ivpn / ivpn.net

Official IVPN Website
https://www.ivpn.net/
Other
111 stars 38 forks source link

Linux Install Documentation Improvement and Corollary Bug-Fix. #414

Closed TubbyCat closed 2 years ago

TubbyCat commented 2 years ago

Not worth pull request so submitted as an Issue. Am a cat, what do you expect?

Description

Linux is an OS wherein various organizations and their staff implement "Security Hardening" guidelines e.g. DISA STIGs. Applying restrictive umasks (a form of file permission control) is a part of this.

When such permissions are set, or exist by default, and the ivpn-archive-keyring.gpg is moved to /usr/share/keyrings the result is a "NO_PUBKEY D437F3E150DB096C" error. Multiple such reports, with scarce mentions of fixes exist when googled.

The above may dissuade customers from continuing use of IVPN, as the product will be perceived as sub-par, lacking attention to detail. Luckily, the fix is high-reward, and low-effort.

FIX

Append the following changes to the Ubuntu, Mint and Debian Install instructions in ivpn.net/src/content/pages/apps-linux.md under the headers referenced below.

Add IVPN's GPG key

Set Appropriate Permissions for GPG key

sudo chown root:root /usr/share/keyrings/ivpn-archive-keyring.gpg && sudo chmod 644 /usr/share/keyrings/ivpn-archive-keyring.gpg

Add the IVPN repository

Set Appropriate Permissions for Repository

sudo chown root:root /etc/apt/sources.list.d/ivpn.list && sudo chmod 644 /etc/apt/sources.list.d/ivpn.list


TL:DR FIX

Ubuntu, Mint, Debian Install Instructions in ivpn.net/src/content/pages/apps-linux.md should look like this (view raw) :

{{< highlight shell >}}

Add IVPN's GPG key

curl -fsSL url-for-gpg-key.gpg | gpg --dearmor > ~/ivpn-archive-keyring.gpg

sudo mv ~/ivpn-archive-keyring.gpg /usr/share/keyrings/ivpn-archive-keyring.gpg

Set Appropriate Permissions for GPG key

sudo chown root:root /usr/share/keyrings/ivpn-archive-keyring.gpg && sudo chmod 644 /usr/share/keyrings/ivpn-archive-keyring.gpg

Add the IVPN repository

curl -fsSL url-for-repo.placeholder | sudo tee /etc/apt/sources.list.d/ivpn.list

Set Appropriate Permissions for Repository

sudo chown root:root /etc/apt/sources.list.d/ivpn.list && sudo chmod 644 /etc/apt/sources.list.d/ivpn.list

Update APT repo info

sudo apt-get update

To install IVPN software (CLI and UI)

sudo apt-get install ivpn-ui

To install only IVPN CLI

sudo apt-get install ivpn

{{< /highlight >}}

That's all folks. Have a nice day! P.S. Will accept chin scratches for effort, meow.

jordan-ivpn commented 2 years ago

Thanks.

415