and you were right, Qubes refused to delete the templates so I used your search
command then
dnf remove qubes-template-whonix-{gw,ws}
to delete them via the package manager. I now have a whonix-free system :)
R~~
On Wednesday, 18 April 2018 12:09:49 UTC+1, trueriver wrote:
> hi Ivan
>
> d'ooh
>
> It was set as its own DispVM the one domain I had not thought to check
> manually from the Qube Manager.
>
> Logically this might count as a bug: if the only domain that uses it is the
> same one that is being deleted then it would not cause a problem - but I
> realise that coding this corner case would increase an attack surface
> somewhere and I bet the devs will not want to do that. So I will not be
> listing it as a bug.
>
> I used your script (I am rather a fan of Bash) rather than looking at the
> logs, and am bookkmarking your reply in case I need the logs in future.
>
> Many thanks for the fix, and many more for the speed of it!
>
>
> On Wednesday, 18 April 2018 11:47:55 UTC+1, Ivan Mitev wrote:
> > hi,
> >
> > On 04/18/2018 01:26 PM, river14ap...@gmail.com wrote:
> > > hi,
> > >
> > > I opted for whonix when installing Qubes 4.0 and have decided not to use
> > > it for now. I am having trouble deleting it.
> > >
> > > In dom0 the command
> > >
> > > sudo qvm-remove whonix-ws-dvm
> > >
> > > generates a traceback ending with the final message
> > >
> > > qubesadmin.exc.QubesException: Domain is in use 'whonix-ws-dvm'; details
> > > in system log
> > >
> > > (let me know if you would like me to paste in the whole traceback)
> > >
> > > So my immediate question is how do I see the relevant log? It is not in
> > > the dmesg of dom0. I have also looked from Qube Manager at the logs in
> > > the context menu while right-clicking on the dom0 and whonix-ws-domain
> > > domains: dom0 has only a xen log which does not appear relevent, and
> > > whonix-ws-domain has the logs greyed out. I can't think of anywhere else
> > > to look.
> >
> > tail /var/log/qubes/qubes.log
> >
> > and
> >
> > journalctl -f
> >
> > should give you more info ; you'll probably see something like "vm
> > blahblah uses whonix-ws-dvm"
> >
> >
> > > I also used sudo qvm-ls and cannot see any sign of this domain being used
> > > anywhere.
> >
> > try:
> >
> > qubes-prefs (for global qubes default)
> >
> > and for each VM:
> >
> > qvm-prefs vmname
> >
> > and see if one of the vm is configured to use whonix (as template,
> > firewall, ...).
> >
> > it's a bit cumbersome to go through each vm manually, you can automate
> > this with the following script:
> >
> > for i in $(qvm-ls --raw-list); do qvm-prefs $i | grep -q whonix && echo
> > vm $i uses whonix; done
> >
> > Note that the whonix* templates were likely installed with a rpm, so
> > once you changed your VMs' prefs not to use whonix, you'll have to
> > delete the rpm rather than using `qvm-remove`.
> >
> > you can find which rpms are installed with `rpm -qa | grep -i whonix`
> >
> > >
> > > I did not not ask for whonix to be used for template updates, or more
> > > exactly I believe I left that option unticked during setup but wonder how
> > > I can check if that is where whonix is being used? Where would I look to
> > > check that, please?
> > >
> > > Note none of the whonix domains are started at boot, and none are showing
> > > as running in Qube Manager, nor in the "Q" in the systray.
> > >
> > > And in case I can't solve this, any tips please on how to remove a domain
> > > when Qubes thinks it is still in use?
> > >
> > >
> > >
> > > At the moment the only way forward that I can think of is to backup my
> > > wanted domains and reinstall... but my IT gut feeling is that would be
> > > overkill and I am missing something that will seem obvious once it is
> > > explained...
> >
> > re-installing is indeed overkill :)
> >
> > hope the above helps !
> >
> > ivan
> >
> > >
> > > regards
> > > River~~
> > >
> > >
> > >
> > >
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/2b039e67-c47d-48c2-9c8e-e1302e9ff857%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
