Provide a package in the Nix flake

[lukash]

There is already a Nix flake provided in the repo, so adding a package with the client should be an easy next step. I am currently unable to run the client under NixOS, as the provided binaries don't work for me, and there is no multi-platform build like an AppImage.

I've built the client in nix develop github:DefGuard/client. The GUI client doesn't work, it shows just a blank screen. Might be missing some resources, maybe the paths aren't set properly.

Running the dg CLI client, I got an error while trying to enroll, reported it in #393

[j-chmielewski]

Try running the client with WEBKIT_DISABLE_DMABUF_RENDERER=1 env variable - may solve the blank screen issue.

We would love to provide nix packages for both client and server components and some work has been done in this direction, but it's not a priority right now.

[lukash]

Thanks for the response, the env variable didn't help. I forgot to attach the output in the first place:

$ ./defguard-client

** (defguard-client:2649267): WARNING **: 13:34:42.055: webkit_settings_set_enable_offline_web_application_cache is deprecated and does nothing.
[2025-03-13][12:34:42.057715795][INFO][defguard_client] App setup completed, log level: INFO
[2025-03-13][12:34:42.057749979][INFO][defguard_client] Starting Defguard client version 1.2.2-4c12071
[2025-03-13][12:34:42.057760639][INFO][defguard_client] The application data (database file) will be stored in: "<SNIP>/.local/share/net.defguard" and the application logs in: "<SNIP>/.config/net.defguard/logs". Logs of the background defguard service responsible for managing the VPN connections at the network level will be stored in: /var/log/defguard-service.
MESA-LOADER: failed to open dri: /run/opengl-driver/lib/gbm/dri_gbm.so: cannot open shared object file: No such file or directory (search paths /run/opengl-driver/lib/gbm, suffix _gbm)
Failed to create GBM device for DRM node: /dev/dri/renderD128: No such file or directory
[2025-03-13][12:34:43.221689294][INFO][defguard_client::commands] The latest release version of the application available for download is 1.2.2, it was released on 2025-03-11.

$ WEBKIT_DISABLE_DMABUF_RENDERER=1 ./defguard-client

** (defguard-client:2649466): WARNING **: 13:35:11.261: webkit_settings_set_enable_offline_web_application_cache is deprecated and does nothing.
[2025-03-13][12:35:11.328792249][INFO][defguard_client] App setup completed, log level: INFO
[2025-03-13][12:35:11.328817817][INFO][defguard_client] Starting Defguard client version 1.2.2-4c12071
[2025-03-13][12:35:11.328826884][INFO][defguard_client] The application data (database file) will be stored in: "<SNIP>/.local/share/net.defguard" and the application logs in: "<SNIP>/.config/net.defguard/logs". Logs of the background defguard service responsible for managing the VPN connections at the network level will be stored in: /var/log/defguard-service.
[2025-03-13][12:35:12.150878816][INFO][defguard_client::commands] The latest release version of the application available for download is 1.2.2, it was released on 2025-03-11.

Disabling the dmabuf renderer got rid of the Mesa error but I got the same blank screen. Might also be Wayland-related.

[j-chmielewski]

How about this one: WEBKIT_DISABLE_COMPOSITING_MODE=1, or both? If this doesn't work then try looking for clues in this upstream issue: tauri-apps/tauri#9304.

[lukash]

Didn't help either. At first glance that bug seems to be for Nvidia GPUs, I have a Ryzen with Radeon graphics.