Template:VPN/Setup/install resolvconf

From Whonix
Jump to navigation Jump to search

Update the package lists.

sudo apt update

Install resolvconf. [1]

sudo apt install resolvconf

Users preferring not to install resolvconf should read the footnotes. [2]

  1. ↑ /etc/openvpn/update-resolv-conf uses resolvconf. resolvconf needs to be installed for the lines beginning with script-security, up, and down to function properly.
  2. ↑

    1. In the /etc/openvpn/openvpn.conf file, change the following text. 

    script-security 2
up "/etc/openvpn/update-resolv-conf script_type=up dev=tun0"
down "/etc/openvpn/update-resolv-conf script_type=down dev=tun0"

    To the following. Remove or comment out the lines beginning with "up" and "down", and change the 2 to a 1. 

    script-security 1

    2. Open file /etc/resolv.conf in an editor with administrative ("root") rights.

    1 Select your platform.

    Non-Qubes-Whonix

    2 Notes.

    • Sudoedit guidance: See Kicksecure logo Open File with Root RightsOnion network Logo for details on why using sudoedit improves security and how to use it.
    • Editor requirement: Close Featherpad (or the chosen text editor) before running the sudoedit command.

    3 Open the file with root rights.

    sudoedit /etc/resolv.conf

    Qubes-Whonix

    2 Notes.

    • Sudoedit guidance: See Kicksecure logo Open File with Root RightsOnion network Logo for details on why using sudoedit improves security and how to use it.
    • Editor requirement: Close Featherpad (or the chosen text editor) before running the sudoedit command.
    • Template requirement: When using Qubes-Whonix, this must be done inside the Template.

    3 Open the file with root rights.

    sudoedit /etc/resolv.conf

    4 Notes.

    • Shut down Template: After applying this change, shut down the Template.
    • Restart App Qubes: All App Qubes based on the Template need to be restarted if they were already running.
    • Qubes persistence: See also Kicksecure logo Qubes PersistenceOnion network Logo
    • General procedure: This is a general procedure required for Qubes and is unspecific to Qubes-Whonix.

    Others and Alternatives

    2 Notes.

    • Example only: This is just an example. Other tools could achieve the same goal.
    • Troubleshooting and alternatives: If this example does not work for you, or if you are not using Whonix, please refer to Open File with Root Rights.

    3 Open the file with root rights.

    sudoedit /etc/resolv.conf

    3. Comment out the nameserver. 

    #nameserver 10.152.152.10

    4. Add the VPN provider's DNS server. 

    ## Riseup.net OpenVPN DNS server
nameserver 172.27.100.1

    If Riseup is not in use, replace 172.27.100.1 with the virtual LAN IP address of the VPN provider's DNS server. If unsure, the VPN provider might provide it. To try to infer it, run sudo route after successfully connecting to the VPN. The first destination default gateway should also function as a DNS server.

    5. Save and exit.

    6. Optional: Prevent /etc/resolv.conf being overwritten by other packages like DHCP or resolvconf.

    Run. 

    sudo chattr +i /etc/resolv.conf

    In order to revert this change, use -i.

    Ignore the /etc/resolv.conf instructions below.

Retrieved from "https://www.whonix.org/w/index.php?title=Template:VPN/Setup/install_resolvconf&oldid=70113"