So to clarify: > Sys-net and sys-firewall (and sys-vpn if you use it) will need it enabled.
When you say "need it enabled", you're just referring again to "provides network", is that correct? And secondly: Do I understand correctly so long as any qube sits in between two other qubes in the networking chain, it automatically acts as a basic firewall? That's all that sys-firewall is? Thanks again! -Dan On Tue, Jan 21, 2020 at 7:45 AM shroobi <[email protected]> wrote: > > Hello, > > > > I was wondering if there are guides in the docs that I missed which > > describe proper creation/upgrades of "special" VMs (sys-net, > sys-firewall, > > and possibly vault). I preferred Debian for my vault. I created a new VM > with a > > black lock icon and no network connectivity. Other than chosen OS, the > > config looks identical to the out-of-the-box vault VM. Is that all I > need? > > (From a brief look, the salt files seem to imply that it is) > > > "Vault" VMs have no network access, besides that there is nothing special > about > them. You might like to customize its template, though. For instance, > multimedia use. > > > > Similar question for getting my sys-net and sys-firewall onto fedora30 > The packages that sys-net and sys-firewall need to function are included > in templates, > except for the minimal templates. That's why the guides mention them > specifically. > Provide sys-net with a device and make sure that they provide networking > to the next qube > in line. Sys-net and sys-firewall (and sys-vpn if you use it) will need it > enabled. If > you plan to incorporate whonix into your configuration (with a DispVM and > as the > UpdateVM) then I recommend that you use salt to create everything it needs. > > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-users/4827Xt5j9gz9rxX%40submission02.posteo.de > . > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAAWRcS-nFQY57gUhyjPo9pc-uddmEr%3DennLA9t-3jBO-bfJcAA%40mail.gmail.com.
