Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Jan 11, 2019 at 09:59:37PM -0800, rumsey.anth...@gmail.com wrote: > Thanks to Ivan, I figured it out (with a bit of luck). > > After comparing packages in his working template to my own, I first tried to > install: > > dbus-glib > ipcalc > iproute > iproute-tc > iputils > > That fixed it as far as I can tell. I now have a working sys-net and > sys-firewall with the fedora-29-minimal template. I'm assuming the ip* > packages were the key, but I don't really have any idea. Yes, it's iproute. Similar problem happened to Debian template[1] and it was fixed there, but apparently Fedora is also affected. I'll add relevant dependency. [1] https://github.com/QubesOS/qubes-issues/issues/4411 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlw7IWMACgkQ24/THMrX 1yzOFgf6AhFaa5Y+g2PHqKiSH908UIPM99+Xwf3lMlb/ISDfuX7EUsyqBLXI9yak UGjXuG7dcNs+QD9lESTCPxkYS86c1AQWb9zyPEe/Q2n1uJgYGzktEdyD6w51in/3 spZGvNdicSVDFUHeWyr+rdAR5feQETSebecxp3fha+GlG4D8tcDSZJzG13uZMZXk l9zetIJToWa5DANSEfdw70F1UpIt4BEBa8UxJJHNP3GOwYMulXFVLN6BJ8eJ3LMN PFfcDf5gK3OMTaLYu+5uj8WUf8dtQGgDwCd1Dzfzswmai8sMQ2EyzQEbuHuFQxvt sSIsnj4x6zK+BOZ/yqZwjpVRMDBwAQ== =py4N -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190113113043.GE6577%40mail-itl. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
On Saturday, January 12, 2019 at 6:59:38 AM UTC+1, rumsey@gmail.com wrote: > Thanks to Ivan, I figured it out (with a bit of luck). > > After comparing packages in his working template to my own, I first tried to > install: > > dbus-glib > ipcalc > iproute > iproute-tc > iputils > > That fixed it as far as I can tell. I now have a working sys-net and > sys-firewall with the fedora-29-minimal template. I'm assuming the ip* > packages were the key, but I don't really have any idea. Thanks for taking the time to compare the installed package lists. :) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/558e0ef1-a4bb-4f4e-9df2-9d078008c9f7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
Hi Rumsey, On 1/12/19 7:59 AM, rumsey.anth...@gmail.com wrote: > Thanks to Ivan, I figured it out (with a bit of luck). > > After comparing packages in his working template to my own, I first tried to > install: > > dbus-glib > ipcalc > iproute > iproute-tc > iputils > > That fixed it as far as I can tell. I now have a working sys-net and > sys-firewall with the fedora-29-minimal template. I'm assuming the ip* > packages were the key, but I don't really have any idea. Happy you figured it out. I'd bet that the missing package was iproute, but it could also be dbus-glib (if I'm not mistaken NetworkManager uses dbus, that could be the issue); If I have some time later today I'll try to remove those packages from my working template and see what happens. By the way, you can find info about packages with eg. `dnf info iproute`. If the package is installed, `rpm -qi iproute` will be much faster than dnf. You can also get a list of installed file with `rpm -ql iproute` (I usually do `rpm -ql package | grep bin`) Re- your previous email, I wouldn't have expected that there would be so many packages added in my template. I used a fedora-26-minimal and added only a few packages [1]. But maybe I didn't pay attention to all the dependencies that were pulled. [1] https://github.com/Qubes-Community/Contents/tree/master/docs/user-setups/taradiddles#fedora-minimal -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9832cb29-ce88-3633-d27e-eb4b4d52754c%40maa.bz. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
Thanks to Ivan, I figured it out (with a bit of luck). After comparing packages in his working template to my own, I first tried to install: dbus-glib ipcalc iproute iproute-tc iputils That fixed it as far as I can tell. I now have a working sys-net and sys-firewall with the fedora-29-minimal template. I'm assuming the ip* packages were the key, but I don't really have any idea. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/42665bc4-0ec5-4ded-9010-0c5fcf8173f8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
On Friday, January 11, 2019 at 7:49:36 PM UTC, Ivan Mitev wrote:
> Not sure it'll help but here's a git below with a list of the rpms
> installed in the templateVM of my sys-{net,firewall} vms so you can
> compare and check if you're missing something; the templateVM is a
> minimal fedora install but unlike yours its initial version was f26,
> upgraded to f28 and then to f29.
>
> https://gist.github.com/taradiddles/7db0970d464a5129213c3626c69fb1a3
>
> a crude way to generate such list in your templateVM:
>
> rpm -qa | sort | sed -e 's/-[0-9\.-].*//' > allrpms
>
> and then find differences:
>
> grep -xvf list_rpms_f29-1.txt allrpms
>
> (there will be a few packages that I have installed that are not needed
> for networking, eg. keepassxc, rsync, encfs, ...).
Thanks for that. I compared your rpm file to what I have in my
fedora-29-minimal clone for sys-net and sys-firewall, and the following
packages are the ones that you have in your working template which I do not
have in my non-working template:
aajohan-comfortaa-fonts
abattis-cantarell-fonts
adwaita-gtk2-theme
alsa-lib
annobin
atlas
avahi-glib
bc
binutils
boost-iostreams
boost-random
boost-system
boost-thread
brotli
bubblewrap
busybox
bzip2
bzip2-libs
cdparanoia-libs
cpp
cryptsetup
curl
dbus-glib
dejavu-sans-mono-fonts
device-mapper-multipath
device-mapper-multipath-libs
dkms
dosfstools
dwz
efi-srpm-macros
elfutils-libelf-devel
elfutils-libs
enca
exempi
exiv2
exiv2-libs
fedora-logos
fedora-obsolete-packages
flac-libs
fpc-srpm-macros
fuse
fuse-common
fuse-encfs
gcc
gcc-c++
gdisk
GeoIP
GeoIP-GeoLite-data
geolite2-city
geolite2-country
ghc-srpm-macros
ghostscript
ghostscript-core
ghostscript-fonts
ghostscript-tools-fonts
ghostscript-tools-printing
giflib
glibc-devel
glibc-headers
glx-utils
gmime
gmime30
gnat-srpm-macros
gnome-autoar
gnome-desktop3
gnome-themes-extra
go-srpm-macros
google-noto-emoji-color-fonts
gpg-pubkey
gpg-pubkey
groff-base
grub2-pc
grub2-pc-modules
grub2-tools-efi
grub2-tools-extra
gstreamer1
gstreamer1-plugins-base
gtk2
gvfs
gvfs-client
ipcalc
iproute
iproute-tc
iputils
isl
iso-codes
iw
iwl7260-firmware
keepassxc
kernel
kernel
kernel
kernel-core
kernel-core
kernel-core
kernel-devel
kernel-devel
kernel-devel
kernel-headers
kernel-modules
kernel-modules
kernel-modules
libaio
libatasmart
libblockdev
libblockdev-crypto
libblockdev-fs
libblockdev-loop
libblockdev-mdraid
libblockdev-part
libblockdev-swap
libblockdev-utils
libbluray
libbytesize
libcdio
libcdio-paranoia
libcue
libcurl
libexif
libgexiv2
libglvnd-gles
libgrss
libgsf
libgxps
libicu
libimobiledevice
libiptcdata
libmetalink
libmodulemd
libmpc
libnsl
libogg
libosinfo
libplist
libquvi
libquvi-scripts
librados2
libsodium
libssh
libstdc++-devel
libtheora
libudisks2
libusbmuxd
libvisual
libvorbis
libxcrypt-devel
libXfont
libxkbcommon-x11
libxslt
libXv
libyubikey
linux-atm-libs
linux-firmware
llvm-libs
lttng-ust
lua
lua-expat
lua-json
lua-lpeg
lua-socket
lzo
mdadm
mesa-dri-drivers
mesa-filesystem
nautilus
nautilus-extensions
nautilus-python
netconsole-service
network-scripts
nim-srpm-macros
nspr
nss
nss-pem
nss-softokn
nss-softokn-freebl
nss-sysinit
nss-tools
nss-util
ntfs
ntfsprogs
ocaml-srpm-macros
openblas-srpm-macros
opus
orc
osinfo-db
osinfo-db-tools
parted
pcre2
pcre2-utf16
perl
perl-Algorithm-Diff
perl-Archive-Tar
perl-Archive-Zip
perl-Attribute-Handlers
perl-autodie
perl-B-Debug
perl-bignum
perl-Carp
perl-Compress-Bzip2
perl-Compress-Raw-Bzip2
perl-Compress-Raw-Zlib
perl-Config-Perl-V
perl-constant
perl-CPAN
perl-CPAN-Meta
perl-CPAN-Meta-Requirements
perl-CPAN-Meta-YAML
perl-Data-Dumper
perl-Data-OptList
perl-Data-Section
perl-DB_File
perl-devel
perl-Devel-Peek
perl-Devel-PPPort
perl-Devel-SelfStubber
perl-Devel-Size
perl-Digest
perl-Digest-MD5
perl-Digest-SHA
perl-Encode
perl-Encode-devel
perl-Encode-Locale
perl-encoding
perl-Env
perl-Errno
perl-experimental
perl-Exporter
perl-ExtUtils-CBuilder
perl-ExtUtils-Command
perl-ExtUtils-Embed
perl-ExtUtils-Install
perl-ExtUtils-MakeMaker
perl-ExtUtils-Manifest
perl-ExtUtils-Miniperl
perl-ExtUtils-MM-Utils
perl-ExtUtils-ParseXS
perl-File-Fetch
perl-File-HomeDir
perl-File-Path
perl-File-Temp
perl-File-Which
perl-Filter
perl-Filter-Simple
perl-Getopt-Long
perl-HTTP-Tiny
perl-inc-latest
perl-interpreter
perl-IO
perl-IO-Compress
perl-IO-Socket-IP
perl-IO-Socket-SSL
perl-IO-Zlib
perl-IPC-Cmd
perl-IPC-System-Simple
perl-IPC-SysV
perl-JSON-PP
perl-libnet
perl-libnetcfg
perl-libs
perl-local-lib
perl-Locale-Codes
perl-Locale-Maketext
perl-Locale-Maketext-Simple
perl-macros
perl-Math-BigInt
perl-Math-BigInt-FastCalc
perl-Math-BigRat
perl-Math-Complex
perl-Memoize
perl-MIME-Base64
perl-Module-Build
perl-Module-CoreList
perl-Module-CoreList-tools
perl-Module-Load
perl-Module-Load-Conditional
perl-Module-Loaded
perl-Module-Metadata
perl-Mozilla-CA
perl-MRO-Compat
perl-Net-Ping
perl-Net-SSLeay
perl-open
perl-Package-Generator
perl-Params-Check
perl-Params-Util
perl-parent
perl-PathTools
perl-Perl-OSType
perl-perlfaq
Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
Hi 799,
On 1/11/19 8:47 PM, 799 wrote:
> I had the
>
> Am Fr., 11. Jan. 2019, 19:36 hat geschrieben:
>
>> I've been using Qubes for about 1 year now, and I wanted to try using a
>> minimal template on my Dell XPS 13 laptop for the sake of conserving space.
>>
>> I've installed the packages recommended at
>> https://www.qubes-os.org/doc/templates/fedora-minimal/ for sys-net and
>> sys-firewall and I also had to copy the /usr/lib/firmware/ath10k from my
>> fedora-28 template to the fedora-29-minimal clone in order to get my wifi
>> to work.
>>
>> Under the fedora-29-minimal template clone I can connect to wifi. With
>> both sys-net and sys-firewall using the minimal template, both templates
>> and dom0 are able to update, so I know there is connectivity. However, I am
>> unable to get any internet connectivity in my appvms.
>>
>> I have no expertise in the realm of troubles
>> I had the
>>
>> Am Fr., 11. Jan. 2019, 19:36 hat geschrieben:
>>
>>> I've installed the packages recommended at
>>> https://www.qubes-os.org/doc/templates/fedora-minimal/ for sys-net and
>>> sys-firewall and I also had to copy the /usr/lib/firmware/ath10k from my
>>> fedora-28 template to the fedora-29-minimal clone in order to get my wifi
>>> to work.
>>> Under the fedora-29-minimal template clone I can connect to wifi. With
>>> both sys-net and sys-firewall using the minimal template, both templates
>>> and dom0 are able to update, so I know there is connectivity. However, I am
>>> unable to get any internet connectivity in my appvms.
>>> I have no expertise in the realm of troubleshooting these problems. I am
>>> just knowledgable enough to sometimes figure stuff out and sometimes screw
>>> things up.
>>> Any help would be appreciated.
>>
>>
> I was running into the same issues and have already open a question here.
>
> This is my script to build my sys-app-VM-template from scratch:
> (You might need to install another Intel Wifi Package).
>
> sudo qubes-dom0-update qubes-template-fedora-28-minimal
> qvm-clone fedora-28-minimal t-fedora-28-sys
> qvm-run --auto --user root t-fedora-28-sys "xterm -hold -e 'dnf -y update
> && \
> dnf -y install qubes-core-agent-qrexec qubes-core-agent-systemd \
> qubes-core-agent-networking polkit qubes-core-agent-network-manager \
> notification-daemon qubes-core-agent-dom0-updates qubes-usb-proxy \
> network-manager-applet iwl6000g2a-firmware qubes-input-proxy-sender \
> NetworkManager-wwan NetworkManager-wifi NetworkManager-openvpn \
> NetworkManager-openvpn-gnome && \
> echo ... Everything completed! Shutdown Template'"
>
> # Optional packages you might want to install in the sys-template:
> qvm-run --auto --user root t-fedora-28-sys "xterm -hold -e 'dnf -y install
> nano less pciutils iputils'"
> qvm-shutdown --all --wait --timeout 120
> qvm-prefs --set sys-net template t-fedora-28-sys
> qvm-prefs --set sys-firewall template t-fedora-28-sys
> qvm-prefs --set sys-usb template t-fedora-28-sys
> qvm-start sys-firewall sys-firewall sys-usb
>
> I have tried to run the same script on a fedora-29-minimal template .. same
> problem which you have described.
> sys-net has internet, but no other vm which has it set as NetVM.
>
> Strangely it will work if you use the FAT fedora-29 template out of the box
> ... so it seems we are missing some packages/settings.
Not sure it'll help but here's a git below with a list of the rpms
installed in the templateVM of my sys-{net,firewall} vms so you can
compare and check if you're missing something; the templateVM is a
minimal fedora install but unlike yours its initial version was f26,
upgraded to f28 and then to f29.
https://gist.github.com/taradiddles/7db0970d464a5129213c3626c69fb1a3
a crude way to generate such list in your templateVM:
rpm -qa | sort | sed -e 's/-[0-9\.-].*//' > allrpms
and then find differences:
grep -xvf list_rpms_f29-1.txt allrpms
(there will be a few packages that I have installed that are not needed
for networking, eg. keepassxc, rsync, encfs, ...).
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/7a852e74-d446-92d8-902e-3c56e1d7dbfd%40maa.bz.
For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
Am Fr., 11. Jan. 2019, 20:02 hat geschrieben: > On Friday, January 11, 2019 at 6:48:06 PM UTC, 799 wrote: > > (...) > Thanks for the reply. I had been following that thread of yours and hoping > someone would have an answer, but I have to assume the same thing: > something is missing. > My idea was to update a fedora-29 and fedora-29-minimal template to the latest version. Then install the additional packages for sys-vms. When this is done I compare the package lists to find out which additional packages are installed in the fat template and to reverse engineer what I am missing. But as fedora-28 is still supported afaik I decided just to keep the fedora-28 template. Hopefully someone will answer this question so that my wife will stop > asking me what the hell I'm doing sitting in front of my laptop all night :) > Sounds somewhat familiar ;-) - O -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAJ3yz2trqj4vhdYM5xHrZjQaW5hcSQXua%2BrZ4Nv9siJ3v6nwHQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
On Friday, January 11, 2019 at 6:48:06 PM UTC, 799 wrote: > I was running into the same issues and have already open a question here. > Strangely it will work if you use the FAT fedora-29 template out of the box > ... so it seems we are missing some packages/settings. Thanks for the reply. I had been following that thread of yours and hoping someone would have an answer, but I have to assume the same thing: something is missing. Hopefully someone will answer this question so that my wife will stop asking me what the hell I'm doing sitting in front of my laptop all night :) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2dfdbc8e-0eb2-4b56-af8a-927a6051590c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-29-minimal sys-net/firewall problem
I had the Am Fr., 11. Jan. 2019, 19:36 hat geschrieben: > I've been using Qubes for about 1 year now, and I wanted to try using a > minimal template on my Dell XPS 13 laptop for the sake of conserving space. > > I've installed the packages recommended at > https://www.qubes-os.org/doc/templates/fedora-minimal/ for sys-net and > sys-firewall and I also had to copy the /usr/lib/firmware/ath10k from my > fedora-28 template to the fedora-29-minimal clone in order to get my wifi > to work. > > Under the fedora-29-minimal template clone I can connect to wifi. With > both sys-net and sys-firewall using the minimal template, both templates > and dom0 are able to update, so I know there is connectivity. However, I am > unable to get any internet connectivity in my appvms. > > I have no expertise in the realm of troubles > I had the > > Am Fr., 11. Jan. 2019, 19:36 hat geschrieben: > >> I've installed the packages recommended at >> https://www.qubes-os.org/doc/templates/fedora-minimal/ for sys-net and >> sys-firewall and I also had to copy the /usr/lib/firmware/ath10k from my >> fedora-28 template to the fedora-29-minimal clone in order to get my wifi >> to work. >> Under the fedora-29-minimal template clone I can connect to wifi. With >> both sys-net and sys-firewall using the minimal template, both templates >> and dom0 are able to update, so I know there is connectivity. However, I am >> unable to get any internet connectivity in my appvms. >> I have no expertise in the realm of troubleshooting these problems. I am >> just knowledgable enough to sometimes figure stuff out and sometimes screw >> things up. >> Any help would be appreciated. > > I was running into the same issues and have already open a question here. This is my script to build my sys-app-VM-template from scratch: (You might need to install another Intel Wifi Package). sudo qubes-dom0-update qubes-template-fedora-28-minimal qvm-clone fedora-28-minimal t-fedora-28-sys qvm-run --auto --user root t-fedora-28-sys "xterm -hold -e 'dnf -y update && \ dnf -y install qubes-core-agent-qrexec qubes-core-agent-systemd \ qubes-core-agent-networking polkit qubes-core-agent-network-manager \ notification-daemon qubes-core-agent-dom0-updates qubes-usb-proxy \ network-manager-applet iwl6000g2a-firmware qubes-input-proxy-sender \ NetworkManager-wwan NetworkManager-wifi NetworkManager-openvpn \ NetworkManager-openvpn-gnome && \ echo ... Everything completed! Shutdown Template'" # Optional packages you might want to install in the sys-template: qvm-run --auto --user root t-fedora-28-sys "xterm -hold -e 'dnf -y install nano less pciutils iputils'" qvm-shutdown --all --wait --timeout 120 qvm-prefs --set sys-net template t-fedora-28-sys qvm-prefs --set sys-firewall template t-fedora-28-sys qvm-prefs --set sys-usb template t-fedora-28-sys qvm-start sys-firewall sys-firewall sys-usb I have tried to run the same script on a fedora-29-minimal template .. same problem which you have described. sys-net has internet, but no other vm which has it set as NetVM. Strangely it will work if you use the FAT fedora-29 template out of the box ... so it seems we are missing some packages/settings. - O -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAJ3yz2uHNGABB5GwiBiN8TwiEPwz4g1tQdAps46t1pcrQWHdgw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] fedora-29-minimal sys-net/firewall problem
I've been using Qubes for about 1 year now, and I wanted to try using a minimal template on my Dell XPS 13 laptop for the sake of conserving space. I've installed the packages recommended at https://www.qubes-os.org/doc/templates/fedora-minimal/ for sys-net and sys-firewall and I also had to copy the /usr/lib/firmware/ath10k from my fedora-28 template to the fedora-29-minimal clone in order to get my wifi to work. Under the fedora-29-minimal template clone I can connect to wifi. With both sys-net and sys-firewall using the minimal template, both templates and dom0 are able to update, so I know there is connectivity. However, I am unable to get any internet connectivity in my appvms. I have no expertise in the realm of troubleshooting these problems. I am just knowledgable enough to sometimes figure stuff out and sometimes screw things up. Any help would be appreciated. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/58364d9d-5aec-45be-bc5f-fbba3c23d555%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
