PrivSec-dev/privsec.dev
1
0
Fork 0
mirror of https://github.com/PrivSec-dev/privsec.dev synced 2024-09-07 19:53:30 -04:00
Code

Fix IVPN for chaining ProxyVMs

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-05-17 02:32:12 -07:00
parent 5bf6e2133e
commit 121f5e3913
Signed by: Tomster
GPG Key ID: 555C902A34EC968F
1 changed files with 17 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
content/posts/qubes/Using IVPN on Qubes OS.md
View File

@ -31,7 +31,22 @@ sudo dnf config-manager --add-repo https://repo.ivpn.net/stable/fedora/generic/i
sudo dnf install -y ivpn-ui
```
IVPN needs `/usr/lib/qubes/qubes-setup-dnat-to-ns` to be run at boot and when the daemon changes `/etc/resolv.conf`. Create the following files:
IVPN needs to restart `systemd-resolved` and run `/usr/lib/qubes/qubes-setup-dnat-to-ns` at boot to work properly, especially if you want to chain ProxyVMs. `/usr/lib/qubes/qubes-setup-dnat-to-ns` also needs to be run every time IVPN modifies `/etc/resolv.conf`. Create the following files:
- `/etc/systemd/system/dnat-to-ns-boot.service`
```
[Unit]
Description=Run /usr/lib/qubes/qubes-setup-dnat-to-ns 10 seconds after boot
[Service]
Type=oneshot
ExecStart=/usr/bin/sleep 10
ExecStart=/usr/bin/systemctl restart systemd-resolved
ExecStart=/usr/lib/qubes/qubes-setup-dnat-to-ns
[Install]
WantedBy=multi-user.target
```
- `/etc/systemd/system/dnat-to-ns.service`
```
@ -41,9 +56,6 @@ Description=Run /usr/lib/qubes/qubes-setup-dnat-to-ns
[Service]
Type=oneshot
ExecStart=/usr/lib/qubes/qubes-setup-dnat-to-ns
[Install]
WantedBy=multi-user.target
```
- `/etc/systemd/system/dnat-to-ns.path`
@ -63,7 +75,7 @@ WantedBy=multi-user.target
Next, enable both the systemd service and the systemd path:
```bash
sudo systemctl enable dnat-to-ns.service
sudo systemctl enable dnat-to-ns-boot.service
sudo systemctl enable dnat-to-ns.path
```