On Tuesday, 21 June 2016 18:18:42 UTC+10, Ben Wika wrote:
> Perhaps I'm blind but I'm not seeing any mini package list in this thread.
> Only a discussion about who was going to post one.
>
> On Tuesday, 21 June 2016 10:06:50 UTC+10, Unman wrote:On Sun, Jun 19, 2016
> at 07:39:45PM -0700, Ben Wika wrote:
>
> > Hi,
>
> >
>
> > Not sure what's been happening on this subject since September (maybe
>
> > discussion has moved?) but thought I'd make a contribution. Pretty new to
>
> > some of this so appreciate the feedback.
>
> >
>
> > If we install the base qubes template for Debian-8, and then do:
>
> >
>
> > dpkg-query -f '${binary:Package} ' -W >> ~/inst
>
> >
>
> > (refer https://wiki.debian.org/ListInstalledPackages )
>
> >
>
> > Then we end up with a file in the home directory that lists all installed
>
> > packages.
>
> > I can use "apt-mark auto" against all these items to clear out the list,
>
> > but before doing the autoremove, there's obviously some that have to
>
> > remain.
>
> >
>
> > To not 'break' the template completely, I'm finding that qubes-gui-agent is
>
> > the only one that needs to be set to manual.
>
> > But for good measure I follow it up with the following apps which I know
>
> > I'll be leaving in the minimal template:
>
> > sudo apt-get install firefox-esr lxterminal leafpad xfe
>
> >
>
> > Finally we do the autoremove step and end up saving about 100MB. Not alot,
>
> > but I'm more focused on simply reducing the attack surface.
>
> >
>
> > Having done this, all seems to work fine but I imagine some features are
>
> > missing behind the scenes (particularly qubes features).
>
> > So I appreciate any further recommendations or suggestions as to why debian
>
> > minimal has to be any more complicated than what I've stated.
>
> >
>
> > Regards
>
> > Ben
>
> >
>
> >
>
> > On Thursday, 24 September 2015 07:15:42 UTC+10, Jason M wrote:
>
> > >
>
> > > On 22 September 2015 at 21:19, Unman <un...@thirdeyesecurity.org
>
> > > <javascript:>> wrote:
>
> > >
>
> > >> On Tue, Sep 22, 2015 at 07:37:37PM +0000, Axon wrote:
>
> > >> > -----BEGIN PGP SIGNED MESSAGE-----
>
> > >> > Hash: SHA512
>
> > >> >
>
> > >> > V??t ??est??k:
>
> > >> > > I have created something like "minimal" Debian TemplateVM by
>
> > >> > > removing (almost) all needless things. I can share the list of
>
> > >> > > packages (e.g. output of apt-mark showmanual) if someone is
>
> > >> > > interested.
>
> > >> > >
>
> > >> > > The sparse root.img has just 1.2GiB. OK, I admit it is not as
>
> > >> > > minimal as Fedora.
>
> > >> > >
>
> > >> >
>
> > >> > To be fair, fedora-21-minimal is actually larger than that after doing
>
> > >> > a normal yum update (without installing any new packages), and of
>
> > >> > course it's almost always a good idea to update the software before
>
> > >> > using the template for anything important.
>
> > >> >
>
> > >> > > Regards, V??t ??est??k 'v6ak'
>
> > >> > >
>
> > >> > > On Thursday, August 27, 2015 at 7:19:36 AM UTC+2, cprise wrote:
>
> > >> > >>
>
> > >> > >> On 08/26/2015 08:38 PM, nrgaway wrote:
>
> > >> > >>> On 26 August 2015 at 16:04, Marek Marczykowski-G??recki
>
> > >> > >>> <marm...@invisiblethingslab.com <javascript:>
>
> > >> > >>> <mailto:marm...@invisiblethingslab.com <javascript:>>> wrote:
>
> > >> > >>>
>
> > >> > >>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>
> > >> > >>>
>
> > >> > >>> On Wed, Aug 26, 2015 at 05:50:41PM +0000, Qubed One wrote:
>
> > >> > >>>> Hi, just curious if anyone has any plans for a
>
> > >> > >>>> Debian-minimal
>
> > >> > >>>>
>
> > >> > >>> template
>
> > >> > >>>> for Qubes R3 (ITL or community-maintained)?
>
> > >> > >>>
>
> > >> > >>> Jason, does the minimal template flavor (which exists in
>
> > >> > >> configuration)
>
> > >> > >>> is usable in the current state? Could you provide short
>
> > >> > >>> description
>
> > >> > >> what
>
> > >> > >>> functionality is there (like working as NetVM etc) and what
>
> > >> > >>> requires additional packages. Something like the same for
>
> > >> > >>> Fedora minimal:
>
> > >> > >>> http://www.qubes-os.org/doc/Templates/FedoraMinimal/
>
> > >> > >>>
>
> > >> > >>> Then I could simply build and upload the package.
>
> > >> > >>>
>
> > >> > >>>
>
> > >> > >>> I will document this for you. I do not use minimal template
>
> > >> > >>> since it's not that much smaller than the regular one so I
>
> > >> > >>> will need to test it all out again.
>
> > >> > >>>
>
> > >> > >>> --
>
> > >> > >>
>
> > >> > >> Then it would be good to make the Debian template selections
>
> > >> > >> similar to Fedora, with the supplied 'regular' Debian template
>
> > >> > >> having desktop features and apps. This would allow a user
>
> > >> > >> preferring Debian over Fedora to use their system as a desktop
>
> > >> > >> immediately instead of going through manual steps.
>
> > >> > >>
>
> > >> > >>
>
> > >> > >>
>
> > >> > >
>
> > >> >
>
> > >> > -----BEGIN PGP SIGNATURE-----
>
> > >> >
>
> > >> > iQIcBAEBCgAGBQJWAa3+AAoJEJh4Btx1RPV8OGMQAOb/QipOtiPaBLpccTZaZsr5
>
> > >> > yxfYrwjfFzpkLNhNU8ta0ClWl9MkoLp/tgUiAEfTC8c/DxA65UXGakKvmZrY4bfZ
>
> > >> > WiEuL1Y5lGcJraABrdC+ehTl7Fd/jRufnuyQE5d9UWleu5VBHfvGvBKMn6wwZmwN
>
> > >> > kXT1nfh5+SKHb3QaFMXz8l4pkLbQSy52TfscvgYPapDWuoM6JoQwOwQbtkdPOmxh
>
> > >> > m1sLgj7I8zq7yT6OEgS5+gJO1qrtbfFNafaEuyaYeWep1zoMRLYhgr2HSWWCeCEi
>
> > >> > 5bkKoWoIqvZVjMvhzM7vM2PMiPFHzQ4xvOtHY0v0+j2QZjhuhA9LvcjUZMDAH8rY
>
> > >> > i+ZONMjxqWGrd4VH3kQsqb8YESl1reQXIlMgro4KTr5y3Y2lvNbsPjdNiiyWLgpZ
>
> > >> > 1JM6aa4uCMLTviNiSFz++i2o40uPJXRwjOcB8hE8Kz/g17W+IpP6QEDbYUdJwG8U
>
> > >> > 1lyBnSF/ShARCthbJSzgoXvmZbZ0DuNE1j3MK/NSuE3QXIgnTrUqtJM8IfcfaPX+
>
> > >> > 4jF7cNdtDJcq4gn25rGVUR3jMTfFqX/n3dtNnjcIX4d/VG799rvj8n71ghxEamDQ
>
> > >> > iavGE3q3JaH1Hq+9P4koKJhoR/8wefMFkZnwTacg44ZpiVzxj7XvhTQg0kIVbkFy
>
> > >> > DudC0rAk6dy5lUdAoyWI
>
> > >> > =wiQV
>
> > >> > -----END PGP SIGNATURE-----
>
> > >> >
>
> > >> There's already a debian minimal spec which is easy to build.
>
> > >> I use it for most VMs - it is perfectly usable as is.
>
> > >> Jason - are you doing that write up or do you want me to pick it up?
>
> > >>
>
> > >
>
> > > I am currently finishing up on a salt management project which is due to
>
> > > be complete by end of month. If you have time to do that before then,
> > > that
>
> > > would be great, otherwise I will be able to complete it at that point :)
>
> > >
>
> > >
>
> Hi Ben,
>
>
>
> There's already a minimal template which you can build - it would be
>
> somewhat smaller than you've got to, although you haven't said what your
>
> final size is.
>
>
>
> I use a debian mini for most of the system qubes, including tor and usb.
>
> A slightly larger one for sys-net. My guess is that most people
>
> wont want the hassle of configuring and installing packages required
>
> so using a default template is probably best for most users sys-net.
>
>
>
> Look back over the thread and compare what you have against the minimal
>
> package list.
>
>
>
> I think there should be an official debian minimal template but it's just
>
> got lost along the way, I think.
>
>
>
> cheers
>
>
>
> unman
No reply? I'm still confused.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/e0697562-981a-4ada-af28-f5a17f9217e0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
