# Best way to install a VPN on Universal Blue? **URL:** \ **Category:** General\ **Created:** [November 23, 2023, 7:18pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134 "2023-11-23T19:18:32Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![StellarBurst](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/stellarburst/32/250_2.png) [@StellarBurst](https://universal-blue.discourse.group/u/StellarBurst)\ **Post date:** [November 23, 2023, 7:18pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/1 "2023-11-23T19:18:32Z")
I recently installed Bluefin on one of my computers, and I have been really liking it so far. As a new user I have been reading a lot and learning a lot a long the way, and loving it! As a long time user of Mullvad VPN, I have been reading and thinking about the best way to get that up and running on Bluefin. It seems like a VPN is not the sort of application that would run well from a FlatPak. As I understand things it is best to avoid layering when possible in the interest of stability so I have been looking for other options. Are any of you using Mullvad VPN? How did you install it? Does it work well on your system? Thanks! **OSTree Layering Option** > Mullvad is a great, privacy-conscious VPN Provider, which is really useful for when you’re on the road or don’t trust the coffee shop wifi. I was very concerned at first that getting a VPN running in Kinoite would be tough, but it turned out to be easy. First, Download the RPM. Then sudo rpm-ostree install /path/to/mullvad.rpm. Then reboot, because you’ve layered a package, and then… > > [Downloads | Mullvad VPN](https://mullvad.net/en/download/vpn/linux) > > sudo systemctl enable --now mullvad-daemon > > Then it ‘just works’, including the GUI. Source: [https://wstyler.ucsd.edu/posts/silverblue\_fixes.html](https://wstyler.ucsd.edu/posts/silverblue_fixes.html) **Use WireGuard for VPN** > Instructions from Mullvad website. Source > **[WireGuard on Linux terminal (easy) | Mullvad VPN](https://mullvad.net/en/help/easy-wireguard-mullvad-setup-linux)** > > This simplified guide will teach you how to use the WireGuard protocol to connect to Mullvad using Linux. **Run Mullvad VPN in Distrobox** > > This Redditor seems to have done that with Proton VPN. Source [https://www.reddit.com/r/Fedora/comments/te6m53/comment/i0smcfm/](https://www.reddit.com/r/Fedora/comments/te6m53/comment/i0smcfm/) **Use OpenGuard for VPN** > Instructions from Mullvad website. Source [https://wiki.archlinux.org/title/Mullvad](https://wiki.archlinux.org/title/Mullvad) Thanks again! ---
**Author:** ![j0rge](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/j0rge/32/8_2.png) [@j0rge](https://universal-blue.discourse.group/u/j0rge)\ **Post date:** [November 23, 2023, 7:49pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/2 "2023-11-23T19:49:23Z")
The wireguard instructions should work on Bluefin since it includes the wireguard tools. (though it would be great if we could confirm that they work!). I’m also not sure if the layered install will pull in the repo, so you might want to make sure that [this repo file](https://mullvad.net/en/help/install-mullvad-app-linux#fedora) is in `/etc/yum.repos.d` so that you’re getting updates. I’m using Mullvad in a different way, I buy it through tailscale so it’s integrated right into the tailscale UI so there’s almost zero config, though that might not be the way you wanna run it. Hope this helps! ---
**Author:** ![StellarBurst](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/stellarburst/32/250_2.png) [@StellarBurst](https://universal-blue.discourse.group/u/StellarBurst)\ **Post date:** [November 24, 2023, 10:28pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/3 "2023-11-24T22:28:18Z")
I followed the WireGuard instructions on the Mullvad VPN website as you suggested, and the connection test page confirmed that it worked. I always used the application in Ubuntu so turning the VPN on and off from the command line is a little different, but not a problem at all. Thank you so much for all of the work you are doing on this project. It really does feel like the future! ---
**Author:** ![s31bz](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/s31bz/32/1509_2.png) [@s31bz](https://universal-blue.discourse.group/u/s31bz)\ **Post date:** [May 6, 2024, 9:21pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/4 "2024-05-06T21:21:12Z")
I was sent here by my buddy Matt H as I may be facing the same issue for installation on Aurora soon, when I move from Fedora 40 to Aurora on my Framework 13. I’ll definitely miss the point-and-click app though, any ideas for the RPM? ---
**Author:** ![Matt\_Hartley](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/matt_hartley/32/1558_2.png) [@Matt\_Hartley](https://universal-blue.discourse.group/u/Matt_Hartley)\ **Post date:** [May 6, 2024, 9:35pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/5 "2024-05-06T21:35:17Z")
You won’t really miss it. **Flatpaks** - installed via the store. **Containers** - I really need something using RPMs, okay, install Fedora via Box Buddy and have at it. many applications can be run with created launchers in Bluefin. I do this with a testing release of KDENLive. **Homebrew** - Lots of CLI stuff here, much of it for devs. **rpm-ostree layering** - Absolute last resort and honestly, worth rethinking the app if it needs it. But if one must, [here’s the general idea](https://docs.fedoraproject.org/en-US/iot/add-layered/). All of that said, as others have indicated, this should work. > **[WireGuard on Linux terminal (easy)](https://mullvad.net/en/help/easy-wireguard-mullvad-setup-linux)** > > This simplified guide will teach you how to use the WireGuard protocol to connect to Mullvad using Linux. ---
**Author:** ![Matt\_Hartley](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/matt_hartley/32/1558_2.png) [@Matt\_Hartley](https://universal-blue.discourse.group/u/Matt_Hartley)\ **Post date:** [May 6, 2024, 9:45pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/6 "2024-05-06T21:45:18Z")
Besides that, Bluefin specifically, has Tailscale rolled in. > [@Tailscale VPN on Bluefin](https://universal-blue.discourse.group/t/tailscale-vpn-on-bluefin/290): > > Bluefin comes with [Tailscale](https://tailscale.com/) integrated out of the box. The tailscale command is available via the command line. The [Tailscale documentation](https://tailscale.com/kb/start) will show you how to set it up. Wireguard tools are also available if you want to use another provider. There are two extensions for tailscale that are used in Bluefin. We started with tailscale-status but are moving to tailscale-gnome-qs in Fedora 39 and newer: F38: [tailscale-status](https://github.com/maxgallup/tailscale-status) F39: [tailscale-gnome-qs](https://github.com/joaophi/tailscale-gnome-qs) Here’s what it looks like: Both ext… ---
**Author:** ![Matt\_Hartley](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/matt_hartley/32/1558_2.png) [@Matt\_Hartley](https://universal-blue.discourse.group/u/Matt_Hartley)\ **Post date:** [May 6, 2024, 9:52pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/7 "2024-05-06T21:52:11Z")
> [@StellarBurst](#): > > [WireGuard on Linux terminal (easy)](https://mullvad.net/en/help/easy-wireguard-mullvad-setup-linux) Heh, interesting. I’d do a DNS leak test to confirm myself post-install, but “apparently” you can do this with RMP installs of VPNs through distrobox. Assuming Box Buddy app export the icon out to the host for in-container launching. Never tried it, but it sounds interesting. [Reddit - Dive into anything](https://www.reddit.com/r/Fedora/comments/te6m53/comment/i0t1da2/) ---
**Author:** ![s31bz](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/s31bz/32/1509_2.png) [@s31bz](https://universal-blue.discourse.group/u/s31bz)\ **Post date:** [May 6, 2024, 10:08pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/8 "2024-05-06T22:08:42Z")
Oooh ok I’ll continue testing Aurora on my corebooted Thinkpad C13 Yoga and look towards moving to Bluefin on FW13 ---
**Author:** ![Matt\_Hartley](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/matt_hartley/32/1558_2.png) [@Matt\_Hartley](https://universal-blue.discourse.group/u/Matt_Hartley)\ **Post date:** [May 6, 2024, 10:22pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/9 "2024-05-06T22:22:13Z")
Awesome! 🙂 ---
**Author:** ![s31bz](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/s31bz/32/1509_2.png) [@s31bz](https://universal-blue.discourse.group/u/s31bz)\ **Post date:** [May 18, 2024, 9:55am UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/10 "2024-05-18T09:55:49Z")
Just to be sure, i can use wireguard in Bazzite as well, no? ---
**Author:** ![Matt\_Hartley](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/matt_hartley/32/1558_2.png) [@Matt\_Hartley](https://universal-blue.discourse.group/u/Matt_Hartley)\ **Post date:** [May 23, 2024, 12:08am UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/11 "2024-05-23T00:08:54Z")
GNOME extension, yes. Also found this, although I am on Bluefin ATM. > ---
**Author:** ![s31bz](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/s31bz/32/1509_2.png) [@s31bz](https://universal-blue.discourse.group/u/s31bz)\ **Post date:** [May 23, 2024, 12:43am UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/12 "2024-05-23T00:43:34Z")
I’ve been using `wg-quick` ---
**Author:** ![LaForge](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/laforge/32/2175_2.png) [@LaForge](https://universal-blue.discourse.group/u/LaForge)\ **Post date:** [July 24, 2024, 2:21pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/13 "2024-07-24T14:21:20Z")
I am using Gnome, and their implementation of network manager allows you to “import from file” to set up a VPN. This turns the VPN toggle into one of their quick buttons in the menu bar, and you can configure it to select from multiple different nodes or auto-connect on sign-in. Highest recommendation for integration and ease of use. I haven’t tried it on KDE plasma, but I have done it on XFCE, and it was also just as painless to set up and easy to manage. Once you sign into your mullvad account on their site, you need to go to the download section for the wireguard configurations and download the files for each node you want to appear in your drop down menus. Then import them in your DE’s VPN settings, name them whatever you like, and you’re off to the races. edit: Screenshot for what the result looks like in Gnome ![gnome-vpn](https://global.discourse-cdn.com/free1/uploads/univeral_blue/original/2X/1/17af69622105b140ed4d1e29d31f3d55c28db40b.png) ---
**Author:** ![vase](https://avatars.discourse-cdn.com/v4/letter/v/b9bd4f/32.png) [@vase](https://universal-blue.discourse.group/u/vase)\ **Post date:** [July 24, 2024, 9:09pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/14 "2024-07-24T21:09:56Z")
> [@StellarBurst](#): > > It seems like a VPN is not the sort of application that would run well from a FlatPak I can confirm Proton VPN works perfectly from Flatpak on Aurora. ---
**Author:** ![dino](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/dino/32/1567_2.png) [@dino](https://universal-blue.discourse.group/u/dino)\ **Post date:** [July 25, 2024, 4:30am UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/15 "2024-07-25T04:30:02Z")
Have you figured a way to enable killswitch? In case connection drops or vpn server is down for maintenance. ---
**Author:** ![LaForge](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/laforge/32/2175_2.png) [@LaForge](https://universal-blue.discourse.group/u/LaForge)\ **Post date:** [July 25, 2024, 10:25pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/16 "2024-07-25T22:25:56Z")
I have not, but what has happened in those instances for me is that I lose all access to the internet until I switch off the VPN. I don’t think it has all of the benefits of a dedicated killswitch per-se, but it was what I personally want to happen in that scenario. ---
**Author:** ![dino](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/dino/32/1567_2.png) [@dino](https://universal-blue.discourse.group/u/dino)\ **Post date:** [July 26, 2024, 7:46am UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/17 "2024-07-26T07:46:50Z")
How have you set it up? The goal: shut down internet access if vpn server is down. so that we can switch to another server from network-manager list. ---
**Author:** ![phreed](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/phreed/32/2417_2.png) [@phreed](https://universal-blue.discourse.group/u/phreed)\ **Post date:** [August 3, 2024, 3:01pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/18 "2024-08-03T15:01:35Z")
I have a corporate VPN I am required to use. Here is the name of the package. ps-pulse-linux-22.5r1.0-b25375-64bit-installer.rpm I have tried two approaches: - installation into a fedora distrobox, which I then distrobox-export - `rpm-ostree install ps-pulse-linux-22.5r1.0-b25375-64bit-installer.rpm` Both approaches ultimately fail giving the same error. Before failing, the basic stuff works, i.e., starting the UI, … Here is the error. ```auto /opt/pulsesecure/bin/pulseUI dsOpenSSL Start - dsENGINE_register_ECDSA dsOpenSSL End - dsENGINE_register_ECDSA DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name is not activatable DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name is not activatable DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name is not activatable DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name is not activatable Segmentation fault (core dumped) ``` Any advice? ---
**Author:** ![harold](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/harold/32/2562_2.png) [@harold](https://universal-blue.discourse.group/u/harold)\ **Post date:** [August 3, 2024, 3:22pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/19 "2024-08-03T15:22:40Z")
Is it permitted to install the corporate vpn on a router or are you required to install it on the pc? Then again perhaps you have to travel for work. ---
**Author:** ![phreed](https://yyz2.discourse-cdn.com/free1/user_avatar/universal-blue.discourse.group/phreed/32/2417_2.png) [@phreed](https://universal-blue.discourse.group/u/phreed)\ **Post date:** [August 3, 2024, 3:29pm UTC](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134/20 "2024-08-03T15:29:11Z")
Yes, I am traveling. Installing the VPN on a router is a good point though. If I am unable to get this working on UB, I do have an OrangePi that I could potentially recruit as router, but that sounds like a fair bit of work. [Next page](https://universal-blue.discourse.group/t/best-way-to-install-a-vpn-on-universal-blue/134.md?page=2)