Re: [qubes-users] dom0 doesn't fully restore

2020-05-08 Thread Sven Semmler
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Fri, May 08, 2020 at 02:01:10PM -0500, Sven Semmler wrote:
> What get's backed up completely is everything in your home directory.
> Have you noticed the extra directory in dom0 after restoring? It
> contains everything that was in your home directory. You can pick and
> choose or simply copy all of it back into place.

I forgot to mention that I do keep a set policy files in my home
directory and have soft links to them in /etc/qubes-rpc/policy. Same for
lightdm-gtk-greeter.conf.

Basically whatever modifications you make to dom0, make sure you have
them saved in your home directory so they make it into the backup.

/Sven

- -- 
 public key: https://www.svensemmler.org/0x8F541FB6.asc
fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6

-BEGIN PGP SIGNATURE-

iQIzBAEBCgAdFiEE18ry22WNibwI1qeq2m4We49UH7YFAl61rccACgkQ2m4We49U
H7bGXg//XRKvPxUkG8MqhOyiw5KxDsQ0BUG6PCS25jQj0O8MyjXhMAQ5MhCjrIvD
+4EMnAihhZ7rXJQb2P1Fg3aOdjqm7HqobhHcHJoiJ+KuNecRFUBUCB71VMWG6ZIA
Cq0yUCxSQ2G0j5X4sbs0gojHMW73m5ZTDJYkTSUTJSeAsAmbUYLlhno9Mtz/L8ox
gqidYPnAwzoyaqdNk22Lmo1Q1+Yf9fMpjqX4xv4JMXz5k361ODkLpczZg7OB8kK1
xFaZUqZb17E+3zFSdLJet3WdQKAd6B7KpaKtIjgiRkH2aq1Tj+285SUET0pKUwOI
7cfIXG2Epwr6n+bzNk4x3t2H0H1ydRH806bhBiwqYjkGjcIqH3TShK07SEZhHsIz
SniD209rnY3cnGh1Kfn8oXpwYf5WDwE8/hCIV6QLX1WdJR6rarAkKLIxivhUQtLd
VXY0Vjk4g6PUM3bICKkAvbemY6FimbRzKXEBlsuWJ0zdxvM239CUzBIQrbALEXke
7s9iX6eI5v+/buGOGIymoAQji8wzYCO5ir+xMYkUPWnt8QgP73CisCcI2oFqvuoR
M409qso37tZ90blC1N4lBofougZuNivMDVgnxAiuiyy//uxtNmGDbhXq7ZzBgr5Q
EYwNAdW7BgzGmDiM2hUux/ba8q7lLRKp1Xy0VWUWFpWTK1Fp3Uk=
=QrjB
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200508190646.GD1516%40app-email-private.


Re: [qubes-users] dom0 doesn't fully restore

2020-05-08 Thread Sven Semmler
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Fri, May 08, 2020 at 04:34:44PM +, Logan wrote:
> As a disaster recovery drill, I backed up, wiped my drive, and attempted to
> do a full restore on top of a fresh Qubes install to see how i'd do in a
> nightmare scenario.

Good practice. I do this once or twice a year also for the benefit of
speeding up my expirience (on SSD).

> Other qubes were restored properly, but my dom0 barely restored. All XFCE
> panel settings were gone. I had to reinstall u2f proxy and some others I
> previously installed, yet select appearance setting remained.

dom0 is not a qube. Any software modifications you made to dom0, you
will have to redo. 

What get's backed up completely is everything in your home directory.
Have you noticed the extra directory in dom0 after restoring? It
contains everything that was in your home directory. You can pick and
choose or simply copy all of it back into place.

As far as software goes I maintain a shell scipt in my dom0 home folder
that contains the qubes-dom0-update calls to reinstall redshift and a
few other things I like to have in dom0. Since the shell script gets
restored, I simply call it. ;-)

You could also use salt to do this.

> I thought a restored qube was a bit-by-bit recreation of the qube. Isn't it?

It is. Again: dom0 is not a qube and you are not expected to customize 
it much (beyond some Xfce settings) and just overwriting your dom0 home
directory with a restore would be dangerous ... hence the dedicated
directory.

> Is this expected? Has anyone else experienced what I did? Yes, I replaced
> the user folder with the one installed by the fresh install.

You mean the other way around right? Not sure what you are saying.

> Frankly, I was very unhappy with the experience. I have, however, restored
> 99% of what I had prior to the drill with a lot of work. Thankful that my
> other qubes were ok and I hadn't done

Sorry to hear. I do this regularily and it never takes me more than 30
minutes until everything is exactly as it was before (minus the actual
restore time which is so long I let it run over night).

/Sven

- -- 
 public key: https://www.svensemmler.org/0x8F541FB6.asc
fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6

-BEGIN PGP SIGNATURE-
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=IcOK
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200508190110.GC1516%40app-email-private.


[qubes-users] dom0 doesn't fully restore

2020-05-08 Thread Logan
As a disaster recovery drill, I backed up, wiped my drive, and attempted 
to do a full restore on top of a fresh Qubes install to see how i'd do 
in a nightmare scenario.


Other qubes were restored properly, but my dom0 barely restored. All 
XFCE panel settings were gone. I had to reinstall u2f proxy and some 
others I previously installed, yet select appearance setting remained.


I thought a restored qube was a bit-by-bit recreation of the qube. Isn't it?

Is this expected? Has anyone else experienced what I did? Yes, I 
replaced the user folder with the one installed by the fresh install.



Frankly, I was very unhappy with the experience. I have, however, 
restored 99% of what I had prior to the drill with a lot of work. 
Thankful that my other qubes were ok and I hadn't done


Logan

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7b87d9d5-9a2e-f505-49c7-a95eb3c3c2a3%40threatmodel.io.


publickey - logan@threatmodel.io.asc.pgp
Description: application/pgp-key


signature.asc
Description: OpenPGP digital signature