Mullvad Browser has released package repos for Debian and Fedora

secretbear · February 2, 2025, 6:56am

I apologize again for my self-reply faux pas.

For posterity’s sake and the benefit of those searching for answers: I have resolved, in a less-than-ideal manner, a problem plaguing my setup involving the Mullvad daemon. It seems that on two systems with identical configurations the problem is only exhibited on the newer Raptor Lake system. In an attempt to mitigate this issue, I modified the qubes_dnat_tracker.sh script commonly recommended for VPN qube users. This adaptation causes the script to apply a sysctl setting when it detects that the current ARP ignore value is not set to 1.

Although my fix alleviates symptoms, I am far from content with the solution, as it merely masks a deeper problem rather than addressing it… being the peculiar discrepancy between these two systems which has come to light: one VPN qube responds properly to ARP requests while the other stubbornly refuses to acknowledge such queries, when both are set to arp_ignore=2. The failure disappears upon setting arp_ignore=1 on the troubled system’s instance of the VPN qube. This inconsistency suggests there is more at play here than initially meets the eye.

PostedPortal · February 16, 2025, 9:51pm

This worked!

joe-mandalore · March 7, 2025, 6:18pm

Hi tanky0u. Great instructions. Helped a lot. Step 4 though is giving me some problems. 1) there is no X-MullvadBrowser-ExecShell… line. Don’t know if that is good or bad. 2) How the heck do you save when you are done??? And all the commands that it shows at the bottom I can not get to execute. They all start with the ^ character. And when I try to execute nothing happens. I am running Debian-12-xfce. That’s my main template for all my qubes with the exception of the Whonix ones. And I only know 4 or 5 Terminal commands and this is my first time using sudoedit. Help, anyone?!?

parulin · March 7, 2025, 7:28pm

I don’t know either but the one starting with Exec= should be the one that matters.

The editor is called nano the ^X characters stands for the shortcut CTRL+X.

joe-mandalore · March 7, 2025, 8:36pm

Thanks again parulin. That worked.

joe-mandalore · August 6, 2025, 1:22pm

Hi everyone. I have all my Debian Temps and App Qubes running Mullvad with out any issues. I just realized I never changed Fedora though. Fedora is main temp for Sys-net and Sys-firewall.

When I change Fedora-41 over to Mullvad and delete firefox is there any special considerations I need to take for Sys-net and Sysfirewall?

Tezeria · August 6, 2025, 1:55pm

You mean if you install mullvad in the fedora41 template (which is also the template for sys-net and sys-firewall)? No, it doesn’t have any impacts.

joe-mandalore · August 6, 2025, 11:35pm

Hi Tezeria. Thanks. To be more specific, I want to delete Firefox from Fedora-41 all together and make Mullvad the main browser. This includes sys-net and sys-firewall. Do I simple go in delete Firefox from Fedora after I have installed Mullvad, then make Mullvad the primary browser and sys-net and sys-firewall will auto correct?

parulin · August 7, 2025, 4:55am

You should not use a browser in sys-net or sys-firewall, so… your question seems strange to me

Tezeria · August 7, 2025, 12:38pm

As @parulin says, you should not use a browser in Sys-Net or Sys-Firewall. You can uninstall firefox without problem

joe-mandalore · August 7, 2025, 2:44pm

Thanks guys. I must have been having a major brain fart. For some reason I was thinking sys-net was using a browser to connect to the internet. Lol.

ephile · October 28, 2025, 3:20pm

Installing Mullvad browser in a debian-13 template

tanky0u’s guide with a debian-13-minimal template worked fine until after this^ step. I needed to add an additional read permission with the following command:

sudo chmod 644 /usr/share/keyrings/mullvad-keyring.asc

Otherwise it worked perfectly and step 4 was no longer required (just be sure to also install the qubes-core-agent-networking package to allow network access).

joe-mandalore · December 21, 2025, 11:30pm

Hi everyone. I am switching over to Debian 13 and Fedora 42. I am currently trying to install Mullvad and Brave browsers on the template for Debian 13 xfce. I was following tanky0u’s instructions like I did for Debian 12 xfce, but run into trouble in step 3 with the sudo chown command not working. tried ephile’s sudo chmod command and it seemed to work, but then the next part didn’t go through. Here is what I did…

user@Debian-13-xfce-Business:~$ sudo mv ~/QubesIncoming/anon-whonix/mullvad-keyring.asc /usr/share/keyrings
user@Debian-13-xfce-Business:~$ sudo mv
mv: missing file operand
Try ‘mv --help’ for more information.
user@Debian-13-xfce-Business:~$ sudo mv ~/QubesIncoming/anon-whonix/brave-browser-archive-keyring.gpg /usr/share/keyrings
user@Debian-13-xfce-Business:~$ sudo chown root:root usr/share/keyrings/mullvad-keyring.asc
chown: cannot access ‘usr/share/keyrings/mullvad-keyring.asc’: No such file or directory
user@Debian-13-xfce-Business:~$ sudo chmod 644 /usr/share/keyrings/mullvad-keyring.asc
user@Debian-13-xfce-Business:~$ sudo chown root:root usr/share/keyrings/mullvad-keyring.asc
chown: cannot access ‘usr/share/keyrings/mullvad-keyring.asc’: No such file or directory
user@Debian-13-xfce-Business:~$ sudo chmod 644 /usr/share/keyrings/brave-browser.archive-keyring.gpg
chmod: cannot access ‘/usr/share/keyrings/brave-browser.archive-keyring.gpg’: No such file or directory
user@Debian-13-xfce-Business:~$ sudo chmod 644 /usr/share/keyrings/brave-browser-archive-keyring.gpg
user@Debian-13-xfce-Business:~$ echo “deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --print-architecture )] https://respository.mullvad.net/dev/stable $(lsb_release -cs) main” | sudo tee /etc/apt/sources.list.d/mullvad.list
deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=amd64] https://respository.mullvad.net/dev/stable trixie main
user@Debian-13-xfce-Business:~$ echo “deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg arch=$( dpkg --print-architecture )] https://brave-browser-apt-release.s3.brave.com/dev/stable $(lsb_release -cs) main” | suro tee /etc/apt/sources.list.d/brave.list
bash: suro: command not found
user@Debian-13-xfce-Business:~$ sudo apt update
Hit:1 Index of /r4.2/vm/ trixie InRelease
Hit:2 Index of /debian trixie InRelease
Hit:3 https://deb.debian.org/debian-security trixie-security InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Err:4 https://respository.mullvad.net/dev/stable trixie InRelease
Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Failed to fetch https://respository.mullvad.net/dev/stable/dists/trixie/InRelease Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Some index files failed to download. They have been ignored, or old ones used instead.
user@Debian-13-xfce-Business:~$ sudo apt install mullvad-browser
Error: Unable to locate package mullvad-browser
user@Debian-13-xfce-Business:~$ sudo apt install qubes-core-agent-networking
qubes-core-agent-networking is already the newest version (4.2.44-1+deb13u1).
qubes-core-agent-networking set to manually installed.
Summary:
Upgrading: 0, Installing: 0, Removing: 0, Not Upgrading: 0
user@Debian-13-xfce-Business:~$ sudo apt update
Hit:1 Index of /debian trixie InRelease
Hit:2 Index of /r4.2/vm/ trixie InRelease
Hit:3 https://deb.debian.org/debian-security trixie-security InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Err:4 https://respository.mullvad.net/dev/stable trixie InRelease
Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Failed to fetch https://respository.mullvad.net/dev/stable/dists/trixie/InRelease Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Some index files failed to download. They have been ignored, or old ones used instead.
user@Debian-13-xfce-Business:~$ sudo apt install mullvad-browser
Error: Unable to locate package mullvad-browser
user@Debian-13-xfce-Business:~$ sudo apt update &&

sudo apt install extrepo -y
Ign:1 https://respository.mullvad.net/dev/stable trixie InRelease
Hit:2 Index of /debian trixie InRelease
Hit:3 Index of /r4.2/vm/ trixie InRelease
Hit:4 https://deb.debian.org/debian-security trixie-security InRelease
Ign:1 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:1 https://respository.mullvad.net/dev/stable trixie InRelease
Err:1 https://respository.mullvad.net/dev/stable trixie InRelease
Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Failed to fetch https://respository.mullvad.net/dev/stable/dists/trixie/InRelease Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Some index files failed to download. They have been ignored, or old ones used instead.
user@Debian-13-xfce-Business:~$ sudo apt update && sudo apt install extrepo -y
Hit:1 Index of /debian trixie InRelease
Hit:2 Index of /r4.2/vm/ trixie InRelease
Hit:3 https://deb.debian.org/debian-security trixie-security InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Err:4 https://respository.mullvad.net/dev/stable trixie InRelease
Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Failed to fetch https://respository.mullvad.net/dev/stable/dists/trixie/InRelease Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Some index files failed to download. They have been ignored, or old ones used instead.
user@Debian-13-xfce-Business:~$ sudo apt purge mullvad-browser
Error: Unable to locate package mullvad-browser
user@Debian-13-xfce-Business:~$ sudo apt remove mullvad-browser
Error: Unable to locate package mullvad-browser
user@Debian-13-xfce-Business:~$ sudo apt autoremove
Summary:
Upgrading: 0, Installing: 0, Removing: 0, Not Upgrading: 0
user@Debian-13-xfce-Business:~$ sudo apt update && sudo apt install extrepo -y
Hit:1 Index of /debian trixie InRelease
Hit:2 Index of /r4.2/vm/ trixie InRelease
Hit:3 https://deb.debian.org/debian-security trixie-security InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://respository.mullvad.net/dev/stable trixie InRelease
Err:4 https://respository.mullvad.net/dev/stable trixie InRelease
Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Failed to fetch https://respository.mullvad.net/dev/stable/dists/trixie/InRelease Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Some index files failed to download. They have been ignored, or old ones used instead.
user@Debian-13-xfce-Business:~$

Not quite shore what to do next or how to fix it. Any Ideas? Thanks.

parulin · December 22, 2025, 7:23am

You forgot to prepend a slash /? Your command vs the original:

sudo chown root:root usr/share/keyrings/mullvad-keyring.asc
sudo chown root:root /usr/share/keyrings/mullvad-keyring.asc

joe-mandalore · December 22, 2025, 6:38pm

Thanks parulin. I redid it with the proper backspaces and got this error after the next step.

user@Debian-13-xfce-Business:~$ sudo shown root:root /usr/share/keyrings/mullvad-keyring.asc
sudo: shown: command not found
user@Debian-13-xfce-Business:~$ sudo chown root:root /usr/share/keyrings/mullvad-keyring.asc
user@Debian-13-xfce-Business:~$ sudo chown root:root /usr/share/keyrings/brave-browser-archive-keyring.gpg
user@Debian-13-xfce-Business:~$ echo “deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$(dpkg --print-architecture)] https://respository.mullvad.net/dev/stable $(lsb_release -cs)main” | sudo tee /etc/apt/sources.list.d/mullvad.list
deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=amd64] https://respository.mullvad.net/dev/stable trixiemain
user@Debian-13-xfce-Business:~$ sudo apt update
Error: Malformed entry 1 in list file /etc/apt/sources.list.d/mullvad.list (Component)
Error: The list of sources could not be read.
user@Debian-13-xfce-Business:~$

Any idea as to why it’s not reading the list of sources?

parulin · December 22, 2025, 6:47pm

Probably a typo here? A space before main?

solene · December 22, 2025, 6:59pm

I think apt repo files changed its syntax recently.

joe-mandalore · December 22, 2025, 7:46pm

Ok the space before main helped sorta. Now I get this…

user@Debian-13-xfce-Business:~$ echo “deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$(dpkg --print-architecture)] https://respository.mullvad.net/dev/stable $(lsb_release -cs) main” | sudo tee /etc/apt/sources.list.d/mullvad.list
deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=amd64] https://respository.mullvad.net/dev/stable trixie main
user@Debian-13-xfce-Business:~$ sudo apt update
Ign:1 https://respository.mullvad.net/dev/stable trixie InRelease
Hit:2 Index of /r4.2/vm/ trixie InRelease
Ign:3 Index of /debian trixie InRelease
Ign:1 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:4 https://deb.debian.org/debian-security trixie-security InRelease
Ign:1 https://respository.mullvad.net/dev/stable trixie InRelease
Ign:3 Index of /debian trixie InRelease
Err:1 https://respository.mullvad.net/dev/stable trixie InRelease
Reading from proxy failed - read (115: Operation now in progress) [IP: 127.0.0.1 8082]
Reading from proxy failed - select (115: Operation now in progress) [IP: 127.0.0.1 8082]
Ign:4 https://deb.debian.org/debian-security trixie-security InRelease
Hit:3 Index of /debian trixie InRelease
Hit:4 https://deb.debian.org/debian-security trixie-security InRelease
Error: Failed to fetch https://respository.mullvad.net/dev/stable/dists/trixie/InRelease Reading from proxy failed - select (115: Operation now in progress) [IP: 127.0.0.1 8082]
Error: Some index files failed to download. They have been ignored, or old ones used instead.
user@Debian-13-xfce-Business:~$

Any ideas anyone?

Thanks solene. know what the syntax changed to?

quber · December 22, 2025, 8:13pm

This works for me in a template:

https_proxy=http://127.0.0.1:8082/ http_proxy=http://127.0.0.1:8082/ 
wget --secure-protocol=TLSv1_2 -O /usr/share/keyrings/mullvad-keyring.asc 
http://repository.mullvad.net/deb/mullvad-keyring.asc

echo "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc 
arch=$( dpkg --print-architecture )] http://repository.mullvad.net/deb/stable 
$(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mullvad.list

I see you have dev instead of deb, please change that.

parulin · December 22, 2025, 8:19pm

Please carefully check what you typed! It’s repository

Why don’t you copy paste the instructions?