OpenVPN install on Proxmox LXC - VPN tutorial

[@BrentHaub]

Great stuff! Got it working like a charm. Came here after failing to get the native VPN connection working on my Netgear Nighthawk. Using proxmox + openVPN on an Ubuntu CT just works with your method.

[@BlueMonkey4n6]

Glad I could help

[@huntermcclovio4517]

Thank you for taking the time and explain this tutorial in great detail. I am new to proxmox and vpn. I learned something new today and I now have a VPN!! 😀🥰

[@BlueMonkey4n6]

Awesome, glad the video helped.

[@zach7269]

Thanks for taking the time to make this. Explaining each linux command would be helpful. Maybe that would be too long of a video for most audience.

[@BlueMonkey4n6]

Good suggestion, I will see about explaining each command in the future and balance it with video length

[@Whatisthatcrypto]

Help please. I got up to 07:20 no problems but try to boot up the container and it fails. I have this on an R710 server with CT setup of 2 cores + 2048 RAM + 8 GB SSD. Error log says mount_entry: 2213 No such file or directory - Failed to mount "/dev/net" on "/usr/lib/x86_64-linux-gnu/lxc/rootfs/dev/net" lxc_setup: 3915 Failed to setup mount entries do_start: 1273 Failed to setup container "201" sync_wait: 34 An error occurred in another process (expected sequence number 3) __lxc_start: 2114 Failed to spawn container "201" TASK ERROR: startup for container '201' failed I have 6 CTs and 8 VMs runnable without issue so I closed them all down and the VPM CT still wont fire up. Any help appreciated.

[@BlueMonkey4n6]

Did you enable the VPN inside the unprivileged container? On your host machine, you can do: # chown 100000:100000 /dev/net/tun

[@kbbenton7792]

I like this better than the previous video I watched because it uses Ubuntu 22.04 instead of Ubuntu 18.04. Works great and is on a still-supported OS! 🙂

[@BlueMonkey4n6]

Thanks for watching and for the positive comment!

[@Oliviero-sb9ko]

Thx mate you pointed me to well working solution, i am using proxmox, but created light ubuntu server as VM just for this, installed openvpn, trasnfer file and its perfectly working in my mac. From there i can go with RDP etc. go to my private machine when i am at work or anywhere or to my homelab. IT works its fast as my Download upload is 1/1G with static ip. Also i have added a bit of securuty layer about downloading stuff so it drops when its sus. I am running multiple servers at my home lab for fun and for education - also to improve myself as IT admin in work. Thank you for pointing me good direction :) Enjoy your day and keep those tech vids, i love em :) 🖥🖥🖥🖥🖥🖥🖥🖥🖥🖥🖥🖥🖥

[@BlueMonkey4n6]

Awesome, keep doing what you are doing. There is so many things one can do with a home lab. And it so much fun!

[@elefteriosmouratidis]

maybe i missed it but how do you copy the ovpn file from the lxc container?

[@BlueMonkey4n6]

ah, that's a good question and I may have glossed over that. In my case, I setup an internal share with using Snapdrop (it's like AirDrop but for all system, not just Apple machines). But you could very well have used a thumb drive to transfer the keyfiles from the LXC container to other machines.

[@ErezMaruani]

the system does not have the tun device available. tun needs to be enabled before running this installer. can help please

[@BlueMonkey4n6]

did you edit the .conf file for that LXC to add the /dev/net/tun device?

[@skylerhilborn6892]

​​@@BlueMonkey4n6 I am having the same issue, followed all steps up to this point and getting the same message after running bash ./openvpn-install.sh command Edit: couple typos when I updated the conf file.

[@DonJackson-y7g]

where are *.ovpn files located on proxmox lxc and how do i copy file to use on windows10 client?

[@BlueMonkey4n6]

The .ovpn files are located in "/root/" of the OpenVPN where you should run the script openvpn-install.sh. To copy the file to your windows client, you can transfer the file via scp or sneaker net if by copying the file to a USB drive.

[@DonJackson-y7g]

@@BlueMonkey4n6 thanks for all of your help I appreciate your response very much

[@hendmele]

You mention that you would prepare a video to address the assumption that public ip is static. Is that video out or still on the pipeline?

[@BlueMonkey4n6]

That video is still in the works. Been distracted with other things. Thanks for asking, i will bump it up in priority

[@hendmele]

@BlueMonkey4n6 great stuff, thank you!

[@vijaydembla2447]

Thanks for putting this together, and explaining it step by step. Unfortunately, since i have moved to pfsense, my vpn files are taking the local address, and not the wan ip address. And therefore, it doesn't work for me. To add more detail. The step right after when you execute the bash script, it doesn't prompt me for the option "This servere is behind NAT...". and When i create an opvn file, it has the containers local ip address listed on the top. Would you please be able to help? Thanks in advance

[@moonfall84]

I'm not that expert as you - how did you save the .ovpn file to be able to transfer it later on via Snapdrop? This part is not showed :( I'm using Windows based PC not Mac)

[@moonfall84]

OK I just copied the data to new notepad file

[@BlueMonkey4n6]

Yeah that was pretty much what i did

[@FRVN3K]

How can i create a more config files for more devices?

[@BlueMonkey4n6]

you just run the script "openvpn-install.sh" again for other client machines. It will create more private-key and public-cert-request files.

[@maomao6679]

I've did pretty everything identically except the I used debian instead of ubuntu i don’t know if that's a big deal. But when I try, my vpn can connect, but cannot get the proper dns server when connected to the vpn, it gets 10.0.0.10 instead of the ip of my router... Help pls TwT. Ps: I use tunnelblick to connect to my vpn on a macbook

[@NguyenCungHoaHien]

Thanks for the video! I think this way of installation doesn't come with a WebUI for OpenVPN, yeah?

[@BlueMonkey4n6]

Thats a good question, i am sure there is a WebUI to do this but I am a command line guy who likes to type and understand whats going on under the hood.

[@michaelcooper5490]

Hey there, awesome job on the video. How do I create 2nd certificate for another client system/workstation? Thank you for your hard work really good job.

[@BlueMonkey4n6]

Thanks for watching and for the support! To create additional certificates for other client systems, you just need to run the openvpn-install.sh script again and give a different name for the client. This will generate new keys. Your new client configuration files is available where you ran the script.

[@KrisHoobergs]

Great finally a video where my OpenVpn is working... except for some reason the performance is very bad and so not useful (talking B/S and KB/S). Do you have any idea what the reason could be?

[@BlueMonkey4n6]

Great question. I believe there are many factors as to why performance is not so good. Two top reasons is encryption algorithm and CPU power. You could monitor the CPU usage to see how much of it is taken up when OpenVPN is doing its thing. And trying out a less taxing encryption algorithm may help in speed but you sacrifice security. You may also want to check on whether you have compression turned on, that would for sure slow things down on older processors

[@gambeta1337]

11:30 you should've shown how to actually download that file to a computer so that you can send it to your iPhone.

[@BlueMonkey4n6]

Ah, good point. I was so excited to get that file to my iPhone, I didnt explain clearly. I basically just copied that text from the terminal window from Proxmox and then pasted it to a TextEdit document on my Mac. Alternatively I could have transferred it using a NAS on my network.

[@gambeta1337]

@@BlueMonkey4n6 Yup, that works as well. Was jsut something I noticed you didn't explain so that you can improve in further videos. I was able to do this by setting up a SCP connection

[@BlueMonkey4n6]

@@gambeta1337 appreciate the useful feedback! scp is definitely another good way of doing it.

[@Warroy_]

Thanks, works perfectly fine and learned more on proxmox

[@BlueMonkey4n6]

You are welcome

[@repairstudio4940]

Liked and Subbed, is this as secure as CloudFlare and do I need a domain and all the jazz like Cloudflare?

[@BlueMonkey4n6]

Thats a good question. Stay tuned to this channel as I am planning to do an episode about services that provide Dynamic DNS such as Cloudflare.

[@jlgiorio]

Great tut!! I wondering, can we setup a password for the user?

[@BlueMonkey4n6]

Apparently you can although not recommended due to security. I have not tried it out myself but I'm going to look into it and maybe create video tutorial for the steps.

[@jlgiorio]

@@BlueMonkey4n6 I thought having a password would be safer. We have the certificates and you would still have to enter a password to connect. I'm going to do some tests here too. Post results here. Thank you and congratulations again for the videos!

[@Hckr-ei2xj]

thanks for this

[@BlueMonkey4n6]

you are welcome. Thanks for watching and thanks for leaving a comment

[@IGrowUP2023]

its give me error when i boot the container "bpf_device_cgroup_prepare: 3469 Invalid argument - Failed to parse device rule devices.allow==c 10:200 rwm mount_entry: 2262 Operation not permitted - Failed to mount "=/dev/net" on "/usr/lib/x86_64-linux-gnu/lxc/rootfs/dev/net" lxc_setup: 3915 Failed to setup mount entries do_start: 1273 Failed to setup container "101" sync_wait: 34 An error occurred in another process (expected sequence number 3) __lxc_start: 2114 Failed to spawn container "101" TASK ERROR: startup for container '101' failed"

[@IGrowUP2023]

i have fixed it

[@BlueMonkey4n6]

oh glad you fixed the problem. care to share how you fixed it?