Choosing the Right VPN for Hyperbola GNU/Linux-libre

Hyperbola GNU/Linux-libre is an Arch-derived, systemd-free distribution focused on software freedom and stability. It uses the pacman package manager, the runit init system and ships only libre-licensed components. Typical implementations run lightweight window managers or desktop environments such as Openbox, i3, dwm or LXQt—ideal for privacy-conscious, technically proficient users. Any VPN solution must:

• Avoid systemd-only clients (no systemd service units)
• Offer open protocols (OpenVPN, WireGuard, IKEv2)
• Provide open-source tooling or simple configuration via CLI
• Fit easily into runit or manual start scripts

With these constraints in mind, the most suitable providers are:

• Mullvad – Fully open-source client available, WireGuard amp OpenVPN support, simple tarball installation.
• ProtonVPN – Provides GPL-licensed Linux CLI and OpenVPN config bundles, strong privacy stance.
• AirVPN – Reliant on OpenVPN configs, excellent network of servers, friendly to libre-only systems.

Comparison of Recommended VPN Providers

Installation and Configuration

Mullvad

Mullvad provides a simple tarball containing a portable CLI you can run without systemd. Below is a minimal setup using OpenVPN, which is fully compatible with runit.

# 1. Install prerequisites
sudo pacman -Sy --noconfirm openvpn unzip curl

# 2. Download Vault of configs
curl -o mullvad-configs.zip https://mullvad.net/download/ovpn-config

# 3. Unpack and pick your preferred protocol (UDP example)
unzip mullvad-configs.zip -d ~/mullvad-configs
cd ~/mullvad-configs
sudo openvpn --config mullvad_europe_.udp.ovpn

If you prefer the Mullvad CLI tool for WireGuard:

# Download and extract official Mullvad CLI
curl -L -o mullvad-cli.tar.gz https://mullvad.net/download/app/linux/mullvad-client-latest.tar.gz
tar xzf mullvad-cli.tar.gz
cd mullvad-client-
sudo ./install.sh

# Authenticate and start WireGuard
mullvad login YOUR_ACCOUNT_CODE
mullvad wireguard enable

ProtonVPN

ProtonVPN offers both a GPL-licensed CLI and raw OpenVPN configurations. Here’s how to set it up without systemd:

# 1. Install OpenVPN and helper tools
sudo pacman -Sy --noconfirm openvpn unzip curl

# 2. Download ProtonVPN OpenVPN profiles
curl -o protonvpn-configs.zip https://protonvpn.com/download/private/openvpn.zip
unzip protonvpn-configs.zip -d ~/protonvpn-configs

# 3. Connect to a server (e.g., US-free-02)
sudo openvpn --config ~/protonvpn-configs/US-free-02.protonvpn.com.udp1194.ovpn

Alternatively, if you want the official CLI (no systemd unit required, just run as a service in runit or screen):

# Install ProtonVPN CLI via pip
sudo pacman -Sy --noconfirm python-pip
pip3 install protonvpn-cli

# Initialize and login
protonvpn init
protonvpn login your_protonvpn_username

# Connect
protonvpn connect

AirVPN

AirVPN’s focus on OpenVPN makes it trivially compatible with Hyperbola’s toolchain:

# 1. Install OpenVPN
sudo pacman -Sy --noconfirm openvpn curl

# 2. Fetch the Setups and export your certificate
curl -o airvpn-client-config.zip https://airvpn.org/dynamic/ovpn/ovpn.zip?username=YOUR_USERpassword=YOUR_PASS
unzip airvpn-client-config.zip -d ~/airvpn-config

# 3. Launch VPN
sudo openvpn --config ~/airvpn-config/YOUR_USER_udp.ovpn

For persistent, runit-based startup, wrap the above openvpn command in a simple run script under /etc/sv/.

Conclusion

All three providers integrate smoothly with Hyperbola GNU/Linux-libre’s libre-only, systemd-free environment. Mullvad excels at offering a dedicated open-source client plus WireGuard support ProtonVPN balances a GPL CLI with multiple protocols and AirVPN remains a rock-solid OpenVPN specialist. Choose based on whether you prefer a minimal CLI, protocol flexibility or simply raw OpenVPN configs.