Arch Linux User Repository

Hi everyone,

I had some issues with CF warp not able to start due to various problems, including not being able to initialize firewall or access the local DNS resolver (it wanted to overwrite the existing /etc/resolv.conf which is obviously protected.

I have not found any solutions elsewhere so decided to share a solution myself (credits go to my colleague Atte :) ).

• Create a file override.conf in /etc/systemd/system/warp-svc.service.d with the following contents:

[Unit]
After=network.target

[Service]
TemporaryFileSystem=/etc /usr/bin
BindPaths=/etc/warp/resolv.conf:/etc/resolv.conf
BindReadOnlyPaths=/etc/warp/nsswitch.conf:/etc/nsswitch.conf /usr/bin/warp-svc /usr/bin/nft /usr/bin/resolvectl

User=warp-svc
Group=warp-svc
DynamicUser=yes

AmbientCapabilities=
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
CapabilityBoundingSet=
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
DeviceAllow=/dev/net/tun
DevicePolicy=closed
LockPersonality=yes
MemoryDenyWriteExecute=yes
ProcSubset=pid
ProtectClock=yes
ProtectControlGroups=yes
ProtectHome=yes
ProtectHostname=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectProc=invisible
Restart=no
RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX
RestrictNamespaces=yes
RestrictRealtime=yes
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources

[Install]
WantedBy=default.target

• Create a directory /etc/warp and put a copy of /etc/resolv.conf there with the owner set to the warp-svc user. Also, put there a nsswitch.conf file with the following contents (just copying for what it's worth):

# Name Service Switch configuration file.
# See nsswitch.conf(5) for details.

passwd: files systemd
group: files [SUCCESS=merge] systemd
shadow: files systemd
gshadow: files systemd

publickey: files

hosts: hosts: dns [!UNAVAIL=return] files

networks: files

protocols: files
services: files
ethers: files
rpc: files

netgroup: files

• These steps should help run warp-svc successfully!

amin kani memoryshadow please check this https://github.com/cloudflare/cloudflare-docs/blob/production/content/cloudflare-one/faq/teams-troubleshooting.md#warp-on-linux-shows-dns-connectivity-check-failed-with-reason-dnslookupfailed section linux dns and please disable systemd resolved of your systems

Same issue as amin616, even resetting the warp-cli registration didn't help. The verification curl as specified in the cloudflare docs returns warp=off. If any steps are shared to fix it, I'd appreciate it as well.

@kani, @amin616 You run systemctl status warp-svc.service to see if you successfully connected to the endpoint correctly.

If the endpoint is not successfully connected, this is not a problem with this package and should not be discussed here.

@dhupee please change package version to pkgver=2024.2.62

 -> cloudflare-warp-bin: local (2024.2.62-1) is newer than AUR (2024.2-1)

So I tried to use @barcode's solution, I don't find the checksum also maybe I made a mistake.

If you have a problem please tell us but I managed to update to 2024.2 with his solution

EDIT: I forgot to update the SRCINFO, I have pushed the update, and I have try to install the AUR myself it worked, This is my first rodeo so be easy on me

Hi all,

I apologize for my absence, I've moved away from using this package myself.

Thanks a lot @Neomax7 for your update. I'm adding @MemoryShadow and @Neomax7 to the maintainer list so they can perform updates without my interference.

https://github.com/cloudflare/cloudflare-docs/blob/production/content/cloudflare-one/faq/teams-troubleshooting.md#warp-on-linux-shows-dns-connectivity-check-failed-with-reason-dnslookupfailed please to any whom not working

Error on instalation:

==> Validating package checksums
==> sha256sum: /home/mostafa/.cache/trizen/sources/cloudflare-warp-bin/src/cloudflare-warp-bin-2023.10.120-1-x86_64-Packages.sha256
==> sha256sum: /home/mostafa/.cache/trizen/sources/cloudflare-warp-bin/src/cloudflare-warp-bin-2023.10.120-x86_64.deb.sha256
sha256sum: /home/mostafa/.cache/trizen/sources/cloudflare-warp-bin/src/cloudflare-warp-bin-2023.10.120-x86_64.deb.sha256: no properly formatted checksum lines found
!!> SHA256 mismatch: /home/mostafa/.cache/trizen/sources/cloudflare-warp-bin/src/cloudflare-warp-bin-2023.10.120-x86_64.deb.sha256
:: Unable to build cloudflare-warp-bin - makepkg exited with code: 1

Same issue as amin616, even resetting the warp-cli registration didn't help. The verification curl as specified in the cloudflare docs returns warp=off. If any steps are shared to fix it, I'd appreciate it as well.

I live in Iran and used to use this package as an anti-censorship tool. recently when I enter warp-cli connect in the terminal it never really connects and when I try to execute warp-cli status it says: status update: Disconnected. reason: Manual Disconnection How can I fix this? any help would be highly appreciated.