On 01/10/2018 12:42 PM, Kushal Das wrote:
On Wed, Jan 10, 2018 at 10:44 PM, heartsucker <heartsuc...@autistici.org> wrote:
Hi everyone

I'm testing out Qubes 4.0-rc3 and need to set up VPM VMs for different
domains. I'm attempting to follow the instructions listed here:

The screenshots deviate significantly from what I'm seeing in my
installation, namely that there doesn't seem to be any thing that
resembles a ProxyVM. I looked in the qubes-doc repo for update docs, but
it looks to be the same as what's currently live.

Is there a guide or blog post about setting up VPN VMs or ProxyVMs in
the 4.x series?
In simple steps, create an app-vm, click on the checkbox saying it
provides network,
open the configuratin, and add `network-manager` in the services. This
will give you
a nm-applet, click on it and add a vpn normally in the UI. I am using
Fedora 26 for
my vpn vms.

I will write down a blog post tomorrow along with screenshots about
this. If you want the command
line options, I have one old blog post[1].



This is basically the same directions as in the Qubes VPN doc, except the user chooses "provides network" when creating the VM. That is the difference.

The scripted method in the doc is better because it fails closed and protects against leaks, but requires an additional step in R4.0:

sudo ln -s /rw/config/qubes-firewall-user/script /rw/config/qubes-ip-change-hook

I also have a download-able project that makes the scripted/antileak setup fairly simple in Qubes R4.0:



Chris Laprise, tas...@posteo.net
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
For more options, visit https://groups.google.com/d/optout.

Reply via email to