Qubes-mirage-firewall RC-like update

Dear community,
I plan to push Ocaml 5+ ecosystem for Qubes-mirage-firewall soon, before continuing development. We don’t have RC releases with Qubes-mirage-firewall, but if you want to try and help find bugs before the next release, you can test:

For both repositories, you can run:

sudo dnf install podman -y && \
git clone <the chosen repository> && \
cd qubes-mirage-firewall && \
./build-with.sh podman

This will build dist/qubes-firewall.xen which you can copy into dom0 as a regular update.
Any help and/or feedback will be greatly appreciated :slight_smile:

Based on lastest feedbacks, and after the next release I’ll start to work on:

  • IPv6 support
  • port redirection support
4 Likes

Hello,

Thank you for your work! I’m all set to test the mirage-firewall and will let you know if I encounter any issues. I will also test ProtonVPN to see if I run into the same problems I had with MullvadVPN, as I have a subscription.

Thanks!

1 Like

@palainp Does mirageos-firewall store data on the drive, or is it only in RAM?

There is no persistance nor configuration from the disk. The only mutable things are the connected clients configuration and their firewall rules. Those are read from QubesDB dynamically at runtime and everything is in RAM.

1 Like

Can confirm, protonvpn is working without any issues.