[guide] how-to HVM networking

Fellow Qubies, setting up networking for HVM can be a little tricky.

Therefore I would like to share a little bash script which I collected while reading different postings in this forum and on github:

#! /bin/bash

# set NetVM in dom0 for your HVM 
# everytime you change that setting with Qube Manager or
# in dom0's CLI eth0 in your HVM will get "down".
# and this script has to run again with correct IPs

# as root in your HVM terminal
systemctl disable --now NetworkManager

# set up your HVM's ip address and fire up device
ip a add dev eth0
ip l set dev eth0 up

# if you are using a neighbor VM as uplink (i.e. sys-wireshark)
# setting up your route would look like this:
ip r add dev eth0
ip r add default via 

# if you are using a disposable VM as uplink (i.e. sys-firewall)
# setting up your route would look like this:
ip r add dev eth0
ip r add default via

sleep 10

# check your networking like this
ip -br a
ip r
curl http://google.com

# enjoy


  1. added a sleep to script.
  2. exchanged ping for curl since ping doesn’t work with whonix-uplink

Interesting enough… after setting up the network like this… one can switch the NetworkManager.service back on again.

If the HVM has nmtui installed one can primarily set up the interface with nmtui to manual and set up IP, default route and DNS server. The later missing in the first post. As far as I can tell NM saves the settings to /etc/NetworkManager/system-connections/eth0.nmconnection.

For the sake of completeness I like to add the manual setup of HVM’s DNS without NetworkManager but with CLI / bash script.

#! /bin/bash

# as root in your HVM
systemctl disable --now NetworkManager
systemctl disable --now systemd-resolved
echo "nameserver" > /etc/resolv.conf
echo "nameserver" >> /etc/resolv.conf

# check DNS settings like this
curl http://google.com

# enjoy and are DNATed to uplinks DNS resolver in sys-net.

PS: I havn’t tested the script…