Have a look at Whonix, used it over the years, the entire OS is firewalled so that there is no leak, all network connections Torrified, best it works with virtualbox.
In case of VPN I can suggest Mullvad, have a look at their privacy policy, no single vpn comes even close. They don't log...