Re: [qubes-users] firefox plugins on disp templates?

2018-10-20 Thread Ivan Mitev




On 10/20/18 1:54 PM, unman wrote:

On Sat, Oct 20, 2018 at 07:07:25AM +0300, Ivan Mitev wrote:



On 10/19/18 10:05 PM, Stumpy wrote:

I realize this is marginally relevant but thought that I am likely not
the only/first one to think about this so Id reach out to see if anyone
else has solved it.

I LOVE the disp feature and use it fairly often for random browsing,
but, I miss a few addons. I managed to add them to my template (which I
am think might be bad op/sec juju) but even then, when a new addon comes
out the browser updates so I have to update the addon manually in the
template which is a PITA that is quickly becoming not worth it.


Yeah, that's the downside of dispVMs.

My workflow for updating my profile is:

1- every now and then I start a dedicated appVM where my "master" firefox
profile/folder lives, in order to update addons, tweak prefs, ...

2- I then copy the folder to the dispVM's *dvm* template (not the dvm
template's template). I assume you're on R4.0 - IIRC for R3.2 you'd have to
update the template itself.

It seems to be pretty much what you did though. It doesn't take too much
time but then I update my profile every month or so - maybe your addons
require more frequent updates.

You could try to automatize the process with a script in dom0 that would
start the VMs, `qvm-run` commands, copy files, ...

Another way would be to skip updating the dvm template (step 2 above) and
instead copy the updated profile to one of your VMs that is always started
(or to dom0, provided you don't open/read any of these files). You could
then write a qubes extension [1] that automatically sync the dispVM profile
with the "master" one when a dispVM starts.

[1] https://groups.google.com/d/msg/qubes-users/JtLBUB-YfM0/y2izgbZDBAAJ



What's the advantage of doing this, as opposed to using the appVM in 1
itself as template for the disposableVMs?


Because I'm certain that the only thing I'm copying is the .mozilla 
folder. Now, if I start the dvm template itself it's difficult to know 
if something else has changed when things are being updated.
Also, the dedicated appVM can be firewalled to allow only mozilla/addons 
sites. You could do the same with the dvm template but that would 
involve tweaking the firewall each time you update the VM and revert it 
to its original settings afterwards.


If the points above are not a concern, using the appVM template is 
indeed more straightforward.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2e71b0d1-152c-b34c-c7aa-8f29eaaa5b52%40maa.bz.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] firefox plugins on disp templates?

2018-10-20 Thread unman
On Sat, Oct 20, 2018 at 07:07:25AM +0300, Ivan Mitev wrote:
> 
> 
> On 10/19/18 10:05 PM, Stumpy wrote:
> > I realize this is marginally relevant but thought that I am likely not
> > the only/first one to think about this so Id reach out to see if anyone
> > else has solved it.
> > 
> > I LOVE the disp feature and use it fairly often for random browsing,
> > but, I miss a few addons. I managed to add them to my template (which I
> > am think might be bad op/sec juju) but even then, when a new addon comes
> > out the browser updates so I have to update the addon manually in the
> > template which is a PITA that is quickly becoming not worth it.
> 
> Yeah, that's the downside of dispVMs.
> 
> My workflow for updating my profile is:
> 
> 1- every now and then I start a dedicated appVM where my "master" firefox
> profile/folder lives, in order to update addons, tweak prefs, ...
> 
> 2- I then copy the folder to the dispVM's *dvm* template (not the dvm
> template's template). I assume you're on R4.0 - IIRC for R3.2 you'd have to
> update the template itself.
> 
> It seems to be pretty much what you did though. It doesn't take too much
> time but then I update my profile every month or so - maybe your addons
> require more frequent updates.
> 
> You could try to automatize the process with a script in dom0 that would
> start the VMs, `qvm-run` commands, copy files, ...
> 
> Another way would be to skip updating the dvm template (step 2 above) and
> instead copy the updated profile to one of your VMs that is always started
> (or to dom0, provided you don't open/read any of these files). You could
> then write a qubes extension [1] that automatically sync the dispVM profile
> with the "master" one when a dispVM starts.
> 
> [1] https://groups.google.com/d/msg/qubes-users/JtLBUB-YfM0/y2izgbZDBAAJ
> 

What's the advantage of doing this, as opposed to using the appVM in 1
itself as template for the disposableVMs? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181020105403.wc2d3f3c7uh2cqyc%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] firefox plugins on disp templates?

2018-10-19 Thread Ivan Mitev




On 10/19/18 10:05 PM, Stumpy wrote:
I realize this is marginally relevant but thought that I am likely not 
the only/first one to think about this so Id reach out to see if anyone 
else has solved it.


I LOVE the disp feature and use it fairly often for random browsing, 
but, I miss a few addons. I managed to add them to my template (which I 
am think might be bad op/sec juju) but even then, when a new addon comes 
out the browser updates so I have to update the addon manually in the 
template which is a PITA that is quickly becoming not worth it.


Yeah, that's the downside of dispVMs.

My workflow for updating my profile is:

1- every now and then I start a dedicated appVM where my "master" 
firefox profile/folder lives, in order to update addons, tweak prefs, ...


2- I then copy the folder to the dispVM's *dvm* template (not the dvm 
template's template). I assume you're on R4.0 - IIRC for R3.2 you'd have 
to update the template itself.


It seems to be pretty much what you did though. It doesn't take too much 
time but then I update my profile every month or so - maybe your addons 
require more frequent updates.


You could try to automatize the process with a script in dom0 that would 
start the VMs, `qvm-run` commands, copy files, ...


Another way would be to skip updating the dvm template (step 2 above) 
and instead copy the updated profile to one of your VMs that is always 
started (or to dom0, provided you don't open/read any of these files). 
You could then write a qubes extension [1] that automatically sync the 
dispVM profile with the "master" one when a dispVM starts.


[1] https://groups.google.com/d/msg/qubes-users/JtLBUB-YfM0/y2izgbZDBAAJ

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/96b170d7-74eb-8960-a286-60b00490cafe%40maa.bz.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] firefox plugins on disp templates?

2018-10-19 Thread qubenix
Stumpy:
> I realize this is marginally relevant but thought that I am likely not
> the only/first one to think about this so Id reach out to see if anyone
> else has solved it.
> 
> I LOVE the disp feature and use it fairly often for random browsing,
> but, I miss a few addons. I managed to add them to my template (which I
> am think might be bad op/sec juju) but even then, when a new addon comes
> out the browser updates so I have to update the addon manually in the
> template which is a PITA that is quickly becoming not worth it.
> 
> So, is there a way to have addons in a browser in a dispappvm and avoid
> this issue?
> 
This should help you: https://www.qubes-os.org/doc/dispvm-customization/.

-- 
qubenix
PGP: 96096E4CA0870F1C5BAF7DD909D159E1241F9C54
OTR: qube...@chat.freenode.net
OTR: DFD1DA35 D74E775B 3E3DADB1 226282EE FB711765

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f1220884-d7fb-afcc-1cb2-e2af935860af%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] firefox plugins on disp templates?

2018-10-19 Thread Stumpy
I realize this is marginally relevant but thought that I am likely not 
the only/first one to think about this so Id reach out to see if anyone 
else has solved it.


I LOVE the disp feature and use it fairly often for random browsing, 
but, I miss a few addons. I managed to add them to my template (which I 
am think might be bad op/sec juju) but even then, when a new addon comes 
out the browser updates so I have to update the addon manually in the 
template which is a PITA that is quickly becoming not worth it.


So, is there a way to have addons in a browser in a dispappvm and avoid 
this issue?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dd5f0640-2389-0648-1e46-2a360edfe16f%40posteo.net.
For more options, visit https://groups.google.com/d/optout.