* feat: integrated xray as a library and added split-tunneling
* fix: added copying amnezia_xray.dll to build dir
* fix: changed path on darwin
* chore: clean up getting default device
* chore: removed WSAGetLastError from sockopt logging
* fix: get rid of debug logs in xray handlers
* fix: minor fixes and xray debugging capabilities
* fix: macos default interface fix
* fix: roll-back ipv6 sockopt for mac
* fix: bind IPv6 on Windows
* fix: (win) better IPv6 handling and router fixes
* feat: prebuilts uploaded
* fix: removed redundant cmake definitions
* feat: moved xray to service process, reworked errors
* fix: return values in networkUtilities
* fix: macos build fixes
* fix: (windows) cmake fixes
* fix: (windows) compilation fix
* fix: (windows) changed location of amnezia_xray.dll
* feat: xray logs added to system service
* chore: bump xray&tun2socks versions for android
* chore: cleanup of XrayProtocol class
* removed killswitch
* removed redundant members and basic cleanup
* feat: support split-tunneling in iOS and macOS NE
* chore: update active interface index based on network path and available interfaces
* refactor: update network path handling and logging in PacketTunnelProvider
* chore: bump xray deps
---------
Co-authored-by: Yaroslav Yashin <yaroslav.yashin@gmail.com>
* fix: app freeze on quit
* fix: typo in VpnConnection destructor
* add trace info
* add more trace info
* set timelimit for flushDns
* Refactor IpcClient::Interface access logic
* cleanup unused variable
* cleanup trace info
* fix: remove second disconnect from VPN on app close
* this object will be deleted at app close
* Don't terminate VPN thread on Linux
* Revert "Don't terminate VPN thread on Linux"
This reverts commit 20e4ea2d4a.
* disconnect all signals from vpnconnection on exit
* add interruption request on vpnConnectionThread
* use checktimer only for iOS
* disconnect all signals from vpnconnection on exit
* disconnect signals on exit before VPN disconnect
* add disconnectSlots method
* fix: add allow traffic rules on killswitch disable
* wait for response from service before object destroy
* change disconnect from vpn order
* add delay for connection close
* change disconnect method order
* use stop method for protocol disconnecect
* change disconnect method order
* allow dns traffic after app close
* delete tun on disconnect
---------
Co-authored-by: vkamn <vk@amnezia.org>
* fix(api_key): added displaying vpn_key field added in older version of the app
* revert changes
* fix: implemented generation of api key text for PremiumV2
* fix: deleted unnecessary code
* saving apikey text when generating
* added method for vpn key export, fixed wrong saving file
* There's a common issue of building iOS apps on Qt 6.8 because of new introduced ffmpeg dependency in multimedia Qt package
ref: https://community.esri.com/t5/qt-maps-sdk-questions/build-failure-on-ios-with-qt-6-8/m-p/1548701#M5339
* Cmake related changes
* Source code changes
* Various entitlements
* Ci-cd config update
* Resources changes
* Submodules updated
* Remove me
* QtWidget exclusion omitted
* Distribution errors fixed
* Outdated files deleted
* macos_ne cmake fixed
* fix: update provisioning profile specifiers for macOS network extension
* fix: update provisioning profile specifiers and code sign flags for macOS build
* Revert me
(temporary 3rd-build commit pointer)
* fix: Welcome screen fix
* fix: ci/cd hanging forever fix
* fix: Fixed error popup on macos on file save
* refactor: rename networkextension target to AmneziaVPNNetworkExtension in macos build configuration
* feat: add autostart support for Mac App Store builds on macOS
Fixes: QA-8
* feat: add debug logging to Autostart functionality on macOS
* Revert "feat: add autostart support for Mac App Store builds on macOS"
This reverts commit 3bd25656fb.
* feat: add platform-specific close window behavior for macOS App Store build with Network Extension
Closes: QA-12
* When the application starts with "Start minimized" enabled on macOS (especially the
sandboxed App-Store build compiled with MACOS_NE), fully hiding the window prevents it
from being restored by clicking the Dock icon. The proper behaviour is to start the
window in the *minimized* state instead. That way the window is still part of the
window list and the system automatically brings it back when the user clicks the Dock
icon, replicating the native experience.
On the other platforms we keep the old behaviour (hide the window completely and rely
on the tray icon), therefore we switch at runtime by checking the current OS.
Closes: QA-7
Closes: QA-8
* Revert "When the application starts with "Start minimized" enabled on macOS (especially the"
This reverts commit 7b0d17987c.
* feat: MACOS_NE systray menu support
* feat: add macOS notification handler and install event filter on main window
* feat: implement custom close behavior for Amnezia application on different platforms
* fix: update provisioning profile specifiers for macos builds
* fix: Fatal error in logs
CLI-216
* fix: disabled unavailable on macos ne service logs
* fix: dock icon now hides only when window is closed; menubar icon shows always
Initial state of the docker icon to be presented follows "Start minimized" setting in app settings.
* temp-fix: temporary disable all OpenVPN options of VPN on MACOS_NE since it's not working yet.
* fix: build script updated
* feat: add macOS NE build workflow to GitHub Actions
* fix: Not working Auto start toggle is hidden
* fix: Log spamming during xray connection fixed
* 3rd-prebuild points to commit that stores macos_ne universal binaries.
* fix: missing native dependency on linking stage fixed
* chore: update link to submodule
---------
Co-authored-by: vladimir.kuznetsov <nethiuswork@gmail.com>
* added signal-slot connection between corecontroller and systemtraynofificationhandler updating websiteurl
* cleared up the commented lines
* fixed andorid includes for systemtraynotificationhandler
* fixed issue when ui was not getting update about clearing profile cache right after it
* fixed the problem of not clearing the profile
* refactored reload function in protolocolsModel
* refactored the issue with signal connect in corecontroller
* refactoring: moved shared code into reusable functions for ApiConfigsController
* feat: add xray support in apiConfigsController
* feat: added a temporary switch for the xray protocol on api settings page
* feat: added supported protocols field processing
* refactoring: moved IsProtocolSelectionSupported to apiAccountInfoModel
* LOCK_FILE for zypper
Checking LOCK_FILE for zypper to support OpenSUSE
* Installation for OpenSUSE
Docker installation support for OpenSUSE
* quiet for zypper
* LOCK_CMD variable
Implementing the LOCK_CMD variable for different OS.
* additional exception for "server is busy"
* Replacing and with or
Replacing && with ||
* undo changes to serverController
* rpm.lock
rpm.lock for dnf yum and zypper
* LOCK_CMD
check for dnf
* Added zypper in check_user_in_sudo
* bugfix: fixed the migration form appearing on app start
* feature: added app version to api requests payload
* chore: remove unused file
* feature: extended logging in service part
* chore: bump version
* chore: update ru translation file
* added the ability to change port after installing xray
* fixed issue with not updating server config for xray on windows platform
* fixed some warning in exportcontroller.cpp
* Add allowed DNS list for killswitch
* Windows killswitch strict mode backend part
* Killswitch strict mode for Linux and MacOS
* Windows fixes
* feature: Add Kill Switch settings page with strict mode option
* fix windows build after merge
* Refresh killswitch mode when it toggled
* Use HLM to store strictMode flag
* Some Linux updates
* feat: Enhance VerticalRadioButton with improved styling and disabled states
* Refresh killSwitch state update
* Fix build
* refactor: Modularize header components
* Change kill switch radio button styling
* Fix strict kill switch mode handling
* Refactor: Replace HeaderType with new Types for headers in QML pages
* Remove deprecated HeaderType QML component
* Refresh strict mode killswitch after global toggle change
* Implement model, controller and UI for killswitch dns exceptions
* Connect backend part and UI
* Change label text to DNS exceptions
* Remove HeaderType from PageSettingsApiDevices
* Some pretty fixes
* Fix problem with definition sequence of PageSettingsKillSwitchExceptions.pml elements
* Add exclusion method for Windows firewall
* Change ubuntu version in deploy script
* Update ubuntu version in GH actions
* Add confirmation popup for strict killswitch mode
* Add qt standard path for build script
* Add method to killswitch for expanding strickt mode exceptions list and fix allowTrafficTo() for Windows. Also Added cache in KillSwitch class for exceptions
* Add insertion of gateway address to strict killswitch exceptions
* Review fixes
* buildfix and naming
---------
Co-authored-by: aiamnezia <ai@amnezia.org>
* Error for cgroup mountpoint
Added handling of message: cgroup mountpoint does not exist.
* Case for error cgroup
Added case and case description for: Cgroup Mountpoint Does Not Exist
* Case for Runc
Added error handling for Runc, which does not work in cgroup v2.
Changed numbering of new errors.
* stdErr handling fot run_container
Enabling stdErr handling fot run_container.sh
* change for stdErr handling
* Another place to handle the error 211
Another place to handle the error: ServerRuncNotWorkOnCgroupsV2
* test_1
* test 2
* test 3
* Moving error handling
Moving error handling to the right place in the controller.
* Polishing
* Еext correction
Сorrection of description text.
* Direct use of the $HOME variable.
* Sudo check witch variable $HOME.
Direct use of the $HOME variable.
* Changing for Error 208
Changing description and title for error 208
* Revert "Changing for Error 208"
This reverts commit f45624c023.
* Changing for Error 207
Changing description and title for Error 207
* Username if whoami returns an error
Сommand to use home directory name if whoami returns error or is missing for prepare_host.sh.
* Update check_user_in_sudo.sh
Сommand to use home directory name if whoami returns error or is missing for check_user_in_sudo.sh.
Checking server user permissions to use sudo using a package manager or using uname.
Сhecking and redefining the system language.
Checking requirements for sudo users or root in script.
* Cases have been changed and added.
Changed description of the “Server User Not In Sudo” case.
Corrected the name and description of the "ServerPacketManagerError" case. Packet to Package.
Adding a "SudoPackageIsNotPreinstalled" case.
Adding a "ServerUserNotAllowedInSudoers" case.
Adding a "ServerUserPasswordRequired" case.
* Serves errors have been changed and added.
Corrected the name of the "ServerPacketManagerError" error to "ServerPackageManagerError".
Adding a "SudoPackageIsNotPreinstalled" error.
Adding a "ServerUserNotAllowedInSudoers" error.
Adding a "ServerUserPasswordRequired" error.
* Return ServerPacketManagerError
Return to the name "ServerPacketManagerError".
* Added errors handling
Added new errors' handling to serverController.cpp.
Permission checks are also performed for the root user.
* Update translations
Updating translations for two existing server errors.
* Myanmar translation update
* Update for my_MM.ts
* checking for not allowed
Checking for "not allowed" in stdOut
* Removed "not allowed"
Removed check for "not allowed" in stdOut
* Removed nested launch
Removed nested launch via sudo
* Returned nested launch
Returned nested launch via sudo
* All checks with sudo
Both checks with sudo always run.
* Moved removing timestamp sudo
Removing the sudo timestamp is done every time.
* Checking the user directory
Checking the accessibility of the user's home directory
* Polishing
Изменение порядка обработки ошибок.
* changing detection order
change the order of detection of inconsistencies:
1. sudo not preinstalled. (if user != root)
2. user not in sudo or wheel group. (if user != root)
3. user's directory is not accessible. (for all)
4. user not allowed in sudoers. (for all)
5. user password required. (for all)
* Packet to Package
* chore: bump version (#1463)
* fix for sh (#1462)
Fix for servers where sh is used as default shell.
* Username if whoami returns an error
Сommand to use home directory name if whoami returns error or is missing for prepare_host.sh.
* Update check_user_in_sudo.sh
Сommand to use home directory name if whoami returns error or is missing for check_user_in_sudo.sh.
Checking server user permissions to use sudo using a package manager or using uname.
Сhecking and redefining the system language.
Checking requirements for sudo users or root in script.
* Cases have been changed and added.
Changed description of the “Server User Not In Sudo” case.
Corrected the name and description of the "ServerPacketManagerError" case. Packet to Package.
Adding a "SudoPackageIsNotPreinstalled" case.
Adding a "ServerUserNotAllowedInSudoers" case.
Adding a "ServerUserPasswordRequired" case.
* Serves errors have been changed and added.
Corrected the name of the "ServerPacketManagerError" error to "ServerPackageManagerError".
Adding a "SudoPackageIsNotPreinstalled" error.
Adding a "ServerUserNotAllowedInSudoers" error.
Adding a "ServerUserPasswordRequired" error.
* Return ServerPacketManagerError
Return to the name "ServerPacketManagerError".
* Update translations
Updating translations for two existing server errors.
* Added errors handling
Added new errors' handling to serverController.cpp.
Permission checks are also performed for the root user.
* Myanmar translation update
* Update for my_MM.ts
* checking for not allowed
Checking for "not allowed" in stdOut
* Removed "not allowed"
Removed check for "not allowed" in stdOut
* Removed nested launch
Removed nested launch via sudo
* Returned nested launch
Returned nested launch via sudo
* All checks with sudo
Both checks with sudo always run.
* Moved removing timestamp sudo
Removing the sudo timestamp is done every time.
* Checking the user directory
Checking the accessibility of the user's home directory
* Polishing
Изменение порядка обработки ошибок.
* changing detection order
change the order of detection of inconsistencies:
1. sudo not preinstalled. (if user != root)
2. user not in sudo or wheel group. (if user != root)
3. user's directory is not accessible. (for all)
4. user not allowed in sudoers. (for all)
5. user password required. (for all)
* Undoing unintended changes
Undoing unintended changes.
* Undoing unintended change
Undoing unintended change.
* not allowed to use sudo
The user is not allowed to use sudo on this server.
* Capital letters in the error
Capital letters in the error description.
---------
Co-authored-by: albexk <albexk@proton.me>
Yaroslav Gurov