Arch Linux User Repository

I am also having issues with this package. For starters, the network configuration gets messed up after killing the service, so the network service must be restarted. But more importantly, if I try to reboot my system while the service is running, it gets stuck on a black screen saying "The system will reboot now!", which forces me to physically power off the computer and power it back on. I added @ufo_driver's code to perimeter81helper.service, but the problems persist.

Another remark: Once started I cannot stop the perimeter81helper service anymore, I need to kill it. Afterwards the network (DNS) configuration seems to be messed up, as no network connections work anymore until the network service is restarted.

Nice, this time it works for me (using Manjaro)! I just installed the package and had to start the perimeter81helper service:

systemctl start perimeter81helper

thx!

Added the following into perimeter81helper.service under [Service] section and was able to use it without problems.

ProtectHome=true
ProtectSystem=true
InaccessiblePaths=-/media -/mnt

What it does: hides user home folders from services; mounts /usr as read only; hides any other mounted disks

Got the same problem as other user had with 100% CPU of process named p81daemonhelper after starting service on this version. Started strace on it and looks like this piece of code tries to lstat my whole filesystem. I have a BTRFS with snapshots so I have a lot of files and since service is launched as root - it tries to enumerate all of that, eats CPU and doesn't allow to make connections. We need to somehow restrict perimeter services permissions - maybe launch under a restricted user?

GUI displayed after

# systemctl start perimeter81helper

I have not executed /opt/Perimeter81/after-install.sh, briefly checked content.

It copies binaries

cp /opt/Perimeter81/artifacts/daemon-creator /usr/bin/p81-helper-daemon-creator

that monitors sleep /usr/lib/systemd/system-sleep/perimeter81

#!/bin/sh
case $1/$2 in
  post/*)
    /usr/bin/p81-helper-daemon-creator system-resume
    ;;
  pre/*)
    /usr/bin/p81-helper-daemon-creator system-sleep
    ;;
esac

and network /etc/NetworkManager/dispatcher.d/50-perimeter81:

#!/bin/bash -e
if [[ $1 == "tun0" ]] || [[ $1 == "ipsec0" ]] || [[ $1 == "p81" ]]; then 
  exit 0
fi

logger -s "P81 INTERFACE $1 $2"

case "$2" in
  up)
    /usr/bin/p81-helper-daemon-creator network-interface-up
    ;;
  down)
    /usr/bin/p81-helper-daemon-creator network-interface-down
    ;;
esac

And it adds wireguard kernel modules for some old kernels (3.10, 4.18). These modules definitely not needed for Arch:

$ find /lib/modules -iname wireguard
/lib/modules/6.12.10-arch1-1/kernel/drivers/net/wireguard

Update required

-pkgver=9.0.1.843
+pkgver=10.0.1.885

Peremiter downloads list sha256 checksum

10.0.1.885
fbc109d03d1e65e1e20fb4f1f6b590ea0fa596b4f86a701ddf88b06e97e91c89

We should use it:

-md5sums=(
-  '54711cd4f1dd4927535e76b3ee5e9c41'
-  '089b611fb1ecbd3e39e2d2d391743205'
-  '64c25ccc5446c93c6073a418f664d3d5'
-)
+sha256sums=('fbc109d03d1e65e1e20fb4f1f6b590ea0fa596b4f86a701ddf88b06e97e91c89'
+            'c1fa2c85ae4e58cb2e5b1058f4f68ca43ca8e295e9159f0e14ebcedc97e27f89'
+            'c505b227d3f2222305800c16805f29b8da3bf841bf71df36674a695528bd0731')

Hello,

my perimeter tells me, 10.0.1.885 is the new version.

But the update-Button does not work.

Can you give me some hints on the topic please?

I am getting the same error like @pliavi after calling "after-install.sh":

...
Installing kmod-wireguard...
rm: cannot remove '/etc/depmod.d/kmod-wireguard.conf': Permission denied
touch: cannot touch '/etc/depmod.d/kmod-wireguard.conf': Permission denied
override wireguard * weak-updates/wireguard
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
Done installing kmod-wireguard...

No idea, how to fixe that missing script "weak-modules".

@lukashenko: What exactly did you do? Just calling the demon as you said, does not change at least anything on my side :-(

I'm trying to make it work without success, the app does not open, the process is running but nothing appears in the screen. No error in the logs, but if I try to run the after-install.sh I get this:

...
override wireguard * weak-updates/wireguard
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
sudo: /usr/sbin/weak-modules: command not found
Done installing kmod-wireguard...

Tried to install kmod, but still happening.