search

tasket / Qubes-vpn-support

VPN configuration in Qubes OS
GNU General Public License v3.0
126 stars 28 forks source link

Wireguard VPN Wiki 4.14.13-3 kernel #10

Closed pugege closed 5 years ago

pugege commented 6 years ago

Wireguard via Mullvad is not functional with the current R4.0 kernel (also apparmor). Have tried the new wireguard update using the current wiki unsuccessfully. Have you been able run the program with the new kernel? Is there a bug attaching modules to 4.14.13-3? Using debian-9 template for vpn and fedora-26 for the .ko file.

tasket commented 6 years ago

No. I've tried setting vm prefs kernel to '' (empty) to make it boot the template's kernel -- this is supposed to resolve the version conflicts. But with that setting the vms no longer start.

May need to open a Qubes issue.

tortugaverde98 commented 6 years ago

Following wireguard wiki but failing on step 5. I have /lib/modules, but there is no extra directory with which to contain a wireguard.ko Ran qvm-prefs sys-wireguard kernel It returned the kernel used by the template, 4.14.35-1 Qubes 4, Fedora 28 minimal template.

tasket commented 6 years ago

I didn't have time to try the instructions with the Qubes default kernel. But it appears to at least boot and build under these conditions:

  1. Disregard step 1 (copying) for now
  2. Create a Standalone VM (based on template) with "provides network"
  3. Switch it to HVM mode and kernel="" (HVM mode should allow it to boot)

Then install wireguard packages and configure.

tasket commented 5 years ago

Updated with HVM instructions.