How to install Tresorit on Linux?
To install Tresorit you have to:
- Download the installer (tresorit_installer.run) from https://tresorit.com/download/linux
- Start the installer which is a simple sh script (it's not recommended to run it with super user privileges, don't type sudo, unless you're perfectly aware what you're doing)
For example via terminal simply run the following command to run the script:
Alternatively you can make the installer executable and then run it:
chmod +x tresorit_installer.run; ./tresorit_installer.run
- Follow the instructions
What is this .run file?
The tresorit_installer.run is simply a shell script that extracts the necessary files to the installation directory (usually ~/.local/share/tresorit). You can check the contents of the file with your favorite text editor (for example Gedit or Vim).
Why is there no .deb or .rpm package?
- We're aiming to support all Linux distributions and the universal installer script file should in work on everywhere, while the .deb or .rpm packages only work on Debian or Fedora based distributions, respectively.
- Installing a package would normally require super user privileges, which is not recommended for installing Tresorit (see first question)
How can I verify the installer?
- The second line in the installer scripts contain the RSASSA-PSS (SHA512) signature of the rest of the file.
- We always use a specific RSA4096 key to sign the scripts, see it below.
- When Tresorit is updating itself to a newer version it always checks the signature.
- If you are installing Tresorit manually, you can check the signature with the following script:
# Before the signature, the file should always look like "#!/bin/sh\nSIGNATURE="
(echo "#!/bin/sh"; echo -n "SIGNATURE=") > tresorit_installer.run.beginning
if ! (head -c20 tresorit_installer.run | cmp tresorit_installer.run.beginning); then
echo "Verification Failure"
# After the signature, there should be a single "\n" character that is not yet part of the signed data
echo > tresorit_installer.run.aftersig
if ! (head -c1045 tresorit_installer.run | tail -c1 | cmp tresorit_installer.run.aftersig); then
echo "Verification Failure"
# We always use the following RSA4096 public key to sign the installers
cat >tresorit_installer.run.pubkey <<EOF
-----BEGIN PUBLIC KEY-----
-----END PUBLIC KEY-----
# The signature is always at character position 21..1044 in hex form
head -c1044 tresorit_installer.run | tail -c+20 | xxd -r -p > tresorit_installer.run.signature
# We have to check the validity of the rest of the file
# This openssl call will print either "Verified OK" or "Verification Failure"
tail -c+1046 tresorit_installer.run | openssl sha512 -verify tresorit_installer.run.pubkey -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -signature tresorit_installer.run.signature
Starting the application
1, Start from the Menu: If Tresorit doesn't show up in your Menu after install, please log out and log back into your account. If it persists, then please modify the Categories line in the ~/.local/share/applications/tresorit.desktop by changing Accessories to Accessory and Utilities to Utility.
2, Start from command line: run ~/.local/share/tresorit/tresorit, or create a symbolic link into a directory in your $PATH.
3, Create desktop shortcut: cp ~/.local/share/applications/tresorit.desktop ~/Desktop/Tresorit
I've installed Tresorit successfully, but the application won't start
- Check glibcxx version by running the following command (please make sure to use the right path to your tresorit executable). If the outputted version number is less than 3.4.14, then you won't be able to run Tresorit unless you update your libstdc++ version.
readelf -sV `ldd ~/.local/share/tresorit/tresorit | grep libstdc++ | sed 's/^.*=> \([^ ]*\).*$/\1/'` | sed -n 's/.*@@GLIBCXX_//p' | sort -u -V | tail -1
- Check your architecture (if the output isn't x86_64, then it is most likely, that you won't be able to run Tresorit on your machine)
There is no system tray icon
On Ubuntu + Unity the system tray has changed since version 14.02. If you want to see Tresorit in your system tray, please execute the following commands (source: http://www.webupd8.org/2015/05/on-demand-system-tray-for-ubuntu.html)
For Ubuntu 14.04:
sudo apt-add-repository ppa:fixnix/indicator-systemtray-unity
sudo apt-get update
sudo apt-get install indicator-systemtray-unity
How to revert the changes
sudo apt-get purge indicator-systemtray-unity
Command line options:
please run ~/.local/share/tresorit/tresorit -h (or --help) to see the list of available command line options. (Tresorit application's path may vary depending on what you choose when installing Tresorit.)
Syncing more than 8000 folders
There is a limitation in the Linux kernel that limits the number of directories that can be simultaneously watched (with inotify) to 8192 by default. To override this setting, run the following command in the terminal.
echo fs.inotify.max_user_watches=100000 | sudo tee -a /etc/sysctl.conf; sudo sysctl -p
Thank you so much for your attention. If you have questions or feedback, feel free to contact us.