Set up a ProxyVM as a Wireguard instead of a OpenVPN gateway

[Daniil Travnikov]

Does anyone know how could be configured the Wireguard (https://www.wireguard.com/) in Proxy VM?

Maybe do you know some doc like https://www.qubes-os.org/doc/vpn/ where it is already described step by step?

I understand that this is new technology, but maybe someone knows which OS is more preferable and what is the first step in the settings?

[Ivan Mitev]

The following thread might be helpful, although it's a bit old:

https://groups.google.com/d/msg/qubes-users/MQaePIslfY8/k0s65DfaCQAJ

[Chris Laprise]

Yeah, that's old and not really useful now.

Currently you can get a full Qubes wireguard setup using
Qubes-vpn-support, which has been tested with Mullvad's wireguard service:

https://github.com/tasket/Qubes-vpn-support/

To change it from openvpn to wireguard after installation in a "proxy"
provides-network appVM, look in the
/rw/config/qubes-vpn-handler.service.d directory and rename
'10_wg.conf.example' to '10_wg.conf'.

You may also have to create your proxy VM as a standalone and run
"qvm-prefs vmname kernel ''" to blank out the kernel setting. Then boot
and install the 'wireguard' package.


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

[Chris Laprise]

On 01/12/2019 02:18 PM, Chris Laprise wrote:
> On 01/12/2019 10:47 AM, Ivan Mitev wrote:
>>
>>
>> On 1/12/19 5:16 PM, Daniil Travnikov wrote:
>>> Does anyone know how could be configured the Wireguard
>>> (https://www.wireguard.com/) in Proxy VM?
>>>
>>> Maybe do you know some doc like https://www.qubes-os.org/doc/vpn/
>>> where it is already described step by step?
>>>
>>> I understand that this is new technology, but maybe someone knows
>>> which OS is more preferable and what is the first step in the settings?
>>
>> The following thread might be helpful, although it's a bit old:
>>
>> https://groups.google.com/d/msg/qubes-users/MQaePIslfY8/k0s65DfaCQAJ
>>
>
> Yeah, that's old and not really useful now.
>
> Currently you can get a full Qubes wireguard setup using
> Qubes-vpn-support, which has been tested with Mullvad's wireguard service:
>
> https://github.com/tasket/Qubes-vpn-support/
>
> To change it from openvpn to wireguard after installation in a "proxy"
> provides-network appVM, look in the
> /rw/config/qubes-vpn-handler.service.d directory and rename
> '10_wg.conf.example' to '10_wg.conf'.
>
> You may also have to create your proxy VM as a standalone and run
> "qvm-prefs vmname kernel ''" to blank out the kernel setting. Then boot
> and install the 'wireguard' package.

BTW, I'm working on an update to the wireguard page that is shorter and
includes Qubes-vpn-support:

https://github.com/tasket/Qubes-vpn-support/wiki/Wireguard-VPN-connections-in-Qubes-OS

[Daniil Travnikov]

Thank you all! I will try it and let you know!