Open Atemu opened 2 months ago
Hi @Atemu,
Thanks for pinging me. Could you show me the output of nmcli --version
?
It's 1.46.0
; that's the only NM in current Nixpkgs.
Could you share your logs when doing a quick connect?
It's
1.46.0
; that's the only NM in current Nixpkgs.
Gotcha, that might be the issue. As quoted in https://github.com/NixOS/nixpkgs/pull/302011#issuecomment-2066805627 , ProtonVPN uses a NetworkManager Connection property that's introduced in NetworkManager 1.46, which is in NixOS Unstable and will be used with Gnome 46 when that releases on NixOS.
Could you try to switch to Unstable for NetworkManager and see if that works for you?
I am on unstable, I linked the Nixpkgs revision I'm using.
I am on unstable, I linked the Nixpkgs revision I'm using.
Sorry about that, I misread the version. I'll post my logs. Are you using Gnome Keyring?
Should have noted that down. I've updated the additional context section.
Note: PR title should be updated to actually describe the issue in short. "Timeout"? What kind, how/when does it occur? This helps people to discover the issue.
@Atemu
My logs from Unstable are as follows:
┌─ ~
└─> protonvpn-app
2024-04-28T13:52:06.436852 | proton.vpn.connection.vpnconnector:168 | INFO | CONN:STATE_CHANGED | Disconnected (initial state)
2024-04-28T13:52:06.437412 | proton.vpn.app.gtk.app:57 | INFO | APP:PROCESS_START | self=<app.App object at 0x7f957fe1d500 (proton+vpn+app+gtk+app+App at 0x17faa70)>
2024-04-28T13:52:06.885795 | proton.vpn.app.gtk.services.reconnector.reconnector:96 | INFO | VPN reconnector enabled.
2024-04-28T13:52:08.558234 | proton.vpn.app.gtk.controller:138 | INFO | APP.STARTUP:STARTUP_ACTIONS | Running startup actions
2024-04-28T13:52:08.558429 | proton.vpn.app.gtk.widgets.vpn.vpn_widget:174 | INFO | APP.VPN:WIDGET_READY | VPN widget is ready (load time: 1.67 seconds)
2024-04-28T13:52:08.558536 | proton.vpn.app.gtk.services.refresher.vpn_data_refresher:148 | INFO | APP.VPN_DATA_REFRESHER:ENABLE | VPN data refresher service enabled.
2024-04-28T13:52:08.558605 | proton.vpn.app.gtk.services.refresher.client_config_refresher:68 | INFO | Client config refresher enabled.
2024-04-28T13:52:08.558714 | proton.vpn.app.gtk.services.refresher.client_config_refresher:107 | INFO | Next client config refresh scheduled in 0:00:00
2024-04-28T13:52:08.558778 | proton.vpn.app.gtk.services.refresher.server_list_refresher:74 | INFO | Server list refresher enabled.
2024-04-28T13:52:08.559629 | proton.vpn.session.utils:25 | INFO | API:REQUEST | '/vpn/logicals?SecureCoreFilter=all'
2024-04-28T13:52:10.148770 | proton.vpn.session.utils:25 | INFO | API:REQUEST | '/vpn/v2/clientconfig'
2024-04-28T13:52:10.245791 | proton.vpn.app.gtk.services.reconnector.reconnector:176 | INFO | Network connectivity was detected.
2024-04-28T13:52:10.254346 | proton.vpn.session.utils:29 | INFO | API:RESPONSE | '/vpn/v2/clientconfig'
2024-04-28T13:52:10.255023 | proton.vpn.app.gtk.services.refresher.client_config_refresher:107 | INFO | Next client config refresh scheduled in 2:45:54.054664
2024-04-28T13:52:10.835357 | proton.vpn.session.utils:29 | INFO | API:RESPONSE | '/vpn/logicals?SecureCoreFilter=all'
2024-04-28T13:52:14.985510 | proton.vpn.app.gtk.services.refresher.server_list_refresher:126 | INFO | Next server list refresh scheduled in 0:14:00.487715
2024-04-28T13:52:18.267703 | proton.vpn.app.gtk.widgets.vpn.quick_connect_widget:96 | INFO | UI.TRAY:CONNECT | Connect to fastest server
2024-04-28T13:52:18.374888 | proton.vpn.core.connection:149 | INFO | CONN.CONNECT:START | Server: 185.107.44.110 / Protocol: openvpn-udp / Ports: [80, 51820, 4569, 1194, 5060] / Backend: None
2024-04-28T13:52:18.438021 | proton.vpn.connection.vpnconnector:168 | INFO | CONN:STATE_CHANGED | Connecting
2024-04-28T13:52:20.570052 | proton.vpn.backend.linux.networkmanager.core.networkmanager:90 | INFO | VPN server REACHABLE.
2024-04-28T13:52:22.209135 | proton.vpn.connection.vpnconnector:168 | INFO | CONN:STATE_CHANGED | Connected
My systemd logs with sudo journalctl -f
are as follows:
apr 28 16:01:20 xps systemd[1]: Stopped target Host and Network Name Lookups.
apr 28 16:01:20 xps systemd[1]: Stopping Host and Network Name Lookups...
apr 28 16:01:20 xps systemd[1]: Stopped target User and Group Name Lookups.
apr 28 16:01:20 xps systemd[1]: Stopping User and Group Name Lookups...
apr 28 16:01:20 xps systemd[1]: Stopping Name Service Cache Daemon (nsncd)...
apr 28 16:01:20 xps systemd[1]: nscd.service: Deactivated successfully.
apr 28 16:01:20 xps avahi-daemon[1163]: Got SIGHUP, reloading.
apr 28 16:01:20 xps avahi-daemon[1163]: No service file found in /etc/avahi/services.
apr 28 16:01:20 xps systemd[1]: Stopped Name Service Cache Daemon (nsncd).
apr 28 16:01:20 xps systemd[1]: nscd.service: Consumed 63ms CPU time, received 10.4K IP traffic, sent 6.1K IP traffic.
apr 28 16:01:20 xps systemd[1]: Starting Network Manager Script Dispatcher Service...
apr 28 16:01:20 xps systemd[1]: Starting Name Service Cache Daemon (nsncd)...
apr 28 16:01:20 xps systemd[1]: Started Network Manager Script Dispatcher Service.
apr 28 16:01:20 xps nsncd[29649]: Apr 28 14:01:20.758 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 3s }, path: "/var/run/nscd/socket"
apr 28 16:01:20 xps systemd[1]: Started Name Service Cache Daemon (nsncd).
apr 28 16:01:20 xps systemd[1]: Reached target Host and Network Name Lookups.
apr 28 16:01:20 xps systemd[1]: Reached target User and Group Name Lookups.
apr 28 16:01:22 xps protonvpn-app.desktop[29549]: 2024-04-28T14:01:22.657315 | proton.vpn.backend.linux.networkmanager.core.networkmanager:90 | INFO | VPN server REACHABLE.
apr 28 16:01:22 xps nm-openvpn[29702]: OpenVPN 2.6.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] [DCO]
apr 28 16:01:22 xps nm-openvpn[29702]: library versions: OpenSSL 3.0.13 30 Jan 2024, LZO 2.10
apr 28 16:01:22 xps nm-openvpn[29702]: DCO version: N/A
apr 28 16:01:23 xps nm-openvpn[29702]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
apr 28 16:01:23 xps nm-openvpn[29702]: TCP/UDP: Preserving recently used remote address: [AF_INET]185.107.44.110:51820
apr 28 16:01:23 xps nm-openvpn[29702]: UDPv4 link local: (not bound)
apr 28 16:01:23 xps nm-openvpn[29702]: UDPv4 link remote: [AF_INET]185.107.44.110:51820
apr 28 16:01:23 xps nm-openvpn[29702]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
apr 28 16:01:23 xps nm-openvpn[29702]: [node-nl-209.protonvpn.net] Peer Connection Initiated with [AF_INET]185.107.44.110:51820
apr 28 16:01:24 xps nm-openvpn[29702]: NOTE: setsockopt TCP_NODELAY=1 failed
apr 28 16:01:24 xps nm-openvpn[29702]: TUN/TAP device tun0 opened
apr 28 16:01:24 xps nm-openvpn[29702]: /nix/store/g4gh7zmah5vi6dsmkibr67sshb0hrxfj-NetworkManager-openvpn-1.10.2/libexec/nm-openvpn-service-openvpn-helper --debug 0 29695 --bus-name org.freedesktop.NetworkManager.openvpn.Connection_10 --tun -- tun0 1500 0 10.96.0.22 255.255.0.0 init
apr 28 16:01:24 xps nm-openvpn[29702]: UID set to nm-openvpn
apr 28 16:01:24 xps nm-openvpn[29702]: GID set to nm-openvpn
apr 28 16:01:24 xps nm-openvpn[29702]: Capabilities retained: CAP_NET_ADMIN
apr 28 16:01:24 xps nm-openvpn[29702]: Initialization Sequence Completed
apr 28 16:01:24 xps protonvpn-app.desktop[29549]: 2024-04-28T14:01:24.302338 | proton.vpn.connection.vpnconnector:168 | INFO | CONN:STATE_CHANGED | Connected
apr 28 16:01:24 xps systemd[1]: Stopped target Host and Network Name Lookups.
apr 28 16:01:24 xps systemd[1]: Stopping Host and Network Name Lookups...
apr 28 16:01:24 xps systemd[1]: Stopped target User and Group Name Lookups.
apr 28 16:01:24 xps systemd[1]: Stopping User and Group Name Lookups...
apr 28 16:01:24 xps systemd[1]: Stopping Name Service Cache Daemon (nsncd)...
apr 28 16:01:24 xps systemd[1]: nscd.service: Deactivated successfully.
apr 28 16:01:24 xps systemd[1]: Stopped Name Service Cache Daemon (nsncd).
apr 28 16:01:24 xps systemd[1]: nscd.service: Consumed 84ms CPU time, received 0B IP traffic, sent 10.8K IP traffic.
apr 28 16:01:24 xps avahi-daemon[1163]: Got SIGHUP, reloading.
apr 28 16:01:24 xps avahi-daemon[1163]: No service file found in /etc/avahi/services.
apr 28 16:01:24 xps systemd[1]: Starting Name Service Cache Daemon (nsncd)...
apr 28 16:01:24 xps nsncd[29759]: Apr 28 14:01:24.429 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 3s }, path: "/var/run/nscd/socket"
apr 28 16:01:24 xps systemd[1]: Started Name Service Cache Daemon (nsncd).
apr 28 16:01:24 xps systemd[1]: Reached target Host and Network Name Lookups.
apr 28 16:01:24 xps systemd[1]: Reached target User and Group Name Lookups.
apr 28 16:01:34 xps systemd[1]: NetworkManager-dispatcher.service: Deactivated successfully.
Could you try to use Gnome Keyring (or KWallet and clear all configuration of ProtonVPN and see if the issue persists?
Proton lists these 2 as required dependencies: https://protonvpn.com/support/official-linux-vpn-debian/
Describe the bug
A clear and concise description of what the bug is.
When attempting to connect, I get a spinner and then an incredibly unhelpful error message:
timeout
.(Proton should get into making operating systems, they could easily rival M$ Windows at least in this quality.)
The log is not any more helpful:
This is what happens inside NM during that time:
So it appears to be doing something; setting up the leak protection and the tunnel interface(?).
What I find weird is that systemd/NM stops those targets and also nsncd. That might be part of the problem? No nsncd, no DNS. Though I don't know how pvpn is supposed to work here?
I'd really like to see the diff to a successful log here because, apparently, it's working for others in https://github.com/NixOS/nixpkgs/pull/302011.
Steps To Reproduce
Steps to reproduce the behavior:
protonvpn-app
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Additional context
Add any other context about the problem here.
Running i3 on X11 but that shouldn't matter.
For testing, my secret service implementation is keepassxc's. It's unlocked and working (I can see ProtonVPN adding its entries).
Notify maintainers
@WolfangAukang (also CC @JohnRTitor @pbsds @Andreas02-dev)
Metadata
Please run
nix-shell -p nix-info --run "nix-info -m"
and paste the result.NixOS/nixpkgs@7bb2ccd8cdc44c91edba16c48d2c8f331fb3d856
Add a :+1: reaction to issues you find important.