On 01/10/2018 12:42 PM, Kushal Das wrote:
On Wed, Jan 10, 2018 at 10:44 PM, heartsucker <heartsuc...@autistici.org> wrote:
Hi everyone
I'm testing out Qubes 4.0-rc3 and need to set up VPM VMs for different
domains. I'm attempting to follow the instructions listed here:
https://www.qubes-os.org/doc/vpn/
The screenshots deviate significantly from what I'm seeing in my
installation, namely that there doesn't seem to be any thing that
resembles a ProxyVM. I looked in the qubes-doc repo for update docs, but
it looks to be the same as what's currently live.
Is there a guide or blog post about setting up VPN VMs or ProxyVMs in
the 4.x series?
In simple steps, create an app-vm, click on the checkbox saying it
provides network,
open the configuratin, and add `network-manager` in the services. This
will give you
a nm-applet, click on it and add a vpn normally in the UI. I am using
Fedora 26 for
my vpn vms.
I will write down a blog post tomorrow along with screenshots about
this. If you want the command
line options, I have one old blog post[1].
[1]
https://kushaldas.in/posts/network-isolation-using-netvms-and-vpn-in-qubes.html
Kushal
This is basically the same directions as in the Qubes VPN doc, except
the user chooses "provides network" when creating the VM. That is the
difference.
The scripted method in the doc is better because it fails closed and
protects against leaks, but requires an additional step in R4.0:
sudo ln -s /rw/config/qubes-firewall-user/script
/rw/config/qubes-ip-change-hook
I also have a download-able project that makes the scripted/antileak
setup fairly simple in Qubes R4.0:
https://github.com/tasket/Qubes-vpn-support/tree/qubes4
--
Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/d2ac4958-aa29-42ad-eeb1-b0d21900d226%40posteo.net.
For more options, visit https://groups.google.com/d/optout.
