can not install Tunnelblick on macOS Sierra

[kut...@gmail.com]

Installer says - 

The installation or repair took too long or failed. Try again?

Tried reboot and install - no help.

Here is console log:

default 22:44:01.501776 +0700 Tunnelblick UNIX error exception: 17

default 22:44:01.502164 +0700 Tunnelblick 0x60000026a980 opened /private/var/db/mds/system/mdsDirectory.db: 50744 bytes

default 22:44:01.503465 +0700 Tunnelblick UNIX error exception: 17

default 22:44:01.504097 +0700 Tunnelblick UNIX error exception: 17

default 22:44:01.508850 +0700 trustd asynchronously fetching CRL (http://crl.apple.com/timestamp.crl) for client (Tunnelblick[1721])

default 22:44:01.509201 +0700 trustd asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (Tunnelblick[1721])

default 22:44:01.552420 +0700 trustd asynchronously fetching CRL (http://crl.apple.com/timestamp.crl) for client (Tunnelblick[1721])

default 22:44:01.553077 +0700 trustd asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (Tunnelblick[1721])

default 22:44:01.802892 +0700 trustd asynchronously fetching CRL (http://crl.apple.com/timestamp.crl) for client (Tunnelblick[1721])

default 22:44:01.803343 +0700 trustd asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (Tunnelblick[1721])

default 22:45:21.406349 +0700 authd Succeeded authorizing right 'system.privilege.admin' by client '/Volumes/Tunnelblick/Tunnelblick.app' [1721] for authorization created by '/Volumes/Tunnelblick/Tunnelblick.app' [1721] (13,0)

default 22:45:21.559828 +0700 authd Succeeded authorizing right 'system.privilege.admin' by client '/Volumes/Tunnelblick/Tunnelblick.app' [1721] for authorization created by '/Volumes/Tunnelblick/Tunnelblick.app' [1721] (12,0)

default 22:45:21.561880 +0700 authd Succeeded authorizing right 'system.privilege.admin' by client '/Volumes/Tunnelblick/Tunnelblick.app' [1721] for authorization created by '/Volumes/Tunnelblick/Tunnelblick.app' [1721] (12,0)

default 22:45:21.588991 +0700 authd Succeeded authorizing right 'system.privilege.admin' by client '/usr/libexec/security_authtrampoline' [1756] for authorization created by '/Volumes/Tunnelblick/Tunnelblick.app' [1721] (3,0)

default 22:45:21.590868 +0700 security_authtrampoline executing /Volumes/Tunnelblick/Tunnelblick.app/Contents/Resources/installer

[Tunnelblick developer]

If you're installing into a virtual machine, try copying the Tunnelblick disk image (the .dmg) onto the virtual hard drive (e.g. the Desktop of the VM) and installing from that.

Otherwise, please provide more of the Console log. There should be a series of messages about Tunnelblick's installation process with many details.

[psd...@gmail.com]

I am having th same problem. Tried Stable, Beta and older version. Log:

Jul  2 10:51:24 Pauls-MacBook-Air Tunnelblick[1161]: Tunnelblick: OS X 10.12.5; Tunnelblick 3.7.2beta03 (build 4840)

Jul  2 10:51:25 Pauls-MacBook-Air Tunnelblick[1161]: Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.

Jul  2 10:51:33 Pauls-MacBook-Air Tunnelblick[1161]: Tunnelblick needs to:

 • Be installed in /Applications as Tunnelblick

 • Change ownership and permissions of the program to secure it

 • Secure configurations

Jul  2 10:51:33 Pauls-MacBook-Air Tunnelblick[1161]: Beginning installation or repair

Jul  2 10:51:34 Pauls-MacBook-Air Tunnelblick[1161]: Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   launchctlPlistHashOK = YES

   tunnelblickdPlistOK  = YES

   socketOK             = NO

Jul  2 10:51:34 Pauls-MacBook-Air Tunnelblick[1161]: installer did not make the necessary changes

Jul  2 10:51:39 Pauls-MacBook-Air Tunnelblick[1161]: Installation or repair failed; Log:

Tunnelblick installer started 2017-07-02 10:51:33. 1 arguments: 0x0017

Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755

Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0

Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users/pauld with owner 0:0 and permissions 755

Changed ownership of /Users/pauld/Library/Application Support/Tunnelblick from 501:20 to 501:80

Changed ownership of /Users/pauld/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = NO

   launchctlPlistHashOK = NO

   tunnelblickdPlistOK  = YES

   socketOK             = NO

Replaced /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

Jul  2 10:51:39 Pauls-MacBook-Air Tunnelblick[1161]: applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

Jul  2 10:51:39 Pauls-MacBook-Air Tunnelblick[1161]: Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   launchctlPlistHashOK = YES

   tunnelblickdPlistOK  = YES

   socketOK             = NO

Jul  2 10:51:39 Pauls-MacBook-Air Tunnelblick[1161]: Not unloading kexts and not deleting logs because tunnelblickd is not loaded.

Jul  2 10:51:39 Pauls-MacBook-Air Tunnelblick[1161]: Finished shutting down Tunnelblick; allowing termination

Let me know if you need further info (and how to find it)

[Tunnelblick developer]

Thanks for providing the log. The problem is shown here:

    tunnelblickdHashOK   = YES

    launchctlPlistHashOK = YES

    tunnelblickdPlistOK  = YES

    socketOK             = NO

This means that for some reason macOS did not create the "socket" that the Tunnelblick GUI (the part of Tunnelblick that you interact with) uses to communicate with the Tunnelblick daemon (the part of Tunnelblick that performs privileged operations).

The socket is sort of like a file, and should be located at /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket, but it doesn't seem to be present. (Note: because it is a socket and not a file, it will not show up if you look at /var/run in Finder. You can go into Terminal and do "ls -l /var/run" to see that it does exist.)

Tunnelblick tells macOS to create the socket as part of the installation process, so it is peculiar that isn't happening.

I suggest that you shut down your computer and then start it again and see if that helps.

[psd...@gmail.com]

Thank you for the explanation. I tried a shutdown with the same result. I've no idea how to fix this

[Tunnelblick developer]

I can only suggest some general macOS troubleshooting tips:

• If you have any security software installed (antivirus, etc.), try installing Tunnelblick after disabling it.
  
  
• Do a "Safe Boot" to clear OS caches, then boot normally. You shouldn't do anything while in Safe Mode; just wait for it to finish booting and then restart normally.
  
  
• Use Disk Utility (/Applications/Utilities/Disk Utility) and run First Aid on your startup volume.
  

[benjamin...@gmail.com]

I have exactly the same problem here.

The socket appears in /var/run but the log file always states "socketOK=NO" for some reason.

[mattia.t...@gmail.com]

Exactly the same problem here...

The problem started before upgrading to High Sierra and it is still there after upgrading to High Sierra.

No way to run Tunnelblick! Please help!

[Tunnelblick developer]

Please list the socket in Terminal by copy/pasting the following:

ls -l@e /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

It should look like:

srw-rw-rw-  1 root  daemon  0 Dec  7 16:34 /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

(of course, the date and time may be different.)

If it doesn't, please post the output.

[Mattia Trussardi]

Hello, no .pid file for tunnelblick in that folder.

PS: I thought it was a permission issue but I already checked all the permissions in /tmp /private/tmp.

PPS: I already uninstalled completely tunnelblick (with your uninstaller script) and tried to install it again (latest beta) but with no luck. Always the same error appears.

Thanks in advance.

Mattia Trussardi

------------------------------------------------------------------------
Mattia Trussardi
mattia.t...@gmail.com
Cell. +39 3294158330
------------------------------------------------------------------------

Il giorno 11 dic 2017, alle ore 15:12, Tunnelblick developer <jkbu...@gmail.com> ha scritto:

ls -l@e /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

[Tunnelblick developer]

It isn't a ".pid". and it isn't a file, it is a ".socket". Please post the output dome the "ls".

On Monday, December 11, 2017 at 9:43:38 AM UTC-5, Mattia Trussardi wrote:

Hello, no .pid file for tunnelblick in that folder.

PS: I thought it was a permission issue but I already checked all the permissions in /tmp /private/tmp.

PPS: I already uninstalled completely tunnelblick (with your uninstaller script) and tried to install it again (latest beta) but with no luck. Always the same error appears.

Thanks in advance.

Mattia Trussardi

------------------------------------------------------------------------
Mattia Trussardi
<> 

Cell. +39 3294158330
------------------------------------------------------------------------

[Mattia Trussardi]

I know!

Here is the output!

Thanks again!

Mattia

MacBook-Pro-di-Mattia:run mattia$ ls -l@e

total 72

-rw-------  1 root             daemon              0 11 Dic 14:56 automount.initialized

srw-rw-rw-  1 root             daemon              0 11 Dic 14:57 cloud-drive-eventd-socket

-rw-r--r--  1 root             daemon              4 11 Dic 14:57 cloud-drive-eventd.pid

drwxr-xr-x  3 _assetcache      _assetcache        96 11 Dic 14:57 com.apple.AssetCache

----------  1 root             daemon              0 11 Dic 14:56 com.apple.WindowServer.didRunThisBoot

-r--------  1 root             daemon              0 11 Dic 14:56 com.apple.loginwindow.didRunThisBoot

-r--------  1 root             daemon              0 11 Dic 14:56 com.apple.mdmclient.daemon.didRunThisBoot

srwxrwxrwx  1 root             daemon              0 11 Dic 14:56 cupsd

-rw-r--r--  1 root             daemon              3 11 Dic 14:56 diskarbitrationd.pid

drwxr-xr-x  3 _displaypolicyd  _displaypolicyd    96 11 Dic 14:56 displaypolicyd

-rw-r--r--  1 root             daemon             16 11 Dic 14:56 fudinit

-rw-r--r--  1 root             daemon              4 11 Dic 14:58 hdiejectd.pid

srw-rw-rw-  1 root             daemon              0 11 Dic 14:56 mDNSResponder

-rw-r--r--  1 root             daemon              3 11 Dic 14:56 m_agent.pid

drwx------  3 root             daemon             96 11 Dic 14:59 mds

-rw-r--r--  1 root             daemon              3 11 Dic 14:56 mds.pid

srwxrwxrwx  1 root             daemon              0 11 Dic 14:56 portmap.socket

srwxrwxrwx  1 root             daemon              0 11 Dic 14:56 pppconfd

-rw-r--r--  1 root             daemon            397 11 Dic 14:56 resolv.conf

srw-rw-rw-  1 root             daemon              0 11 Dic 14:56 syslog

-rw-r--r--@ 1 root             daemon              3 11 Dic 14:56 syslog.pid

com.apple.quarantine   32 

-r--r--r--  1 root             daemon              0 11 Dic 14:56 systemkeychaincheck.done

srw-rw-rw-  1 root             daemon              0 11 Dic 14:56 systemkeychaincheck.socket

srwxrwxrwx  1 root             daemon              0 11 Dic 14:56 usbmuxd

-rw-r--r--@ 1 root             daemon           2512 11 Dic 15:52 utmpx

com.apple.quarantine   32 

srw-------  1 root             daemon              0 11 Dic 14:56 vpncontrol.sock

-rw-r--r--  1 root             wheel               0 11 Dic 14:56 wifi

MacBook-Pro-di-Mattia:run mattia$ 

------------------------------------------------------------------------
Mattia Trussardi
mattia.t...@gmail.com
Cell. +39 3294158330
------------------------------------------------------------------------

--
You received this message because you are subscribed to a topic in the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/tunnelblick-discuss/fIHQiupUOVE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to tunnelblick-dis...@googlegroups.com.
Visit this group at https://groups.google.com/group/tunnelblick-discuss.
For more options, visit https://groups.google.com/d/optout.

[Tunnelblick developer]

Thanks. Please post the Console Log output from when you try to install Tunnelblick by double-clicking the Tunnelblick icon in the disk image.

[Mattia Trussardi]

Here you have!

Thanks again, Mattia

Dec 11 17:06:46 MacBook-Pro-di-Mattia Tunnelblick[3793]: Tunnelblick: OS X 10.13.2; Tunnelblick 3.7.5beta04 (build 4970)

Dec 11 17:06:47 MacBook-Pro-di-Mattia Tunnelblick[3793]: Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.

Dec 11 17:06:53 MacBook-Pro-di-Mattia Tunnelblick[3793]: Tunnelblick deve:

 • essere installato nella cartella Applicazioni come Tunnelblick

Dec 11 17:06:53 MacBook-Pro-di-Mattia Tunnelblick[3793]: Beginning installation or repair

Dec 11 17:06:55 MacBook-Pro-di-Mattia Tunnelblick[3793]: Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   tunnelblickdPlistOK  = YES

Dec 11 17:06:55 MacBook-Pro-di-Mattia Tunnelblick[3793]: installer did not make the necessary changes

Dec 11 17:06:56 MacBook-Pro-di-Mattia Tunnelblick[3793]: Retrying execution of installer

Dec 11 17:06:58 MacBook-Pro-di-Mattia Tunnelblick[3793]: Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   tunnelblickdPlistOK  = YES

Dec 11 17:06:58 MacBook-Pro-di-Mattia Tunnelblick[3793]: installer did not make the necessary changes

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: Installation or repair failed; Log:

Tunnelblick installer started 2017-12-11 17:06:54. 1 arguments: 0x0017

Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755

Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0

Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755

Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users/mattia with owner 0:0 and permissions 755

Changed ownership of /Users/mattia/Library/Application Support/Tunnelblick from 501:20 to 501:80

Changed ownership of /Users/mattia/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = NO

   tunnelblickdPlistOK  = NO

Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

Tunnelblick installer started 2017-12-11 17:06:56. 1 arguments: 0x0016

Moved /Applications/Tunnelblick.app to the Trash

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   tunnelblickdPlistOK  = YES

Replaced /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   tunnelblickdPlistOK  = YES

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: Not unloading kexts and not deleting logs because tunnelblickd is not loaded.

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: Finished shutting down Tunnelblick; allowing termination

------------------------------------------------------------------------
Mattia Trussardi
mattia.t...@gmail.com
Cell. +39 3294158330
------------------------------------------------------------------------

[Tunnelblick developer]

Hmm. That log seems to be missing some critical info. Did you by any chance use "grep tunnelblick" to filter it? (Please don't, please use the Console app's filtering, which filters entries, not lines.)

For example, the lines that say

    tunnelblickdHashOK   = YES

    tunnelblickdPlistOK  = YES

should be interspersed with two lines that say

    launchctlPlistHashOK   = (something)

and

    socketOK  = (something)

[Mattia Trussardi]

Hello!

Here you have the complete log, without filters.

Thanks again.

Mattia

Dec 11 17:06:46 MacBook-Pro-di-Mattia Tunnelblick[3793]: Tunnelblick: OS X 10.13.2; Tunnelblick 3.7.5beta04 (build 4970)

Dec 11 17:06:46 MacBook-Pro-di-Mattia com.apple.xpc.launchd[1] (com.apple.preference.displays.MirrorDisplays): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

Dec 11 17:06:47 MacBook-Pro-di-Mattia Tunnelblick[3793]: Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.

Dec 11 17:06:53 MacBook-Pro-di-Mattia Tunnelblick[3793]: Tunnelblick deve:

 • essere installato nella cartella Applicazioni come Tunnelblick

 • Modificare proprietario e permessi del programma per aumentarne la sicurezza

 • Aumentare la sicurezza delle configurazioni

Dec 11 17:06:53 MacBook-Pro-di-Mattia Tunnelblick[3793]: Beginning installation or repair

Dec 11 17:06:55 MacBook-Pro-di-Mattia Tunnelblick[3793]: Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   launchctlPlistHashOK = YES

   tunnelblickdPlistOK  = YES

   socketOK             = NO

Dec 11 17:06:55 MacBook-Pro-di-Mattia Tunnelblick[3793]: installer did not make the necessary changes

Dec 11 17:06:56 MacBook-Pro-di-Mattia com.apple.xpc.launchd[1] (com.apple.preference.displays.MirrorDisplays): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

Dec 11 17:06:56 MacBook-Pro-di-Mattia Tunnelblick[3793]: Retrying execution of installer

Dec 11 17:06:58 MacBook-Pro-di-Mattia Tunnelblick[3793]: Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   launchctlPlistHashOK = YES

   tunnelblickdPlistOK  = YES

   socketOK             = NO

Dec 11 17:06:58 MacBook-Pro-di-Mattia Tunnelblick[3793]: installer did not make the necessary changes

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: Installation or repair failed; Log:

Tunnelblick installer started 2017-12-11 17:06:54. 1 arguments: 0x0017

Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755

Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0

Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755

Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755

Created directory /Library/Application Support/Tunnelblick/Users/mattia with owner 0:0 and permissions 755

Changed ownership of /Users/mattia/Library/Application Support/Tunnelblick from 501:20 to 501:80

Changed ownership of /Users/mattia/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = NO

   launchctlPlistHashOK = NO

   tunnelblickdPlistOK  = NO

   socketOK             = NO

Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

Tunnelblick installer started 2017-12-11 17:06:56. 1 arguments: 0x0016

Moved /Applications/Tunnelblick.app to the Trash

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   launchctlPlistHashOK = YES

   tunnelblickdPlistOK  = YES

   socketOK             = NO

Replaced /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: Need to replace and/or reload 'tunnelblickd':

   tunnelblickdHashOK   = YES

   launchctlPlistHashOK = YES

   tunnelblickdPlistOK  = YES

   socketOK             = NO

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: Not unloading kexts and not deleting logs because tunnelblickd is not loaded.

Dec 11 17:06:59 MacBook-Pro-di-Mattia Tunnelblick[3793]: Finished shutting down Tunnelblick; allowing termination

------------------------------------------------------------------------
Mattia Trussardi
mattia.t...@gmail.com
Cell. +39 3294158330
------------------------------------------------------------------------

[Tunnelblick developer]

Thanks. The following:

Used launchctl to load tunnelblickd

Tunnelblick installer finished without error

Tunnelblick installer started 2017-12-11 17:06:56. 1 arguments: 0x0016

Moved /Applications/Tunnelblick.app to the Trash

Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app

Removed all 'com.apple.quarantine' extended attributes

Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0

Need to replace and/or reload 'tunnelblickd':

    tunnelblickdHashOK   = YES

    launchctlPlistHashOK = YES

    tunnelblickdPlistOK  = YES

    socketOK             = NO

is odd. The first line means that launchd claimed to have successfully set up tunnelblickd, but the last line means that there was no socket for tunnelblickd.

Can you try the following in Terminal?

sudo /bin/launchctl/launchctl load /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

(which is what Tunnelblick uses to set up tunnelblickd) and then

ls -l@e /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

and post the output?

Also, please post the output from

which launchctl

Thanks for your patience and continuing help trying to track this problem down.

[Mattia Trussardi]

Hello.

Here the output of the three commands.

Thanks in advance.

Mattia

MacBook-Pro-di-Mattia:~ mattia$ sudo /bin/launchctl load /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist 

/Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist: Service is disabled

MacBook-Pro-di-Mattia:~ mattia$ which launchctl

/bin/launchctl

MacBook-Pro-di-Mattia:~ mattia$ ls -l@e /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

ls: /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket: No such file or directory

------------------------------------------------------------------------
Mattia Trussardi
mattia.t...@gmail.com
Cell. +39 3294158330
------------------------------------------------------------------------

Il giorno 11 dic 2017, alle ore 17:38, Tunnelblick developer <jkbu...@gmail.com> ha scritto:

ls -l@e /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

[Tunnelblick developer]

Ah -- we're making progress. The installer uses the 'sudo /bin/launchctl load ...' command to load the Tunnelblick launch daemon.

The problem is that launchctl does not return an error result even if it fails! Per the man page:

NOTE: Due to bugs in the previous implementation and long-stand-
              ing client expectations around those bugs, the load and unload
              subcommands will only return a non-zero exit code due to
              improper usage.  Otherwise, zero is always returned.

Apparently launchctl is not loading the .plist because "Service is disabled". But it is returning a status of zero when that happens. Tunnelblick sees the status of zero and assumes that all is well and the .plist was loaded, which is incorrect. I never saw this language when I wrote this code, and relied on the language at the end of the man page that says 

     launchctl will exit with status 0 if the subcommand succeeded. Otherwise,
     it will exit with an error code that can be given to the error subcommand
     to be decoded into human-readable form.

So the questions are:

1. Why is the service disabled?
2. What can we do if the service is disabled?
   

#1 Doesn't really matter (although I'm curious). I suppose it is either some "security" software that you are using, or a rogue installer that "disables" stuff by default, or something like that.

As to #2, how to deal with this problem, I think there are two approaches.

One is to modify the .plist so it includes a "Disabled:No" key.

The other is to use launchctl's "-w option, which, according to the launchctl man page:

Overrides the Disabled key and sets it to false or true for the load and unload subcommands respectively.

Since it isn't clear that adding Disabled:No to the .plist will override whatever disabled it in the first place, I am hoping to use launchctl's "-w" option.

Please first check the following:

ls -l /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

to make sure that the .plist is there. I'm hoping that it is there from earlier attempts to install Tunnelblick (you might need to install it yet again, I'm not sure).

(If the .plist isn't there, please try to install TB; it should be there after that, as long as you don't uninstall. If that doesn't work you could copy it from Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.tunnelblickd.plist to /Library/LaunchDaemons.)

Assuming it's there, do:

sudo /bin/launchctl load -w /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

If it succeeds, I think you will be able to use Tunnelblick, and I can easily modify the installer so that it uses the -w option.

If it doesn't succeed, I'd be interested in what message launchctl displays.

Thanks again for your help on this.

[Mattia Trussardi]

hello!

Something said to me that “Service is disabled” was the wrong thing.

I didn’t know ho to re-enable the service and I simply found a GUI utility to check which service was enable or not.

I downloaded “lingon” and lingon showed me the “tunnelblick daemon” was there and I simply checked the “enable” box beside the service! Now tunnelblick works perfectly again!

I really don’t know how the service was disabled: I don’t have antivirus or antimalware software installed on my mac and I’ve been using tunnelblick since years without problems!

Thanks very much for the time you gave me.

If I have to check something to help you understand better what happened just tell me!

Now everything is working fine! (also after rebooting the machine).

Thanks again, Mattia

------------------------------------------------------------------------
Mattia Trussardi
mattia.t...@gmail.com
Cell. +39 3294158330
------------------------------------------------------------------------

Il giorno 12 dic 2017, alle ore 02:09, Tunnelblick developer <jkbu...@gmail.com> ha scritto:

Ah -- we're making progress. The installer uses the 'sudo /bin/launchctl load ...' command to load the Tunnelblick launch daemon.

The problem is that launchctl does not return an error result even if it fails! Per the man page:

NOTE: Due to bugs in the previous implementation and long-stand-
              ing client expectations around those bugs, the load and unload
              subcommands will only return a non-zero exit code due to
              improper usage.  Otherwise, zero is always returned.

Apparently launchctl is not loading the .plist because "Service is disabled". But it is returning a status of zero when that happens. Tunnelblick sees the status of zero and assumes that all is well and the .plist was loaded, which is incorrect. I never saw this language when I wrote this code, and relied on the language at the end of the man page that says 

     launchctl will exit with status 0 if the subcommand succeeded. Otherwise,
     it will exit with an error code that can be given to the error subcommand
     to be decoded into human-readable form.

So the questions are:

1. Why is the service disabled?
2. What can we do if the service is disabled?
   

#1 Doesn't really matter (although I'm curious). I suppose it is either some "security" software that you are using, or a rogue installer that "disables" stuff by default, or something like that.

As to #2, how to deal with this problem, I think there are two approaches.

One is to modify the .plist so it includes a "Disabled:No" key.

The other is to use launchctl's "-w option, which, according to the launchctl man page:

Overrides the Disabled key and sets it to false or true for the load and unload subcommands respectively.

Since it isn't clear that adding Disabled:No to the .plist will override whatever disabled it in the first place, I am hoping to use launchctl's "-w" option.

Please first check the following:

ls -l /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

to make sure that the .plist is there. I'm hoping that it is there from earlier attempts to  and see if it succeeds (you might need to install it yet again, I'm not sure).

(If the .plist isn't there, please try to install TB; it should be there after that, as long as you don't uninstall. If that doesn't work you could copy it from Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.tunnelblickd.plist to /Library/LaunchDaemons.)

Assuming it's there, do:

sudo /bin/launchctl load -w /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist

If it succeeds, I think you will be able to use Tunnelblick, and I can easily modify the installer so that it uses the -w option.

If it doesn't succeed, I'd be interested in what message launchctl displays.

Thanks again for your help on this.

On Monday, December 11, 2017 at 7:07:44 PM UTC-5, Mattia Trussardi wrote:

Hello.

Here the output of the three commands.

Thanks in advance.

Mattia

MacBook-Pro-di-Mattia:~ mattia$ sudo /bin/launchctl load /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist 

/Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist: Service is disabled

MacBook-Pro-di-Mattia:~ mattia$ which launchctl

/bin/launchctl

MacBook-Pro-di-Mattia:~ mattia$ ls -l@e /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket

ls: /var/run/net.tunnelblick.tunnelblick.tunnelblickd.socket: No such file or directory

[Tunnelblick developer]

Thanks, Mattia, for following up on this.

I will fix Tunnelblick so it overrides the disabled status. That way people won't have to use lingon or the command line to fix the problem.