debauchee / barrier

Open-source KVM software
Other
27.29k stars 1.5k forks source link

Windows won't run Barrier setup #1386

Open johnny-mac opened 2 years ago

johnny-mac commented 2 years ago

What happened?

Hey guys, sorry if I am not including enough details as I don't know what you need to know. I can't install Barrier, Vivaldi won't download it, Firefox however will download it, but upon opening I get an error.

"C:\Users\karl\Downloads\BarrierSetup-2.4.0-release.exe Operation did not complete successfully because the file contains a virus or potentially unwanted software." I can't run it as administrator, what do I do? Sorry to bother you guys, this is leaving me confused.

Version

From Git HEAD or commit (specify below)

Git commit hash (if applicable)

2.4.0

If applicable, where did you install Barrier from?

from the .exe

What OSes are you seeing the problem on? (Check all that apply)

Windows

What OS versions are you using?

Windows 10 is where I am having this problem.

Relevant log output

No response

Any other information

No response

johnny-mac commented 2 years ago

So far I am unable to make it install. Any help would be greatly appreciated. Thank you. https://softwarekeep.com/help-center/operation-did-not-complete-successfully-because-the-file-contains-a-virus

johnny-mac commented 2 years ago

Still stuck, This is what I get when I turn off Windows defender: " C:\Program Files\Barrier\barrierd.exe An error occurred while trying to replace the existing file: DeleteFile failed; code 5. Access is denied.

Click retry to try again, ignore to skip this file (not recommended), or Abort to cancel installation."

johnny-mac commented 2 years ago

Had to uninstall Barrier & reinstall, it worked, but now I can't seem to get my Linux PC to connect to my Windows server... will connect to my Linux server no problem.

OK, when I try to go from my Windows server to my Linux PC, it kind of goes over, I can right-click and get a drop-down menu in the bottom right corner, and I lose my server's mouse completely unless I ctrl+alt+dlt

I can click things with my server mouse but I can't move the mouse with my server mouse... really weird.

I've reverted back to 2.3.3 for now as that works. Not sure why 2.4 won't work for me :( I am happy to help you guys in any way I can for this. Sorry I'm not very tech-literate.

shakeelansari63 commented 2 years ago

There seems to be issue with Windows release 2.4.0 & 2.3.4 packages. Defender detects it as Virus and does not allow to download it. Same issue does not exist with v2.3.3

projectcato commented 2 years ago

EXE's submitted to MS for review, maybe it changes things, maybe not. This isn't a software bug for Barrier at all. This is more suited to the "Discussions" tab, rather than distracting the devs with "executables are triggering a false positive in some AV"

@johnny-mac Your second issue sounds like the firewall ports didn't get opened properly on windows. My guess? Seeing more and more apps fail to do that unless you right-click "run as administrator" on the installer.

johnny-mac commented 2 years ago

I did run as administrator. I guess I should change the title of this post I don't know... Because the problem I'm now experiencing is one all on its own. Should I make a new issue? I don't want to be rude

projectcato commented 2 years ago

The "issues" are for code issues: something the devs could fix, rather than support. No clue how much the barrier devs care about it, but I'd suggest opening a "discussion" instead.

At the risk of coming across as a dangerous, power-hungry madman, open a conversation over there, message me, and I'll help you troubleshoot bringing up the network connection between them. I'm actively using Barrier in a similar setup.

shymega commented 2 years ago

I wouldn't open a discussion right now, this is clearly an issue with AV false positives on Windows. (edited).

In terms of long-term fixes, I don't know how costly it would be to sign our executables. As a volunteer project, and in the case of Mac, for example, you have to renew your developer subscription - as I understand it - so that would be costly for us.

In the meantime on Windows, submitting the EXEs to MS is a good step forward. I disagree that this is a distraction - if our CI builds Windows executables that aren't able to be installed by our Windows userbase, then this affects us as developers.

projectcato commented 2 years ago

@shymega IT consultant here: we started signing our powershell scripts about 3 years ago (I actually need to go get the cert renewed). IIRC, the code-signing cert (3-year) was ~300 bucks. But is was based on company validation. Not sure if things are screwier getting one as an independent project. I mean, is there really a legal entity for Barrier to hold a code-signing cert?

EDIT: Did a bit of digging, To pass smartscreen, you should start with EV Code signing (there's another step where you register with microsoft, we never did that). Sectigo (formerly Comodo) is the cheapest I'm aware of, same ~300 USD price tag as last time I bought it.

Haven't had much opportunity to test against SmartScreen: we're typically pushing out the stuff we write, signing it just let us move some customers with compliance requirements to all-publicly-signed code group policies.

shymega commented 2 years ago

There's no legal entity, indeed. $300 is money I personally don't have, and I wouldn't want to ask for donations either. Is it a yearly fee? If it is, it's very much the same situation as the Mac signing issue, it's just not possible. However, I'm rather aware of the inconvenience for Windows and Mac users. This is a tricky situtation.

projectcato commented 2 years ago

It's cheaper (but more expensive in the long run and a pain) to buy a one-year. That's a 3-year cert. Whomever's building / signing the exe's needs to hold it.

I'd love to volunteer signing it, but got two hang ups there.

  1. Suddenly the community gets alerts that this software was made/signed by "Company X"
  2. My employer would have to agree to start signing the code.

Frankly, I'd consider spending the cash and doing it myself, except there's the whole "legal entity" component again: I don't really want to start signing software with my own name / home address embedded in the executables, and again, it ends up looking like I'm taking credit for something I don't really do (other than build/sign).

shymega commented 2 years ago

I'd rather we have sole control of the cert. Thank you for your offer. It may be cheaper, but we still don't have the money, but we also would need a legal entity...

projectcato commented 2 years ago

Exactly what I was saying. It should belong to "Barrier", and I'd donate/volunteer help setting it up; but the cost of having a business to validate may actually be more than the cost of the cert (depending on where you are in the world).

Word of warning, a quick google found a couple "open source developer code signing cert" programs: unfortunately, none of them appear to meet the modern screening requirements to actually present a tangible benefit to Windows / Mac users.

projectcato commented 2 years ago

For what it's worth, I just re-installed barrier as 2.4 without issue. Downloaded via MS Edge, installed despite all of Defender's features being turned on. (Win 10 pro build 21H1)

Hacky solution might be as simple as someone reporting each new release to MS as a false positive.

I'm less-sure of how one becomes a "known developer" on the Apple side. Just putting that out there as a caveat. Just tested: at least for me, 2.4 works using the "ctrl-click-open" work around on the first time after downloading. Only testing on Mojave, cause my ancient Macbook has been in a drawer for the past year while I hesitate updating it to Big Sur.