topic Re: GlobalProtect for Arch Linux in GlobalProtect Discussions

GlobalProtect for Arch Linux

Rohit_0110 — Mon, 22 Jan 2024 19:58:05 GMT

Hi, I want to use global protect in Arch linux. I looked for the setup file at link which only exist with .deb and .rpm
anyone Know how could I make this possible for arch Linux

Re: GlobalProtect for Arch Linux

lidewu — Tue, 23 Jan 2024 02:55:27 GMT

Hi,

https://aur.archlinux.org/packages?K=globalprotect&SB=p

https://archlinux.org/packages/extra/x86_64/globalprotect-openconnect/

You can test it

Re: GlobalProtect for Arch Linux

Rohit_0110 — Tue, 23 Jan 2024 15:57:14 GMT

Hi, @lidewu Thanks!
As I want to use this in a organisation is it safe as per the organisation

Re: GlobalProtect for Arch Linux

jfarm — Tue, 23 Jan 2024 19:05:18 GMT

You can install the official one, I've done it several times on Arch both in my lab and with my corporate issued machine.

Extract the tgz file from the support portal.

Locate the GlobalProtect_UI_tar-X.Y.Z.tgz within that directory and extract it.

Go to the extracted directory, execute sudo ./install.sh

It should install without issue

Also if using SAML auth you have to add the default browser config, or it will fail when passing the SAML prompts with the system rendering engine.

To fix this edit /opt/paloaltonetworks/globalprotect/pangps.xml with sudo or root permissions.

<?xml version="1.0" encoding="UTF-8"?>
<GlobalProtect>
       <Settings>
               <can-continue-if-portal-cert-invalid>yes</can-continue-if-portal-cert-invalid>
               <default-browser>yes</default-browser>

Note: can-continue-if-portal-cert-invalid>yes</can-continue-if-portal-cert-invalid is required if you use *.gpcloudservice.com for your Prisma portal, otherwise you shouldn't set this option.

Re: GlobalProtect for Arch Linux

Rohit_0110 — Wed, 24 Jan 2024 15:52:59 GMT

Hi @jfarm, Thanks!

I had already edited that but it working once after each reboot. As, I discconect and try to reconnect it won't and give Error: Default Browser not enabled

Re: GlobalProtect for Arch Linux

R.Bilgin — Wed, 15 Jan 2025 02:31:17 GMT

In my case I am not able to install it. When I run the command "sudo ./install.sh", I get
systemd is detected.

Enable gps service...

Enable gpa service...

Starting gp service...

Enable gp autostart

Set default browser...

Starting gpa...

but it doesn't do anyting. If I check the logs, I seee gpdservice is masked.

Re: GlobalProtect for Arch Linux

clearythom — Tue, 25 Feb 2025 15:16:28 GMT

There's a couple dependencies that need to be installed, wmctrl and Qt5 WebKit. wmctrl requires X11 instead of Wayland. I don't think they've included Wayland support in the app yet. Best to install the `GlobalProtect_tar` package instead of the `GlobalProtect_UI_tar` package for now and run it with the command line, or figure out how to work around it.

https://docs.paloaltonetworks.com/globalprotect/5-1/globalprotect-app-user-guide/globalprotect-app-for-linux/use-the-globalprotect-app-for-linux?otp=idb48857dc-e4f9-47fd-936b-5483e1c62ddd#idb48857dc-e4f9-47fd-936b-5483e1c62ddd

Re: GlobalProtect for Arch Linux

epolinko — Mon, 21 Apr 2025 16:03:34 GMT

I'm having an issue getting the cli installed on Arch. Tried using "sudo install.sh" from inside package GlobalProtect_tar-6.2.1.1-7.tgz, and get similar output as R.Bilgin above. Here's the contents of my /opt/paloaltonetworks/globalprotect/install.log:

==============================
install.sh
===============================
Mon Apr 21 11:52:47 AM EDT 2025
systemd is detected.
cp: cannot stat 'globalprotect': No such file or directory
cp: cannot stat 'PanGPA': No such file or directory
cp: cannot stat 'PanGPS': No such file or directory
cp: cannot stat 'PanGpHip': No such file or directory
cp: cannot stat 'PanGpHipMp': No such file or directory
cp: cannot stat 'globalprotect.sha256': No such file or directory
cp: cannot stat 'PanGPA.sha256': No such file or directory
cp: cannot stat 'PanGPS.sha256': No such file or directory
cp: cannot stat '*.so*': No such file or directory
cp: cannot stat 'license.cfg': No such file or directory
cp: cannot stat 'gpd': No such file or directory
cp: cannot stat 'gpd.service': No such file or directory
cp: cannot stat 'gpa.service': No such file or directory
cp: cannot stat 'pre_exec_gps.sh': No such file or directory
cp: cannot stat 'gpui_apt_dep.sh': No such file or directory
cp: cannot stat 'gpui_yum_dep.sh': No such file or directory
cp: cannot stat 'globalprotect.1.gz': No such file or directory
Enable gps service...
cp: cannot stat '/opt/paloaltonetworks/globalprotect/gpd.service': No such file or directory
chmod: cannot access '/opt/paloaltonetworks/globalprotect/pre_exec_gps.sh': No such file or directory
Failed to enable unit: Unit gpd.service does not exist
Enable gpa service...
Starting gp service...
Failed to start gpd.service: Unit gpd.service not found.
Starting gpa...
Login User: epolinko
SUDO User: epolinko
Effect User: root
start GPA for epolinko
bash: line 1: /opt/paloaltonetworks/globalprotect/PanGPA: No such file or directory

Re: GlobalProtect for Arch Linux

epolinko — Wed, 30 Apr 2025 14:19:23 GMT

It ended up being that the version of the installer I was using (PanGPLinux-6.2.1) was missing files for the "generic" install. When I tried PanGPLinux-6.2.0 it installed fine on my Arch system.

Re: GlobalProtect for Arch Linux

ebatesx — Tue, 05 Aug 2025 20:01:35 GMT

I can concur that the generic .tar files (PanGPLinux-6.0.10-c7) are all missing gpd.service, gpa.service, etc. Look at /opt/paloaltonetworks/globalprotect/install.log and you'll see about 20 "cannot stat" errors when the install script tries to copy them in.
<edit>
Actually, digging further. All PanGPLinux-6.2.x where x == 6,7,8,9 simply no longer contain any "tar" generic files at all. And, as Epolinko pointed out 6.2.1 is missing a lot of files from it's version of the .tar's

So it would appear that PanGPLinux-6.2.0-c10 is the last version with support for anything other than Debian (Ubuntu) and Red Hat.
And, yes, on Arch you have to compile qt5-webkit out of AUR and it takes FOREVER...