I have monerod running on an AppVM in Qubes and want to run the CLI in a separate AppVM to minimize the exposure to my wallet files. First, is there any downside to this approach? Second, can someone provide a walk through for accomplishing this?

1 Answer 1


You need to setup your firewall to allow connections between the two VMs.

Run this on startup (some script linked from /rw/config/rc.local):

/usr/sbin/iptables -I INPUT 5 -p tcp --dport 18081 -m conntrack --ctstate new -j ACCEPT

This allows incoming RPC calls.

In the firewall VM, allow the two VMs to talk to each other (again, from /rw/config/rc.local):

/usr/bin/iptables -I FORWARD 2 -s a.b.c.d -d e.f.g.h -j ACCEPT

/usr/bin/iptables -I FORWARD 2 -s e.f.g.h -d a.b.c.d -j ACCEPT

Rule numbers kinda arbitrary here, especially for your setup.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.