Re: [qubes-users] 4.0-rc3: sys-net not getting updated template OS image?

2018-02-14 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Steve Coleman:
> Here is the sys-net . I re-wraped the xml to make it a little
> more readable in email:
> 
>  
>  pool="lvm"
> revisions_to_keep="0"
> size="21474836480"
> snap_on_start="True"
> source="qubes_dom0/vm-fedora-26-net-root"
> vid="qubes_dom0/vm-sys-net-root"/>

Looks good.

> Since it is the template (fedora-26-net) itself that appears to be broken,
> would that not be what needs to be verified?

I had a hunch that somehow the wrong template might have ended up as
the source volume for sys-net's root volume, but apparently not.

Rusty
-BEGIN PGP SIGNATURE-
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=wqE/
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180214234612.GA2755%40mutt.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] 4.0-rc3: sys-net not getting updated template OS image?

2018-02-14 Thread Steve Coleman

On 02/14/18 12:14, Rusty Bird wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Steve Coleman:

I have a strange situation where my sys-net's software template
"fedora-26-net" (variant of fedora-minimal) does not appear to be providing
updated OS images. My sys-net is the only vm using this specific image.


Assuming that sys-net is _not_ a DispVM, maybe this is still somehow
similar to https://github.com/QubesOS/qubes-issues/issues/3576 - can
you search for 'sys-net' in dom0's
/var/lib/qubes/qubes.xml and post the next (i.e. somewhere below that
line) XML '' block?



I looked at the github issue and I'm not certain of any similarity. I 
did copy another template vm to make sys-net's template, but I can not 
remember copying or renaming the sys-net vm itself.


Here is the sys-net . I re-wraped the xml to make it a 
little more readable in email:


 




  


Since it is the template (fedora-26-net) itself that appears to be 
broken, would that not be what needs to be verified? Here is the 
fedora-26-net template config:


 




  

if there is a problem there I'm just not seeing it.

thanks,

Steve


Rusty
-BEGIN PGP SIGNATURE-
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=UNib
-END PGP SIGNATURE-



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cebbb4c3-d7cc-a402-6283-c2a872b164ad%40jhuapl.edu.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] 4.0-rc3: sys-net not getting updated template OS image?

2018-02-14 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Steve Coleman:
> I have a strange situation where my sys-net's software template
> "fedora-26-net" (variant of fedora-minimal) does not appear to be providing
> updated OS images. My sys-net is the only vm using this specific image.

Assuming that sys-net is _not_ a DispVM, maybe this is still somehow
similar to https://github.com/QubesOS/qubes-issues/issues/3576 - can
you search for 'sys-net' in dom0's
/var/lib/qubes/qubes.xml and post the next (i.e. somewhere below that
line) XML '' block?

Rusty
-BEGIN PGP SIGNATURE-
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=UNib
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180214171449.GA2281%40mutt.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] 4.0-rc3: sys-net not getting updated template OS image?

2018-02-14 Thread Steve Coleman

On 02/13/18 14:54, awokd wrote:

On Tue, February 13, 2018 6:32 pm, Steve Coleman wrote:

I have a strange situation where my sys-net's software template
"fedora-26-net" (variant of fedora-minimal) does not appear to be
providing updated OS images. My sys-net is the only vm using this specific
image.


Are you running low on disk space?

Not exactly sure what's going on there, but can you try to clone the
problem template and point your AppVM to the clone instead, and see if
that works?





This template is only 30% used.

As was suggested, I cloned the template to see what happened. There were 
no apparent errors when cloning.


- Before testing the template clone with an appvm I did a "dnf update" 
in each template (orig & clone). The clone got 135 updates, and the 
original said it was already up to date. Clearly cloning is not an exact 
copy mechanism.


- To check why the difference in the updates, an 'rpm -qa' verified that 
they are both now on the exact same version #'s of the updated packages 
that I checked, so the original template was not lying to me that it was 
"up to date". How the copy could be out of date is then quite puzzling.


- As for the /opt directory found in each, the clone has the invalid 
subdirectories in /opt, and the original template has the correct set of 
directories. So cloning works just the same as OS provisioning in that 
it collects the wrong data, and copies that.


- As for the planned appvm test, when using the cloned template, it 
obviously saw the wrong /opt directories which were in the cloned template.


My plan to move myself forward is to update the new clone with the right 
software packages and swap that template into sys-net, removing the bad 
template.


But, understanding how this kind of corruption happened could be 
important. Something is obviously broken with this original template, so 
I went to look for any sign of cross-linked inodes in the image files or 
directory structures, only to find that Qubes 4.0 totally changed the 
way that VM image files are stored and handled. Wow, I don't even know 
where to begin. An fsck in dom0 says everything is fine there. I have no 
clue as to what constitutes an appvm filesystem image in the new design.




Steve

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f306097b-88d7-f6d9-c9ed-ddc30ebd87db%40jhuapl.edu.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] 4.0-rc3: sys-net not getting updated template OS image?

2018-02-13 Thread 'awokd' via qubes-users
On Tue, February 13, 2018 6:32 pm, Steve Coleman wrote:
> I have a strange situation where my sys-net's software template
> "fedora-26-net" (variant of fedora-minimal) does not appear to be
> providing updated OS images. My sys-net is the only vm using this specific
> image.

Are you running low on disk space?

Not exactly sure what's going on there, but can you try to clone the
problem template and point your AppVM to the clone instead, and see if
that works?


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e9a3ae4001a2046949039421dcbe19ab.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] 4.0-rc3: sys-net not getting updated template OS image?

2018-02-13 Thread Steve Coleman
I have a strange situation where my sys-net's software template 
"fedora-26-net" (variant of fedora-minimal) does not appear to be 
providing updated OS images. My sys-net is the only vm using this 
specific image.


I have a necessary network service installed in the template 
"fedora-26-net" /opt/service-name directory, installed from an rpm, 
which was working perfectly until I was forced to recover from backup. I 
have been trying to get it working as it once was to no avail. Every 
time I boot up the networking vm's I now get a sys-net without my 
required /opt/service-name directory installed. The template has it, and 
sys-net uses that template, but sys-net never seems to get a new copy of 
it.


The /opt/service-name directory in sys-net is not even there, and one 
sub-directory that is not even in that template anymore *is* there, and 
it even starts up that service which I do not want running in sys-net.


Each time I want to connect to the corporate network I now have to kill 
one service, reinstall that required service directly in sys-net COW, 
just to temporarily create that required service so I can connect. That 
modification of course goes away just as soon as sys-net is shut down, 
so this gets repeated often.


As another test, I created a brand new user vm (test-fedora-26-net) 
based on fedora-26-net and opened a terminal there, and one in the 
template itself. The /opt directories were different. The 
test-fedora-26-net has a file structure that should never have existed 
when it was created.


Any idea how to force this rogue and defiant template to pass along a 
new OS image? Apparently doing a "dnf update" in the template itself 
isn't enough to kick it into gear and get it to happen. Changing the 
source template, and changing it back again does not trigger it either. 
Even creating a new vm gets an old copy!


I think I may need to buy a clue. Is this somehow a qvm-feature related 
thing? A qubes-rpc not happening? What signaling is supposed to happen 
that isn't?


thanks,

Steve.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fac163c5-a813-a295-4b94-e07b0747fbae%40jhuapl.edu.
For more options, visit https://groups.google.com/d/optout.