Re: [qubes-users] How is the "update qube" selected/ how do I select it manually?

2021-12-21 Thread unman
On Tue, Dec 21, 2021 at 08:01:43PM +0100, r.wiesb...@web.de wrote:
> it seems like the docs don't answer that, do they?
> 
> https://www.qubes-os.org/doc/how-to-update/
> 
[quote]
There is only a global setting for dom0 Updates, but how does it work
for other qubes?
[/quote]

Individual templates take their updateVM from the policy file - in 4.0
this is /etc/qubes-rpc/policy/qubes.UpdatesProxy. You edit this file if
you want to change the Update Proxy for a template.
In 4.1 the default is in /etc/qubes/policy.d/90-default.policy - if you
want to change the setting, you should create an entry in (e.g.) 30-user.policy

The policy files are self documenting, but if you need help with the
format feel free to ask.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/YcKD9ZpygBIrdB6G%40thirdeyesecurity.org.


Re: [qubes-users] How is the "update qube" selected/ how do I select it manually?

2021-12-21 Thread haaber

On 12/21/21 8:01 PM, r.wiesb...@web.de wrote:

it seems like the docs don't answer that, do they?

https://www.qubes-os.org/doc/how-to-update/

There is only a global setting for dom0 Updates, but how does it work
for other qubes?


Simply run the multiupdater.py script of Chris Laprise,
tas...@posteo.net, see  https://github.com/tasket

Frankly, to my point of view it outperforms the qubes updater.

best, Bernhard


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/88635e4d-5288-89b4-1fbb-b11436803485%40web.de.


[qubes-users] Re: Default firewall configuration for dns/icmp of VMs with restricted access

2021-12-21 Thread liked2


On 12/20/21 13:02, David Hobach wrote:
> Btw I still consider this hideous firewall GUI an anti-feature and would 
> wholeheartedly support anyone complaining about it at qubes-issues.
>
I don't agree to this statement as the GUI firewall does mitigate some risks if 
used. Only providing a command line interface would mean that some people 
wouldn't (have the ability to) use it. For those who are brave enough to use 
the command line, they probably also will manage to understand the implications 
of using the UI.


What else is wrong with the firewall GUI besides the fact of the both hidden 
dns/icmp specialities?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/932bb321-db37-746a-ea15-28867756597c%40gmx.de.


[qubes-users] How is the "update qube" selected/ how do I select it manually?

2021-12-21 Thread r . wiesbach

it seems like the docs don't answer that, do they?

https://www.qubes-os.org/doc/how-to-update/

There is only a global setting for dom0 Updates, but how does it work
for other qubes?

Thanks.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/670b51f8-4671-2c4c-e4cf-4f2a79b09df9%40web.de.


Re: [qubes-users] Memory balancing very inefficient

2021-12-21 Thread r . wiesbach

Coming back to this topic again. I am using Qubes 4.1 rc1 now and have
made the same observations again. Start of new VM/Qube is aborted due to
low RAM even though some of the running qubes have >>500MB free. So
again I start to manually limit all VMs to RAM sizes that seem
reasonable to me. Memory balancing really seems to fail hard, even in
the current version.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8ff15cab-c07a-ba80-3fe8-d5ea8babe120%40web.de.


Re: [qubes-users] "Cannot connect to qrexec agent for 60 .." - how to change this timeout?

2021-12-21 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Oleg Artemiev:
> I've slow disk on my qubes PC. Sometimes when I start VMs it tells
> that it can't connect to qrexec & fails to start automatically - I've
> to start again manually & then on the second time the disk reads
> faster due to cache & it succeeds. Where can I change the timeout to
> 90 seconds or even more?

$ qubes-prefs default_qrexec_timeout

You might want to increase default_shutdown_timeout as well, to
prevent your VMs from getting killed when they're slow to shut down.

Rusty
-BEGIN PGP SIGNATURE-
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=tFjX
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/YcHeFXHCE0EaEzzK%40mutt.