Arch Linux User Repository

Quick guide for future maintainers (How to update this package)

Hi everyone! If I'm away and this package needs an update, here is a "for dummies" step-by-step guide to do it properly:

Clone the repo (if you haven't already): git clone ssh://aur@aur.archlinux.org/appgate-sdp.git

Update the PKGBUILD:

Change the pkgver variable to the new version (e.g., pkgver=6.5.5).

If the major/minor version changed (e.g., from 6.5 to 6.6), update the URL in the source array accordingly.

Update Checksums: Run updpkgsums.

This tool (part of pacman-contrib) reads the new URL in your PKGBUILD, downloads the file, calculates the new SHA256 hash, and automatically updates the sha256sums section in your PKGBUILD file. You don't need to copy-paste hashes manually.

Update Metadata: Run makepkg --printsrcinfo > .SRCINFO. IMPORTANT: AUR website reads this file, not the PKGBUILD. If you skip this, the website won't show the new version.

Test the build: Run makepkg -s to ensure the package compiles and the paths are still correct.

Commit and Push:

Bash git add PKGBUILD .SRCINFO git commit -m "Update to version X.Y.Z" git push origin master Note on services: Starting from version 6.5.x, the service name is appgatedriver.service. Always ensure the appgate-sdp.install file is included in the commit to notify users.

Hi @trygveaa and @dgallant, thank you both for the information you have provided. I have updated the current package to 4.3.2 and have created a new package for Appgate 5 (appgate-sdp-5). Both include a patch which disables the test in nm.py as described in Dave's blog post.

Regarding the certificate error: I am getting a message that the endpoint certificate is not valid on Appgate 5.0, but I can work around it by editing the profile and re-approving it. I will later try if this is also the case in 5.1 for me.

Please let me know if you encounter any issues.

@trygveaa Thanks. This allows the GUI to run on 4.3.2. I ran into some DNS issues, which were resolved by modifying a single line in /opt/appgate/linux/nm.py. I am using python3.8 system python and this file does not run with it.

I wrote a post here with more details: https://davegallant.github.io/blog/2020/03/16/appgate-sdp-on-arch-linux/

The reason 4.3 and newer is not working for you is that makepkg removes static libraries by default, and the newer versions require them. Adding options=(staticlibs) to the PKGBUILD makes it work.

Here is a PKGBUILD which works for 5.0. I have just changed the version number, updated the md5sum and added that options line.

# Maintainer: Pawel Mosakowski <pawel at mosakowski dot net>
pkgname=appgate-sdp
conflicts=('appgate-sdp-headless')
pkgver=5.0.3
_download_pkgver=5.0
pkgrel=1
epoch=
pkgdesc="Software Defined Perimeter - GUI client"
arch=('x86_64')
url="https://www.cyxtera.com/essential-defense/appgate-sdp/support"
license=('custom')

# dependecies calculated by namcap
depends=('gconf' 'libsecret' 'gtk3' 'python' 'nss' 'libxss' 'nodejs' 'dnsmasq')
source=("https://sdpdownloads.cyxtera.com/AppGate-SDP-${_download_pkgver}/clients/${pkgname}_${pkgver}_amd64.deb"
        "appgatedriver.service")

options=(staticlibs)

prepare() {
    tar -xf data.tar.xz
}

package() {
    cp -dpr "${srcdir}"/{etc,lib,opt,usr} "${pkgdir}"
    mv -v "$pkgdir/lib/systemd/system" "$pkgdir/usr/lib/systemd/"
    rm -vrf "$pkgdir/lib"

    cp -v "$srcdir/appgatedriver.service" "$pkgdir/usr/lib/systemd/system/appgatedriver.service"

    mkdir -vp "$pkgdir/usr/share/licenses/appgate-sdp"
    cp -v "$pkgdir/usr/share/doc/appgate/copyright" "$pkgdir/usr/share/licenses/appgate-sdp"
    cp -v "$pkgdir/usr/share/doc/appgate/LICENSE.github" "$pkgdir/usr/share/licenses/appgate-sdp"
    cp -v "$pkgdir/usr/share/doc/appgate/LICENSES.chromium.html.bz2" "$pkgdir/usr/share/licenses/appgate-sdp"
}
md5sums=('1ffc310a4aea80fb8574f7d3eaa611ec'
         '002644116e20b2d79fdb36b7677ab4cf')

I tried 5.1 too, but got a certificate error in the client when trying to authenticate. Though, I'm not sure if that's an issue with my installation, or the server, as my employer recommends using 4.3 and says they consider 5.x to be unsupported (but 5.0 worked better than 4.3 for me). Note that 5.1 requires updating appgatedriver.service as well, as the service binary has been renamed to /opt/appgate/appgate-driver.

@dgallant

Hi, I am also looking into it, for reference this is the full error I get:

error: 140 Quitting. (node:4443) UnhandledPromiseRejectionWarning: Unhandled promise rejection (rejection id: 1): Error: Cannot find module '../screen' (node:4443) [DEP0018] DeprecationWarning: Unhandled promise rejections are deprecated. In the future, promise rejections that are not handled will terminate the Node.js process with a non-zero exit code.

It appears that the issue is with node and a module called 'screen' - not my strongest suit but will continue investigating.

My employer requires >= 4.3 to be installed. When pulling that .DEB, I'm getting error: 140 when loading the GUI and the application exits.

@frealgagu Hi, I was trying to add the .asc file however looks like Cyxtera has shuffled the download links around. Example: current .deb can be downloaded from https://sdpdownloads.cyxtera.com/AppGate-SDP-4.2/clients/appgate-sdp_4.2.1_amd64.deb I have tried to download https://sdpdownloads.cyxtera.com/AppGate-SDP-4.2/clients/appgate-sdp_4.2.1_amd64.debasc and https://sdpdownloads.cyxtera.com/AppGate-SDP-4.2/clients/appgate-sdp_4.2.1_amd64.deb.asc but no luck.

@masterdisaster, could you add the .asc to sources please?

<https://sdpdownloads.cyxtera.com/files/download/AppGate-SDP>-${_download_pkgver}/clients/${pkgname}_${pkgver}_amd64.deb{,asc}

Confirming that package is working as expected. Starting appgatedriver.service is necessary to stablish the connections.

Hey masterdisaster, Thanks for the help. It was exactly that. It connected fine upon enabling + starting 'appgatedriver.service'. Cheers.