VPN Disconnects when Qubes goes to sleep (and does not reconnect when coming out of sleep)?

[Gaiko Kyofusho]

I have sucessfully setup a VpnVM that is working nicely, if the computer doesn't go to sleep, but if it goes to sleep or I close the lid (notebook) etc then when I open it back up it does not automatically reconnect? The wifi reconnects and I can use VMs that aren't connecting to the net via the VPN (ie just through the firewall) but I have to restart the VpnVM to use the VMs that are using the VpnVM.

Thoughts?

[Andrew Morgan]

> --
> You received this message because you are subscribed to the Google
> Groups "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to
> qubes-users...@googlegroups.com
> <mailto:qubes-users...@googlegroups.com>.
> To post to this group, send email to
> qubes...@googlegroups.com
> <mailto:qubes...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/CAGpWZxOh1a62RaOSmT_DARXsx-02uzwQBS8bSGJeBXpZTMQY_w%40mail.gmail.com
> <https://groups.google.com/d/msgid/qubes-users/CAGpWZxOh1a62RaOSmT_DARXsx-02uzwQBS8bSGJeBXpZTMQY_w%40mail.gmail.com?utm_medium=email&utm_source=footer>.
> For more options, visit https://groups.google.com/d/optout.

Did you follow the "Set up a ProxyVM as a VPN gateway using iptables and
CLI scripts" section of the Qubes VPN docs
(https://www.qubes-os.org/doc/vpn/ )?

If so you should be good just to execute the `/rw/config/rc.local` file
on your VPN VM after every suspend either manually, through a keyboard
shortcut (which I do personally with the following command):

qvm-run -i root sys-vpn "/rw/config/rc.local"

or perhaps automatically through a systemd service.

Andrew Morgan

[Unman]

These sorts of questions come up quite often.
For me, I don't want my Qubes to be automatically trying to connecting
to anything, wifi or vpn. So NOT working when it comes out of sleep is
a positive feature for me.
I travel a lot - the last thing I want is for Qubes to start spewing
information about the nodes and VPNs that I connect to.
Think of this (minor) inconvenience as another brick in the wall of
privacy.

unman

[Gaiko Kyofusho]

I completely hadn't thought of it that way. Well in that case I will indeed consider it a feature :) and refocus on more easily restarting it (an older post this group has already begun to help me with).

Thx!