Re: [qubes-users] Help using qubes as testing VMs

2022-01-18 Thread unman 
On Tue, Jan 18, 2022 at 12:49:34PM -0600, Eric W. Biederman wrote:
> 
> Can someone tell me if I am missing something?
> 
> I do a lot of testing of linux kernels.  A bunch of that I have
> historically done in qemu with kvm support.  Unfortunately nested
> hardware virtualization does not work.  Which means for testing
> for race conditions and the like I need to run the kernels in
> their own HVM.
> 
> I use an HVM so I can update the kernel in /boot and reboot the qube and
> be running the kernel I am testing.  It would be nice if I could use a
> throw-away qube that just boots with a kernel of my choosing but using
> an stand-alone qube is fine.
> 
> Where I run into practical problems is when I want to place specific
> files into my testing qube.  I have not figured out how to ssh into
> the qube from another qube, nor have I figured out how to use qvm-copy.
> The best I have right now is to have an external machine that I copy
> things to and then copy them back, which seems like a real hack.
> 
> I also have not figured out how to get a serial console from such a qube
> only a graphical one which makes it more difficult than I would like
> to capture errors.
> 
> I looked at installing the qubes-core-agent package in my testing HVM
> but it has too many dependencies and installing it makes it impossible
> to test what I would like to test.  That is assuming someone has even
> packaged it for the distro I need to test on.
> 
> Am I missing something?  Is there an easier more straight forward way to
> setup a testing qube?  Is it possible to setup a virtual serial console
> to a qube?  Is it possible to ssh to a qube from another qube?
> 
> Eric

Hi Eric

You should probably check out the fine documentation:
https://www.qubes-os.org/doc/managing-vm-kernels/ has information about
using different kernels, including kernels provided by the qube.

https://www.qubes-os.org/doc/firewall has information about enabling
networking between qubes.

If you are using HVMs you can, in some cases, install qubes packages,
and then use tools like qvm-copy. I say, in some cases, because this
wont work with some targets, like Ubuntu standalones.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/YedXTcXJyVZbFbxO%40thirdeyesecurity.org.

Re: [qubes-users] Why is dom0 so long behind in versions?

2022-01-18 Thread unman 
On Tue, Jan 18, 2022 at 02:09:30PM +0100, 'Rune Philosof' via qubes-users wrote:
> On Tue, Jan 18, 2022 at 1:24 PM 'awokd' via qubes-users <
> qubes-users@googlegroups.com> wrote:
> 
> > 'Rune Philosof' via qubes-users:
> > > Why not use fedora 35 for dom0?
> > > Wouldn't it make it easier to maintain, while also getting better
> > hardware
> > > support?
> > >
> > https://www.qubes-os.org/faq/#why-is-dom0-so-old
> >
> 
> Thanks. But that does not answer any of the questions.
> It only says why it is not necessary to run a newer one.
> 

Every Qubes release goes through a significant testing round - Qubes 4.1
is in the midst of that with (now) rc4, but has already been through an
alpha and beta round.
At that time Fedora 32 was still a recent release.
Every release has to draw a line somewhere - it would not be feasible to
keep updating dom0 as the testing rounds progress. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/YedPUno21wKxfsvj%40thirdeyesecurity.org.

Re: [qubes-users] Add network drive to Dom0

2022-01-18 Thread 'awokd' via qubes-users 

William Fisher:

or "Mount"

On Tuesday, January 18, 2022 at 1:22:49 PM UTC-6 William Fisher wrote:


How can I connect a network drive to an app VM?

Bill

On Tuesday, January 18, 2022 at 10:56:10 AM UTC-6 Mike Keehan wrote:


On 1/18/22 15:17, William Fisher wrote:

I stil can't figure out how to mount the NAS on my local LAN as local
storage of my qubes (4.0) back-ups. How do I get Qubes to See the NAS

drive?


On Monday, January 17, 2022 at 3:45:44 PM UTC-6 awokd wrote:

William Fisher:

I'd like to add a network drive (Buffalo NAS)to my Qubes 4.0

system to back

up my Qubes. Is it possible?


Yes. Attach it to a VM with qvm-block, then run the Qubes Backup
utility. More detail in here under Creating a backup:
https://www.qubes-os.org/doc/how-to-back-up-restore-and-migrate/
 .

--
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots


Hi William,

Dom0 has no network connection, so it isn't possible to connect
network storage to it.

When the Qubes backup process is run, it asks which VM should the
backup be sent to.

I have a VM called Backup in which I mount a shared folder from
my NAS device. The backup process works fine using this. And I
know that restores from the shared NAS folder work OK too, because
I test that occasionally.

Good luck,

Mike.




Assumed you had a USB connection to your NAS, sorry. Qvm-block won't 
work for network storage.


--
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2c7ce319-2ec3-b08b-65f9-b6b5f7e0dd5e%40danwin1210.de.

Re: [qubes-users] Add network drive to Dom0

2022-01-18 Thread Thomas Clarke 

This is not Qubes specific. Please consult the documentation for the 
distribution your AppVM's are based on. For example, if your AppVM's are using 
a Fedora template, consult Fedora's documentation.

On 1/18/22 19:23, William Fisher wrote:

or "Mount"

On Tuesday, January 18, 2022 at 1:22:49 PM UTC-6 William Fisher wrote:

How can I connect a network drive to an app VM?

Bill

On Tuesday, January 18, 2022 at 10:56:10 AM UTC-6 Mike Keehan wrote:

On 1/18/22 15:17, William Fisher wrote:
 > I stil can't figure out how to mount the NAS on my local LAN as local
 > storage of my qubes (4.0) back-ups. How do I get Qubes to See the 
NAS drive?
 >
 > On Monday, January 17, 2022 at 3:45:44 PM UTC-6 awokd wrote:
 >
 > William Fisher:
 > > I'd like to add a network drive (Buffalo NAS)to my Qubes 4.0
 > system to back
 > > up my Qubes. Is it possible?
 > >
 > Yes. Attach it to a VM with qvm-block, then run the Qubes Backup
 > utility. More detail in here under Creating a backup:
 > https://www.qubes-os.org/doc/how-to-back-up-restore-and-migrate/ 

 > > .
 >
 > --
 > - don't top post
 > Mailing list etiquette:
 > - trim quoted reply to only relevant portions
 > - when possible, copy and paste text instead of screenshots

Hi William,

Dom0 has no network connection, so it isn't possible to connect
network storage to it.

When the Qubes backup process is run, it asks which VM should the
backup be sent to.

I have a VM called Backup in which I mount a shared folder from
my NAS device. The backup process works fine using this. And I
know that restores from the shared NAS folder work OK too, because
I test that occasionally.

Good luck,

Mike.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to 
qubes-users+unsubscr...@googlegroups.com 
.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4e946213-c7fc-4a74-a832-d8a7d2e1104bn%40googlegroups.com
 
.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b07262fe-1d51-640c-0526-c10d8c65558e%40riseup.net.

Re: [qubes-users] Add network drive to Dom0

2022-01-18 Thread William Fisher 
or "Mount"

On Tuesday, January 18, 2022 at 1:22:49 PM UTC-6 William Fisher wrote:

> How can I connect a network drive to an app VM?
>
> Bill
>
> On Tuesday, January 18, 2022 at 10:56:10 AM UTC-6 Mike Keehan wrote:
>
>> On 1/18/22 15:17, William Fisher wrote:
>> > I stil can't figure out how to mount the NAS on my local LAN as local 
>> > storage of my qubes (4.0) back-ups. How do I get Qubes to See the NAS 
>> drive?
>> > 
>> > On Monday, January 17, 2022 at 3:45:44 PM UTC-6 awokd wrote:
>> > 
>> > William Fisher:
>> > > I'd like to add a network drive (Buffalo NAS)to my Qubes 4.0
>> > system to back
>> > > up my Qubes. Is it possible?
>> > >
>> > Yes. Attach it to a VM with qvm-block, then run the Qubes Backup
>> > utility. More detail in here under Creating a backup:
>> > https://www.qubes-os.org/doc/how-to-back-up-restore-and-migrate/
>> >  .
>> > 
>> > -- 
>> > - don't top post
>> > Mailing list etiquette:
>> > - trim quoted reply to only relevant portions
>> > - when possible, copy and paste text instead of screenshots
>>
>> Hi William,
>>
>> Dom0 has no network connection, so it isn't possible to connect
>> network storage to it.
>>
>> When the Qubes backup process is run, it asks which VM should the
>> backup be sent to.
>>
>> I have a VM called Backup in which I mount a shared folder from
>> my NAS device. The backup process works fine using this. And I
>> know that restores from the shared NAS folder work OK too, because
>> I test that occasionally.
>>
>> Good luck,
>>
>> Mike.
>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4e946213-c7fc-4a74-a832-d8a7d2e1104bn%40googlegroups.com.

[qubes-users] Qubes OS 4.1.0-rc4 has been released!

2022-01-18 Thread Andrew David Wong 

Dear Qubes Community,

The fourth release candidate for Qubes 4.1.0 is here! There are no major
changes to report. We've just focused on fixing bugs that were
discovered and reported in the third release candidate.

If you're currently using any Qubes 4.1.0 release candidate, a regular
update [01] is sufficient to upgrade to the latest one. Otherwise,
read on for more about how to get started with testing Qubes 4.1.0-rc4.


What's new in Qubes 4.1.0?
--

In case you still haven't heard, Qubes 4.1.0 includes several major new
features, each of which is explained in depth in its own article:

- Qubes Architecture Next Steps: The GUI Domain [02]
- Qubes Architecture Next Steps: The New Qrexec Policy System [03]
- New Gentoo templates and maintenance infrastructure [04]
- Reproducible builds for Debian: a big step forward [05]

There are also  numerous other improvements and bug fixes listed in
the release notes [06] and in the issue tracker [07].

Finally, Qubes 4.1.0 features the following updated default components:

- Xen 4.14
- Fedora 32 in dom0
- Fedora 34 template
- Debian 11 template
- Whonix 16 Gateway and Workstation templates
- Linux kernel 5.10


How to test Qubes 4.1.0-rc4
---

If you're willing to test [08] this release candidate, you can help to
improve the stable release by reporting any bugs you encounter [09].
Experienced users are strongly encouraged to join the testing team [10]!

How to migrate to 4.1.0-rc4:

- If you're already on any 4.1.0 release candidate, simply perform a
  normal update [01].
- If you're not on a 4.1.0 release candidate yet, you have two options:
  1. Back up [11] your current installation, download [12] 4.1.0-rc4,
 perform a fresh install [13], then restore [14] from your backup.
  2. Perform an in-place upgrade [15].


Release candidate planning
--

With each new release candidate, Qubes 4.1.0 becomes more stable as
testers report bugs and our developers fix them. As explained in our
general release schedule [16], this cycle will continue until no major
bugs are discovered, at which point the last release candidate will be
declared the stable 4.1.0 release. Until then, we plan to have new
release candidates approximately every five weeks.


[01] https://www.qubes-os.org/doc/how-to-update/
[02] https://www.qubes-os.org/news/2020/03/18/gui-domain/
[03] https://www.qubes-os.org/news/2020/06/22/new-qrexec-policy-system/
[04] 
https://www.qubes-os.org/news/2020/10/05/new-gentoo-templates-and-maintenance-infrastructure/
[05] 
https://www.qubes-os.org/news/2021/10/08/reproducible-builds-for-debian-a-big-step-forward/

[06] https://www.qubes-os.org/doc/releases/4.1/release-notes/
[07] 
https://github.com/QubesOS/qubes-issues/issues?q=milestone%3A%22Release+4.1%22+is%3Aclosed+-label%3A%22R%3A+duplicate%22+-label%3A%22R%3A+invalid%22+-label%3A%22R%3A+cannot+reproduce%22+-label%3A%22R%3A+not+an+issue%22+-label%3A%22R%3A+not+our+bug%22+-label%3A%22R%3A+won%27t+do%22+-label%3A%22R%3A+won%27t+fix%22+

[08] https://www.qubes-os.org/doc/testing/
[09] https://www.qubes-os.org/doc/issue-tracking/
[10] https://forum.qubes-os.org/t/joining-the-testing-team/5190
[11] 
https://www.qubes-os.org/doc/how-to-back-up-restore-and-migrate/#creating-a-backup

[12] https://www.qubes-os.org/downloads/
[13] https://www.qubes-os.org/doc/installation-guide/
[14] 
https://www.qubes-os.org/doc/how-to-back-up-restore-and-migrate/#restoring-from-a-backup

[15] https://www.qubes-os.org/doc/upgrade/4.1/
[16] https://www.qubes-os.org/doc/version-scheme/#release-schedule

This announcement is also available on the Qubes website:
https://www.qubes-os.org/news/2022/01/18/qubes-4-1-0-rc4/

--
Andrew David Wong
Community Manager
The Qubes OS Project
https://www.qubes-os.org

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ea2eb4ad-def7-acd0-b8c1-7517ca32c17c%40qubes-os.org.

Re: [qubes-users] Add network drive to Dom0

2022-01-18 Thread William Fisher 
How can I connect a network drive to an app VM?

Bill

On Tuesday, January 18, 2022 at 10:56:10 AM UTC-6 Mike Keehan wrote:

> On 1/18/22 15:17, William Fisher wrote:
> > I stil can't figure out how to mount the NAS on my local LAN as local 
> > storage of my qubes (4.0) back-ups. How do I get Qubes to See the NAS 
> drive?
> > 
> > On Monday, January 17, 2022 at 3:45:44 PM UTC-6 awokd wrote:
> > 
> > William Fisher:
> > > I'd like to add a network drive (Buffalo NAS)to my Qubes 4.0
> > system to back
> > > up my Qubes. Is it possible?
> > >
> > Yes. Attach it to a VM with qvm-block, then run the Qubes Backup
> > utility. More detail in here under Creating a backup:
> > https://www.qubes-os.org/doc/how-to-back-up-restore-and-migrate/
> >  .
> > 
> > -- 
> > - don't top post
> > Mailing list etiquette:
> > - trim quoted reply to only relevant portions
> > - when possible, copy and paste text instead of screenshots
>
> Hi William,
>
> Dom0 has no network connection, so it isn't possible to connect
> network storage to it.
>
> When the Qubes backup process is run, it asks which VM should the
> backup be sent to.
>
> I have a VM called Backup in which I mount a shared folder from
> my NAS device. The backup process works fine using this. And I
> know that restores from the shared NAS folder work OK too, because
> I test that occasionally.
>
> Good luck,
>
> Mike.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/df1a87d2-b9e2-46db-97c7-775e9953688bn%40googlegroups.com.

[qubes-users] Help using qubes as testing VMs

2022-01-18 Thread Eric W. Biederman 


Can someone tell me if I am missing something?

I do a lot of testing of linux kernels.  A bunch of that I have
historically done in qemu with kvm support.  Unfortunately nested
hardware virtualization does not work.  Which means for testing
for race conditions and the like I need to run the kernels in
their own HVM.

I use an HVM so I can update the kernel in /boot and reboot the qube and
be running the kernel I am testing.  It would be nice if I could use a
throw-away qube that just boots with a kernel of my choosing but using
an stand-alone qube is fine.

Where I run into practical problems is when I want to place specific
files into my testing qube.  I have not figured out how to ssh into
the qube from another qube, nor have I figured out how to use qvm-copy.
The best I have right now is to have an external machine that I copy
things to and then copy them back, which seems like a real hack.

I also have not figured out how to get a serial console from such a qube
only a graphical one which makes it more difficult than I would like
to capture errors.

I looked at installing the qubes-core-agent package in my testing HVM
but it has too many dependencies and installing it makes it impossible
to test what I would like to test.  That is assuming someone has even
packaged it for the distro I need to test on.

Am I missing something?  Is there an easier more straight forward way to
setup a testing qube?  Is it possible to setup a virtual serial console
to a qube?  Is it possible to ssh to a qube from another qube?

Eric










-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/87sftk3mm9.fsf%40email.froward.int.ebiederm.org.

Re: [qubes-users] Add network drive to Dom0

2022-01-18 Thread Mike Keehan 

On 1/18/22 15:17, William Fisher wrote:
I stil can't figure out how to mount the NAS on my local LAN as local 
storage of my qubes (4.0) back-ups. How do I get Qubes to See the NAS drive?


On Monday, January 17, 2022 at 3:45:44 PM UTC-6 awokd wrote:

William Fisher:
 > I'd like to add a network drive (Buffalo NAS)to my Qubes 4.0
system to back
 > up my Qubes. Is it possible?
 >
Yes. Attach it to a VM with qvm-block, then run the Qubes Backup
utility. More detail in here under Creating a backup:
https://www.qubes-os.org/doc/how-to-back-up-restore-and-migrate/
 .

-- 
- don't top post

Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots


Hi William,

Dom0 has no network connection, so it isn't possible to connect
network storage to it.

When the Qubes backup process is run, it asks which VM should the
backup be sent to.

I have a VM called Backup in which I mount a shared folder from
my NAS device.  The backup process works fine using this.  And I
know that restores from the shared NAS folder work OK too, because
I test that occasionally.

Good luck,

   Mike.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/61327420-179c-7017-c2d2-fe44f75e942d%40keehan.net.

Re: [qubes-users] Add network drive to Dom0

2022-01-18 Thread William Fisher 
I stil can't figure out how to mount the NAS on my local LAN as local 
storage of my qubes (4.0) back-ups. How do I get Qubes to See the NAS drive?

On Monday, January 17, 2022 at 3:45:44 PM UTC-6 awokd wrote:

> William Fisher:
> > I'd like to add a network drive (Buffalo NAS)to my Qubes 4.0 system to 
> back
> > up my Qubes. Is it possible?
> > 
> Yes. Attach it to a VM with qvm-block, then run the Qubes Backup 
> utility. More detail in here under Creating a backup: 
> https://www.qubes-os.org/doc/how-to-back-up-restore-and-migrate/ .
>
> -- 
> - don't top post
> Mailing list etiquette:
> - trim quoted reply to only relevant portions
> - when possible, copy and paste text instead of screenshots
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/23592841-5ae8-4dcc-87c4-fe5b15b25107n%40googlegroups.com.

Re: [qubes-users] Why is dom0 so long behind in versions?

2022-01-18 Thread 'Rune Philosof' via qubes-users 
On Tue, Jan 18, 2022 at 1:24 PM 'awokd' via qubes-users <
qubes-users@googlegroups.com> wrote:

> 'Rune Philosof' via qubes-users:
> > Why not use fedora 35 for dom0?
> > Wouldn't it make it easier to maintain, while also getting better
> hardware
> > support?
> >
> https://www.qubes-os.org/faq/#why-is-dom0-so-old
>

Thanks. But that does not answer any of the questions.
It only says why it is not necessary to run a newer one.

-- 

Med venlig hilsen / Best regards

Rune Philosof

Software developer

+45 28 45 64 08

r...@abtion.com




Vesterbrogade 15, 3

1620 København V

Sverigesgade 18

5000 Odense C

abtion.com

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAL8J5gahDwsBLH54Luf_7i%3DvDC-D2fWbz3ez1N9751Q6BS5_Dw%40mail.gmail.com.

Re: [qubes-users] Why is dom0 so long behind in versions?

2022-01-18 Thread 'awokd' via qubes-users 

'Rune Philosof' via qubes-users:

Why not use fedora 35 for dom0?
Wouldn't it make it easier to maintain, while also getting better hardware
support?


https://www.qubes-os.org/faq/#why-is-dom0-so-old

--
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/12435644-19dd-cdfb-de8e-85ae8094d9b9%40danwin1210.de.

[qubes-users] Why is dom0 so long behind in versions?

2022-01-18 Thread 'Rune Philosof' via qubes-users 
Why not use fedora 35 for dom0?
Wouldn't it make it easier to maintain, while also getting better hardware 
support?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ec21c40c-e35d-4004-972f-e3273690e511n%40googlegroups.com.