/systemd-resolved files: avc: denied { unlink } for comm="eddie-cli-eleva" scontext=system_u:system_r:init_t:s0 tclass=file and nftables is denied access to the Network Lock backup file: avc: denied { getattr } for comm="nft" path="/var/lib/eddie-vpn/state/netlock_nftables_backup.nft" scontext=system_u:system_r:iptables_t:s0 tclass=file The Eddie state directory currently has root-only permissions: /var/lib/eddie-vpn/state drwx------ root root The visible Eddie error is essentially: Could not open file: /var/lib/eddie-vpn/state/netlock_nftables_backup.nft Permission denied I also tested the experimental Eddie 2.27 branch/version, but the behavior was unchanged. As soon as I disable “Don’t ask elevation every run” again and use the normal password elevation method, the VPN and Network Lock work correctly. This makes it look like the persistent systemd helper does not currently integrate correctly with Fedora’s SELinux policy. There is also a separate issue with KDE/Plasma: Eddie's icon in the taskbar does not work as expected. The “Minimize to the system tray” option is enabled in Eddie's settings, but when minimized, Eddie remains in the taskbar and does not minimize to the system tray. My environment: Fedora 44 KDE Plasma / Wayland SELinux: Enforcing firewalld: enabled NftablesTableOwner=no I have intentionally omitted account information, VPN server names, IP addresses, hostnames and other identifying information. I can provide additional sanitized logs if needed. Thanks

Description of Issue and Initial Testing: As the title states, whenever I have AirVPN with network lock enabled then starting Firefox takes an inordinately long time (for example, if I were to open the terminal and type "Firefox" it takes about 5-10 minutes before anything happens on my screen; it does not matter if I start Firefox from the GUI or terminal). The issue does not present itself when I try to open a chromium-based browser; it opens normally. It does not matter whether it is the first time launching Firefox or the nth time for n > 1. If I attempt to start Firefox, then the browser will still not open if I disconnect from the server. It will open the instant I turn off network lock. Startup speed is normal if I connect to a server without network lock enabled. Sometimes the problem intermittently comes and goes (bad days and good days) but most of the time it is there. I have tried adjusting the homepage in firefox and it made no difference, even if I set the homepage as simply a blank page. Conditions to reproduce: Use Eddie-UI on Fedora 40 (unsure if it depends on the distro/OS) Enable network lock Connect to any server Attempt to open Firefox or any Firefox-based browser. Investigating further, the following messages are printed in journalctl when the conditions above are satisfied (approximately alternating): I do not know enough about how networks are managed on gnu/linux to resolve this on my own, or make sense of this error. Nothing in the logs for Eddie seem to point to the issue either. I have attached the log from Eddie for completeness. It shows me connecting and disconnecting from various servers and attempting to open Firefox with network lock enabled. Additional info: OS: Fedora 40 (the issue is present on earlier versions of Fedora as well, at least since Fedora 35) Client: Eddie UI version 2.21.8 Firefox version: version 128.0, and present on earlier versions. Note: A separate issue that I will briefly mention here, in case it is relevant, is that on most WiFi networks I have a DNS leak visible in ipleak.net with AirVPN--with or without network lock. On a few networks this DNS leak is not present as long as network lock is enabled. When I say DNS leak I mean that ipleak.net shows the VPN DNS server as well as my router's DNS servers. Again, this may or may not be relevant. Eddie_20240715_004856.txt

Is there a SystemD Service or something similar available that I can use to get the VPN service to start on boot? I'm running Arch Linux

Hi, Where i look at this : Version 2.18.5 (Wed, 30 Oct 2019 15:03:32 +0000) [new] Linux - systemd service [change] Code cleanup for stable release [bugfix] Windows - Service installation issue in Windows 7 [bugfix] Windows - SSL connections [bugfix] Suppression of some unwanted elevated log [bugfix] Windows bug 'Do you want to reset Eddie to default settings?' [bugfix] Fix for occasional error on exit, 'Object reference not set to an instance of an object Where is the unit file .service file? I got my version (2.18.9) from the Debian/Unbutu repository and don't find any .service file installed. I also looked in the portable version (.tar.gz), and I don't find anything there either. There is something missing, or something I miss? Thanks

Hi. I am using this systemd unit file to start eddie-ui. It's working well at the startup of my server. But sometime, i want to stop it to make some tests. So, I stop it with a "systemctl stop airvpn.service". A kil SIGTERM signal is sent by systemd to the eddie to stop it, but it don't close gracefully, some errors are generated. Often after a stop, my server can't access the network, I can't restart Eddie and I have to reboot my server. There is a way another way stop an running eddie-ui batch process other than sending a SIGTERM signal? Thanks There is le log of what happening whene systemd stop my service : (i'm running on Unbutu 18) avr 18 14:43:13 systemd[1]: Stopping AirVPN Client (Eddie)... avr 18 14:43:13 eddie-ui[26906]: . 2020.04.18 14:43:13 - Above log line repeated 1 times more avr 18 14:43:13 eddie-ui[26906]: . 2020.04.18 14:43:13 - Received signal SIGTERM avr 18 14:43:13 eddie-ui[26906]: . 2020.04.18 14:43:13 - Shutdown in progress avr 18 14:43:13 eddie-ui[26906]: ! 2020.04.18 14:43:13 - Disconnecting avr 18 14:43:18 eddie-ui[26906]: F 2020.04.18 14:43:18 - Unexpected crash of elevated helper:Connection reset by peer avr 18 14:43:18 eddie-ui[26906]: . 2020.04.18 14:43:18 - Routes, removed a route previously added, xxx.xxx.xxx.xxx for gateway xxx.xxx.xxx.xxx avr 18 14:43:18 eddie-ui[26906]: W 2020.04.18 14:43:18 - Routes, add xx:xx:xx:xx:xx for gateway xx:xx:xx:xx:xx failed: Connection reset by peer avr 18 14:43:18 eddie-ui[26906]: . 2020.04.18 14:43:18 - Connection terminated. avr 18 14:43:18 eddie-ui[26906]: . 2020.04.18 14:43:18 - DNS of the system restored to original settings (Rename method) avr 18 14:43:18 eddie-ui[26906]: E 2020.04.18 14:43:18 - Fatal error occured, please contact Eddie support: Connection reset by peer - at Eddie.Core.ElevatedProcess.DoCommandSync (Eddie.Core.ElevatedProcess+Command c) [0x0002b] in <858605a5cb284b46ae78a1a5be9f3a18>:0 avr 18 14:43:18 eddie-ui[26906]: E 2020.04.18 14:43:18 - at Eddie.Core.ElevatedProcess.DoCommandSync (System.String command) [0x00017] in <858605a5cb284b46ae78a1a5be9f3a18>:0 avr 18 14:43:18 eddie-ui[26906]: E 2020.04.18 14:43:18 - at Eddie.Platform.Linux.Platform.OnDnsSwitchRestore () [0x00031] in <2ef95171729245d8aab83614036a9dd3>:0 avr 18 14:43:18 eddie-ui[26906]: E 2020.04.18 14:43:18 - at Eddie.Core.Threads.Session.OnRun () [0x00d7a] in <858605a5cb284b46ae78a1a5be9f3a18>:0 avr 18 14:43:18 eddie-ui[26906]: . 2020.04.18 14:43:18 - Flushing DNS avr 18 14:43:18 eddie-ui[26906]: [ERROR] FATAL UNHANDLED EXCEPTION: System.Exception: Connection reset by peer avr 18 14:43:18 eddie-ui[26906]: at Eddie.Core.ElevatedProcess.DoCommandSync (Eddie.Core.ElevatedProcess+Command c) [0x0002b] in <858605a5cb284b46ae78a1a5be9f3a18>:0 avr 18 14:43:18 eddie-ui[26906]: at Eddie.Core.ElevatedProcess.DoCommandSync (System.String command, System.String key1, System.String val1) [0x00024] in <858605a5cb284b46ae78a1a5be9f3a18>:0 avr 18 14:43:18 eddie-ui[26906]: at Eddie.Platform.Linux.Platform.FlushDNS () [0x0002e] in <2ef95171729245d8aab83614036a9dd3>:0 avr 18 14:43:18 eddie-ui[26906]: at Eddie.Core.Threads.Session.OnRun () [0x00fd6] in <858605a5cb284b46ae78a1a5be9f3a18>:0 avr 18 14:43:18 eddie-ui[26906]: at Eddie.Core.Thread.DoRun () [0x00000] in <858605a5cb284b46ae78a1a5be9f3a18>:0 avr 18 14:43:18 eddie-ui[26906]: at System.Threading.ThreadHelper.ThreadStart_Context (System.Object state) [0x00017] in <8f2c484307284b51944a1a13a14c0266>:0 avr 18 14:43:18 eddie-ui[26906]: at System.Threading.ExecutionContext.RunInternal (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state, System.Boolean preserveSyncCtx) [0x0008d] in <8f2c484307284b51944a1a13a14c0266>:0 avr 18 14:43:18 eddie-ui[26906]: at System.Threading.ExecutionContext.Run (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state, System.Boolean preserveSyncCtx) [0x00000] in <8f2c484307284b51944a1a13a14c0266>:0 avr 18 14:43:18 eddie-ui[26906]: at System.Threading.ExecutionContext.Run (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state) [0x00031] in <8f2c484307284b51944a1a13a14c0266>:0 avr 18 14:43:18 eddie-ui[26906]: at System.Threading.ThreadHelper.ThreadStart () [0x0000b] in <8f2c484307284b51944a1a13a14c0266>:0 avr 18 14:43:18 systemd[1]: Stopped AirVPN Client (Eddie).

Hi, I gave AirVPN a try with a 1 euro trial. I actually try to switch from PIA (provateinternetaccess.com) for some reason. I'm using a Raspberry Pi (SSH access, no GUI). Downloading an openvpn conf file was flawless and wget http://ipinfo.io/ip -qO - gives me a suited IP. Fine. My probem is : Deluge does no more start a boot, while the same config used to work fine with PIA. I set up Deluge as in the official Deluge systemd documentation : http://dev.deluge-torrent.org/wiki/UserGuide/Service/systemd . So as to bind Deluge to the VPN connection, in your openvpn file, I added route-up /etc/openvpn/route-up.sh down /etc/openvpn/down.sh with route-up.sh beeing #!/bin/sh iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE systemctl start deluged and down.sh beeing #!/bin/sh iptables -t nat -D POSTROUTING -o tun0 -j MASQUERADE systemctl stop deluged What's wrong with that ? (it was fine with PIA)