zerotier / install.zerotier.com Goto Github PK

Hello.
Please update the official repository "download.zerotier.com" with packages for Ubuntu 24 (noble), currently curl -s https://install.zerotier.com | sudo bash does not work for Ubuntu 24.

Thanks.

Installation dies when in a chroot, as it waits forever for the identity generation.

https://github.com/faddat/clay/runs/1138033544?check_suite_focus=true

I might be able to fix this, but may also just start copying the sources.list file into my device image using packer, instead. Pretty sure the identity will be generated at first boot.

Also, just realized that I must defer the generation of identity, no choice-- they'll all be the same device otherwise!

around line 134
Detecting Linux Distribution

Does that section need an entry for Ubuntu 18.04 LTS that was released last month?

Content of /etc/os-release

NAME="VMware Photon OS"
VERSION="5.0"
ID=photon
VERSION_ID=5.0
PRETTY_NAME="VMware Photon OS/Linux"
ANSI_COLOR="1;34"
HOME_URL="https://vmware.github.io/photon/"
BUG_REPORT_URL="https://github.com/vmware/photon/issues"

Photon os uses tdnf (yum) as package manager so it can handle rpm files.

That package works on Photon OS 5
https://download.zerotier.com/RELEASES/1.14.0/dist/redhat/el9/zerotier-one-1.14.0-1.el9.x86_64.rpm

What you expect to happen

When running the installer on Rocky Linux, it would determine that it should have a similar yum repo endpoint as CentOS/RHEL

What is actually happening

The installer does not recognize Rocky Linux as CentOS/RHEL equivalent and falls back to generic el7 rpm yum config. With 1.8.5 this causes the installation to proceed, but the zerotier applications fail in finding a dependent library unless it is previously installed:

zerotier/ZeroTierOne#1575 (comment)

Steps to reproduce the error

Start with a current Rocky Linux 8.5 system and run:

curl -s https://install.zerotier.com | sudo bash
zerotier-cli join <valid-network-id>

Recommended fix

Update installer script to match Rocky and configure an identical yum repo as CentOS/RHEL

Can you add the distro kali-rolling to the install debian option.

kali@kali:$ grep VERSION /etc/os-release
VERSION="2020.2"
VERSION_ID="2020.2"
VERSION_CODENAME="kali-rolling"
kali@kali:$
kali@kali:$ uname -v
zerotier/ZeroTierOne#1 SMP Debian 5.5.17-1kali1 (2020-04-21)
kali@kali:$
kali@kali:$ uname -r
5.5.0-kali2-amd64
kali@kali:$

I have been using it on Kali for about a year and works great.

Links to: https://zerotier.atlassian.net/wiki/spaces/SD/pages/7340077/Installing+in+a+Remote+Desktop+Session

Which appears blank in Chrome and Firefox.

Hi guys, I have just spun up a new VPS and went to install ZeroTier and I am getting the following error:

`ubuntu@vps-app-dev-001:~$ curl -s https://install.zerotier.com | sudo bash

*** ZeroTier Service Quick Install for Unix-like Systems

*** Tested OSes / distributions:

*** MacOS (10.13+) (just installs ZeroTier One.pkg)
*** Debian Linux (7+)
*** RedHat/CentOS Linux (6+)
*** Fedora Linux (16+)
*** SuSE Linux (12+)
*** Mint Linux (20+)
*** Kali Linux (2024.1+)

*** Supported architectures vary by OS / distribution. We try to support
*** every system architecture supported by the target.

*** Please report problems by opening a GitHub issue or Pull Request at:
*** https://github.com/zerotier/install.zerotier.com
*** Please include the content of /etc/os-release for your distribution.

*** Detecting Linux Distribution

bash: line 291: [: missing `]'
bash: line 291: ubuntu: command not found
*** Unknown or unsupported distribution! Aborting.
ubuntu@vps-app-dev-001:~$ cat /etc/os-release
PRETTY_NAME="Ubuntu 22.04.4 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.4 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy

ubuntu@vps-app-dev-001:~$
`

When detecting Linux distribution, installation script assumes /etc/SuSE-release file exists for SUSE distros. That fails on new versions because it has been removed.

toor@HOLODECK:~> lsb_release -a
LSB Version:	n/a
Distributor ID:	openSUSE
Description:	openSUSE Tumbleweed
Release:	20210325
Codename:	n/a
toor@HOLODECK:~> curl -s https://install.zerotier.com | sudo bash
[sudo] password for root: 

*** ZeroTier One Quick Install for Unix-like Systems

*** Tested distributions and architectures:
***   MacOS (10.7+) on x86_64 (just installs ZeroTier One.pkg)
***   Debian (7+) on x86_64, x86, arm, and arm64
***   RedHat/CentOS (6+) on x86_64 and x86
***   Fedora (16+) on x86_64 and x86
***   SuSE (12+) on x86_64 and x86
***   Mint (18+) on x86_64, x86, arm, and arm64

*** Please report problems to [email protected] and we will try to fix.

*** Detecting Linux Distribution


*** Package installation failed! Unfortunately there may not be a package
*** for your architecture or distribution. For the source go to:
*** https://github.com/zerotier/ZeroTierOne

Additional information

OpenSUSE documentation has an article for third-party software developers, who wish to add SUSE and openSUSE distros compatibility into their software.

In short, /usr/lib/os-release is the way to go.

Steps to reproduce

Spin up a Debian 10 instance at Vultr, and run the following:
curl -s https://install.zerotier.com | bash
(already logged in as root, so no sudo required)

Output is as follows:
`*** ZeroTier One Quick Install for Unix-like Systems

*** Tested distributions and architectures:
*** MacOS (10.7+) on x86_64 (just installs ZeroTier One.pkg)
*** Debian (7+) on x86_64, x86, arm, and arm64
*** RedHat/CentOS (6+) on x86_64 and x86
*** Fedora (16+) on x86_64 and x86
*** SuSE (12+) on x86_64 and x86
*** Mint (18+) on x86_64, x86, arm, and arm64

*** Please report problems to [email protected] and we will try to fix.

*** Detecting Linux Distribution

*** Found Debian "buster", or "sid" (or similar), creating /etc/apt/sources.list.d/zerotier.list
E: gnupg, gnupg2 and gnupg1 do not seem to be installed, but one of them is required for this operation

*** Installing zerotier-one package...
Hit:1 http://security.debian.org/debian-security buster/updates InRelease
Hit:2 http://deb.debian.org/debian buster InRelease
Hit:3 http://deb.debian.org/debian buster-updates InRelease
Get:4 http://download.zerotier.com/debian/buster buster InRelease [25.9 kB]
Err:4 http://download.zerotier.com/debian/buster buster InRelease
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1657198823E52A61
Reading package lists... Done
W: GPG error: http://download.zerotier.com/debian/buster buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1657198823E52A61
E: The repository 'http://download.zerotier.com/debian/buster buster InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package zerotier-one

*** Package installation failed! Unfortunately there may not be a package
*** for your architecture or distribution. For the source go to:
*** https://github.com/zerotier/ZeroTierOne`

For the record, installing gpg with apt install gpg and using the following method (as shown on the ZeroTier download page) works just fine:
curl -s 'https://raw.githubusercontent.com/zerotier/ZeroTierOne/master/doc/contact%40zerotier.com.gpg' | gpg --import && \ if z=$(curl -s 'https://install.zerotier.com/' | gpg); then echo "$z" | bash; fi

I can also confirm that the simpler method of curl -s https://install.zerotier.com | bash works just fine for their Debian 9 instances over at Vultr.

Hi;

when I try to install zerotier on Debian 10 (Buster) it just don't reconize it; the script just jump to

else
    echo "*** FAILED: unrecognized or ancient distribution: $dvers"
exit 1

The mistake is probably how the script identify Buster at the line 175 but I was'nt able to debug it :(

Note : on my machine cat /etc/debian_version return buster/sid
and cat /etc/debian_version | cut -d '.' -f 1 | cut -d '/' -f 1 return buster

Remark : It's a similar issue of #3

So I install it by shrinking the debian part like this :

if [ -f /etc/debian_version ]; then
	dvers=`cat /etc/debian_version | cut -d '.' -f 1 | cut -d '/' -f 1`
	$SUDO rm -f /tmp/zt-sources-list
	echo '*** Found Debian "buster", or "sid" (or similar), creating /etc/apt/sources.list.d/zerotier.list'
	echo "deb ${ZT_BASE_URL_HTTP}debian/buster buster main" >/tmp/zt-sources-list
...

Remark : I change the line originaly 177 for /buster buster main instead of /buster stretch main

The URL for your repo-signing GPG key is broken. https://raw.githubusercontent.com/zerotier/ZeroTierOne/master/doc/contact%40zerotier.com.gpg gives me a 404.

I wasn't trying to get it because I regularly wear tin hats, but I wanted to import it from the provided URL into my apt keyring (in my ansible playbook). I didn't find any other reference to a GPG key as the install script has it inline which I can (and will have to) use but that's less convenient.

Hi,

The incorrect GPG url is provided on https://www.zerotier.com/download/. This results in an error when trying to install using the more secure instructions. The incorrect GPG url given is https://raw.githubusercontent.com/zerotier/download.zerotier.com/master/htdocs/contact%40zerotier.com.gpg

curl -s https://install.zerotier.com | sudo bash
*** ZeroTier Service Quick Install for Unix-like Systems

*** Tested OSes / distributions:

*** MacOS (10.13+) (just installs ZeroTier One.pkg)
*** Debian Linux (7+)
*** RedHat/CentOS Linux (6+)
*** Fedora Linux (16+)
*** SuSE Linux (12+)
*** Mint Linux (20+)
*** Kali Linux (2024.1+)

*** Supported architectures vary by OS / distribution. We try to support
*** every system architecture supported by the target.

*** Please report problems by opening a GitHub issue or Pull Request at:
*** https://github.com/zerotier/install.zerotier.com
*** Please include the content of /etc/os-release for your distribution.

*** Detecting Linux Distribution

*** Unknown or unsupported distribution! Aborting.

cat /etc/os-release
NAME="Alibaba Cloud Linux"
VERSION="3 (Soaring Falcon)"
ID="alinux"
ID_LIKE="rhel fedora centos anolis"
VERSION_ID="3"
PLATFORM_ID="platform:al8"
PRETTY_NAME="Alibaba Cloud Linux 3 (Soaring Falcon)"
ANSI_COLOR="0;31"
HOME_URL="https://www.aliyun.com/"

I am not sure with the use of a script coming from the network directly...

Maybe it is OK, you may know security way better than me. But I feel it is unsecure, and if the first step to use networking software is something I feel unsecure, I feel the whole product to be unsecure.

Installation on ipv6-only machines works fine in principle, but can't fetch the GPG key atm as github.com is only available on IPv4, see zerotier/ZeroTierOne#1277

@adamierymenko suggested to use https://download.zerotier.com/[email protected]

Ubuntu and I guess others too got the problem that if the url is not https it is not working.
Any reason why http is used instead of https?
https://github.com/zerotier/install.zerotier.com/blob/master/install.sh.in#L177

Get:10 http://download.zerotier.com/debian/bionic bionic InRelease              
Err:10 http://download.zerotier.com/debian/bionic bionic InRelease
  Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
Reading package lists... Done               
E: Failed to fetch http://download.zerotier.com/debian/bionic/dists/bionic/InRelease  Clearsigned file isn't valid, got 'NOSPLIT' (does the network require authentication?)
E: The repository 'http://download.zerotier.com/debian/bionic bionic InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Hello,

I'm trying to add the ZeroTier repository on openSUSE Tumbleweed without using the installer.

I get a warning that https://download.zerotier.com/redhat/el/7/repodata/repomd.xml is not signed.

Warning: File 'repomd.xml' from repository 'ZeroTier-Download-RHEL-7' is unsigned.

    Note: Signing data enables the recipient to verify that no modifications occurred after the data
    were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system
    and in extreme cases even to a system compromise.

    Note: File 'repomd.xml' is the repositories master index file. It ensures the integrity of the
    whole repo.

    Warning: We can't verify that no one meddled with this file, so it might not be trustworthy
    anymore! You should not continue unless you know it's safe.

File 'repomd.xml' from repository 'ZeroTier-Download-RHEL-7' is unsigned, continue? [yes/no] (no)

It's not a problem for me since I know it's safe with HTTPS and the individual packages are signed, but still something that can be improved.

The variable $VERSION_ID used in

Same problem can be observed in ValveSoftware/steam-for-linux#9857

Old bug report of this problem https://groups.google.com/g/linux.debian.bugs.dist/c/AYCKa0HZzSI

A possible solution may be to assume that an empty VERSION_ID is debian:testing or debian:sid, and using MAX_SUPPORTED_DEBIAN_VERSION

/etc/os-release info:

GNU nano 6.2                                                /etc/os-release                                                         
PRETTY_NAME="elementary OS 7.1 Horus"
NAME="elementary OS"
CPE_NAME="cpe:/o:elementary:elementary_os:7.1"
VERSION_ID="7.1"
VERSION="7.1 Horus"
VERSION_CODENAME=horus
ID=elementary
ID_LIKE="ubuntu debian"
HOME_URL="https://elementary.io/"
DOCUMENTATION_URL="https://elementary.io/docs/learning-the-basics"
SUPPORT_URL="https://elementary.io/support"
BUG_REPORT_URL="https://docs.elementary.io/contributor-guide/feedback/reporting-issues"
PRIVACY_POLICY_URL="https://elementary.io/privacy-policy"
UBUNTU_CODENAME=jammy
UBUNTU_PRETTY_NAME="Ubuntu 22.04.3 LTS"
UBUNTU_NAME="Ubuntu"
UBUNTU_VERSION_ID="22.04"
UBUNTU_VERSION="22.04.3 LTS (Jammy Jellyfish)"

Zerotier dependency resolution fails on Opensuse Tumbleweed

Package specifies the following dependencies:
systemd
iproute
rtld(GNU_HASH)
libstdc++
libgcc_s.so.1()(64bit)
libgcc_s.so.1(GCC_3.0)(64bit)
libm.so.6()(64bit)
libpthread.so.0()(64bit)
libstdc++.so.6()(64bit)
libstdc++.so.6(CXXABI_1.3)(64bit)
libstdc++.so.6(GLIBCXX_3.4)(64bit)
libstdc++.so.6(GLIBCXX_3.4.15)(64bit)
libm.so.6(GLIBC_2.2.5)(64bit)
libpthread.so.0(GLIBC_2.2.5)(64bit)
libstdc++.so.6(GLIBCXX_3.4.11)(64bit)
libstdc++.so.6(GLIBCXX_3.4.14)(64bit)
libstdc++.so.6(GLIBCXX_3.4.17)(64bit)
libstdc++.so.6(GLIBCXX_3.4.18)(64bit)
libstdc++.so.6(GLIBCXX_3.4.9)(64bit)
libc.so.6(GLIBC_2.14)(64bit)

libstdc++ isn't seen as a resolvable dependency by zypper despite libstdc++6 being installed.

Was previously working and now no longer working. Unsure what else ya'lls need.

When i do curl -s https://install.zerotier.com/ | bash
It return:
`
Problem: nothing provides libcrypto.so.10()(64bit) needed by zerotier-one-1.10.5-1.el7.x86_64
Solution 1: do not install zerotier-one-1.10.5-1.el7.x86_64
Solution 2: break zerotier-one-1.10.5-1.el7.x86_64 by ignoring some of its dependencies

Choose from above solutions by number or cancel [1/2/c] (c): c
`

Required

• What you expect to be happening.

ZeroTier should install.

• What is actually happening?

The installer fails because of an unrecognized distro.

• Any steps to reproduce the error.

Install EndeavourOS. Try to install ZeroTier. Notice the error.

• Any screenshots that would help us out.

It’s a fairly straightforward issue, so these shouldn’t be necessary.

Additional information

Desktop (please complete the following information):

• OS: Linux
• EndeavourOS (rolling release)
• ZeroTier Version: none

Additional context

• Have you tried screaming into your router?

Yes, but for an unrelated issue. ZeroTier actually works fine on EndeavourOS, the installer just isn’t able to detect it as an arch-based distro. I would recommend getting ZeroTier on Flatpak, AUR, Snap, or literally anything other than the installer, but I know that this is difficult.

If you just cat /etc/lsb-release, you can grep for EndeavourOS. I don’t think you need to set up any automatic updates, unless you want to do that on AUR (which I would recommend).

This Ubuntu version is going to be released in couple months, daily builds are already available. Maybe we could get support in before it's officially out?

Hi! I'm trying to install zerotier using the following command on my Pop!_OS 22.04:
curl -s https://install.zerotier.com | sudo bash

I get the following error:

*** ZeroTier Service Quick Install for Unix-like Systems

*** Tested OSes / distributions:

***   MacOS (10.13+) (just installs ZeroTier One.pkg)
***   Debian Linux (7+)
***   RedHat/CentOS Linux (6+)
***   Fedora Linux (16+)
***   SuSE Linux (12+)
***   Mint Linux (20+)
***   Kali Linux (2024.1+)

*** Supported architectures vary by OS / distribution. We try to support
*** every system architecture supported by the target.

*** Please report problems by opening a GitHub issue or Pull Request at: 
*** https://github.com/zerotier/install.zerotier.com
*** Please include the content of `/etc/os-release` for your distribution.

*** Detecting Linux Distribution

*** Unknown or unsupported distribution! Aborting.

Here's what my /etc/os-release looks like:

NAME="Pop!_OS"
VERSION="22.04 LTS"
ID=pop
ID_LIKE="ubuntu debian"
PRETTY_NAME="Pop!_OS 22.04 LTS"
VERSION_ID="22.04"
HOME_URL="https://pop.system76.com"
SUPPORT_URL="https://support.system76.com"
BUG_REPORT_URL="https://github.com/pop-os/pop/issues"
PRIVACY_POLICY_URL="https://system76.com/privacy"
VERSION_CODENAME=jammy
UBUNTU_CODENAME=jammy
LOGO=distributor-logo-pop-os

The install script does not seem to throw proper exit codes for error handling, it would be useful to have proper exit codes for automation.