Custom DNS sys-net

[xyz_cube]

Hi,
i’m using lasted version of Qubes OS 4.2.4.
I would like to know how to force Custom DNS in sys-net (dispVM).
Right now it get DNS from DHCP ISP, so not good.
Someone can help me?
thank you
Best regards

[Tezeria]

Disposable sys-net: Automatically connect wifi (config file or RPC service)

Qubes OS - Disposable sys-net - Automatically connect wifi 0 - Description This guide aims to answer to the (reccuring?) question: How can I make my wifi connection remember my password? In the “Configuration file” main section, you have 3 methods. In the “RPC service” main section, you have an example of how to store your wifi credentials outside of the disposable template. 1 - Configuration file 1.1 - Copy the config file Connect to your wifi with the Network-Manager panel icon. Once c…

You could settings your dispVM sys-net like you want: dns, password, etc…
Said thanks to @szz9pza

you can use dnscrypt too:

[guide] how-to setup a sys-dns qube

The firewall documentation says: “Qubes does not support running any networking services (e.g. VPN, local DNS server, IPS, …) directly in a qube that is used to run the Qubes firewall service (usually sys-firewall) for good reasons. In particular, if you want to ensure proper functioning of the Qubes firewall, you should not tinker with iptables or nftables rules in such qubes.” which sounds confusing because: sys-firewall is not a service, it is a VM the “good reasons” have not been expli…

of @qubist
with the nftables translation of @DVM :

[guide] how-to setup a sys-dns qube

I converted @qubist’s iptables rules to support Qubes 4.2 nftables. I did some quick tests and it seems to work, tell me if something is not working properly. sys-dns sys-wall

[quer]

Maybe just edit /etc/resolv.conf?
If you are asking how to persistent store the config for disposable net vm, my solution is store wifi ssid and password to a file in dom0 and write a script to automatic read the info and execute qvm-run to connect wifi and setup some other configs.

### Part of the script look like this.
qvm-run -u root --pass-io "$NETVM" " 
    if [[ \$(nmcli radio wifi) == \"disabled\" ]]; then
        nmcli radio wifi on
	sleep 0.5
    fi
    if ! nmcli connection up \"$selected_ssid\"; then
        if nmcli device wifi connect \"$selected_ssid\" password \"$PASSWORD\" $HIDDEN_ARG; then
		    nmcli connection modify \"$selected_ssid\" connection.autoconnect no
	    fi
    fi
    echo "..." > /etc/resolve.config
"

[xyz_cube]

Hi, thank you, i read that but i think there was a misunderstood because i don’t need to save wifi password and with Custum DNS i meant not MY but public one (of my choise, e.g mullvad). so i don’t like to create a custom dns server in local. how is the solution in this case? thank you

[xyz_cube]

@quer

/etc/resolv.conf

Hi Thank you.
so to to a test i just have to change dns from /etc/resolv.conf from disposable sys-net? and if works change it from sys-net template (fedora-41-xfce)? is it right? thank you
Last thing, why you talk about wifi? i dont need it or keep credential just persistent DNS of my choise. thank you again
best regards

[Tezeria]

In your .nmconnection file, In the [ipv4] section, you have the option to choose your DNS, not just your wifi password, for example:

[wifi]
cloned-mac-adress=random
mode=infrastructure
ssid=Your_ssid

[wifi-security]
key-mgnt=wpa-psk
psk=Your_password  #or nothing if you don't want to save it

[ipv4]
dns=Your_public_dns;
method=auto

All the configurations you are doing in NetworkManager are in .nmconnection file .
It is in /etc/NetworkManager/system-connections/

[xyz_cube]

Hi,
thank you!
so i need to edit .nmconnection file in /etc/NetworkManager/system-connections/ inside sys-net and because sys-net is disposable i also need to copy it to /rw//config/NM-system-connections folder of sys-net’s dvm-template? or i can just edit edit .nmconnection file in /etc/NetworkManager/system-connections/ into sys-net’s dvm-template? sorry but i’m new in linux and Qubes. thanks so much for help!

[Tezeria]

Just make like the topic:

Disposable sys-net: Automatically connect wifi (config file or RPC service)

Qubes OS - Disposable sys-net - Automatically connect wifi 0 - Description This guide aims to answer to the (reccuring?) question: How can I make my wifi connection remember my password? In the “Configuration file” main section, you have 3 methods. In the “RPC service” main section, you have an example of how to store your wifi credentials outside of the disposable template. 1 - Configuration file 1.1 - Copy the config file Connect to your wifi with the Network-Manager panel icon. Once c…

It explain for the wifi password but it’s the same for all your configuration you make in NetworkManager.

[xyz_cube]

Ok thank you, i see, but its seem a bit complicated. if i do as following can be also ok? it seems more easy:

1. From DVM Template sys-net (es. fedora-XX-dvm) do:

ls /etc/NetworkManager/system-connections/

so i can see the “connection name” like Wired connection 1.nmconnection

sudo nano /etc/NetworkManager/system-connections/“Wired connection 1.nmconnection”

3. edit file, example

[ipv4]
method=auto
dns=xxx;
ignore-auto-dns=true

Ctrl+O, enter key, Ctrl+X

4. Give the right permission to file:

sudo chmod 600 /etc/NetworkManager/system-connections/“Wired connection 1.nmconnection”

5. shut down template fedora-XX-dvm

6. reboot DVM sys-net

[Tezeria]

dispsable template is an AppVm not a template. It doesn’t keep the changements in /etc/
I think you could, copy your 1.nmconnection in the directory /rw/config/NM-system-connections/ in your fedora-XX-dvm.
Then shutdown fedora-XX-dvm and launch sys-net.

[xyz_cube]

Thank you!
Is DOH or DOT DNS supported by default like Mullvad DNS outside VPN.

[Tezeria]

i don’t know, i don’t use Mullvas DNS

[xyz_cube]

See image in attachment. I dont have folder NM-system-connections.
Some idea why?
Thanks

[Tezeria]

sudo mkdir /rw/config/NM-system-connections

[xyz_cube]

Solved, with standard DNS all works fine.
im open a new topic hope someone else can helo me to make mullvad dns DOH and DOT works.
I tryed but they don’t work
Thank you

[Tezeria]

make solved for this topic for others people