Modulejail and VPN

I cannot get NordVPN (wireguard) to work with modulejail. Removing modulejail and reboot restores NordVPN functionality. Are there any NordVPN users who can provide some guidance?

Check GitHub - jnuyens/modulejail: Proactively shrink a Linux host's kernel-module attack surface by blacklisting every module not currently in use. · GitHub especially the Profiles and Whitelist section.

I’m using Mullvad VPN (so yes wireguard) with modulejail. you have to make sure all the modules that you need are loaded. so your VPN needs to be running, first, before running mudulejail.

Personally I see no point in having a VPN that only runs sometimes.

2 Likes

After re-reading the documentation, I had to whitelist some modules and it is working now.

tun
wireguard
udp_tunnel

libcurve25519 (This one showed up in the log around the time I was trying to connect so I whitelisted it. Unsure about this one) It looks like curve25519 has to do with wireguard.
Source:Protocol & Cryptography - WireGuard

ip6_udp_tunnel - unsure about this one. I have ipv6 disabled via router and also in GRUB.

1 Like

Well it’s not blacklisted on my system, so probably a good idea not to blacklist it.

It’s probably the ipv6 tunnel over ipv4

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.