Pptp vpn on container with pve 6.0.4

hi

Somebody have a success story creating a vpn based on pptp , (and, yes, i know, insecure in current days), using a debian 10 container with pve version 6.x.x ?

triying to replicate the guidelines on https://torguard.net/knowledgebase.php?action=displayarticle&id=154

root@r-vpn:~# modprobe ppp-generic

modprobe: ERROR: …/libkmod/libkmod.c:586 kmod_search_moddep() could not open moddep file ‘/lib/modules/5.0.15-1-pve/modules.dep.bin’

modprobe: FATAL: Module ppp-generic not found in directory /lib/modules/5.0.15-1-pve

Not sure why you’re trying to do pop top but why not just use wireguard?

LXC is a host kernel partition more or less equivalent to a BSD jail or chroot with some pre-applied apparmor profile and pre-allocated cpu/mem/dev resource pool.

You are trying to access a library via an LXC that isn’t accessible to the default image template in its current config. The following

 pct set xxx --mp0 /lib/modules/$(uname -r),mp=/lib/modules/$(uname -r),ro=1

in the host will grant the xxx container access to all host kernel libs.

Be very careful with this, it is a dangerous security issue in itself, not to mention PPTP is known compromised protocol that can be sniffed, intercepted and decrypted/encrypted on the fly by numerous documented bad actor toolkits.

I highly recommend you not implement PPTP to any endpoint outside your network.

Edit: emphasis

Not helpful. They asked how to do it, not for your opinion of it. Everyone knows pptp is compromised now.

gigabit_gigarobo1 point · 13 hours ago

(and, yes, i know, insecure in current days) Obviously this person is testing something, hopefully security-related. And yes, this issue is Promox-related, because the problem lies in the LXC modprobe map dictated in Proxmox by default.

you are 100% right, is only for create a scenario for show the students how insecure can be to use pptp, there are a few well known tools for intercept or grab data from a pptp channel
in terms of preferences, if some body ask me, wireguard is the best solution for vpn at this time

Well, if you wanna go that route, then they should seek support in the appropriate sub, as it’s not really proxmox related, eh?

(and, yes, i know, insecure in current days)

Obviously this person is testing something, hopefully security-related. And yes, this issue is Promox-related, because the problem lies in the LXC modprobe map dictated in Proxmox by default.

It actually is likely because the modules arent installed on the host, and a container is being used…