Re: [qubes-users] Re: Whonix 15 has been released
On Tue, Jul 09, 2019 at 03:30:07AM +, Jon deps wrote: > On 7/3/19 6:54 PM, 'awokd' via qubes-users wrote: > > Make sure > > you're on mgmt-salt-dom0-virtual-machines v4.0.16 or higher. If you are > > doing it manually, you should review everything the scripts do to make > > sure you've run the appropriate qvm-features commands, etc. Not > > following all the same steps as the Salt scripts could result in > > unexpected traffic disclosures. > > > so for the record as far as I can tell v4.0.15 is the "latest" please tell > me if it makes some difference. > > if I'm going to need to 'review salt scripts'probably time to move on > > appreciate the Qubes devs, but I sort of don't want to know what salt is and > does beyond the very basics :) > Yes, the release has not been well co-ordinated. 4.0.16 is in testing - you can install it from there by using : qubes-dom0-update --best --enablerepo=qubes-dom0-current-testing mgmt-salt-dom0-virtual-machines -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190709125910.f3c56n65nhzgeagf%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Whonix 15 has been released
On 7/3/19 6:54 PM, 'awokd' via qubes-users wrote: Make sure you're on mgmt-salt-dom0-virtual-machines v4.0.16 or higher. If you are doing it manually, you should review everything the scripts do to make sure you've run the appropriate qvm-features commands, etc. Not following all the same steps as the Salt scripts could result in unexpected traffic disclosures. so for the record as far as I can tell v4.0.15 is the "latest" please tell me if it makes some difference. if I'm going to need to 'review salt scripts'probably time to move on appreciate the Qubes devs, but I sort of don't want to know what salt is and does beyond the very basics :) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e85814a8-d271-579d-e263-49c83be316f3%40riseup.net. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Whonix 15 has been released
The new template is out. The way to install it is with: sudo qubesctl state.sls qvm.anon-whonix If you previously had Whonix 14 installed, change 14 to 15 with: sudo vim /srv/formulas/base/virtual-machines-formula/qvm/whonix.jinja I found this last info on the whonix site but cant find it right now -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/qflgod%241smc%241%40blaine.gmane.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Whonix 15 has been released
On 7/4/19 2:12 AM, 'awokd' via qubes-users wrote: Jon deps: On 7/3/19 8:33 PM, 'awokd' via qubes-users wrote: dom0: dnf list installed well this doesn't show the version all the other qubes-mgmt-salt show versions but Not qubes-mgmt-salt-dom0-virtual-machines.noarch Try dnf info then. ah ok so $dnf info says I'm on Installed Packages Name: qubes-mgmt-salt-dom0-virtual-machines Arch: noarch Epoch : 0 Version : 4.0.15 Release : 1.fc25 not 4.0.16 and $sudo qubes-dom0-update says no updates so, is one supposed to be updating dom0 some other way ? I do note that whonix-15 seems to be installed , but maybe with 4.0.16 one would not have had to chage the "jinja" settings from 14 -> 15 ? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/df662a94-0e46-9580-bcf5-5c5ac80d42e6%40riseup.net. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Whonix 15 has been released
On 7/4/19 4:14 AM, dimi wrote: I think the whonix upgrade guide is missing how to handle the a) renaming of the now upgraded templates or b) deleting them. I tried renaming 14 to 15 and ended up with new templates having the upgraded name with 15 in them. Maybe this is just a problem with Qubes Manager. Please advice how to proceed, delete the new 15 templates and manually rename the 14 ones to 15 or manually delete the upgraded 14 templates? they usually want you to ask Whonix questions on the Qubes-Whonix forum fwiw https://forums.whonix.org/c/qubes-whonix -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7c8970ee-8aab-dbb3-1c6f-b32c1da3f2df%40riseup.net. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Whonix 15 has been released
I think the whonix upgrade guide is missing how to handle the a) renaming of the now upgraded templates or b) deleting them. I tried renaming 14 to 15 and ended up with new templates having the upgraded name with 15 in them. Maybe this is just a problem with Qubes Manager. Please advice how to proceed, delete the new 15 templates and manually rename the 14 ones to 15 or manually delete the upgraded 14 templates? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f3c06a2b-6bfb-4f25-9d5d-23ddb0842746%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Whonix 15 has been released
Jon deps: > On 7/3/19 8:33 PM, 'awokd' via qubes-users wrote: >> dom0: dnf list installed > > well this doesn't show the version all the other qubes-mgmt-salt show > versions but Not > > qubes-mgmt-salt-dom0-virtual-machines.noarch Try dnf info then. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/971c0027-cc53-69b5-175f-41e1997372b4%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Whonix 15 has been released
On 7/3/19 8:33 PM, 'awokd' via qubes-users wrote: Jon deps: besides the script if you don't change the "jinja" file, you won't get -15 installed Well it's in his docs for New Install , added after the other elements were, apparently The version of mgmt-salt-dom0-virtual-machine I mentioned should cover that. re: removing old anon-whonix TBA-AppVMs I believe Patrick said: you can either remove sys-whonix (on my machine sys-whonix-14) before new install or just leave it (and presumably have it set to 'dummy template' -- not sure why can't just set it to any other template temporarily ) so presumably that goes for anon-whonix and its just like any other template upgrade , reassigning to the new upgraded Template Thanks, wasn't sure! He just made the remark re: sys-whonix so its just a presumption PS : how would I check I'm on the correct mgmt-salt-dom0-virtual-machine dom0: dnf list installed well this doesn't show the version all the other qubes-mgmt-salt show versions but Not qubes-mgmt-salt-dom0-virtual-machines.noarch dom0 ~]$ dnf list -v installed|grep mgmt qubes-mgmt-salt.noarch 4.0.18-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-admin-tools.noarch 4.0.18-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-base.noarch4.0.3-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-base-config.noarch 4.0.1-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-base-overrides.noarch 4.0.2-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-base-overrides-libs.noarch qubes-mgmt-salt-base-topd.noarch 4.0.1-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-config.noarch 4.0.18-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-dom0.noarch4.0.18-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-dom0-qvm.noarch4.0.8-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-dom0-update.noarch 4.0.8-1.fc25 @qubes-dom0-cached qubes-mgmt-salt-dom0-virtual-machines.noarch -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f9f16faa-640e-ba6d-2dc5-95aebf069743%40riseup.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Whonix 15 has been released
Jon deps: > besides the script if you don't change the "jinja" file, you won't get > -15 installed The version of mgmt-salt-dom0-virtual-machine I mentioned should cover that. > re: removing old anon-whonix TBA-AppVMs > I believe Patrick said: you can either remove sys-whonix (on my machine > sys-whonix-14) before new install or just leave it (and presumably > have it set to 'dummy template' -- not sure why can't just set it to any > other template temporarily ) > > so presumably that goes for anon-whonix and its just like any other > template upgrade , reassigning to the new upgraded Template Thanks, wasn't sure! > PS : how would I check I'm on the correct mgmt-salt-dom0-virtual-machine dom0: dnf list installed -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/11d66501-7891-9ad1-da22-575dbb77e493%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Whonix 15 has been released
On 7/3/19 6:54 PM, 'awokd' via qubes-users wrote: Daniil Travnikov: On Wednesday, July 3, 2019 at 4:24:01 AM UTC+3, haaber wrote: The "instructions" on the whonix webpage are more than confusing. There are 3 alternative "ways" suggested. Which one is best /advised? I got the impression that a complete reinstall requires (a) a fedora appvm (I have none), (b) does *not* work over TOR, since the AppVM's based on whonix must be removed (or set to dummy template) before removing the whonix-14-templates. Then sys-whonix is gone, right? That seems awkward asprocedure. Can someone explain, please? Why can't I install whonix-gw-15 and whonix-ws-15 via dnf in dom0 and THEN remove the *-14-* ones? Cheers, Bernhard Thank you for your post, I thought that I am alone, but I think the same. I don't understand why in Qubes we can't install Whonix Templates of any version from Dom0 like we usually do when we want to install Fedora, for example: sudo qubes-dom0-update qubes-template-fedora-XX I don't see why you couldn't, but you should possibly recreate sys-whonix and anon-whonix. Not sure it's safe to re-use them. You should try to use the Salt commands to do this, once you have the -15 templates installed and the -14 and sys/anon-whonix removed. Make sure you're on mgmt-salt-dom0-virtual-machines v4.0.16 or higher. If you are doing it manually, you should review everything the scripts do to make sure you've run the appropriate qvm-features commands, etc. Not following all the same steps as the Salt scripts could result in unexpected traffic disclosures. Haven't upgraded these myself yet; I'll let the early adopters work out the bugs first. ;) See https://github.com/QubesOS/qubes-issues/issues/3765 and https://github.com/QubesOS/qubes-issues/issues/3447 for a longer discussion of why the upgrade procedure is the way it is. If you can write smarter Salt scripts, I suspect the Whonix team would be appreciative. besides the script if you don't change the "jinja" file, you won't get -15 installed re: removing old anon-whonix TBA-AppVMs I believe Patrick said: you can either remove sys-whonix (on my machine sys-whonix-14) before new install or just leave it (and presumably have it set to 'dummy template' -- not sure why can't just set it to any other template temporarily ) so presumably that goes for anon-whonix and its just like any other template upgrade , reassigning to the new upgraded Template PS : how would I check I'm on the correct mgmt-salt-dom0-virtual-machine -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b74540b3-e231-48ac-1509-e68d379ec7cf%40riseup.net. For more options, visit https://groups.google.com/d/optout.
