Andrew:
> Hi,
>
> I recently experienced a very frustrating bug, where my Whonix
> disposable VM could not be recreated after a `dist-upgrade` in the
> underlying Whonix workstation template.  The symptoms were, after trying
> to create it with `qvm-create-default-dvm`:
>       -the VM becomes yellow in Qubes Manager and never becomes green
>       -qrexec could not connect
>       -qvm-create-default-dvm hangs at "Waiting for DVM ..."
>       -`xl console` access still worked fine
>       -no DVM savefile created
>
> Following Patrick's advice in
>
https://forums.whonix.org/t/dvm-fails-to-start-after-whonix-update-dist-upgrade/3109/5
> (a user reporting seemingly the same bug), I found that three systemd
> units failed:
>       -apparmor
>       -qubes-gui-agent
>       -tb-updater-first-boot

qubes-gui-agent bug? Probably should not break under this condition?

> Patrick, is there some way to detect if the tor-browser directory has
> been changed, and only then save a copy?

As a user: you would know if you made changes to
/var/cache/tb-binary/.tb/ / if you started Tor Browser in Qubes TemplateVM.

As a developer at the code level: create a checksum of the folder in
tb-updater after:

tb_run_function tb_patch

(add a new function tb_checksum)

Then delete older folders that have not been modified. (add new function
tb_delete)

Not sure what do do about old versions not previously checksummed.

Or perhaps super simple: Maybe we should not support customizations in
/var/cache/tb-binary/.tb/ at all and delete all old versions without
asking in postinst.

Or a bit nicer: delete all old versions but one or two without asking.

TODO ticket:
https://phabricator.whonix.org/T671

developer discussion:
https://forums.whonix.org/t/7-0a3-tor-browser-series-defunct-in-whonix/3786/17

> Or perhaps it's better to
> explicitly ask what to do on each invocation of the Tor Browser
> Downloader?

No. Usability mess. Also not possible/sane in postinst.

> At the very least, it should detect when there is not
> enough space and give some sort of warning/instructions.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2de1a179-cb72-f37f-63a0-06b04accbdf3%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Reply via email to