Now open a file manager in your vpn-mullvad VM (click the Qubes menu, Service: vpn-mullvad, vpn-mullvad: Files). (This will probably boot that VM for the first time.) Now open a file manager in your disposable VM that contains the file you just downloaded.Īnd copy it to your vpn-mullvad VM. (In my case, since I'm setting up this VPN to go to Canada, I'm downloading the file mullvad_config_linux_ca.zip.) Set your platform to Linux, choose a location, and make sure to check Use IP addresses. Once you're logged in, go to Mullvad's OpenVPN configuration file generator. Now, open a web browser in a disposable VM (click the Qubes menu, then Disposable: fedora-30-dvm, fedora-30-dvm: Firefox), and login to your Mullvad account at. This will make it so that when this VM boots up, you'll have a NetworkManager system tray applet in the top-right corner of your screen. When the vpn-mullvad settings open, switch to the 'Services' tab and add a service called network-manager, and click ok. ('Provides network' means this new VM will be able to provide internet access to other VMs.) Finally, check both the 'provides network' and 'launch settings after creation' boxes.

Use the latest Fedora template you have ( fedora-30 in my case), and make sure to set networking to sys-firewall and not default (sys-firewall). I also use a simple script that I set to run when my AppVM boots to automatically connect to the VPN, and reconnect if it disconnects, and Qubes firewall rules to prevent non-VPN internet traffic from sneaking by.įirst, create a new VM called vpn-mullvad. There are many different ways - Mullvad even has its own Qubes guide - but I prefer using NetworkManager system tray applets, so I can always see if my VPN is connected or not. Instead of just helping them, I decided to write a quick blog post explaining how I normally set up VPNs in Qubes. A friend wanted my help configuring Mullvad VPN on their Qubes computer.

Mullvad wireguard setup