Hi, just installed manjaro-cinnamon-25.0.3-minimal-250609-linux612.iso OFFLINE and must say i’m stucked.
Before going online i want the firewall and the Mullvad vpn up and running!
Can’t figure out how to do so.
I don’t know if this is plasma, kde or xfce or if that matters at all.
Please explain how to get this done.
To the best of my Knowledge you can’t.
You will have to source the package file somehow, and the only way I know is to go on line.
You could download the mullvad-vpn package from a Manjaro mirror on another device, along with its signature, copy both files to a flash drive, then install it with
sudo pacman -U /path/to/package.tar.zst
You said you installed the Cinnamon ISO.
1 Like
A firewall is fairly easy - if I recall correct cinnamon comes with UFW enabled but not activated.
Open the firewall applet from your system settings and activate the firewall
To get mullvad-vpn installed - you will need to be online as there is a dependency on electron39 - but you don’t need a browser - just a network connection
sudo pacman -Syu mullvad-vpn
$ pamac info mullvad-vpn
Name : mullvad-vpn
Version : 2026.1-1
Description : Mullvad VPN client (desktop application)
URL : https://www.mullvad.net
Licenses : GPL-3.0-or-later
Repository : extra
Installed Size : 39,5 MB
Groups : --
Depends On : electron39 hicolor-icon-theme mullvad-vpn-daemon
Optional Dependencies : libappindicator-gtk3: tray icon [Installed]
Provides : --
Replaces : --
Conflicts With : --
Packager : Carl Smedstad <carsme@archlinux.org>
Build Date : søn 15 mar 2026 18:48:16 CET
Validated By : MD5 Sum SHA-256 Sum Signature
Thanks for the info.
Point is I don’t like to go online with that device when it’s not behind the vpn.
- What data does just a network connection will reveal to Manjaro (mirror)?
- What info is provided and stored to identify my device?
When I searched to download the mullvad-vpn package from a Manjaro mirror.
looking at …/Linux/distr/manjaro/stable/extra/x86_64/ found:
mullvad-vpn-2026.1-1-x86_64.pkg.tar.zst 4.9 MiB 2026-Mar-18 14:14
mullvad-vpn-2026.1-1-x86_64.pkg.tar.zst.sig 119 B 2026-Mar-18 14:14
mullvad-vpn-daemon-2026.1-1-x86_64.pkg.tar.zst 7.5 MiB 2026-Mar-18 14:14
mullvad-vpn-daemon-2026.1-1-x86_64.pkg.tar.zst.sig 119 B 2026-Mar-18 14:14
Since the original version Mullvad VPN 2026.2.deb is 103 mb I suppose this cant be right?!
- Where to find the latest version Mullvad VPN 2026.2?
testing/core/x86_64/ or /arm-unstable/ don’t show them.
The latest version hasn’t reached any of Manjaro’s repos yet, nor has it reached Arch:
mbn info mullvad-vpn -q
Branch : archlinux
Name : mullvad-vpn
Version : 2026.1-1
Repository : extra
Build Date : Mon 16 Mar 2026 04:48:16
Packager : Carl Smedstad <carsme@archlinux.org>
Branch : unstable
Name : mullvad-vpn
Version : 2026.1-1
Repository : extra
Build Date : Mon 16 Mar 2026 04:48:16
Packager : Carl Smedstad <carsme@archlinux.org>
Branch : testing
Name : mullvad-vpn
Version : 2026.1-1
Repository : extra
Build Date : Mon 16 Mar 2026 04:48:16
Packager : Carl Smedstad <carsme@archlinux.org>
Branch : stable
Name : mullvad-vpn
Version : 2026.1-1
Repository : extra
Build Date : Mon 16 Mar 2026 04:48:16
Packager : Carl Smedstad <carsme@archlinux.org>
You do, however, have the option to install the prebuilt mullvad-vpn-bin v2026.2-1 package from the AUR:
It can be installed with the following command:
pamac build mullvad-vpn-bin
Don’t use sudo with the above command - pamac uses polkit for authorisation and will ask for your password when required.
Note though that the AUR is not officially supported by Manjaro, and you should read through the following before installing any packages from the AUR:
nothing
nothing
I guess at least the ip adress is used…
No there is no ufw/ firewall to find in the applets
There is absolutely no tracking inside a Manjaro Linux installation.
The mirrors has been provided independently of Manjaro Linux by the community that uses the distribution.
There is no exchange of information between Manjaro and the community mirrors.
Search for firewall configuration
systemctl status ufw
Check status
ufw status
Enable
ufw enable
No luck there
[whats@this]$ systemctl status ufw
Unit ufw.service could not be found.
[whats@this]$ systemctl status ufw
Unit ufw.service could not be found.
[whats@this]$ ufw status
bash: ufw: command not found
[whats@this]$
I missed that word minimal - and it is minimal - no ufw
But you may be able to use the nftables.service instead.
systemctl status nftables.service
If it exist you can run
systemctl enable --now nftables.service
The default will block all except ssh (port 22)
If you have the option - I suggest you create a portable mirror.
A portable mirror will allow you to use a trusted device to download an ISO and to create a complete repository which you can use offline to update a system which much remain offline - e.g. a vault system.
1 Like
pacman -Qi ufw
If it yields no results, then it’s not installed.
Not there
systemctl status nftables.service
○ nftables.service - Netfilter Tables
Loaded: loaded (/usr/lib/systemd/system/nftables.service; disabled; preset>
Active: inactive (dead)
Docs: man:nft(8)
and
$ pacman -Qi ufw
warning: database file for 'core' does not exist (use '-Sy' to download)
warning: database file for 'extra' does not exist (use '-Sy' to download)
warning: database file for 'multilib' does not exist (use '-Sy' to download)
error: package 'ufw' was not found
The service exist - you just have to enable and start it.
systemctl enable --now nftables.service
As the Cinnamon ISO is from 2025-06-09 your system may lack the following file
$ cat nftables.conf
#!/usr/bin/nft -f
# vim:set ts=2 sw=2 et:
# IPv4/IPv6 Simple & Safe firewall ruleset.
# More examples in /usr/share/nftables/ and /usr/share/doc/nftables/examples/.
destroy table inet filter
table inet filter {
chain input {
type filter hook input priority filter
policy drop
ct state invalid drop comment "early drop of invalid connections"
ct state {established, related} accept comment "allow tracked connections"
iif lo accept comment "allow from loopback"
meta l4proto { icmp, icmpv6 } accept comment "allow icmp"
tcp dport ssh accept comment "allow sshd"
pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited
counter
}
chain forward {
type filter hook forward priority filter
policy drop
}
}
This happens, not sure what to do.
$ systemctl enable --now nftables.service
$ systemctl status nftables.service
○ nftables.service - Netfilter Tables
Loaded: loaded (/usr/lib/systemd/system/nftables.service; enabled; preset:>
Active: inactive (dead) since Sat 2026-05-09 14:42:18 CEST; 2min 1s ago
Invocation: 01826f75e68d4127aa03f703804a371d
Docs: man:nft(8)
Process: 2968 ExecStart=/usr/bin/nft -f /etc/nftables.conf (code=exited, st>
Main PID: 2968 (code=exited, status=0/SUCCESS)
Mem peak: 1.8M
CPU: 12ms
may 09 14:42:18 extra systemd[1]: Starting Netfilter Tables...
may 09 14:42:18 extra systemd[1]: nftables.service: Deactivated successfully.
may 09 14:42:18 extra systemd[1]: Finished Netfilter Tables.
$ pacman -Qi ufw
warning: database file for 'core' does not exist (use '-Sy' to download)
warning: database file for 'extra' does not exist (use '-Sy' to download)
warning: database file for 'multilib' does not exist (use '-Sy' to download)
error: package 'ufw' was not found
$
That’s because you have no internet connection, or because you did not run the command to update your package lists as suggested.
There is a lot of things that won’t work unless network connected
pacman -Qi
will only return content if the package is synced to the system.
So when you insist that you will not connect to the internet we cannot help you.
A default installation has no database synced and thus the metadata does not exist.
As the message states - you will need to connect to the internet or use another system to create an offline mirror.
You will need to learn how a Manjaro system work - it is not based on Debian, not based on Ubuntu, not based Fedora - it is based on Arch Linux.
1 Like
Might have a look into create an offline mirror later. Will this include Mullvad vpn and ufw? How many GB to expect it to be?
For the moment thanks for all support.
read the linked topic → [root tip] [How To] Create and use a portable Manjaro mirror