Re: [qubes-users] Re: Installing software.. deb-9 lists qubes-r4.list
On Wed, Apr 17, 2019 at 01:16:57AM +, john s. wrote: > On 3/23/19 6:31 PM, Jon deps wrote: > > On 3/19/19 4:59 PM, Steven Walker wrote: > > > I am still pretty new to Qubes. I have managed to create a new qube, > > > but I want to install some software for use with this qube. I have > > > read that it has to be installed to the template and not the actual > > > qube. As the template has no actual network connection, how do I go > > > about this? > > > > > > Using 4.0.1, Fedora 29 > > > > > > Any help greatly appeciated. > > > > > > Steve > > > > > > > pretty sure, there are different ways to skin the cat, though > > > > > > the Templates are designed to obtain access indirectly, that is what the > > "salt" stuff is they talk about it seems by default to be setup to > > use sys-whonix-14 to install updates , somewhat magically > > > > you can actually change the netvm without shutting down the templates > > > > generally it's bad form to give the templates direct access, though > > may you might want to once in while in order to troubleshoot something > > , etc .testing it the morning , you should be able to install non > > updates without Direct access > > > > > > > > for me Templates aren't worth backing up , I'm not worried about my > > system melting down much . and anyway its going to be best to > > fresh install , which is easy-ist in Qubes, which is one of the > > beauties of the technology > > > > hence, I clone for other reasons > > > > one word of advice is keep a paper list of custom packages you > > install so when it goes to Fedora-30 you install fresh and then add > > back fresh packages , your files will persist, > > > > > > my problem what few files I have end up spread out over 10 App Qubes > > > > > > > > If I do this : > > echo "deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main" | > sudo tee -a /etc/apt/sources.list.d/signal-xenial.list > deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main > > > > > then I do NOT need to add anything to /etc/apt/sources.list.d/qubes-r4.list > ?? > > nor > > /etc/apt/sources.list ?? > > > for Debian-9 stretch ? > > > ty > > That's right. 'man sources.list' gives you chapter and verse. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190417012442.xborbtdc5w7xctsn%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installing software.. deb-9 lists qubes-r4.list
On 3/23/19 6:31 PM, Jon deps wrote: On 3/19/19 4:59 PM, Steven Walker wrote: I am still pretty new to Qubes. I have managed to create a new qube, but I want to install some software for use with this qube. I have read that it has to be installed to the template and not the actual qube. As the template has no actual network connection, how do I go about this? Using 4.0.1, Fedora 29 Any help greatly appeciated. Steve pretty sure, there are different ways to skin the cat, though the Templates are designed to obtain access indirectly, that is what the "salt" stuff is they talk about it seems by default to be setup to use sys-whonix-14 to install updates , somewhat magically you can actually change the netvm without shutting down the templates generally it's bad form to give the templates direct access, though may you might want to once in while in order to troubleshoot something , etc .testing it the morning , you should be able to install non updates without Direct access for me Templates aren't worth backing up , I'm not worried about my system melting down much . and anyway its going to be best to fresh install , which is easy-ist in Qubes, which is one of the beauties of the technology hence, I clone for other reasons one word of advice is keep a paper list of custom packages you install so when it goes to Fedora-30 you install fresh and then add back fresh packages , your files will persist, my problem what few files I have end up spread out over 10 App Qubes If I do this : echo "deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main" | sudo tee -a /etc/apt/sources.list.d/signal-xenial.list deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main then I do NOT need to add anything to /etc/apt/sources.list.d/qubes-r4.list ?? nor /etc/apt/sources.list ?? for Debian-9 stretch ? ty -- A895 0C7C A244 8E2E FD77 A3DB 180B 7D4D D158 F8B6 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7c1cf21a-9580-88ce-ec92-49310b99efaa%40riseup.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Installing software..
22...@tutamail.com wrote on 3/23/19 11:22 PM: What would be the commands to install lets say: LibraOffice into a Debian template? I have used Protonmail bridge on whonix and debian and have only been able to get it to install by giving full access temporarily to the template... Libreoffice is in Debian's repos so all you'd need to run in the template is: sudo apt install libreoffice You might be thinking of software that's not available from Debian repos. For those, it's usually best to see if there's something else that will work and available. If not, it's better to download the package in a qube already internet connected, then qvm-copy it to the template. That way you can avoid touching the Internet from your template. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3cc1eb8b-9ed3-af09-0b59-963005e116c9%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installing software..
On 3/24/19 2:27 AM, unman wrote: On Sat, Mar 23, 2019 at 06:31:07PM +, Jon deps wrote: On 3/19/19 4:59 PM, Steven Walker wrote: I am still pretty new to Qubes. I have managed to create a new qube, but I want to install some software for use with this qube. I have read that it has to be installed to the template and not the actual qube. As the template has no actual network connection, how do I go about this? Using 4.0.1, Fedora 29 Any help greatly appeciated. Steve pretty sure, there are different ways to skin the cat, though the Templates are designed to obtain access indirectly, that is what the "salt" stuff is they talk about it seems by default to be setup to use sys-whonix-14 to install updates , somewhat magically you can actually change the netvm without shutting down the templates generally it's bad form to give the templates direct access, though may you might want to once in while in order to troubleshoot something , etc .testing it the morning , you should be able to install non updates without Direct access for me Templates aren't worth backing up , I'm not worried about my system melting down much . and anyway its going to be best to fresh install , which is easy-ist in Qubes, which is one of the beauties of the technology hence, I clone for other reasons one word of advice is keep a paper list of custom packages you install so when it goes to Fedora-30 you install fresh and then add back fresh packages , your files will persist, my problem what few files I have end up spread out over 10 App Qubes It's only if you selected the "update over Whonix" option on install that you get updating using sys-whonix qube. It's not the default. Salt doesnt have anything to do with the "indirect" access - the access is using qubes-rpc to the UpdateProxy - the proxy to use is set in /etc/qubes-rpc/policy/qubes.UpdateProxy. You can change the proxy to use by editing that file. You *can* use salt to install software in to the templates. If you do this then you need only maintain the salt formula and you can easily recreate a template, without having to keep a paper list. That's an ideal way of using salt to configure your systems. I think I'm stuck at mere mortal qube user level forever :) https://groups.google.com/forum/#!topic/qubes-users/F_TB7Zzseeo PS: for some reason I am able to $sudo dnf install foosoftware in Fedora-29 though I have no "direct" netvm for the Template , though I recall in the pastallowing netvm access for packages I wanted to install, or maybe when I was trying to install a VPN to the template, gave up and installed it in the AppVM I guess There is a 3rd trick to discern whats custom installed IIRC , though maybe it was more for Debian than Fedora if one searches the usergroup fwiww -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/050cc6d6-c3bb-cb7b-f381-2ff445ebf14d%40riseup.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Installing software..
On Sat, Mar 23, 2019 at 06:31:07PM +, Jon deps wrote: > On 3/19/19 4:59 PM, Steven Walker wrote: > > I am still pretty new to Qubes. I have managed to create a new qube, but I > > want to install some software for use with this qube. I have read that it > > has to be installed to the template and not the actual qube. As the > > template has no actual network connection, how do I go about this? > > > > Using 4.0.1, Fedora 29 > > > > Any help greatly appeciated. > > > > Steve > > > > pretty sure, there are different ways to skin the cat, though > > > the Templates are designed to obtain access indirectly, that is what the > "salt" stuff is they talk about it seems by default to be setup to use > sys-whonix-14 to install updates , somewhat magically > > you can actually change the netvm without shutting down the templates > > generally it's bad form to give the templates direct access, though may > you might want to once in while in order to troubleshoot something , etc > .testing it the morning , you should be able to install non updates > without Direct access > > > > for me Templates aren't worth backing up , I'm not worried about my > system melting down much . and anyway its going to be best to fresh > install , which is easy-ist in Qubes, which is one of the beauties of the > technology > > hence, I clone for other reasons > > one word of advice is keep a paper list of custom packages you install > so when it goes to Fedora-30 you install fresh and then add back fresh > packages , your files will persist, > > > my problem what few files I have end up spread out over 10 App Qubes > It's only if you selected the "update over Whonix" option on install that you get updating using sys-whonix qube. It's not the default. Salt doesnt have anything to do with the "indirect" access - the access is using qubes-rpc to the UpdateProxy - the proxy to use is set in /etc/qubes-rpc/policy/qubes.UpdateProxy. You can change the proxy to use by editing that file. You *can* use salt to install software in to the templates. If you do this then you need only maintain the salt formula and you can easily recreate a template, without having to keep a paper list. That's an ideal way of using salt to configure your systems. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190324022714.q3dwlyogduwbsohn%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installing software..
PS...thanks for the correcting me! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4efaf472-68d8-44b2-bec1-ed54b948c86a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installing software..
On 3/19/19 4:59 PM, Steven Walker wrote: I am still pretty new to Qubes. I have managed to create a new qube, but I want to install some software for use with this qube. I have read that it has to be installed to the template and not the actual qube. As the template has no actual network connection, how do I go about this? Using 4.0.1, Fedora 29 Any help greatly appeciated. Steve pretty sure, there are different ways to skin the cat, though the Templates are designed to obtain access indirectly, that is what the "salt" stuff is they talk about it seems by default to be setup to use sys-whonix-14 to install updates , somewhat magically you can actually change the netvm without shutting down the templates generally it's bad form to give the templates direct access, though may you might want to once in while in order to troubleshoot something , etc .testing it the morning , you should be able to install non updates without Direct access for me Templates aren't worth backing up , I'm not worried about my system melting down much . and anyway its going to be best to fresh install , which is easy-ist in Qubes, which is one of the beauties of the technology hence, I clone for other reasons one word of advice is keep a paper list of custom packages you install so when it goes to Fedora-30 you install fresh and then add back fresh packages , your files will persist, my problem what few files I have end up spread out over 10 App Qubes -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/49bdea1a-d524-7089-ded3-2440f9fe884e%40riseup.net. For more options, visit https://groups.google.com/d/optout.
