[qubes-users] Ubuntu templates - Eoan Ermine
I've had occasion to build a eoan template (Ubuntu 19.10). I don't intend to incorporate this in to qubes-builder - I'll wait for the next LTS in 20.04. But if any one wants to give it a go, I've posted the template at https://qubes.3isec.org I've also updated the pre-built bionic templates posted there. Feel free to give them a go. All templates are signed with my Qubes OS Signing key. Be sure to check the signature before copying in to dom0 and installing. As always, I strongly encourage you to build templates for yourself - qubes-builder should be straightforward to use: it allows you to modify templates as you see fit, and gives you an insight in to Qubes "under the hood". But if you are short of time, these templates may help. cheers unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200123141603.GA11899%40thirdeyesecurity.org.
Re: [qubes-users] Ubuntu templates
On 20181230 at 16:34 + unman wrote: > > Not starting redoing everything to the point where the build > > process stopped would be a good first step. > > Yes, it's very aggravating. I would work around this by commenting > out the packages that *have* been built, so the build can start again > from where it failed. I (having started using Unix with 4.2BSD on a VAX where things tended to take really long) wrote a csh script around make doing every single component one-by-one and checking the exit state of the make jobs I'm starting. Looks ridiculous but works unattended. > I'm not surehow this could be done otherwise By formulating further dependencies that check whether the goals are already existing. If something that has been done flawlessly is remade the thing has been missing in the dependencies. Another good indicator that something is wrong with the makefile is getting into a mess if using -j is causing any kind of race condition or premature target being done. And no, "make -j4 qubes-vm" does not work which means that rules fire before all prerequisites have been done. > download. Maybe a "download all required additional data" makeMaybe a > "download all required additional data" maktarget > > > > would be a good idea, too. Or did I miss that? > > There's make get-sources, of course, but I dont think that is what > you mean. No, rather a target get-packages that will download all .deb/.rpm/.whatever that will later be used to create the root environments for VM templates. This step is coming REALLY late (after building all qubes-packages) and I definitely do not see any reason to rebuild all the qubes-* components because a package download fails. Wrong order. > I strongly recommend a caching proxy. apt-cacher-ng works pretty much > out the box. If you downloaded it once it stays in qubes-builder. (Which is another target that is missing -- old packages are kept in there if later builds are getting more recent versions.) So unless you are using a tool with high tolerance to interrupted downloads this will not help that much. And places with unstable network connections are easy to find. Btw: If I understood the license clauses of Ubuntu correctly you can do with it whatever you want as long as you do not call it (genuine or derived) (U)buntu. So if you provide a minimal template with sufficiently free space (and calling it Pronto instead of Ubuntu) that pulls down the "trade dress and feel" on a first run should be well within the limits. Maybe that's a way to do it. Although I would consider having supported Arch and a CentOS template much more important. Debian is a glacier and Fedora... I'd better not start thinking about that. But it will take considerable resources to keep all necessary components working. Achim -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/09b9a55ffa2e817c32a91e1c1e8da9112d49561d.camel%40noses.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On Sun, Dec 30, 2018 at 04:35:07PM +0100, Achim Patzner wrote: > On 20181227 at 10:58 + unman wrote: > > There's an open issue relating to making build more fault tolerant, but > > since I never see that problem, it's not a priority. > > Not starting redoing everything to the point where the build process > stopped would be a good first step. Yes, it's very aggravating. I would work around this by commenting out the packages that *have* been built, so the build can start again from where it failed. I'm not surehow this oculd be done otherwise, except having a build target (start-from) which skipped pachkage in the build list before that one. > > > (I use > > apt-cacher-ng as a caching proxy which might help. Certainly does on the > > template updating.) > > Probably. Sitting in jakarta and trying to do a make qubes-vm followed > by make template was tiring with every second package failing to > download. Maybe a "download all required additional data" make target > would be a good idea, too. Or did I miss that? There's make get-sources, of course, but I dont think that is what you mean. I strongly recommend a caching proxy. apt-cacher-ng works pretty much out the box. The only change required is to make it listen on port 8082 and some minor config for Fedora. Also, since the move to https , you have to make some changes to keep caching. The simplest way is to use http://HTTPS/// in the sources.list and then the proxy will will be able to cache packages but will still fetch them under https. > > > On your second point did you read > > https://qubes.3isec.org? I've been > > running those for about two years. > > Sadly not but I will take a look at it now; I gave up using other > people's templates when the Arch template was running out of updates... > And to be honest: Using the Builder environment is a good exercise. > Agreed. > > Achim -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181230163452.d7noiwmyssaxenru%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On 20181227 at 10:58 + unman wrote: > There's an open issue relating to making build more fault tolerant, but > since I never see that problem, it's not a priority. Not starting redoing everything to the point where the build process stopped would be a good first step. > (I use > apt-cacher-ng as a caching proxy which might help. Certainly does on the > template updating.) Probably. Sitting in jakarta and trying to do a make qubes-vm followed by make template was tiring with every second package failing to download. Maybe a "download all required additional data" make target would be a good idea, too. Or did I miss that? > On your second point did you read > https://qubes.3isec.org? I've been > running those for about two years. Sadly not but I will take a look at it now; I gave up using other people's templates when the Arch template was running out of updates... And to be honest: Using the Builder environment is a good exercise. Achim -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b7255ae890dcbce5e18f7de9d4d3f66574ebf5fd.camel%40noses.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On Wed, Dec 26, 2018 at 09:35:13PM +0100, Achim Patzner wrote: > On 20181226 at 10:39 + unman wrote: > > For any one who wants to try out Xenial or Bionic, I've put some > > updated templates for 4.0 online, including a bionic+desktop version. > > Building the templates if the stars are aligned just right and nothing > in the build process breaks is not that big of a problem (although > someone might take a look at the builder script and the makefiles to > make them a bit more fault tolerant (e. g. in case the downloading of > additional packages fails)) if the process is not done in steps by the > user. The more interesting problem would be keeping the included qubes- > specific packages updated and offering the necessary server > infrastructure to deliver updates (providing the servers would be a > minor problem...). Do you feel up to doing that for the foreseeable > future? > > > Achim > There's an open issue relating to making build more fault tolerant, but since I never see that problem, it's not a priority. (I use apt-cacher-ng as a caching proxy which might help. Certainly does on the template updating.) On your second point did you read https://qubes.3isec.org ? I've been running those for about two years. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181227105802.qenucsl5yvgjcdsf%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On 20181226 at 10:39 + unman wrote: > For any one who wants to try out Xenial or Bionic, I've put some > updated templates for 4.0 online, including a bionic+desktop version. Building the templates if the stars are aligned just right and nothing in the build process breaks is not that big of a problem (although someone might take a look at the builder script and the makefiles to make them a bit more fault tolerant (e. g. in case the downloading of additional packages fails)) if the process is not done in steps by the user. The more interesting problem would be keeping the included qubes- specific packages updated and offering the necessary server infrastructure to deliver updates (providing the servers would be a minor problem...). Do you feel up to doing that for the foreseeable future? Achim -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/dcc49700440c3be3ccf827afc5e059037ca8c2b5.camel%40noses.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Ubuntu templates
For any one who wants to try out Xenial or Bionic, I've put some updated templates for 4.0 online, including a bionic+desktop version. They are pretty vanilla, except I have stopped the automatic search for updates. The templates are signed with my key. If you use Ubuntu in Qubes I provide package repositories at https://qubes.3isec.org for convenience. Full details on that page. As you may know Qubes doesn't provide official pre-built Templates for Ubuntu, because of licensing concerns - details at www.qubes-os.org/doc/templates/ubuntu To use my templates or packages, you will, of course, have to trust me (and my key). If you're not happy doing this, then build the templates and packages yourself using Qubes Builder. It is simple to build templates using Qubes Builder, but some people find it daunting, or don't have time. If you want to do it, follow the instructions for building but select "builder-debian" plugin and the Ubuntu distribution you want. If you need help just ask. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181226103952.gmpyesf2lafeyye3%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
> On 26. Oct 2018, at 13:21, unman unman-at-thirdeyesecurity.org > |qubes-mailing-list/Example Allow| wrote: > >> On Thu, Oct 25, 2018 at 02:58:51PM +0100, unman wrote: >>> On Thu, Oct 25, 2018 at 02:03:02PM +0200, Frank Schäckermann wrote: >>> Hi unman! >>> >>> I am trying to build the bionic template for Qubes 3.2 and the “make >>> qubes-vm” works fine after adding the “Build-Depends: dephelper” to the >>> control file of meta-packages. >>> >>> But the “make template” fails with >>> >>> E: Couldn’t find these debs: apt-transport-https >>> make[1]: *** [Makefile:63: rootimg-build] Error 1 >>> >>> Any idea what is going wrong here? >>> >>> Regards, Frank >>> On 8. Oct 2018, at 16:28, unman unman-at-thirdeyesecurity.org |qubes-mailing-list/Example Allow| wrote: It's now straight forward to build templates for bionic as well as xenial, using qubes-builder. If you want to try them out before building, I've uploaded freshly built templates for 4.0, including a fairly hefty xenial-desktop template. You can find details at https://qubes.3isec.org Updated packages are available from the repositories there, if you already have a working template. unman >> >> Hi Frank >> >> That package is in bionic repositories for sure. >> I'll run a 3.2 and see if I encounter any problems, and get back to you. >> >> unman > > I see the problem. > The package isnt in main but in universal. > Adding universal to the debootstrap options isnt enough because then the > install fails because the Qubes package repos put all files in main. > I'll work up a fix and put in a PR. > I'll post back here too with the details to save you time. > > unman > Great! Thanks! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/645271CB-7085-457B-9833-02670937AFCC%40schaeckermann.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On Thu, Oct 25, 2018 at 02:58:51PM +0100, unman wrote: > On Thu, Oct 25, 2018 at 02:03:02PM +0200, Frank Schäckermann wrote: > > Hi unman! > > > > I am trying to build the bionic template for Qubes 3.2 and the “make > > qubes-vm” works fine after adding the “Build-Depends: dephelper” to the > > control file of meta-packages. > > > > But the “make template” fails with > > > > E: Couldn’t find these debs: apt-transport-https > > make[1]: *** [Makefile:63: rootimg-build] Error 1 > > > > Any idea what is going wrong here? > > > > Regards, Frank > > > > > On 8. Oct 2018, at 16:28, unman unman-at-thirdeyesecurity.org > > > |qubes-mailing-list/Example Allow| wrote: > > > > > > It's now straight forward to build templates for bionic as well as xenial, > > > using qubes-builder. > > > > > > If you want to try them out before building, I've uploaded freshly built > > > templates for 4.0, including a fairly hefty xenial-desktop template. > > > You can find details at https://qubes.3isec.org > > > > > > Updated packages are available from the repositories there, if you > > > already have a working template. > > > > > > unman > > Hi Frank > > That package is in bionic repositories for sure. > I'll run a 3.2 and see if I encounter any problems, and get back to you. > > unman I see the problem. The package isnt in main but in universal. Adding universal to the debootstrap options isnt enough because then the install fails because the Qubes package repos put all files in main. I'll work up a fix and put in a PR. I'll post back here too with the details to save you time. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181026112137.gksyhdtqg3j2djyi%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On Thu, Oct 25, 2018 at 02:03:02PM +0200, Frank Schäckermann wrote: > Hi unman! > > I am trying to build the bionic template for Qubes 3.2 and the “make > qubes-vm” works fine after adding the “Build-Depends: dephelper” to the > control file of meta-packages. > > But the “make template” fails with > > E: Couldn’t find these debs: apt-transport-https > make[1]: *** [Makefile:63: rootimg-build] Error 1 > > Any idea what is going wrong here? > > Regards, Frank > > > On 8. Oct 2018, at 16:28, unman unman-at-thirdeyesecurity.org > > |qubes-mailing-list/Example Allow| wrote: > > > > It's now straight forward to build templates for bionic as well as xenial, > > using qubes-builder. > > > > If you want to try them out before building, I've uploaded freshly built > > templates for 4.0, including a fairly hefty xenial-desktop template. > > You can find details at https://qubes.3isec.org > > > > Updated packages are available from the repositories there, if you > > already have a working template. > > > > unman Hi Frank That package is in bionic repositories for sure. I'll run a 3.2 and see if I encounter any problems, and get back to you. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181025135851.mzdvxfprzdeajjp6%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
Hi unman! I am trying to build the bionic template for Qubes 3.2 and the “make qubes-vm” works fine after adding the “Build-Depends: dephelper” to the control file of meta-packages. But the “make template” fails with E: Couldn’t find these debs: apt-transport-https make[1]: *** [Makefile:63: rootimg-build] Error 1 Any idea what is going wrong here? Regards, Frank > On 8. Oct 2018, at 16:28, unman unman-at-thirdeyesecurity.org > |qubes-mailing-list/Example Allow| wrote: > > It's now straight forward to build templates for bionic as well as xenial, > using qubes-builder. > > If you want to try them out before building, I've uploaded freshly built > templates for 4.0, including a fairly hefty xenial-desktop template. > You can find details at https://qubes.3isec.org > > Updated packages are available from the repositories there, if you > already have a working template. > > unman > > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-users+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-users@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-users/20181008142823.si4a2aw7i5fhifch%40thirdeyesecurity.org. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/A135AB66-5025-43C9-9F08-54F82D7DE689%40schaeckermann.net. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Ubuntu templates
It's now straight forward to build templates for bionic as well as xenial, using qubes-builder. If you want to try them out before building, I've uploaded freshly built templates for 4.0, including a fairly hefty xenial-desktop template. You can find details at https://qubes.3isec.org Updated packages are available from the repositories there, if you already have a working template. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181008142823.si4a2aw7i5fhifch%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Ubuntu templates and packages
I've put in some PRs to allow build of a bionic template in qubes-builder. This is still the recommended way of getting your Ubuntu templates. If you want to build it yourself, then the changes required are minimal, as you'll see on github. If you cant wait, I've posted a bionic template for 4.0, together with updated Xenial for 3.2 and 4.0, at http://qubes.3isec.org/ I've also posted updated packages for 3.2 and 4.0 to the repository there. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20180817130101.5fhqkp33jm3lbwlk%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On 08/03/2018 04:56 PM, Chris Willard wrote: > On 03/08/18 15:31, Unman wrote: >> Works for me. >> Fri 3 Aug 15:30:28 BST 2018 >> Can you try again? >> > Works for me too. Yep, seems to work fine for me now as well. -- noor -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/58821db7-5cb1-6830-ed28-15cff9e19bc0%40fripost.org. For more options, visit https://groups.google.com/d/optout. signature.asc Description: OpenPGP digital signature
Re: [qubes-users] Ubuntu templates
Hello All, On 03/08/18 15:31, Unman wrote: On Fri, Aug 03, 2018 at 03:47:45PM +0200, Noor Christensen wrote: On 08/03/2018 01:20 PM, Unman wrote: http://qubes.3isec.org/Templates. The URL gives 404 Not Found at the moment (2018-08-03 15:47). -- noor Works for me. Fri 3 Aug 15:30:28 BST 2018 Can you try again? Works for me too. Regards, Chris -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/MTAwMDAxMi5hbmF0b21pYw.1533308172%40quikprotect. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On Fri, Aug 03, 2018 at 03:47:45PM +0200, Noor Christensen wrote: > On 08/03/2018 01:20 PM, Unman wrote: > > http://qubes.3isec.org/Templates. > > The URL gives 404 Not Found at the moment (2018-08-03 15:47). > > -- noor > Works for me. Fri 3 Aug 15:30:28 BST 2018 Can you try again? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20180803143142.riipfsv2s5azbciu%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Ubuntu templates
On 08/03/2018 01:20 PM, Unman wrote: > http://qubes.3isec.org/Templates. The URL gives 404 Not Found at the moment (2018-08-03 15:47). -- noor -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/6f9d3454-f7fa-c899-bc46-e5d002fced42%40fripost.org. For more options, visit https://groups.google.com/d/optout. signature.asc Description: OpenPGP digital signature
[qubes-users] Ubuntu templates
I've posted some PRs to resolve the issues with building Ubuntu templates. If you can't wait for them to be merged, and want to try Ubuntu I've posted some minimal templates here: http://qubes.3isec.org/Templates. The templates are signed with my Qubes signing key. You can get this from keyservers. I certify it is mine at https://github.com/unman/unman I'll be putting in PRs to enable bionic builds in next day or so. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20180803112031.s3aafhac7r3a5kvr%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Ubuntu templates
I'm just pushing up some PRs to remove zesty and institute build support for artful (17.10). If you cant wait there's a ready built 3.2 template you can try at: http://qubes.3isec.org/Templates unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20180131235625.qwihevz3g3nm7y75%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
