Hello,
On Sun, 23 Aug 2020 at 04:32, 54th Parallel
wrote:
>
> On Sunday, 23 August 2020 at 07:51:11 UTC+8 one7...@gmail.com wrote:
>
>> [...]
>> I'm trying to install mirage-fw with a Fedora-32 Build-AppVM and run into
>> the following error:
>> OCI runtime create failed: this version of runc doesn't work on cgroups
>> v2: unknown
>>
> [...]
>>
> Any ideas how to workarround this problem or if I need to use another
>> AppVM fedora-30 to build mirage
>>
>> Long story short: Docker doesn't install properly on Fedora versions >30
> because they have cgroups v2.
>
While it's possible to downgrade cgroups in Fedora >30, I think it's
> simpler to just use fedora-30 or its minimal version.
>
I run into a problem installing packages in fedora-30-minimal but was
successful using the fedora 30 template.
As others requested, I would love seeing it in the qubes repositories,
anyhow happy to have it working again.
In order to simplify the build process this are steps to setup everything
from dom0.
See also https://github.com/mirage/qubes-mirage-firewall
# Setup names & templates to be used.
MirageFWBuildVM=my-mirage-buildvm
TemplateVM=fedora-30
MirageFWAppVM=sys-mirage-fw
# create a new VM to build the Mirage kernel in that VM
qvm-create $MirageFWBuildVM --class=AppVM --label=red --template=$TemplateVM
# Resize private disk to 10 GB
qvm-volume resize $MirageFWBuildVM:private 10GB
# Create a symbolic link to safe docker into the home directory
qvm-run --auto --pass-io --no-gui --user=root $MirageFWBuildVM \
'mkdir /home/user/docker && \
ln -s /home/user/docker /var/lib/docker'
# Install docker and git ~2min
qvm-run --pass-io --no-gui --user=root $MirageFWBuildVM \
'qvm-sync-clock && \
dnf -y install docker git'
# Launch docker
qvm-run --pass-io --no-gui --user=root $MirageFWBuildVM \
'systemctl start docker'
# Download and build mirage for qubes ~11min
qvm-run --pass-io --no-gui $MirageFWBuildVM \
'git clone https://github.com/mirage/qubes-mirage-firewall.git'
# build mirage for qubes
qvm-run --pass-io --no-gui --user=root $MirageFWBuildVM \
'cd /home/user/qubes-mirage-firewall && \
sudo ./build-with-docker.sh'
# Copy the new kernel to dom0
cd /var/lib/qubes/vm-kernels
qvm-run --pass-io $MirageFWBuildVM 'cat
qubes-mirage-firewall/mirage-firewall.tar.bz2' | tar xjf -
# create a new mirage fw appvm
qvm-create \
--property kernel=mirage-firewall \
--property kernelopts=None \
--property memory=32 \
--property maxmem=32 \
--property netvm=sys-net \
--property provides_network=True \
--property vcpus=1 \
--property virt_mode=pv \
--label=green \
--class StandaloneVM \
$MirageFWAppVM
# Change default NetVM to Mirage FW
qvm-start $MirageFWAppVM
qubes-prefs --set default_netvm $MirageFWAppVM
regards.
799
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2sGQ1LxUTmRRjgC1ZBfzqh3BVrtC%2B4xQrvkpniKDTAWzw%40mail.gmail.com.
