Arch Linux User Repository

Unfortunately, I don't have access to a version newer than 4.10.06079 yet. If there is someone who can help with the update package - please let me know - I'll add to the co-maintainers.

As the comment in the PKGBUILD says (you've read it, right? ;) ), Cisco does not provide public downloads for this, so you have to obtain the installer yourself either through your own Cisco account or through your company's.

Thank you @jtbwatson! After i manualy launched vpnagentd it started to work!

This does not work on the latest versions of arch (I use manjaro kde). To run it, you need to:

Build libxml 2.11

#!/bin/bash

mkdir build-tmp
cd build-tmp
wget https://gitlab.archlinux.org/archlinux/packaging/packages/libxml2/-/raw/ecf5ca6e9705848a4220411214d5a6bff63d18eb/PKGBUILD
wget https://gitlab.archlinux.org/archlinux/packaging/packages/libxml2/-/raw/2.11.5-1/0001-HACK-Don-t-run-fuzzing-tests.patch
makepkg
cd ..
cp ./build-tmp/pkg/libxml2/usr/lib/libxml2.so.2.11.5 .
cp ./build-tmp/pkg/libxml2/usr/lib/libxml2.so.2 .
rm -rf build-tmp

Run using the compiled Libxml2 and WEBKIT_DISABLE_DMABUF_RENDERER

#!/bin/bash

script_dir="$(dirname "$0")"
LD_LIBRARY_PATH=$script_dir:$LD_LIBRARY_PATH WEBKIT_DISABLE_DMABUF_RENDERER=1 /opt/cisco/anyconnect/bin/vpnui

For those who only have an installer script (*-webdeploy-k9.sh) provided by your organization instead of tarball:

I've created a fork of PKGBUILD to support installation from installer script. Version 5.*.* is supported.

Just had the issue regarding black screen for authentication using webkit2gtk and the following errors

src/nv_gbm.c:288: GBM-DRV error (nv_gbm_create_device_native): nv_common_gbm_create_device failed (ret=-1)

src/nv_gbm.c:288: GBM-DRV error (nv_gbm_create_device_native): nv_common_gbm_create_device failed (ret=-1)

KMS: DRM_IOCTL_MODE_CREATE_DUMB failed: Permission denied
Failed to create GBM buffer of size 1000x600: Permission denied
KMS: DRM_IOCTL_MODE_CREATE_DUMB failed: Permission denied
Failed to create GBM buffer of size 1000x600: Permission denied
KMS: DRM_IOCTL_MODE_CREATE_DUMB failed: Permission denied
Failed to create GBM buffer of size 1000x600: Permission denied
Failed to create EGL images for DMABufs with file descriptors -1, -1 and -1

The solution/workaround is here: https://community.cisco.com/t5/vpn/anyconnect-4-10-05111-displays-blank-page-instead-of-sso-login/td-p/4648440

Specifically, before starting vpnui run

export WEBKIT_DISABLE_DMABUF_RENDERER=1 

Hi thanks for packaging anyconnect. I wanted to give you some feedback concerning the following statement in the PKGBUILD file:

# install custom policy to disable auto updates
# AnyConnect will attempt to update itself as root, and then run all over both itself and our packaging
# so prevent it from doing anything like that
#
# this may break some really quirky setups that require downloading files from the server,
# but there's no other way around it that I could find

Unfortunatly, these are NOT quirky setups. The problem is that the local anyconnect checks the checksum of the local and remote policy file, and if that disagrees it requires a re-download. With the current setup, this breaks for at least one big US university, but surely from searching the web, many other places, too.

I've done the migration to 5.1.1.42. Just need to put the binary in the same folder since I don't have a mirror.

https://github.com/hopper-head/cisco-secure-client-aur-5.1.1.42/commit/2f2a659c4c41c1af9face9bdc76fef033c9b2dd3

For post-installation, I needed to manually start the daemon: systemctl start vpnagentd.service

This installs nicely, but my company uses a modified version that invokes SSO/Microsoft Authenticator.

I have to download it from the company website. Then:

sudo bash anyconnect-linux64-4.10.07073-core-vpn-webdeploy-k9.sh.

As Cisco don't support this on Arch, I was hoping to install the package from the AUR to get the basics working, then install the company modified version. This script detects that anyconnect is already installed and exists.

I'm hoping to modify the script to remove these checks.

If I can't get this working, I'll have to use Ubuntu or Fedora and I don't want to do that.

I've got an updated client: cisco-secure-client-linux64-5.0.02075-core-vpn-webdeploy-k9.sh

I'd really like a package to install this, because this script looks like it's ... not so good.

Let me know how to hand it over to you.