I recently set up Atlas OS (based on Windows 11) in my desktop.
So that got me thinking, can I enable system-wide DNS-Over-HTTP in Qubes (and any Linux distro for that matter) ?
You can read this topic to get the idea on how to do this:
I used to run dnscrypt-proxy inside of sys-net to encrypt and secure dns-requests. Meanwhile I moved the service to a separate sys-dns and would like to share the setup with the community. Prerequisite is a fedora-36-minimal and fedora-36-minimal-dvm with dnscrypt-proxy installed and disabled.
[user@dom0 ~]$ qvm-clone fedora-36-minimal-dvm fedora-36-minimal-dns
[user@dom0 ~]$ qvm-create -C DispVM --template fedora-36-minimal-dns --label orange sys-dns
[user@dom0 ~]$ qvm-prefs sys-dns netvm sys-…
You can also use a Pi-hole for this:
Name: 3isec-qubes-pihole
Version: 1.4
Release: 1%{?dist}
Summary: Creates Pi-hole server for Qubes
License: GPLv3+
SOURCE0: pihole
%description
This is Pi-hole.
It blocks advertisements and internet trackers by providing a DNS sinkhole.
The package will create a new standalone qube, sys-pihole.
It is a drop in replacement for sys-firewall.
Sys-pihole is attached to sys-net.
If you have sys-firewall as the default netvm, this will be changed to sys-pihole.
The installation will try to move all qubes with netvm of sys-firewall to sys-iphole.
sys-firewall will *not* be removed, so you can still use it for some qubes if you want.
If you want to use Tor, then you should reconfigure your system like this:
show original
For a long while now we’ve been talking about methods of helping users set up
their systems, and install and configure software.
New users in particular find this difficult to deal with.
Look at the repeated posts in the Forum about how to set up a VPN.
Many of the guides that are produced involve users copying shell scripts
into dom0 or templates and running them, and it’s obvious that many
people still struggle.
Wouldn’t it be better if users could just install a package that did all
t…
2 Likes
+1, I’m also using dnscrypt-proxy for this in a network VM. works like a charm.