On 5/12/19 12:32 PM, 'botaniga' via qubes-users wrote:
Hello,
im new to qubes, and currently struggling with a new setup.
Key among the functions i need is a proxy-vm for vpn. Unfortunately, i
find the instructions in the docs very confusing.I found the
qubes-tunnel and the qubes-vpn-support project, i wasnt able to to get
qubes-tunnel to work at all since the instructions are very vage and
unclear, however, i managed to setup qubes-vpn-support, and as far as i
can tell the anti-leak rules do work.
The qubes-tunnel project is a renamed clone of Qubes-vpn-support. The
only difference is that the former requires a template installation, and
the docs for it are in a draft state (although, if you clicked through
to the draft vpn.md page they are not really vague).
FWIW, I wrote the current Qubes vpn doc CLI section, then created
Qubes-vpn-support to simplify setup and enhance link reliability.
Now, my Questions:
- Whats the difference between them, and which one is safer/ leakproof?
Qubes-vpn-support will eventually acquire some new features, while
qubes-tunnel is in a holding pattern for inclusion in Qubes 4.1.
- How do i setup an autoconnect via nmcli /Networkmanager?
The instructions in the docs clearly do not work at all.
I added the connection in the Network-manager, it does connect just fine
when i select in the gui, but no autoconnect on proxy-vm-boot.
My vpn-provider doesnt require a passwd file, so i tried the following :
Network Manager is a separate way to connect a vpn. Do not mix a NM vpn
setup with Qubes-vpn-support or qubes-tunnel (or the CLI instructions
from the Qubes vpn doc).
|nmcli connection up "file-vpn-conn" eth0|
|nmcli c up "file-vpn-conn" eth0|
||
|What did i do wrong? Im using a fedora-29 template.|
|thanks in advance.|
At this point I'd suggest using Fedora 28 with Qubes-vpn-support, as a
bug has been logged about a problem with Fedora 29. OTOH, you could try
using NM with Fedora 29 to see if that works.
--
Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/0bc261fd-734a-8a9b-752e-fb7c4f174c8f%40posteo.net.
For more options, visit https://groups.google.com/d/optout.
