Arch Linux User Repository

Info from expressvpn's site ...

wget https://www.expressvpn.com/expressvpn_release_public_key_0xAFF2A1415F6A3A38.asc

gpg --import expressvpn_release_public_key_0xAFF2A1415F6A3A38.asc

All installed fine; thank you very much for maintaining.

Looks like update notifications are working for the linux client now, but unfortunately the current version (2.3.2) thinks it's an older version (2.3.1 -- check expressvpn --version), so the update alert people get when they run expressvpn status may be a false positive.

Please check what version is reported at https://www.expressvpn.com/latest (or https://www.expressvpn.com/support/troubleshooting/china-status/#linux as this sometimes gets updates listed sooner) before flagging the package as out-of-date.

Please note that, from v2.0.0, ExpressVPN will be providing signed Arch packages on their website (alongside the deb and rpm packages). I'll be continuing to update this package, but for those that find using the AUR cumbersome or just don't want to wait, please be aware of this option.

EDIT: packages were delayed for testing, but seem to be live as of 2019-01-23.

I don't use the browser plugins (I don't use any of the supported browsers), but try running expressvpn install-chrome-extension to make sure it's installed correctly (alternatively run cp /usr/lib/expressvpn/chrome/com.expressvpn.helper.json ~/.config/google-chrome/NativeMessagingHosts/com.expressvpn.helper.json)

R.E. unbound conflict, see https://wiki.archlinux.org/index.php/Domain_name_resolution#Overwriting_of_/etc/resolv.conf

Recently I have been having trouble with the Chrome plugin (keeps saying that the app isn't found). The service is enabled and started though.

p.s. if ExpressVPN replaces /etc/resolv.conf, it would mean it will potentially clash with Unbound, no?

@n01deer: Maybe expressvpn preferences set disable_ipv6 true would help you? It works fine without setting that option for me.

Regarding nameservers -- on my system /etc/resolv.conf is a text file, generated by Network Manager at boot. When I run expressvpn connect, expressvpn moves this text file to /var/lib/expressvpn/resolv.conf.orig and creates a symlink in its place pointing to /var/lib/expressvpn/resolv.conf. When I run expressvpn disconnect, it removes the symlink and moves the original file back.

It'd be interesting to hear what happens on systems where this doesn't happen, and exactly how this different behaviour is triggered.

@CyberOto

I had exactly the same problem with linked resolv.conf files. Very weird behaviour. Thanks for sharing, I thought it's just me.

Another finding I made today: Expressvpn needs ipv6 to be enabled in order to connect from the app.

Without any ipv6 from my ISP, I added disable_ipv6=yes the kernel command line. It took me quite a while to figure you that this was the reason why the app did not connect. There was no clear error message. Strangely using openvpn instead of the app worked, except for the resolv.conf not getting updated ...

For anyone having issues with network not working after disconnect, the VPN client has created a link for /etc/resolv.conf to /var/lib/expressvpn/resolv.conf.

Usually the contents are still pointing to VPN DNS, e.g. 10.114.0.1 and not to the original DNS settings, ergo no network browsing.

You can set DNS to your preferred ones and do chattr +i on /var/lib/expressvpn/resolv.conf file, if you prefer.

Nothing is actually built by this PKGBUILD, it just repackages the pre-built packages provided by upstream. As I understand it, RPi3 is ARMv8 (64-bit) which probably isn't compatible with the armhf (32-bit) builds from upstream.

I don't have a RPi3 to test with myself, but feel free to give it a try and let me know how you get on. It certainly doesn't work on my aarch64 odroid c2.

Is it possible to build for Raspberry Pi3?

@geddy Having a similar problem, I can connect without problems, but when I disconnect network is disabled. Only way to restore it is restarting NetworkManager or run the expressvpn connect COUNTRY command and cancel it (Ctrl+C). Even more strange is at first it was working fine but it broke when I had to restart the expressvpn service once. After that it remained broken no matter what, even tried reinstalling, rebooting, deleting any expressvpn related file, etc.

I've resorted to using this in a shell script when I need to disconnect: expressvpn connect us &; pkill -INT -x expressvpn

Any country would work, I think.

@WorMzy Thank you.

I am now getting a strange issue where if I connect to the VPN and then disconnect, even though network_lock is disabled, my internet is blocked until I re-connect to the VPN. If I want to roam the internet with the VPN disabled, then I need to disable the VPN from launching upon boot and re-boot my computer. Strange behavior and I am unsure on how to debug. Any ideas?

geddy: https://wiki.archlinux.org/index.php/Makepkg#Signature_checking