search

dlenski / openconnect

OpenConnect client extended to support Palo Alto Networks' GlobalProtect VPN
679 stars 130 forks source link

include instructions for install via nix in README.md #136

Closed chessai closed 5 years ago

chessai commented 6 years ago

This afternoon I added this fork of openconnect to nixpkgs (https://github.com/NixOS/nixpkgs).

This offers users another mode of installation that doesn't require any fiddling with dependencies, and the build artifact of this fork will be cached, so users won't have to actually build anything.

The PR that added it is https://github.com/NixOS/nixpkgs/pull/50513.

I verified that at least the following usage works:

openconnect --protocol=gp server.company.com --dump -vvv

I was authenticated, prompted by DUO for confirmation, and then able to ssh into a machine to which i would otherwise not have access on my company's network. I include that as an example of a test of functionality that I performed, though I would like to add that it is unlikely the functionality differs from that of master, since the version in nixpkgs just builds and installs master to /nix/store.

Thanks for keeping up with this greatly useful project!

dlenski commented 5 years ago

Thanks, @chessai, and sorry for my slow response.

Since openconnect v8.00 is now released, distro packages with GP support should be coming available soon. I'd prefer not to include any further container-configuration information in this repository, since I can't easily maintain it (especially in the case of nix which I've never used myself).

chessai commented 5 years ago

I install packages almost exclusively via the nix package manager. And I'd be taking on the maintainership of the nix package. Perhaps include it, noting it as something you yourself don't support, but as an option that's available? You could also say that I maintain the nix package, if that would help users avoid an indirection.

chessai commented 5 years ago

Oh, wait. I see. You're seeing openconnect v8 will have GP support?

chessai commented 5 years ago

Yep, just read the link - sorry. In that case, I'll make sure the package I put into nixpkgs is deprecated. This PR is unnecessary. Thank you!