Protonvpn issue: --up script fails with '/etc/openvpn/update-resolv-conf': No such file or directory (errno=2)

bxvrecaji6 · June 22, 2021, 8:20pm

I’m trying to test this out right now…

Qubes-Community/Contents/blob/master/docs/configuration/vpn.md


How To make a VPN Gateway in Qubes
==================================

<div class="alert alert-info" role="alert">
  <i class="fa fa-info-circle"></i>
  <b>Note:</b> If you seek to enhance your privacy, you may also wish to consider <a href="/doc/whonix/">Whonix</a>.
  You should also be aware of <a href="https://www.whonix.org/wiki/Tunnels/Introduction">the potential risks of VPNs</a>.
</div>

Although setting up a VPN connection is not by itself Qubes specific, Qubes includes a number of tools that can make the client-side setup of your VPN more versatile and secure. This document is a Qubes-specific outline for choosing the type of VM to use, and shows how to prepare a ProxyVM for either NetworkManager or a set of fail-safe VPN scripts.

Please refer to your guest OS and VPN service documentation when considering the specific steps and parameters for your connection(s); The relevant documentation for the Qubes default guest OS (Fedora) is [Establishing a VPN Connection.](https://docs.fedoraproject.org/en-US/Fedora/23/html/Networking_Guide/sec-Establishing_a_VPN_Connection.html)

### NetVM

The simplest case is to set up a VPN connection using the NetworkManager service inside your NetVM. Because the NetworkManager service is already started, you are ready to set up your VPN connection. However this has some disadvantages:

- You have to place (and probably save) your VPN credentials inside the NetVM, which is directly connected to the outside world
- All your AppVMs which are connected to the NetVM will be connected to the VPN (by default)

This file has been truncated. show original

Set up a ProxyVM as a VPN gateway using iptables and CLI scripts.

I’m getting this issue in step:
" Test your client configuration: Run the client from a CLI prompt in the ‘vpn’ folder, preferably as root. For example:

sudo openvpn --cd /rw/config/vpn --config openvpn-client.ovpn
```"
sudo openvpn --cd /rw/config/vpn --config openvpn-client.ovpn
Options error: --up script fails with '/etc/openvpn/update-resolv-conf': No such file or directory (errno=2)
Options error: Please correct this error.
Use --help for more information.
...

I found this:
https://www.reddit.com/r/ProtonVPN/comments/6w2vh0/up_script_fails_with_etcopenvpnupdateresolvconf/

Do i need to change the DNS somewhere or did i mess up something else on the way? Hmm. Thanks

edit: this might help.. not sure.
https://github.com/ProtonVPN/scripts/blob/master/update-resolv-conf.sh

bxvrecaji6 · June 22, 2021, 9:01pm

Ok, so i fixed this error when trying debian 10 instead of fedora… I can connect now…
Thanks though… And if you know what could been wrong you can tell out of education if someone feels like it…

edit… Im guessing it could have been that i did not remove:
"script-security 2
up ‘qubes-vpn-handler.sh up’
down ‘qubes-vpn-handler.sh down’

Remove other instances of lines starting with script-security, up or down should there be any others. Save the script. Restart the client and test the connection again …this time from an AppVM!"

Which i noticed now… I will try next time.

51lieal · June 23, 2021, 2:13pm

You could follow the guide i provide here.