Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread unman
On Sat, Aug 15, 2020 at 04:26:34AM -0700, 0spin...@gmail.com wrote:
> mainly because fedora updates are always so very slow (200-400kbps), while 
> debian isn't.
> 

The proxy is configured at /etc/qubes-rpc/policy/qubes.UpdatesProxy
You want a line at the top of the file that says (e.g):
fedora-32  $default  allow,target=sys-net

Templates have no networking, (by default), and you should keep it that
way to avoid mistakes.
To enable them to install software and update, there is a proxy
mechanism that listens on port 8082 and connects to a download proxy.
This is all normal.

On your system you probably opted to install updates via Tor, so the
default proxy setting is to use the Whonix system. Editing the policy
file will change that.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200815132307.GB20973%40thirdeyesecurity.org.


Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread 0spin...@gmail.com
mainly because fedora updates are always so very slow (200-400kbps), while 
debian isn't.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c0506136-da2f-4009-8975-cca21ab5b5e6n%40googlegroups.com.


Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread Qubes

On 8/15/20 1:09 PM, 0spin...@gmail.com wrote:

On Saturday, August 15, 2020 at 1:03:31 PM UTC+2 Qubes wrote:


On 8/15/20 12:01 PM,  wrote:

anyone have a clue why this is, and whether it can be disabled? It

happens

regardless of whether I have a netvm set for the template, and I have 0

tor

mirrors enabled afaict.


It is normal [behavior], Qubes uses a proxy service for updates.

[behavior]
https://www.qubes-os.org/doc/software-update-domu/#updates-proxy



yet this says: # any VM with tag `whonix-updatevm` should use `sys-whonix`;
this tag is added to `whonix-gw` and `whonix-ws` during installation and is
preserved during template clone
fedora-32-xfce has nothing to do with whonix-gw or ws, so why has it
received this tag, and how can I remove it? qvm-prefs help doesn't say.

Why would you want to remove it? It is the mechanism that is used to 
install both software and update in your template.


It is only a setting to tell your templateVM where to get 
updates/software from and over which connection updates/software should 
be retrieved.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e7ac5600-1ec1-794b-947a-614a102768f7%40ak47.co.za.


Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread 0spin...@gmail.com
On Saturday, August 15, 2020 at 1:03:31 PM UTC+2 Qubes wrote:

> On 8/15/20 12:01 PM,  wrote: 
> > anyone have a clue why this is, and whether it can be disabled? It 
> happens 
> > regardless of whether I have a netvm set for the template, and I have 0 
> tor 
> > mirrors enabled afaict. 
> > 
> It is normal [behavior], Qubes uses a proxy service for updates. 
>
> [behavior] 
> https://www.qubes-os.org/doc/software-update-domu/#updates-proxy 
>

yet this says: # any VM with tag `whonix-updatevm` should use `sys-whonix`; 
this tag is added to `whonix-gw` and `whonix-ws` during installation and is 
preserved during template clone
fedora-32-xfce has nothing to do with whonix-gw or ws, so why has it 
received this tag, and how can I remove it? qvm-prefs help doesn't say.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/82b909e7-7792-4dd7-bfcf-cf67fee822ean%40googlegroups.com.


Re: [qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread Qubes

On 8/15/20 12:01 PM, 0spin...@gmail.com wrote:

anyone have a clue why this is, and whether it can be disabled? It happens
regardless of whether I have a netvm set for the template, and I have 0 tor
mirrors enabled afaict.


It is normal [behavior], Qubes uses a proxy service for updates.

[behavior] https://www.qubes-os.org/doc/software-update-domu/#updates-proxy

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/427f4cee-8fab-aced-5b1b-bd45248aedb5%40ak47.co.za.


[qubes-users] why do fedora templates always start sys-whonix on update

2020-08-15 Thread 0spin...@gmail.com
anyone have a clue why this is, and whether it can be disabled? It happens 
regardless of whether I have a netvm set for the template, and I have 0 tor 
mirrors enabled afaict.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9ff1379f-38e4-41b5-80a8-bbf271caaff7n%40googlegroups.com.