mirror of
https://github.com/davegallant/davegallant.github.io.git
synced 2025-08-05 08:13:40 +00:00
270 lines
12 KiB
HTML
270 lines
12 KiB
HTML
<!DOCTYPE html>
|
|
<html><head>
|
|
<meta charset="utf-8" />
|
|
<meta http-equiv="X-UA-Compatible" content="IE=edge"><title>AppGate SDP on Arch Linux - davegallant</title><link rel="icon" type="image/png" href=https://davegallant.ca/favicon.ico /><meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<meta name="description" content="AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP 4.3.2 working on Arch Linux." />
|
|
<meta property="og:image" content=""/>
|
|
<meta property="og:title" content="AppGate SDP on Arch Linux" />
|
|
<meta property="og:description" content="AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP 4.3.2 working on Arch Linux." />
|
|
<meta property="og:type" content="article" />
|
|
<meta property="og:url" content="/blog/2020/03/16/appgate-sdp-on-arch-linux/" /><meta property="article:section" content="post" />
|
|
<meta property="article:published_time" content="2020-03-16T22:00:15-04:00" />
|
|
<meta property="article:modified_time" content="2020-03-16T22:00:15-04:00" />
|
|
|
|
<meta name="twitter:card" content="summary"/>
|
|
<meta name="twitter:title" content="AppGate SDP on Arch Linux"/>
|
|
<meta name="twitter:description" content="AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP 4.3.2 working on Arch Linux."/>
|
|
<script src="https://cdn.jsdelivr.net/npm/feather-icons/dist/feather.min.js"></script>
|
|
<link href="https://fonts.googleapis.com/css2?family=IBM+Plex+Mono:ital,wght@1,500&display=swap" rel="stylesheet">
|
|
<link href="https://fonts.googleapis.com/css2?family=Fira+Sans&display=swap" rel="stylesheet">
|
|
<link href="https://fonts.googleapis.com/css?family=Roboto+Mono" rel="stylesheet">
|
|
|
|
|
|
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
|
|
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
|
|
|
|
|
|
|
|
|
|
<script type="text/javascript"
|
|
src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.1/MathJax.js?config=TeX-AMS-MML_HTMLorMML">
|
|
</script>
|
|
|
|
|
|
<script type="text/x-mathjax-config">
|
|
MathJax.Hub.Config({
|
|
tex2jax: {
|
|
inlineMath: [['$','$'], ['\\(','\\)']],
|
|
displayMath: [['$$','$$'], ['\[','\]']],
|
|
processEscapes: true,
|
|
processEnvironments: true,
|
|
skipTags: ['script', 'noscript', 'style', 'textarea', 'pre'],
|
|
TeX: { equationNumbers: { autoNumber: "AMS" },
|
|
extensions: ["AMSmath.js", "AMSsymbols.js"] }
|
|
}
|
|
});
|
|
</script>
|
|
|
|
|
|
|
|
|
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/katex@0.15.2/dist/katex.min.css">
|
|
<script defer src="https://cdn.jsdelivr.net/npm/katex@0.15.2/dist/katex.min.js"></script>
|
|
<script defer src="https://cdn.jsdelivr.net/npm/katex@0.15.2/dist/contrib/auto-render.min.js" onload="renderMathInElement(document.body);"></script>
|
|
|
|
|
|
<script>
|
|
document.addEventListener("DOMContentLoaded", function() {
|
|
renderMathInElement(document.body, {
|
|
delimiters: [
|
|
{left: "$$", right: "$$", display: true},
|
|
{left: "$", right: "$", display: false}
|
|
]
|
|
});
|
|
});
|
|
</script>
|
|
|
|
|
|
|
|
|
|
|
|
<link rel="stylesheet" type="text/css" href="/css/custom.2e59ff60a2d9c7e42e3c1af2aff0ba627da46f910a234867e98d178eb05c87dc.css">
|
|
|
|
</head>
|
|
<body>
|
|
<div class="content"><header>
|
|
<div class="main">
|
|
<a href="/">davegallant</a>
|
|
</div>
|
|
<nav>
|
|
|
|
<a href="/">Home</a>
|
|
|
|
<a href="/post">All posts</a>
|
|
|
|
<a href="/index.xml">RSS</a>
|
|
|
|
<a href="/tags">Tags</a>
|
|
|
|
<a href="/about">About</a>
|
|
|
|
| <span id="dark-mode-toggle" onclick="toggleTheme()"></span>
|
|
<script src="/js/themetoggle.js"></script>
|
|
|
|
</nav>
|
|
</header>
|
|
|
|
<main>
|
|
<article>
|
|
<div class="title">
|
|
<h1 class="title">AppGate SDP on Arch Linux</h1>
|
|
<div class="meta">Posted on Mar 16, 2020</div>
|
|
</div>
|
|
|
|
|
|
<section class="body"><p>AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP <code>4.3.2</code> working on Arch Linux.</p>
|
|
<p>Depending on the AppGate SDP Server that is running, you may require a client that is more recent than the latest package on <a href="https://aur.archlinux.org/packages/appgate-sdp/">AUR</a>.
|
|
As of right now, the latest AUR is <code>4.2.2-1</code>.</p>
|
|
<p>These steps highlight how to get it working with <code>Python3.8</code> by making a 1 line modification to AppGate source code.</p>
|
|
<h1 id="packaging">Packaging</h1>
|
|
<p>We already know the community package is currently out of date, so let’s clone it:</p>
|
|
<pre><code class="language-shell">git clone https://aur.archlinux.org/appgate-sdp.git
|
|
cd appgate-sdp
|
|
</code></pre>
|
|
<p>You’ll likely notice that the version is not what we want, so let’s modify the <code>PKGBUILD</code> to the following:</p>
|
|
<pre><code class="language-shell"># Maintainer: Pawel Mosakowski <pawel at mosakowski dot net>
|
|
pkgname=appgate-sdp
|
|
conflicts=('appgate-sdp-headless')
|
|
pkgver=4.3.2
|
|
_download_pkgver=4.3
|
|
pkgrel=1
|
|
epoch=
|
|
pkgdesc="Software Defined Perimeter - GUI client"
|
|
arch=('x86_64')
|
|
url="https://www.cyxtera.com/essential-defense/appgate-sdp/support"
|
|
license=('custom')
|
|
# dependecies calculated by namcap
|
|
depends=('gconf' 'libsecret' 'gtk3' 'python' 'nss' 'libxss' 'nodejs' 'dnsmasq')
|
|
source=("https://sdpdownloads.cyxtera.com/AppGate-SDP-${_download_pkgver}/clients/${pkgname}_${pkgver}_amd64.deb"
|
|
"appgatedriver.service")
|
|
options=(staticlibs)
|
|
prepare() {
|
|
tar -xf data.tar.xz
|
|
}
|
|
package() {
|
|
cp -dpr "${srcdir}"/{etc,lib,opt,usr} "${pkgdir}"
|
|
mv -v "$pkgdir/lib/systemd/system" "$pkgdir/usr/lib/systemd/"
|
|
rm -vrf "$pkgdir/lib"
|
|
cp -v "$srcdir/appgatedriver.service" "$pkgdir/usr/lib/systemd/system/appgatedriver.service"
|
|
mkdir -vp "$pkgdir/usr/share/licenses/appgate-sdp"
|
|
cp -v "$pkgdir/usr/share/doc/appgate/copyright" "$pkgdir/usr/share/licenses/appgate-sdp"
|
|
cp -v "$pkgdir/usr/share/doc/appgate/LICENSE.github" "$pkgdir/usr/share/licenses/appgate-sdp"
|
|
cp -v "$pkgdir/usr/share/doc/appgate/LICENSES.chromium.html.bz2" "$pkgdir/usr/share/licenses/appgate-sdp"
|
|
}
|
|
md5sums=('17101aac7623c06d5fbb95f50cf3dbdc'
|
|
'002644116e20b2d79fdb36b7677ab4cf')
|
|
|
|
</code></pre>
|
|
<p>Let’s first make sure we have some dependencies. If you do not have <a href="https://github.com/Jguer/yay">yay</a>, check it out.</p>
|
|
<pre><code class="language-shell">yay -S dnsmasq gconf
|
|
</code></pre>
|
|
<p>Now, let’s install it:</p>
|
|
<pre><code class="language-shell">makepkg -si
|
|
</code></pre>
|
|
<h1 id="running-the-client">Running the client</h1>
|
|
<p>Ok, let’s run the client by executing <code>appgate</code>.</p>
|
|
<p>It complains about not being able to connect.</p>
|
|
<p>Easy fix:</p>
|
|
<pre><code class="language-shell">sudo systemctl start appgatedriver.service
|
|
</code></pre>
|
|
<p>Now we should be connected… but DNS is not working?</p>
|
|
<h1 id="fixing-the-dns">Fixing the DNS</h1>
|
|
<p>Running <code>resolvectl</code> should display that something is not right.</p>
|
|
<p>Why is the DNS not being set by appgate?</p>
|
|
<pre><code class="language-shell">$ head -3 /opt/appgate/linux/set_dns
|
|
#!/usr/bin/env python3
|
|
'''
|
|
This is used to set and unset the DNS.
|
|
</code></pre>
|
|
<p>It seems like python3 is required for the DNS setting to happen.
|
|
Let’s try to run it.</p>
|
|
<pre><code class="language-shell">$ sudo /opt/appgate/linux/set_dns
|
|
/opt/appgate/linux/set_dns:88: SyntaxWarning: "is" with a literal. Did you mean "=="?
|
|
servers = [( socket.AF_INET if x.version is 4 else socket.AF_INET6, map(int, x.packed)) for x in servers]
|
|
Traceback (most recent call last):
|
|
File "/opt/appgate/linux/set_dns", line 30, in <module>
|
|
import dbus
|
|
ModuleNotFoundError: No module named 'dbus'
|
|
</code></pre>
|
|
<p>Ok, let’s install it:</p>
|
|
<pre><code class="language-shell">$ sudo python3.8 -m pip install dbus-python
|
|
</code></pre>
|
|
<p>Will it work now? Not yet. There’s another issue:</p>
|
|
<pre><code class="language-shell">$ sudo /opt/appgate/linux/set_dns
|
|
/opt/appgate/linux/set_dns:88: SyntaxWarning: "is" with a literal. Did you mean "=="?
|
|
servers = [( socket.AF_INET if x.version is 4 else socket.AF_INET6, map(int, x.packed)) for x in servers]
|
|
module 'platform' has no attribute 'linux_distribution'
|
|
</code></pre>
|
|
<p>This is a breaking change in Python3.8.</p>
|
|
<p>So what is calling <code>platform.linux_distribution</code>?</p>
|
|
<p>Let’s search for it:</p>
|
|
<pre><code class="language-shell">$ sudo grep -r 'linux_distribution' /opt/appgate/linux/
|
|
/opt/appgate/linux/nm.py: if platform.linux_distribution()[0] != 'Fedora':
|
|
</code></pre>
|
|
<p>Aha! So this is in the local AppGate source code. This should be an easy fix. Let’s just replace this line with:</p>
|
|
<pre><code class="language-python">if True: # Since we are not using Fedora :)
|
|
</code></pre>
|
|
<h1 id="wrapping-up">Wrapping up</h1>
|
|
<p>It turns out there are <a href="https://docs.python.org/3.7/library/platform.html#platform.linux_distribution">breaking changes</a> in Python3.8.</p>
|
|
<p>The docs say <code>Deprecated since version 3.5, will be removed in version 3.8: See alternative like the distro package.</code></p>
|
|
<p>I suppose this highlights one of the caveats of relying upon the system’s python, rather than having an isolated, dedicated environment for all dependencies.</p></section>
|
|
|
|
<div class="post-tags">
|
|
|
|
|
|
<nav class="nav tags">
|
|
<ul class="tags">
|
|
|
|
<li><a href="/tags/linux">linux</a></li>
|
|
|
|
<li><a href="/tags/vpn">vpn</a></li>
|
|
|
|
<li><a href="/tags/python">python</a></li>
|
|
|
|
</ul>
|
|
</nav>
|
|
|
|
|
|
</div>
|
|
</article>
|
|
</main>
|
|
|
|
<section id='comments' class='comments'>
|
|
<div class='container sep-before'>
|
|
<div class='comments'><script>
|
|
|
|
var getTheme = window.localStorage && window.localStorage.getItem("theme-storage");
|
|
getTheme = getTheme == null ? 'light' : getTheme;
|
|
|
|
let theme = getTheme === 'dark' ? 'github-dark' : 'github-light';
|
|
let s = document.createElement('script');
|
|
s.src = 'https://utteranc.es/client.js';
|
|
s.setAttribute('repo', 'davegallant\/davegallant.github.io');
|
|
s.setAttribute('issue-term', 'pathname');
|
|
s.setAttribute('theme', theme);
|
|
s.setAttribute('crossorigin', 'anonymous');
|
|
s.setAttribute('async', '');
|
|
document.querySelector('div.comments').innerHTML = '';
|
|
document.querySelector('div.comments').appendChild(s);
|
|
</script>
|
|
</div>
|
|
</div>
|
|
</section><footer>
|
|
<div style="display:flex"><a class="soc" href="https://github.com/davegallant" rel="me" title="GitHub"><i data-feather="github"></i></a>
|
|
<a class="border"></a><a class="soc" href="https://twitter.com/davega11ant/" rel="me" title="Twitter"><i data-feather="twitter"></i></a>
|
|
<a class="border"></a><a class="soc" href="https://mastodon.social/@davegallant" rel="me" title="Mastodon"><i data-feather="speaker"></i></a>
|
|
<a class="border"></a><a class="soc" href="https://www.linkedin.com/in/dave-gallant/" rel="me" title="LinkedIn"><i data-feather="linkedin"></i></a>
|
|
<a class="border"></a></div>
|
|
<div class="footer-info">
|
|
2023 Dave Gallant
|
|
</div>
|
|
</footer>
|
|
|
|
|
|
<script async src="https://www.googletagmanager.com/gtag/js?id=G-V8WJDERTX9"></script>
|
|
<script>
|
|
var doNotTrack = false;
|
|
if (!doNotTrack) {
|
|
window.dataLayer = window.dataLayer || [];
|
|
function gtag(){dataLayer.push(arguments);}
|
|
gtag('js', new Date());
|
|
gtag('config', 'G-V8WJDERTX9', { 'anonymize_ip': false });
|
|
}
|
|
</script>
|
|
|
|
<script>
|
|
feather.replace()
|
|
</script></div>
|
|
</body>
|
|
</html>
|