- This topic has 15 replies, 4 voices, and was last updated Apr 7-4:07 pm by DaveW.
-
Posts
-
DaveW
It has been about a month since my last post on this issue.
Running Antix 17, 32 bit, I have vpn service via AirVPN (with their Eddie-ui) and via Winscribe (with their cli program). Both work well with browser and email programs, that are outside of firejail. But I prefer to run these programs inside firejail.
When firejailed, browser and email are unable to connect to the internet. From what I understand, Firejail’s default networking is not directly compatible with openvpn tun0 interface. But several work-arounds are suggested on the firejail github site (https://github.com/netblue30/firejail/issues/2046).
Unfortunately, my networking skills are very lacking, and I have run into snags with all methods listed there.
From what I understand, there are two issues (1) getting a suitable network connection in and out of firejail, (2) compatibility of that network method with openvpn tunnel. My newbie questions, at the firejail site, either go unanswered or the answers direct me back to solutions that I can’t make work.
In any case, I recently found that I can escape firejail to connect directly to the internet by using a macvlan or macvtap link to eth0. (For all I know, this may be the default networking method for firejail, which works already… and I am just implementing it the hard way.)
However, using macvlan or macvtap, I have not been able to connect to the vpn. I have tried directing the macvlan via ip addresses for eth0 and tun0, but “no go” either way.
So… my question: Are these connection types incompatible with openvpn? If so, is it possible to make them compatible in some way?
with apologies for my ignorance…
- You must be logged in to reply to this topic.
