VPN directly on a host
All past VPN usage was inside containers & virtual machines, but problems with doing that behind wifi led to dedicating a host to a VPN. The journey begins with installing a new raspberry pi. dd if=image of=block device bs=4096 status=progress Edit /etc/passwd & delete the root password to allow a root login without password. They don't support the pi user anymore. Then from the serial console, disable some services. systemctl disable lightdm systemctl disable cups systemctl disable ModemManager systemctl disable NetworkManager systemctl disable wpa_supplicant Reboot it To enable public wifi on it, you need to log in on a browser. iptables is not included in the image. sshd, firefox, & chromium do come with the image. sshd_config needs the PermitRootLogin yes line. Firefox is broken but chromium can log in with a lot of prodding. Then you can install iptables & bypass t...