Re: [qubes-users] How to connect Tenmplate VM to the internet
On Mon, Oct 29, 2018 at 09:32:40PM +0100, 799 wrote: > Hello, > > ... I am giving up. > > On Mon, 29 Oct 2018 at 02:13, unman wrote: > > > On Sun, Oct 28, 2018 at 10:58:21PM +0100, 799 wrote: > > > But the Template VM is unable to access the internet. > > > What needs to be done, so that I can connect the Template VM? > > > > > > Nothing further needs to be done. This should "just work"(TM). > > If it isnt working for you then you should do standard troubleshooting- > > Check that Template has IP address set (you shouldnt need to set this > > manually), and it is consistent with sys-firewall. > > Check the route. > > Check that /etc/resolv.conf looks proper. > > > > I am unable to enable networking on my template VM. > It is based on a regular fedora-28-minimal template as all my other > Templates. > Strangely I am able to install normal packages via dnf but the Template VM > is not showing an IP address. > > It seems that the eth0 interface is DOWN. > Honestly I don't understand how I can install packages at all if I can't > even ping my sys-firewall VM from the Template VM. > > So what are the detailed steps to enable networking in a Template VM which > is cloned from a fedora-28-minimal template? > > - O By default TemplateVMs are not network enabled. They are able to update because they use the Qubes Update Proxy. You can (and should) read about this at https://www.qubes-os.org/doc/software-update-vm/#updates-proxy You hadn't said previously that you were using a minimal template. Have a look at https://www.qubes-os.org/doc/templates/fedora-minimal/ What you need to do is: 1. qvm-run -u root xterm 2. (in template): dnf install qubes-core-agent-networking 3. Shutdown template 4. qvm-prefs netvm sys-firewall 5. qvm-run -u root xterm Bear in mind that templates are meant to be kept offline, and you should be particularly careful if you put one online. Any mistake here could compromise all qubes that use that template. HTH unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181029234619.czivfkbvfa4mpki7%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to connect Tenmplate VM to the internet
Hello, ... I am giving up. On Mon, 29 Oct 2018 at 02:13, unman wrote: > On Sun, Oct 28, 2018 at 10:58:21PM +0100, 799 wrote: > > But the Template VM is unable to access the internet. > > What needs to be done, so that I can connect the Template VM? > > Nothing further needs to be done. This should "just work"(TM). > If it isnt working for you then you should do standard troubleshooting- > Check that Template has IP address set (you shouldnt need to set this > manually), and it is consistent with sys-firewall. > Check the route. > Check that /etc/resolv.conf looks proper. > I am unable to enable networking on my template VM. It is based on a regular fedora-28-minimal template as all my other Templates. Strangely I am able to install normal packages via dnf but the Template VM is not showing an IP address. It seems that the eth0 interface is DOWN. Honestly I don't understand how I can install packages at all if I can't even ping my sys-firewall VM from the Template VM. So what are the detailed steps to enable networking in a Template VM which is cloned from a fedora-28-minimal template? - O -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAJ3yz2v0AMJvLFkAG5Gohrb_MUub6qt%2B1BZVJmLZfiC4BusEZg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to connect Tenmplate VM to the internet
On Sun, Oct 28, 2018 at 10:58:21PM +0100, 799 wrote: > Hello, > > I am currently building a special Storage VM Template which needs to > download specific packages and also GIT repositories. > Therefor I'd like to allow internet access for the template VM. > The NetVM is set to sys-firewall and access to the internet is allowed > under Qubes Settings. > > But the Template VM is unable to access the internet. > What needs to be done, so that I can connect the Template VM? > > - O Nothing further needs to be done. This should "just work"(TM). If it isnt working for you then you should do standard troubleshooting- Check that Template has IP address set (you shouldnt need to set this manually), and it is consistent with sys-firewall. Check the route. Check that /etc/resolv.conf looks proper. Check that traffic is arriving at sys-firewall and that rules are set correctly there. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181029011333.rqxmustqbp6247v5%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to connect Tenmplate VM to the internet
799: Hello, I am currently building a special Storage VM Template which needs to download specific packages and also GIT repositories. Therefor I'd like to allow internet access for the template VM. The NetVM is set to sys-firewall and access to the internet is allowed under Qubes Settings. But the Template VM is unable to access the internet. What needs to be done, so that I can connect the Template VM? I think you also need to manually configure networking if you really want to do that. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/161154b1-1349-7ff0-223a-9ad9835717e9%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
[qubes-users] How to connect Tenmplate VM to the internet
Hello, I am currently building a special Storage VM Template which needs to download specific packages and also GIT repositories. Therefor I'd like to allow internet access for the template VM. The NetVM is set to sys-firewall and access to the internet is allowed under Qubes Settings. But the Template VM is unable to access the internet. What needs to be done, so that I can connect the Template VM? - O -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAJ3yz2sa4Jdv9iUoCxdxvtz__vK6-1_WK0wG2eUe00oD0QL54g%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
