Re: [qubes-users] Can't sudo in unman's qubes.3isec.org Ubuntu-14.04 template

2019-07-13 Thread list . wget
On Friday, 12 July 2019 12:15:07 UTC, steve.coleman  wrote:
> On 7/11/19 9:36 PM, list...@gmail.com wrote:
> > On Wednesday, 10 July 2019 17:13:42 UTC, steve.coleman  wrote:
> >> On 7/10/19 2:02 AM,  wrote:
> >>> On Tuesday, 9 July 2019 12:31:23 UTC, steve.coleman  wrote:
>  On 7/9/19 7:25 AM,  wrote:
> > Hi, I installed a Ubuntu-14.04 minimal template from qubes.3isec.org 
> > using
> >
> > $ sudo dnf install 
> > qubes-template-stretch-minimal-4.0.1-201812230252.noarch.rpm
> >
> > and that works 'fabelhaft' (German for 'fabulously' :), but inside the 
> > running template I'm asked for a password when I try to sudo my way 
> > into apt-get update.
> >
> > Does anyone know the password for 'user'?
> >
> > Thanks.
> >
> 
>  If you can not sudo, you can always try running your command from Dom0
>  as user root:
> 
>  $ qvm-run -a --user root  "apt-get update"
> >>>
> >>> Thanks.
> >>> I not only want to update, I also want to run all other kinds of commands 
> >>> as sudo. Do you think I can run any command like this inside the qube 
> >>> from within dom0?
> >>
> >> You can also run any other command as root, like "passwd user" to set
> >> the password to a know value, or "gedit /etc/sudoers" and modify who can
> >> sudo, add yourself to the wheel group, etc... I can't say why your
> >> particular appvm prevents you from sudoing without testing the vm
> >> myself, but whatever the problem is, you now have a way to get a root
> >> shell to fix it.
> >>
> >> hope this helps
> > 
> > It did, thanks for your help.
> > The funny thing is,
> > 
> > [user@dom0 ~]$ qvm-run -p --user root stretch-minimal "usermod -a -G sudo 
> > user"
> > 
> > didn't work, even after
> > 
> > [user@dom0 ~]$ qvm-run -p --user root stretch-minimal "service sudo restart"
> > 
> > although 'user' was added to the sudo group as could be seen from
> > 
> > user@stretch-minimal:~$  cat /etc/group | grep sudo
> > sudo:x:27:user
> > 
> > so I had to edit the sudoers file directly, then restarted the sudo service:
> > 
> > [user@dom0 ~]$ qvm-run -p --user root stretch-minimal "service sudo restart"
> > 
> > and that worked, so I wrote a little script to more or less automate and 
> > explain the process: https://pastebin.com/UcJa0DvC
> >
> For what it is worth, you might just find it easier to start a root 
> terminal (e.g. gnome-terminal, xterm, etc) so that you can run all those 
> commands as root interactively at a command line. Chances are your 
> "stretch-minimal" may not have many choices of terminals, but then you 
> can always just add one to make your life a little easier. I don't know 
> stretch, but I would guess that the 'xterm' application is likely 
> already installed.
> 
> $ qvm-run -a --user root stretch-minimal xterm
> 
> 'gnome-terminal' is execelent if that is already installed.

Yes, there is an XTerm available in stretch-minimal.
Good suggestion to run that as root from dom0, thanks, but I'm already in de 
sudo group now. ;-)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a7e2e004-a112-4043-98c2-d3fec70f891e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Using Salt to update TemplateVMs

2019-07-13 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

1. When using the Qubes Update widget, a mgmt DisposableVM is started.
   Why is that? Is it just for executing Salt commands so that they're
   not executed in dom0?

2. How can one update a TemplateVM the way the Qubes Update widget does?
   For example, when I update a Fedora TemplateVM myself, I just execute
   `dnf update` in the template. I don't start any DisposableVMs, so
   clearly my method of updating is different from what the Qubes Update
   widget does. Is there some kind of scriptable qubesctl command I can
   issue from dom0 that does the same thing as the Qubes Update widget?

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-
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=RjqF
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/af0194da-1ba2-817e-e5ab-3adddc5e3201%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] AEM readme should have a summary of commands.

2019-07-13 Thread 'interested_in_QubesOS' via qubes-users
Pretty self-explanitory. Send your ideas on how it should be done, if you want.

How I think it should be done: Perhaps have the command summary at the bottom 
of the readme and have exactly what a command does beside the command, and at 
the top of the readme put a notice of the summary.

I think the summary should always be up to date as well. (duh)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/rxAqa_PjdT7_m_LdpDOq50CvFS1fvWljMc725f0a1yyhqJjl2duqs1uedWdodSNGnGnk7bDChX_MJX9HjoQu39WocpiAzJZhMmZ3Jq1jLJA%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Failed qubesd deamon connection

2019-07-13 Thread 'awokd' via qubes-users
cammum...@gmail.com:
> On Wednesday, 10 July 2019 18:46:11 UTC+3, awokd  wrote:
>>
>>> On Tuesday, 9 July 2019 04:43:14 UTC+3, awokd  wrote:
> On Monday, 8 July 2019 23:42:36 UTC+3, camm...@gmail.com  wrote:
>> I have tried everything on the internet to solve my problem it says 
>> Start-limit-hit. I try you post in another chat nano 
>> var/lib/qubes/qubes.xml.resut no directory exist.
>> I try everything else I find on the web withe no solution. I have photos 
>> I don't want to lost and work stuff I need.
>> Please help me.
>
> https://postimg.cc/2bPYyHMW
> https://postimg.cc/YjGq7FZg
>
> More details of my problem.
>
 Provide text log file of "sudo journalctl -b" output. Note you may want 
 to edit out hardware serial #s, etc.
>>>
>>> https://ibb.co/9h1ftRV
>>> https://ibb.co/BPkP5xh
>>> https://ibb.co/Jjfw788
>>> https://ibb.co/pZfmbhw
>>> https://ibb.co/r7bG2Tt
>>> https://ibb.co/Yj855pZ
>>> https://ibb.co/318v99W
>>> https://ibb.co/RjSB7qJ
>>> https://ibb.co/W6SJZQm
>>> https://ibb.co/tY7mnbv
>>> https://ibb.co/wz7TCTm
>>> https://ibb.co/BtYyw8y
>>> https://ibb.co/wpq7gts
>>> https://ibb.co/KD8qZ1V
>>> https://ibb.co/WvDKkZS
>>> https://ibb.co/276gsbw
>>> https://ibb.co/4gXZ3Rc
>>> https://ibb.co/QfgJjmP
>>> https://ibb.co/c27y82v
>>> https://ibb.co/kcCLfT8
>>> https://ibb.co/L87KrZs
>>>
>>> These are links to images I take. 
>>> I can make for you a video and send if you want. It is about 3500 lines 
>>> total.
>>>
>>> I really appreciate your help. Thank you very much. I really like qubes no 
>>> problems until I put USB to transfer photos. Then after this problem 
>>> occurs. I use same USB everything nothing new. Only one computer and 1 
>>> camera that's it.
>>>
>>> Thank you very much. 
>>>
>> Appreciate the time it took to make all those pictures, but I was
>> looking for a text file instead? You should be able to mount a USB drive
>> from the command line and copy it out.
> 
> I am at [root@dom0 usb-drive]# cp 
> What do I type in to copy the file to usb. I don't want you to think I 
> haven't tried for a good 10hrs but I couldn't find fill directory. Do maybe I 
> need to create it?? 
> Please advise. Thank you 
> 
If you have the usb drive mounted and are in its directory:

sudo journalctl -b > ./journal.log


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5a2f5733-3c68-3428-082e-b8100056f487%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Failed qubesd deamon connection

2019-07-13 Thread cammumtar
On Wednesday, 10 July 2019 18:46:11 UTC+3, awokd  wrote:
> 
> > On Tuesday, 9 July 2019 04:43:14 UTC+3, awokd  wrote:
> >>> On Monday, 8 July 2019 23:42:36 UTC+3, camm...@gmail.com  wrote:
>  I have tried everything on the internet to solve my problem it says 
>  Start-limit-hit. I try you post in another chat nano 
>  var/lib/qubes/qubes.xml.resut no directory exist.
>  I try everything else I find on the web withe no solution. I have photos 
>  I don't want to lost and work stuff I need.
>  Please help me.
> >>>
> >>> https://postimg.cc/2bPYyHMW
> >>> https://postimg.cc/YjGq7FZg
> >>>
> >>> More details of my problem.
> >>>
> >> Provide text log file of "sudo journalctl -b" output. Note you may want 
> >> to edit out hardware serial #s, etc.
> > 
> > https://ibb.co/9h1ftRV
> > https://ibb.co/BPkP5xh
> > https://ibb.co/Jjfw788
> > https://ibb.co/pZfmbhw
> > https://ibb.co/r7bG2Tt
> > https://ibb.co/Yj855pZ
> > https://ibb.co/318v99W
> > https://ibb.co/RjSB7qJ
> > https://ibb.co/W6SJZQm
> > https://ibb.co/tY7mnbv
> > https://ibb.co/wz7TCTm
> > https://ibb.co/BtYyw8y
> > https://ibb.co/wpq7gts
> > https://ibb.co/KD8qZ1V
> > https://ibb.co/WvDKkZS
> > https://ibb.co/276gsbw
> > https://ibb.co/4gXZ3Rc
> > https://ibb.co/QfgJjmP
> > https://ibb.co/c27y82v
> > https://ibb.co/kcCLfT8
> > https://ibb.co/L87KrZs
> > 
> > These are links to images I take. 
> > I can make for you a video and send if you want. It is about 3500 lines 
> > total.
> > 
> > I really appreciate your help. Thank you very much. I really like qubes no 
> > problems until I put USB to transfer photos. Then after this problem 
> > occurs. I use same USB everything nothing new. Only one computer and 1 
> > camera that's it.
> > 
> > Thank you very much. 
> > 
> Appreciate the time it took to make all those pictures, but I was
> looking for a text file instead? You should be able to mount a USB drive
> from the command line and copy it out.

I am at [root@dom0 usb-drive]# cp 
What do I type in to copy the file to usb. I don't want you to think I haven't 
tried for a good 10hrs but I couldn't find fill directory. Do maybe I need to 
create it?? 
Please advise. Thank you 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2b72758e-37b0-476a-842e-fbf008d23dce%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: New Install of Qubes OS 4.0.2 RC1 Dom0 Doesnt Update

2019-07-13 Thread alexw8913
On Saturday, July 13, 2019 at 4:37:47 PM UTC-4, dro...@gmail.com wrote:
> > The Issue I am having is that When I try and update Dom0 in the Terminal 
> > using "sudo qubes-dom0-update"  I am getting this.
> > 
> > Fedora 25 - x86_64 - Updates
> > Fedora 25 - x86_64
> > Qubes Dom0 Repository (updates)
> > determining the fastest mirror (15 hosts)..done..
> > Qubes Templates repo138%
> > Qubes Templates repository
> > Last metadata expiration check:
> > Dependencies resolved.
> > 
> > Reinstalling:
> > python3-blivet  noarch 2:2.1.6-5.fc25 qubes-dom0-current
> > python3-kickstart   noarch 1000:2.32-4.fc25   qubes-dom0-current
> > qubes-release   noarch 4.0-8  qubes-dom0-current
> > qubes-release-notes noarch 4.0-8  qubes-dom0-current
> 
> Interesting.  I don't have that problem.  I did get some other error messages 
> the first time I ran sudo qubes-dom0-update, something about can't delete 
> local files, but it hasn't done it again.

I did some research and found this 
https://github.com/QubesOS/qubes-issues/issues/4792.

I have bypassed the Issue by manually installing those items in dom0 using 
"sudo dnf install".

I have also just had the same issue when I downloaded a fresh copy of 
debian-10-min from testing.  It downloaded but wouldnt install.  I had to 
manually install the template using the line above.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cd669663-ca5c-4314-8794-f2260804e702%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Why is sys-net talking to shed.galexander.org ?

2019-07-13 Thread drokmed
I installed debian-10-minimal template, installed minimal apps to use for 
sys-net, added iftop, then set sys-net to use minimal template.

Almost immediately upon starting sys-net (and nothing else), open an xterm and 
run iftop, sys-net repeatedly talks to shed.galexander.org

What's up with this?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/638872fe-d896-4a46-8b37-eb9f2f73c88f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Cannot reach FreeBSD from Qube but can reach Qube from FreeBSD

2019-07-13 Thread *Null* **
I have a FreeBSD HVM connected to a firewall VM. I also have a Fedora Qube 
connected to the same firewall VM. Networking between these was enabled using 
the iptables instructions from the Qubes documentation.

I can ping and access resources on the Fedora Qube from FreeBSD(I can transfer 
files to and download files from the Fedora VM).

However, I cannot do the same from the Fedora VM. It can ping the firewall, but 
not FreeBSD. Nor can it access resources on the FreeBSD system.

This confuses me because I would assume file transfer(from bsd to fedora) 
implies there is some bi-directional communication. But it seems to only work 
when initiated from one direction(from BSD).

All VMs can connect to the internet, FreeBSD can ping any vm, other VMs can 
ping other qubes based vms, but cannot ping FreeBSD.

What else must be done?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/87057d29-56b8-4819-9306-4a37528ba2ea%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: New Install of Qubes OS 4.0.2 RC1 Dom0 Doesnt Update

2019-07-13 Thread drokmed
> The Issue I am having is that When I try and update Dom0 in the Terminal 
> using "sudo qubes-dom0-update"  I am getting this.
> 
> Fedora 25 - x86_64 - Updates
> Fedora 25 - x86_64
> Qubes Dom0 Repository (updates)
> determining the fastest mirror (15 hosts)..done..
> Qubes Templates repo138%
> Qubes Templates repository
> Last metadata expiration check:
> Dependencies resolved.
> 
> Reinstalling:
> python3-blivet  noarch 2:2.1.6-5.fc25 qubes-dom0-current
> python3-kickstart   noarch 1000:2.32-4.fc25   qubes-dom0-current
> qubes-release   noarch 4.0-8  qubes-dom0-current
> qubes-release-notes noarch 4.0-8  qubes-dom0-current

Interesting.  I don't have that problem.  I did get some other error messages 
the first time I ran sudo qubes-dom0-update, something about can't delete local 
files, but it hasn't done it again.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/634d597d-0e6a-48ea-839a-96a8955289e1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] New Install of Qubes OS 4.0.2 RC1 Dom0 Doesnt Update

2019-07-13 Thread alexw8913
Hey, I have just Updated my System to Qubes OS 4.0.2 RC1 and the Install went 
very Smoothly.  Actually didnt have a single Error/Issue with the Install.  
This is also using UEFI.  I am using a Lenova X1 carbon Gen 6 laptop.

The Issue I am having is that When I try and update Dom0 in the Terminal using 
"sudo qubes-dom0-update"  I am getting this.

Fedora 25 - x86_64 - Updates
Fedora 25 - x86_64
Qubes Dom0 Repository (updates)
determining the fastest mirror (15 hosts)..done..
Qubes Templates repo138%
Qubes Templates repository
Last metadata expiration check:
Dependencies resolved.

Reinstalling:
python3-blivet  noarch 2:2.1.6-5.fc25 qubes-dom0-current
python3-kickstart   noarch 1000:2.32-4.fc25   qubes-dom0-current
qubes-release   noarch 4.0-8  qubes-dom0-current
qubes-release-notes noarch 4.0-8  qubes-dom0-current

It downloads these updates and then says:

Complete!
The downloaded packages were saved in cashe until the next successful 
transaction.

After I restart the computer this just keeps repeating.  Is there a way to fix 
this?

I am also noticing that when I start Qubes OS I am getting this during the boot 
process "Failed to start Load Kernel Modules" but it continues to boot up with 
no other issues.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6ee55c96-97ac-4dc0-9e10-1c5b14148455%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.