How to install OpenVPN packages on Steam Deck.

[Angry Hippie]

It took me a while to find this so I figured I'd repost it:

passwd
sudo steamos-readonly disable
sudo pacman-key --init
sudo pacman-key --populate
sudo pacman -Syu
sudo pacman -S networkmanager-openvpn
sudo steamos-readonly enable

explanation:

1. passwd: you have to set a user password in order to use the "sudo" command to elevate privileges
2. sudo steamos-readonly disable: The steam OS partition is read-only by default so you have to unlock it
3. sudo pacman-key --init & sudo pacman-key --populate: When I tried just installing the OpenVPN packages it threw a certificate error, these commands fixed that.
4. sudo pacman -Syu: verifies the system/repositories are up to date
5. sudo pacman -S networkmanager-openvpn: Installs the necessary packages!
6. sudo steamos-readonly enable: Locks the main system files again so you don't break anything

I found out how to fix the cert error here but it's in a Czech form:
https://steamcommunity.com/app/1675200/discussions/2/3385030647947091478?l=czech

Bonus info:

Apparently changes made to the system partition can be overwritten in future steam system updates. If you want an easy way to re-install this in the event of that just make a simple script:

1. make a new text file called "InstallOpenVPN.sh" (the .sh part is the important bit)
2. copy the following into the text file:

#! /bin/sh
sudo steamos-readonly disable
sudo pacman-key --init
sudo pacman-key --populate
sudo pacman -Syu
sudo pacman -S networkmanager-openvpn
sudo steamos-readonly enable

3. save and done

Happy encrypted browsing

[mrman-spider]

This looks great. I’ve been looking for things like this but had a hard time finding them. Still waiting for my deck

[MJ711]

Isnt there a flatpak for this?

[Angry Hippie]

Originally posted by MJ711:

Isnt there a flatpak for this?

To be honest I'm not very familiar with flatpaks. It's for sure not in the desktop's app store at least.

[retrogunner]

There is no flatpak for this. 'ufw' and the vpn components are *NOT* baked in to SteamOS -- despite the KDE desktop having the Firewall UI and other elements available. The frequently also have kernel modules needed for firewall, wireguard, etc.

I've put a Feature request before at https://steamcommunity.com/app/1675200/discussions/2/ . You should find some and add to it or make a new one.

These are must have items for 'vertical' devices like phones, tables, mobile gaming platforms, etc.

[Picobacsi]

when I run the .sh file in konsole, it says:
"Warning: Could not find 'path/to/installOpenVPN.sh', starting '/bin/bash' instead. Please check your profile settings"

and it doesn't do anything at all

[retrogunner]

It's been a few months since the OG post. I've not seen a Flatpak yet, nor that any VPN has been baked in. But, depending on your use-case there's two potential work arounds before you `sudo steamos-readonly disable` to install something.

Experiment one:

Use https://github.com/ValShaped/rwfus to install stuff from Arch, as it allows for a r/w OverlayFS of the pacman and /usr directory.
Pro: It does NOT require you to r/w your rootfs using `sudo steamos-readonly disable`
Con: If you do a full system update via `pacman` or if `pacman` need to deal with the kernel, it will likely fail to update /boot as you should not have removed the r/w protection as you wouldn't be updating the kernel & initrd files -- this could be a potential issue for kernel level drivers.

Experiment two:

If your primary use-case is for Desktop Apps and not gaming, Distrobox with their extras script to install podman-static could allow for containerized VPN. i.e. only container processes would be VPN'd:
https://github.com/89luca89/distrobox/blob/main/docs/posts/install_rootless.md
https://www.gamingonlinux.com/2022/09/distrobox-can-open-up-the-steam-deck-to-a-whole-new-world/

With distrobox/podman-static, I've a GUI/X11 install of Alpine Linux, Debian, and Arch on both my Steam Deck (and Mint Linux laptop -- needs `apt install uidmap` too). I can use pretty much use anything I want and not mess up my Steam OS as they are all containers. I've not tried a containerize VPN.

Cheers, retro.

[Angry Hippie]

Originally posted by Picobacsi:

when I run the .sh file in konsole, it says:
"Warning: Could not find 'path/to/installOpenVPN.sh', starting '/bin/bash' instead. Please check your profile settings"

and it doesn't do anything at all

I forgot to mention that you have to switch the script to executable.

You'll want to open a terminal window from the folder containing your script, then run the following command:

sudo chmod 744 installOpenVPN.sh

From there you should be able to run the script to install everything

sudo ./installOpenVPN.sh

[JadeJitsu]

If you use a VPN service like ProtonVPN or NordVPN, you can download and import their OpenVPN config files. FlipScreen Games has a video showing you how to do this:

https://www.youtube.com/watch?v=xB1-Utncsy8

00:01:08 - Adding VPN Connections

I use ProtonVPN and confirm that it works perfectly.

[[?]legit]

Short reminder that VPN is against the steam SSA and can get your account terminated.

[bacon of hope]

I really don't care so much about VPN, but I would like to play Assassin's Creed Odyssey. And according to the internet, using a VPN is the only way to currently do that. Otherwise Uplay won't connect.

I'd like to add that I had to trust the archlinux developer keyring in order to proceed with the installation:

$ sudo pacman -S archlinux-keyring

[Basman]

Originally posted by bacon of hope:

I really don't care so much about VPN, but I would like to play Assassin's Creed Odyssey. And according to the internet, using a VPN is the only way to currently do that. Otherwise Uplay won't connect.

No VPN is needed for that: https://steamcommunity.com/app/2208920/discussions/1/3726197825949480207/#c3759975793242663567

The reason a VPN works is that it has a lower MTU, the fix I described in that post will do the same automatically.

[Minneyar]

Originally posted by legit windows:

Short reminder that VPN is against the steam SSA and can get your account terminated.

This is not exactly true. The Steam subscriber agreement ( https://store.steampowered.com/subscriber_agreement/ ) never explicitly mentions VPNs. It does say:

You agree that you will not use IP proxying or other methods to disguise the place of your residence, whether to circumvent geographical restrictions on game content, to order or purchase at pricing not applicable to your geography, or for any other purpose. If you do this, Valve may terminate your access to your Account.

In other words, you could be banned if you use VPN to access region-locked game content or buy games using a different region's currency. The "or for any other purpose" clause is probably meant to be a blanket statement to cover an abuses Valve didn't think of, but blanket clauses like that are also legally unenforceable in many locations (such as the EU). I've never heard of anybody getting banned because they used a VPN to connect through a more stable network or circumvent a restrictive network firewall or for using a VPN that was in their own country.

[Ad Astra]

Thanks, these commands worked for me and I was able to then use the discovery store and download evpn (I think that's the name) and load my .ovpn zip file into that program, then it made an OpenVPN connection which I use to connect with now.

Warning to all, I lost an account years ago due to using a VPN with steam while traveling through countries that blocked it. Valve gave no warning and would not return years worth of purchases, so triple check you are not logged into steam when using a VPN. Also a good reminder that you don't anything here, not truly. As much as I love Valve, it's games, and hardware, I think they need to change their model before decentralized web3 exchanges and services disrupt them.

[RueGorE]

This doesn't seem to be working for me. After disabling the read-only file system and trying to install a package, I get the error "Partition /usr is mounted read only". Did something change recently that prevented /usr from becoming writable even after issuing the "steamos-readonly disable" command?

[Katz]

I have the same issue, seems like something has been changed.