zerotier / ZeroTierOne

A Smart Ethernet Switch for Earth
https://zerotier.com
Other
14.55k stars 1.7k forks source link

Zerotier on Chromebook #602

Closed plieningerweb closed 6 years ago

plieningerweb commented 7 years ago

I installed zerotier for Android on Chromebook. I Can go online and join the network, but ping will not work to other computers in network.

How can I get access to my zerotier network on a Chromebook?

nate8199 commented 7 years ago

My method was through crouton, install it in there, it won't run automatically, have to manually start it after entering chroot, and then go back to chromeos and assign a static IP to the ethernet device that shows up.

On 15 Oct. 2017 11:53 am, "plieningerweb" notifications@github.com wrote:

I installed zerotier for Android on Chromebook. I Can go online and join the network, but ping will not work to other computers in network.

How can I get access to my zerotier network on a Chromebook?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/zerotier/ZeroTierOne/issues/602, or mute the thread https://github.com/notifications/unsubscribe-auth/ABJpRFYiVpqWqgGlsh-zw1sArOjsvHGUks5sskakgaJpZM4P51Go .

plieningerweb commented 7 years ago

I don't agree to close it without full answer. Crouton should not be the goto solution on a Chromebook, it is essentially installing a second os and less secure / good than a native solution. So if you are not willing to support it, it's also fine with me. But I would expect a decision here.

On 16 Oct 2017 12:30, "Adam Ierymenko" notifications@github.com wrote:

Closed #602 https://github.com/zerotier/ZeroTierOne/issues/602.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/zerotier/ZeroTierOne/issues/602#event-1295527998, or mute the thread https://github.com/notifications/unsubscribe-auth/AAdXU2W3hAfFraO9LBsGUjplQiMfAWHwks5ss665gaJpZM4P51Go .

interoperate commented 7 years ago

Agree with @plieningerweb

Installing Crouton is a kludge workaround that is not suitable for the vast majority of Chromebook users, nor is the Android app that is still not supported on the vast majority of Chromebooks.

Given the massive uptake of Chromebooks in the education market, a "native" ChromeOS solution for Zerotier will be necessary. Therefore it would be useful to have an official statement on support plans for ChromeOS.

laduke commented 7 years ago

@plieningerweb @interoperate do you know if any other VPN software works on ChromeOS? ZeroTier needs access to low level system/network stuff that I'm not clear (not being an android dev) ChromeOs allows.

plieningerweb commented 7 years ago

I am not sure how it works. I only remember that a quick Google search revealed that Chromebook only supports two kinds of vpn, whereas Android supports much more. The zerotier android app on Chromebook did not crash and showed online, but no connection to the network was possible. I assume that the vpn api / something else is different on the android apps on Chromebook. Unfortunately, no idea what exactly. But I think, fixing the Android app for Chromebook should be the fastest way to go. (or a custom vpn config?)

On 3 Nov 2017 03:47, "Travis LaDuke" notifications@github.com wrote:

@plieningerweb https://github.com/plieningerweb @interoperate https://github.com/interoperate do you know if any other VPN software works on ChromeOS? ZeroTier needs access to low level system/network stuff that I'm not clear (not being an android dev) ChromeOs allows.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/zerotier/ZeroTierOne/issues/602#issuecomment-341611697, or mute the thread https://github.com/notifications/unsubscribe-auth/AAdXU2pNn2v_9gvaX2HwgL2h9UGANxyoks5syn7NgaJpZM4P51Go .

interoperate commented 7 years ago

The high-level steps to setup OpenVPN on a Chromebook that I have used are:

ChromeOS requires client certificate in pkcs12 format

Begin by adding the public key of the OpenVPN certificate server as an authority, e.g. ca.crt

chrome://settings/certificates

Click on:

Authorities > Import > ca.crt

Ensure that Trust this certificate for identifying websites is selected

Go to:

chrome://settings/certificates

Click on: Your certificates

Import and Bind to Device

Choose the relevant pkcs12 file

Configuring an ONC file that requires two different UUIDs as well as the relevant configuration settings. Once configured, go to:

chrome://net-internals/#chromeos

Import the ONC file

ChrisMagnuson commented 6 years ago

@laduke Cisco has the Cisco Anyconnect app in the chrome websore which is a very nice full featured VPN client that supports ipsec on ChromeOS.

This is a native Chrome OS app, not an android app.

I would like to see this issue reopened and at least put in the backlog as it is very possible and needed. We have been transitioning little bits of things to ZeroTier and are also looking to roll out ChromeOS more dramatically which caused me to bump into this.

PS, I believe AnyConnect as well as other nativey kind of apps like Teamviewer and Chrome RDP use web assembly.

joseph-henry commented 6 years ago

Reopened due to sufficient interest. This isn't on our backlog yet, but there's no harm in discussing further.

glimberg commented 6 years ago

Looks like ChromeOS does have a VPN API and it's not compatible with Android's VPN API. We'll have to take a look at it.

https://developer.chrome.com/apps/vpnProvider

adamierymenko commented 6 years ago

We ordered a Chromebook, so this will be happening eventually.

pandada8 commented 6 years ago

actually there is a flag called chrome://flags/#arc-vpn which can make the vpn app in android part take over the outside chrome, haven't tested the official zerotier android app though. but. yes. a native chrome os app could be better !

arnevanbalgoijen commented 6 years ago

Great idea!

Lucaacer commented 6 years ago

Just to report that zerotier for android works fine for my Lenovo yoga thinkpad 11e 4th gen.

I can connect to my remote webserver through chrome. I can browse the folders of any device which is connected to the network with total commander plus samba plugin. I can even add samba connections to chrome os default file manager though browsing folders this way looks slower (but it might depend on the connection).

A very little masterpiece:)

adamierymenko commented 6 years ago

I think we're closing this one as wontfix. Chromebooks that can install Android apps will work, but we looked into it and building a native Chromebook package for this looks unbelievably painful... too painful for the relatively small user base and without someone supporting it financially. It may not even be possible.

iakat commented 5 years ago

ZeroTier on ChromeOS is unusable as ChromeOS kills background apps. Is there a way around this?

Lucaacer commented 5 years ago

In my experience it works very well, unless you change your network connection.

It works even in crostini but not by sharing the same android vpn, you have to set up a separate vpn connection by installing the software for linux (crostini 75.0.3761.0, dev channel).

denzuko commented 3 years ago

I think we're closing this one as wontfix. ... without someone supporting it financially. It may not even be possible.

Da Planet Security and Majordomo.fund has some strong efforts behind tooling which leverages ZeroTeir. We're also going full chromebook/android internally.

So, @adamierymenko lets grab a meeting and see if there's an alignment in goals. https://calendly.com/denzuko/virtual-coffee

anthonyheckmann commented 3 years ago

Just to report that zerotier for android works fine for my Lenovo yoga thinkpad 11e 4th gen.

I can connect to my remote webserver through chrome. I can browse the folders of any device which is connected to the network with total commander plus samba plugin. I can even add samba connections to chrome os default file manager though browsing folders this way looks slower (but it might depend on the connection).

A very little masterpiece:)

@Lucaacer I have a yogabook C630 and zerotier connects but DNS is messed up and I'm still learning crosh commands to debug the problem (can ping 8.8.8.8 and zerotier ips, but names won't resolve). Any suggestions? I assume I can find a command to cycle DNS or change the settings, but it'd be nice if it just "worked" when flipping on zerotier.

ckwe commented 9 months ago

When the thread was first opened, I agree many Chromebooks did not have Android apps but now it's the inverse. And depending on what folks want to connect, there are uses for both an Android as well as Crostini-based Zerotier setup.

I stumbled upon this for a Crostini-based Zerotier connection specifically, but I'd be perfectly okay if the Android connection also works for Linux apps. Now, could different Zerotier networks be set-up on Android and Crostini? I also wanted to see if doing this could potentially cause network problems with both being on the same device.

I am playing with some really fun, LAN-based Windows apps, including a chat app and games running on Wine and the ultimate connectivity factor would be networking my Chromebook and a device at home remotely! In fact, my home device is older so I will likely use the steps for a router setup found at the link below and I really hope it works!

https://forum.openwrt.org/t/access-lan-devices-from-zerotier-router-across-different-networks/157487/2

Also, for configuring Crostini, is using the method described by Nate8199 the proper, current or best way of configuring Zerotier, or are there any updated directions for Crostini? Some of the steps he listed were somewhat brief so not very clear (at least for a noob like me) so that's why I'm asking about it.