Re: [qubes-users] debian 8, rc.local not running

2016-06-15 Thread Unman
On Sun, Jun 12, 2016 at 06:20:14PM -0700, Drew White wrote:
> Unman,
> 
> That code is just what I have int hat NetVM.
> As I said, rund fine running from CLI, but not on boot.
> Does not make sense when it works fine on Fedora 20, 21 & 23 (normal and 
> minimal [ if services I use and call are installed ] )
> 
> Yes, I have taken out specific bits of code that I have that do things that 
> set up all things that I have, but they are no of consequence as to why the 
> file isn't executing.
> The details there are just the basics for the external VM, many other 
> options are set in the firewall settings.
> Many others are executed from Dom0 when I boot specific machines.
> 
> The original file is a LOT longer. But that's the basic one for the general 
> NetVM.
> 
> Hope you can help.
> 
Hi Drew

Can you try just running the logging command that I suggested? No other
systemctl, iptables or anything. Just that one command.
Then we can determine if the file is being run or not.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160615215352.GB20001%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian 8, rc.local not running

2016-06-14 Thread Drew White
Hi Marek,
 

> > 
> > hname=`hostname` 
> > 
> > #service dnsmasq stop 
> > service smbd stop 
>
> Take a look at commented example above and use `systemctl --no-block` 
> (with all its consequences). rc.local itself is started as a systemd 
> service and starting/stopping another service from it may block on some 
> dependencies. You can check if this is the problem by listing processes 
> after VM startup and see if the above smbd stop is waiting for something. 
>
>
No, it's not waiting for anything. Not blocked on any dependancies or 
anything.
If the service is stopped then it doesn't need to stop it and just passes 
through with no issue.

Everything appears to be working fine, except the script isn't executing.

As for the use of "systemctl --no-block".. That doesn't work, it says 
"Unknown operation" for that command.




 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6c7cae71-05da-4d8e-9b2b-657d7d294064%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian 8, rc.local not running

2016-06-12 Thread Drew White
Unman,

That code is just what I have int hat NetVM.
As I said, rund fine running from CLI, but not on boot.
Does not make sense when it works fine on Fedora 20, 21 & 23 (normal and 
minimal [ if services I use and call are installed ] )

Yes, I have taken out specific bits of code that I have that do things that 
set up all things that I have, but they are no of consequence as to why the 
file isn't executing.
The details there are just the basics for the external VM, many other 
options are set in the firewall settings.
Many others are executed from Dom0 when I boot specific machines.

The original file is a LOT longer. But that's the basic one for the general 
NetVM.

Hope you can help.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a37b3cc5-2cad-49c6-9a44-361cf1c370ca%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian 8, rc.local not running

2016-06-12 Thread David Nogueira
Unman,

Sorry my bad, missed that he had written it was executable.

David


On Sunday, June 12, 2016 at 11:34:40 PM UTC+1, Unman wrote:
>
> On Sun, Jun 12, 2016 at 07:05:06AM -0700, David Nogueira wrote: 
> > Hey, 
> > 
> > Actually having the same issue on a fedora23 template AppVM, tried 
> > debugging as suggest by unman but still not luck. 
> > 
> > And then I chmoded +x rc.local and it started working. 
> > 
> > Best, 
> > 
> > David 
> > 
> > On Friday, June 10, 2016 at 10:07:41 PM UTC+1, Unman wrote: 
> > > 
> > > On Fri, Jun 10, 2016 at 02:23:35AM -0700, Andrew David Wong wrote: 
> > > > -BEGIN PGP SIGNED MESSAGE- 
> > > > Hash: SHA512 
> > > > 
> > > > On 2016-06-09 19:31, Drew White wrote: 
> > > > > Hi folks, 
> > > > > 
> > > > > Debian 8... 
> > > > > 
> > > > > On boot, the rc.local file doesn't execute after the system has 
> > > > > booted. 
> > > > > 
> > > > > What could be wrong? 
> > > > > 
> > > > > root@***:/rw/config# ls -al total **M drwxr-xr-x 3 root 
> > > > > root 4.0K Jun 10 12:24 . drwxr-xr-x 9 root root 4.0K Jun  8 12:11 
> > > > > .. -rwxr-xr-x 1 user user 5198 Jun 10 12:20 rc.local 
> > > > > 
> > > > > 
> > > > > it's executable by everyone, readable by everyone, so there should 
> > > > > be no issues, right? 
> > > > > 
> > > > > Hope someone can help please? 
> > > > > 
> > > > > Every time my PC starts, that VM should set up all the ports to be 
> > > > >  forwarded and more. I'm about ready to build an applicaiton to 
> > > > > handle all the ports and all because Qubes doesn't have something 
> > > > > that handles it all in one, they are all separate and distinct, 
> > > > > when they shouldn't really be. 
> > > > > 
> > > > > I have other issues with the Qubes Windows Tools too, but that's 
> > > > > another post, and I have pictures and a way around getting them to 
> > > > > work on large resolutions, like they say there is a bug for. 
> > > > > 
> > > > 
> > > > Just a guess here, but shouldn't it be owned by root:root? That's 
> how 
> > > > it is in my Fedora VMs, anyway... 
> > > > 
> > > > - -- 
> > > > Andrew David Wong (Axon) 
> > > > Community Manager, Qubes OS 
> > > > https://www.qubes-os.org 
> > > > -BEGIN PGP SIGNATURE- 
> > > > 
> > > > iQIcBAEBCgAGBQJXWocYAAoJENtN07w5UDAwxVMP/2251XpbWdzfzYiCxFn1WWiL 
> > > > 7Wj2S0A318kbVO+4V/1AzEdueK2AtDxWv8/2T2ph21HnU8d3TJ4t+NRyUtrhDNYw 
> > > > oUXAovakTlp+S4gY1R18d6C4iXl3t6+LcAGZLgXjHVLbvk+Nc5DNt2gQJ4u5fT/H 
> > > > JX+1ar4Ee8/maHjXKfODOyXiBwq8vepA0zkB7ybSzEKOECIGb4PWyad1/VnmDo0B 
> > > > QURcCc9t46YeLA5Ko+ZyNCxUbRULnXoRFO7RvBW6iogzaH3DN3rEQyhY1fEqjZbN 
> > > > 9S/7EuGHI1BQtHEHmvXMZ++F0OoxaBa9X3Gwf6eFghYGeZAdNwySp+uAufSynwJq 
> > > > tJC9rPVy83PszQR+6/ZZz4CI5RSqzcOr/KN+I3e1CZlvU13B5JrHhboAdXTarXzU 
> > > > UvrPL321Km77ODvlQlgvRci9NeBmAWBhLpk+8ozysRc/8x/AiGRoM87l1/7PSyLu 
> > > > jvBsPYiMx+5N8JQO3uKaZFoO7tCy1O7IWIx45sO9awZcCgG+RTsfTu5FfTW8zpzr 
> > > > 836xCDxVRc2G2NevT/QsTZOA/YXeN2KIHoBLi2+DH9VXggKmilhYt3Gg0/LlBagk 
> > > > 8FzWu5TtaDbxRRehnfGFiwMeIAGsgXf2N+vfEpGzjZ8ZuRY7i1x7UjZZNMKzc8WF 
> > > > +Jh5GvM+nJ1/P4CmhHpm 
> > > > =XDPS 
> > > > -END PGP SIGNATURE- 
> > > > 
> > > Hi Drew 
> > > 
> > > I dont beleieve the user is significant. 
> > > 
> > > Nor do I think it likely that rc.local isnt executing, (althoygh this 
> is 
> > > not impossible.) 
> > > 
> > > To start troubleshooting, try inserting a simple log command at the 
> > > start of the file: 
> > > echo `date` >> /home/user/log 
> > > would do. 
> > > 
> > > See if the log is written on boot. 
> > > If it is, then you need to look at the exact commands you are using. I 
> > > recall at one time specifying full path although I no longer do so. 
> > > 
> > > I use rc.local to set iptables policies etc. and it works flawlessly. 
> > > 
> > > If you still cant get it working, post the file contents. 
> > > 
> > > unman 
> > > 
>
> David, 
>
> if you look at Drew's output you will see that the file is already 
> executable, so this will not be his problem. 
>
> It's clearly stated in the docs that you need to apply chmod +x: 
> Look at https://www.qubes-os.org/doc/config-files/ 
>
> unman 
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ff1a600b-6b01-46a7-9cf7-73847fdd142a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian 8, rc.local not running

2016-06-12 Thread Unman
On Sun, Jun 12, 2016 at 07:05:06AM -0700, David Nogueira wrote:
> Hey,
> 
> Actually having the same issue on a fedora23 template AppVM, tried 
> debugging as suggest by unman but still not luck.
> 
> And then I chmoded +x rc.local and it started working.
> 
> Best,
> 
> David
> 
> On Friday, June 10, 2016 at 10:07:41 PM UTC+1, Unman wrote:
> >
> > On Fri, Jun 10, 2016 at 02:23:35AM -0700, Andrew David Wong wrote: 
> > > -BEGIN PGP SIGNED MESSAGE- 
> > > Hash: SHA512 
> > > 
> > > On 2016-06-09 19:31, Drew White wrote: 
> > > > Hi folks, 
> > > > 
> > > > Debian 8... 
> > > > 
> > > > On boot, the rc.local file doesn't execute after the system has 
> > > > booted. 
> > > > 
> > > > What could be wrong? 
> > > > 
> > > > root@***:/rw/config# ls -al total **M drwxr-xr-x 3 root 
> > > > root 4.0K Jun 10 12:24 . drwxr-xr-x 9 root root 4.0K Jun  8 12:11 
> > > > .. -rwxr-xr-x 1 user user 5198 Jun 10 12:20 rc.local 
> > > > 
> > > > 
> > > > it's executable by everyone, readable by everyone, so there should 
> > > > be no issues, right? 
> > > > 
> > > > Hope someone can help please? 
> > > > 
> > > > Every time my PC starts, that VM should set up all the ports to be 
> > > >  forwarded and more. I'm about ready to build an applicaiton to 
> > > > handle all the ports and all because Qubes doesn't have something 
> > > > that handles it all in one, they are all separate and distinct, 
> > > > when they shouldn't really be. 
> > > > 
> > > > I have other issues with the Qubes Windows Tools too, but that's 
> > > > another post, and I have pictures and a way around getting them to 
> > > > work on large resolutions, like they say there is a bug for. 
> > > > 
> > > 
> > > Just a guess here, but shouldn't it be owned by root:root? That's how 
> > > it is in my Fedora VMs, anyway... 
> > > 
> > > - -- 
> > > Andrew David Wong (Axon) 
> > > Community Manager, Qubes OS 
> > > https://www.qubes-os.org 
> > > -BEGIN PGP SIGNATURE- 
> > > 
> > > iQIcBAEBCgAGBQJXWocYAAoJENtN07w5UDAwxVMP/2251XpbWdzfzYiCxFn1WWiL 
> > > 7Wj2S0A318kbVO+4V/1AzEdueK2AtDxWv8/2T2ph21HnU8d3TJ4t+NRyUtrhDNYw 
> > > oUXAovakTlp+S4gY1R18d6C4iXl3t6+LcAGZLgXjHVLbvk+Nc5DNt2gQJ4u5fT/H 
> > > JX+1ar4Ee8/maHjXKfODOyXiBwq8vepA0zkB7ybSzEKOECIGb4PWyad1/VnmDo0B 
> > > QURcCc9t46YeLA5Ko+ZyNCxUbRULnXoRFO7RvBW6iogzaH3DN3rEQyhY1fEqjZbN 
> > > 9S/7EuGHI1BQtHEHmvXMZ++F0OoxaBa9X3Gwf6eFghYGeZAdNwySp+uAufSynwJq 
> > > tJC9rPVy83PszQR+6/ZZz4CI5RSqzcOr/KN+I3e1CZlvU13B5JrHhboAdXTarXzU 
> > > UvrPL321Km77ODvlQlgvRci9NeBmAWBhLpk+8ozysRc/8x/AiGRoM87l1/7PSyLu 
> > > jvBsPYiMx+5N8JQO3uKaZFoO7tCy1O7IWIx45sO9awZcCgG+RTsfTu5FfTW8zpzr 
> > > 836xCDxVRc2G2NevT/QsTZOA/YXeN2KIHoBLi2+DH9VXggKmilhYt3Gg0/LlBagk 
> > > 8FzWu5TtaDbxRRehnfGFiwMeIAGsgXf2N+vfEpGzjZ8ZuRY7i1x7UjZZNMKzc8WF 
> > > +Jh5GvM+nJ1/P4CmhHpm 
> > > =XDPS 
> > > -END PGP SIGNATURE- 
> > > 
> > Hi Drew 
> >
> > I dont beleieve the user is significant. 
> >
> > Nor do I think it likely that rc.local isnt executing, (althoygh this is 
> > not impossible.) 
> >
> > To start troubleshooting, try inserting a simple log command at the 
> > start of the file: 
> > echo `date` >> /home/user/log 
> > would do. 
> >
> > See if the log is written on boot. 
> > If it is, then you need to look at the exact commands you are using. I 
> > recall at one time specifying full path although I no longer do so. 
> >
> > I use rc.local to set iptables policies etc. and it works flawlessly. 
> >
> > If you still cant get it working, post the file contents. 
> >
> > unman 
> >

David,

if you look at Drew's output you will see that the file is already
executable, so this will not be his problem.

It's clearly stated in the docs that you need to apply chmod +x:
Look at https://www.qubes-os.org/doc/config-files/

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160612223439.GB499%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian 8, rc.local not running

2016-06-12 Thread David Nogueira
Hey,

Actually having the same issue on a fedora23 template AppVM, tried 
debugging as suggest by unman but still not luck.

And then I chmoded +x rc.local and it started working.

Best,

David

On Friday, June 10, 2016 at 10:07:41 PM UTC+1, Unman wrote:
>
> On Fri, Jun 10, 2016 at 02:23:35AM -0700, Andrew David Wong wrote: 
> > -BEGIN PGP SIGNED MESSAGE- 
> > Hash: SHA512 
> > 
> > On 2016-06-09 19:31, Drew White wrote: 
> > > Hi folks, 
> > > 
> > > Debian 8... 
> > > 
> > > On boot, the rc.local file doesn't execute after the system has 
> > > booted. 
> > > 
> > > What could be wrong? 
> > > 
> > > root@***:/rw/config# ls -al total **M drwxr-xr-x 3 root 
> > > root 4.0K Jun 10 12:24 . drwxr-xr-x 9 root root 4.0K Jun  8 12:11 
> > > .. -rwxr-xr-x 1 user user 5198 Jun 10 12:20 rc.local 
> > > 
> > > 
> > > it's executable by everyone, readable by everyone, so there should 
> > > be no issues, right? 
> > > 
> > > Hope someone can help please? 
> > > 
> > > Every time my PC starts, that VM should set up all the ports to be 
> > >  forwarded and more. I'm about ready to build an applicaiton to 
> > > handle all the ports and all because Qubes doesn't have something 
> > > that handles it all in one, they are all separate and distinct, 
> > > when they shouldn't really be. 
> > > 
> > > I have other issues with the Qubes Windows Tools too, but that's 
> > > another post, and I have pictures and a way around getting them to 
> > > work on large resolutions, like they say there is a bug for. 
> > > 
> > 
> > Just a guess here, but shouldn't it be owned by root:root? That's how 
> > it is in my Fedora VMs, anyway... 
> > 
> > - -- 
> > Andrew David Wong (Axon) 
> > Community Manager, Qubes OS 
> > https://www.qubes-os.org 
> > -BEGIN PGP SIGNATURE- 
> > 
> > iQIcBAEBCgAGBQJXWocYAAoJENtN07w5UDAwxVMP/2251XpbWdzfzYiCxFn1WWiL 
> > 7Wj2S0A318kbVO+4V/1AzEdueK2AtDxWv8/2T2ph21HnU8d3TJ4t+NRyUtrhDNYw 
> > oUXAovakTlp+S4gY1R18d6C4iXl3t6+LcAGZLgXjHVLbvk+Nc5DNt2gQJ4u5fT/H 
> > JX+1ar4Ee8/maHjXKfODOyXiBwq8vepA0zkB7ybSzEKOECIGb4PWyad1/VnmDo0B 
> > QURcCc9t46YeLA5Ko+ZyNCxUbRULnXoRFO7RvBW6iogzaH3DN3rEQyhY1fEqjZbN 
> > 9S/7EuGHI1BQtHEHmvXMZ++F0OoxaBa9X3Gwf6eFghYGeZAdNwySp+uAufSynwJq 
> > tJC9rPVy83PszQR+6/ZZz4CI5RSqzcOr/KN+I3e1CZlvU13B5JrHhboAdXTarXzU 
> > UvrPL321Km77ODvlQlgvRci9NeBmAWBhLpk+8ozysRc/8x/AiGRoM87l1/7PSyLu 
> > jvBsPYiMx+5N8JQO3uKaZFoO7tCy1O7IWIx45sO9awZcCgG+RTsfTu5FfTW8zpzr 
> > 836xCDxVRc2G2NevT/QsTZOA/YXeN2KIHoBLi2+DH9VXggKmilhYt3Gg0/LlBagk 
> > 8FzWu5TtaDbxRRehnfGFiwMeIAGsgXf2N+vfEpGzjZ8ZuRY7i1x7UjZZNMKzc8WF 
> > +Jh5GvM+nJ1/P4CmhHpm 
> > =XDPS 
> > -END PGP SIGNATURE- 
> > 
> Hi Drew 
>
> I dont beleieve the user is significant. 
>
> Nor do I think it likely that rc.local isnt executing, (althoygh this is 
> not impossible.) 
>
> To start troubleshooting, try inserting a simple log command at the 
> start of the file: 
> echo `date` >> /home/user/log 
> would do. 
>
> See if the log is written on boot. 
> If it is, then you need to look at the exact commands you are using. I 
> recall at one time specifying full path although I no longer do so. 
>
> I use rc.local to set iptables policies etc. and it works flawlessly. 
>
> If you still cant get it working, post the file contents. 
>
> unman 
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d108f60e-d057-489f-916b-44d092e68c53%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian 8, rc.local not running

2016-06-09 Thread Chris Laprise



On 06/09/2016 10:31 PM, Drew White wrote:

Hi folks,

Debian 8...

On boot, the rc.local file doesn't execute after the system has booted.

What could be wrong?

root@***:/rw/config# ls -al
total **M
drwxr-xr-x 3 root root 4.0K Jun 10 12:24 .
drwxr-xr-x 9 root root 4.0K Jun  8 12:11 ..
-rwxr-xr-x 1 user user 5198 Jun 10 12:20 rc.local


it's executable by everyone, readable by everyone, so there should be 
no issues, right?


Hope someone can help please?

Every time my PC starts, that VM should set up all the ports to be 
forwarded and more.
I'm about ready to build an applicaiton to handle all the ports and 
all because Qubes doesn't have something that
handles it all in one, they are all separate and distinct, when they 
shouldn't really be.


I have other issues with the Qubes Windows Tools too, but that's 
another post, and I have pictures and a way around getting them to 
work on large resolutions, like they say there is a bug for.

--


Did you add the shebang at the beginning of the script?

Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/575A423B.5010807%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.