Re: [qubes-users] Fedora 24 template available for Qubes 3.2
On 2016-11-14 23:57, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Nov 14, 2016 at 11:14:19PM +, Gaijin wrote: systemctl doesn't show anything abnormal systemctl --all shows several not found inactive dead listings ex. livesys.service ntpd.service qubes-core.service qubes-dvm.service qubes-firewall.service qubes-iptables.service qubes-misc-post.service qubes-mount-dirs.service qubes-mount-home.service qubes-netwatcher.service qubes-network.service qubes-qmemman.service qubes-qrexec.service qubes-random-seed.service qubes-sysinit.service qubes-updates-proxy.service sntp.service syslog.service ypbind.service sys-log.service qubes-update-check.service Uhm, it looks like you've uninstalled qubes tools in the process... If you still have qubes repository definition in /etc/yum.repos.d/qubes-r3.repo, you can try to reinstall it: sudo dnf install qubes-core-vm-systemd It should show you what conflicts with this package (if anything). If you don't have repository definition anymore, you'll need to create it first. It should look like this: [qubes-vm-r3.2-current] name = Qubes OS Repository for VM (updates) baseurl = http://yum.qubes-os.org/r3.2/current/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary skip_if_unavailable=False gpgcheck = 1 enabled=1 [qubes-vm-r3.2-current-testing] name = Qubes OS Repository for VM (updates-testing) baseurl = http://yum.qubes-os.org/r3.2/current-testing/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary skip_if_unavailable=False gpgcheck = 1 enabled=0 [qubes-vm-r3.2-security-testing] name = Qubes OS Repository for VM (security-testing) baseurl = http://yum.qubes-os.org/r3.2/security-testing/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary skip_if_unavailable=False gpgcheck = 1 enabled=0 [qubes-vm-r3.2-unstable] name = Qubes OS Repository for VM (unstable) baseurl = http://yum.qubes-os.org/r3.2/unstable/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-unstable gpgcheck = 1 enabled=0 You can save some typing by using only the first section (it is enough for recovery) - save it in some other file there, like /etc/yum.repos.d/qubes-recovery.repo. You'll also need to configure network manually (as you no longer have a script which did that for you) - take a look here (procedure is very similar): https://www.qubes-os.org/doc/upgrade-to-r3.0/#upgrading-template-on-already-upgraded-dom0 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYKk+BAAoJENuP0xzK19cs7fsH/AlhudAV3YMj8xcHlq2qON9h AttdZrrbtO5GA796EP8iLhDpN1b6iV0NMIh2Wbyhxuk6+Wijs6751iJ7F3fKtldA eh9NJrssHVtgcEWMHfKmflerYWWgPUwqHztTA4vNWXxM7b4uyjxphDzSzvQpNblX W5C8QKxNhdqYLmf2n4X9FmX4hG09q4CMVwqfwk2T0T9reyv6Hbqlkj68e0sKL1Ig w4mF/gZqgDHKcHz6YDB0yJzIk0lop7mztBMYA8Dj4WSnGoVtDlPrCepffSCFogOC xfP9s0GnIjP+z7yTqSlPqpvd/PH8OsAH7Pvn1Hb8z+071SXazm0YhA95WgRecqI= =wEUi -END PGP SIGNATURE- Thanks Marek. Your advice got me pointed in the right direction. My Fedora-23 templates with software installed were still using the repository definition for R3.1, so I tried the --allowerase on the distro-sync step, and subsequently removed Qubes. (my bad) Someone may want to add your suggestion to make sure the repository definition is up-to-date to the upgrade documentation. Updating those R3.2 repository definitions in /etc/yum.repos.d/qubes-r3.repo solved my upgrade issue. I had not thought to check there. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/05b07292527c3cf54c163691a0aecf6a%40riseup.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Fedora 24 template available for Qubes 3.2
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Nov 14, 2016 at 11:14:19PM +, Gaijin wrote: > systemctl doesn't show anything abnormal > systemctl --all shows several not found inactive dead listings > ex. > livesys.service > ntpd.service > qubes-core.service > qubes-dvm.service > qubes-firewall.service > qubes-iptables.service > qubes-misc-post.service > qubes-mount-dirs.service > qubes-mount-home.service > qubes-netwatcher.service > qubes-network.service > qubes-qmemman.service > qubes-qrexec.service > qubes-random-seed.service > qubes-sysinit.service > qubes-updates-proxy.service > sntp.service > syslog.service > ypbind.service > sys-log.service > qubes-update-check.service Uhm, it looks like you've uninstalled qubes tools in the process... If you still have qubes repository definition in /etc/yum.repos.d/qubes-r3.repo, you can try to reinstall it: sudo dnf install qubes-core-vm-systemd It should show you what conflicts with this package (if anything). If you don't have repository definition anymore, you'll need to create it first. It should look like this: [qubes-vm-r3.2-current] name = Qubes OS Repository for VM (updates) baseurl = http://yum.qubes-os.org/r3.2/current/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary skip_if_unavailable=False gpgcheck = 1 enabled=1 [qubes-vm-r3.2-current-testing] name = Qubes OS Repository for VM (updates-testing) baseurl = http://yum.qubes-os.org/r3.2/current-testing/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary skip_if_unavailable=False gpgcheck = 1 enabled=0 [qubes-vm-r3.2-security-testing] name = Qubes OS Repository for VM (security-testing) baseurl = http://yum.qubes-os.org/r3.2/security-testing/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary skip_if_unavailable=False gpgcheck = 1 enabled=0 [qubes-vm-r3.2-unstable] name = Qubes OS Repository for VM (unstable) baseurl = http://yum.qubes-os.org/r3.2/unstable/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-unstable gpgcheck = 1 enabled=0 You can save some typing by using only the first section (it is enough for recovery) - save it in some other file there, like /etc/yum.repos.d/qubes-recovery.repo. You'll also need to configure network manually (as you no longer have a script which did that for you) - take a look here (procedure is very similar): https://www.qubes-os.org/doc/upgrade-to-r3.0/#upgrading-template-on-already-upgraded-dom0 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYKk+BAAoJENuP0xzK19cs7fsH/AlhudAV3YMj8xcHlq2qON9h AttdZrrbtO5GA796EP8iLhDpN1b6iV0NMIh2Wbyhxuk6+Wijs6751iJ7F3fKtldA eh9NJrssHVtgcEWMHfKmflerYWWgPUwqHztTA4vNWXxM7b4uyjxphDzSzvQpNblX W5C8QKxNhdqYLmf2n4X9FmX4hG09q4CMVwqfwk2T0T9reyv6Hbqlkj68e0sKL1Ig w4mF/gZqgDHKcHz6YDB0yJzIk0lop7mztBMYA8Dj4WSnGoVtDlPrCepffSCFogOC xfP9s0GnIjP+z7yTqSlPqpvd/PH8OsAH7Pvn1Hb8z+071SXazm0YhA95WgRecqI= =wEUi -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20161114235753.GR2994%40mail-itl. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Fedora 24 template available for Qubes 3.2
On 2016-11-14 06:42, Gaijin wrote: On 2016-11-13 23:33, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Nov 13, 2016 at 11:12:34PM +, Gaijin wrote: I have several templates based on Fedora 23 where I've installed various software. When I follow the manual upgrade instructions the update proceeds without error. However, when I get to the step were I am supposed to trim the newly upgraded templates I get an error. ... File "/usr/lib64/python2.7/site-packages/qubes/modules/000QubesVm.py", line 1854, in start_quexec_daemon raise OSError ("Cannot execute qrexec-daemon!") I cannot open a terminal in these templates, nor can I base AppVMs on them. I just get the qrexec-daemon error. You can access its console using `sudo xl console fedora-24`. Look for some failed service startup messages. You can login as root without password to perform further investigation - like call `systemctl` or `journalctl -b`. My Fedora 24 template works fine. I guess you've meant 23 here? Otherwise, what's the problem? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYKPgwAAoJENuP0xzK19csGVMIAJdJDwXaWHXsOqvFnsvt7c32 eogiGZ50ju+1Xcl67qCLuX9mOQHQYDOhUWOMaAfa79R4F98hIWhF4LaotxxM2RUr UIBVq/4tX3mx3DNZQUXGx+91J1S2/wPJ5YGUQhJio7MTUn+OTX7qyu4u5aDnt/jx QHuZfqE+aI0micLn/8KWV1OyPNcMrOZjWqrEdOSb2Fu5JxXkD+KznZ1DKIZJ9G57 BFDe7Fp8n3yyah4wnjQYe/BkvOoZf2lKzdt4ls4ATowwAHpQibtZkks1y+Q39ZdR K9oGbh7UNtMRDSJTxQx7+C65+6Cf+m/ek1kDu5Qv+D4blip7ggb8zEE1JAlCxzM= =wAc/ -END PGP SIGNATURE- I guess you've meant 23 here? Otherwise, what's the problem? No, I meant the updated fedora-24 template. Updating the fedora-23 template, which I haven't made changes to, to fedora-24 works fine. No update errors. No trim errors. It updated and works fine with Fedora 24 following the manual update instructions. I switched my AppVMs that used fedora-23 to use this new template and I don't see any issues. All of my other Fedora 23 templates, where I had added different software, they are the ones that failed at the "trim" stage of the manual upgrade process. None of those are functioning now. I haven't had a chance to try checking for failed service startup messages yet as I don't have access to the machine right now, but will report back. systemctl doesn't show anything abnormal systemctl --all shows several not found inactive dead listings ex. livesys.service ntpd.service qubes-core.service qubes-dvm.service qubes-firewall.service qubes-iptables.service qubes-misc-post.service qubes-mount-dirs.service qubes-mount-home.service qubes-netwatcher.service qubes-network.service qubes-qmemman.service qubes-qrexec.service qubes-random-seed.service qubes-sysinit.service qubes-updates-proxy.service sntp.service syslog.service ypbind.service sys-log.service qubes-update-check.service -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3986ad734b085a6bef8bac4d5bf566a2%40riseup.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Fedora 24 template available for Qubes 3.2
On 2016-11-13 23:33, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Nov 13, 2016 at 11:12:34PM +, Gaijin wrote: I have several templates based on Fedora 23 where I've installed various software. When I follow the manual upgrade instructions the update proceeds without error. However, when I get to the step were I am supposed to trim the newly upgraded templates I get an error. ... File "/usr/lib64/python2.7/site-packages/qubes/modules/000QubesVm.py", line 1854, in start_quexec_daemon raise OSError ("Cannot execute qrexec-daemon!") I cannot open a terminal in these templates, nor can I base AppVMs on them. I just get the qrexec-daemon error. You can access its console using `sudo xl console fedora-24`. Look for some failed service startup messages. You can login as root without password to perform further investigation - like call `systemctl` or `journalctl -b`. My Fedora 24 template works fine. I guess you've meant 23 here? Otherwise, what's the problem? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYKPgwAAoJENuP0xzK19csGVMIAJdJDwXaWHXsOqvFnsvt7c32 eogiGZ50ju+1Xcl67qCLuX9mOQHQYDOhUWOMaAfa79R4F98hIWhF4LaotxxM2RUr UIBVq/4tX3mx3DNZQUXGx+91J1S2/wPJ5YGUQhJio7MTUn+OTX7qyu4u5aDnt/jx QHuZfqE+aI0micLn/8KWV1OyPNcMrOZjWqrEdOSb2Fu5JxXkD+KznZ1DKIZJ9G57 BFDe7Fp8n3yyah4wnjQYe/BkvOoZf2lKzdt4ls4ATowwAHpQibtZkks1y+Q39ZdR K9oGbh7UNtMRDSJTxQx7+C65+6Cf+m/ek1kDu5Qv+D4blip7ggb8zEE1JAlCxzM= =wAc/ -END PGP SIGNATURE- I guess you've meant 23 here? Otherwise, what's the problem? No, I meant the updated fedora-24 template. Updating the fedora-23 template, which I haven't made changes to, to fedora-24 works fine. No update errors. No trim errors. It updated and works fine with Fedora 24 following the manual update instructions. I switched my AppVMs that used fedora-23 to use this new template and I don't see any issues. All of my other Fedora 23 templates, where I had added different software, they are the ones that failed at the "trim" stage of the manual upgrade process. None of those are functioning now. I haven't had a chance to try checking for failed service startup messages yet as I don't have access to the machine right now, but will report back. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ae12c9baa64b9c182396c72773d9fd1d%40riseup.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Fedora 24 template available for Qubes 3.2
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Nov 13, 2016 at 11:12:34PM +, Gaijin wrote: > I have several templates based on Fedora 23 where I've installed various > software. When I follow the manual upgrade instructions the update proceeds > without error. However, when I get to the step were I am supposed to trim > the newly upgraded templates I get an error. > > ... > File "/usr/lib64/python2.7/site-packages/qubes/modules/000QubesVm.py", line > 1854, in start_quexec_daemon > raise OSError ("Cannot execute qrexec-daemon!") > > I cannot open a terminal in these templates, nor can I base AppVMs on them. > I just get the qrexec-daemon error. You can access its console using `sudo xl console fedora-24`. Look for some failed service startup messages. You can login as root without password to perform further investigation - like call `systemctl` or `journalctl -b`. > My Fedora 24 template works fine. I guess you've meant 23 here? Otherwise, what's the problem? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYKPgwAAoJENuP0xzK19csGVMIAJdJDwXaWHXsOqvFnsvt7c32 eogiGZ50ju+1Xcl67qCLuX9mOQHQYDOhUWOMaAfa79R4F98hIWhF4LaotxxM2RUr UIBVq/4tX3mx3DNZQUXGx+91J1S2/wPJ5YGUQhJio7MTUn+OTX7qyu4u5aDnt/jx QHuZfqE+aI0micLn/8KWV1OyPNcMrOZjWqrEdOSb2Fu5JxXkD+KznZ1DKIZJ9G57 BFDe7Fp8n3yyah4wnjQYe/BkvOoZf2lKzdt4ls4ATowwAHpQibtZkks1y+Q39ZdR K9oGbh7UNtMRDSJTxQx7+C65+6Cf+m/ek1kDu5Qv+D4blip7ggb8zEE1JAlCxzM= =wAc/ -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20161113233304.GA2994%40mail-itl. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Fedora 24 template available for Qubes 3.2
On 2016-11-13 03:52, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi all, Fedora 24 template is now available for direct installation. This means there are now two ways to have it on Qubes 3.2 system: 1. Upgrade existing Fedora 23 template according to this instruction: https://www.qubes-os.org/doc/fedora-template-upgrade-23/ 2. Install a fresh one using: qubes-dom0-update qubes-template-fedora-24 The later option will get you fresh template. If you made any modifications there, you'll need to do them again (if you want). The same is available for fedora-24-minimal template. In any case, after getting new template using any method, the next step is switching some/all qubes (VMs) to the new one. This can be done using either Qubes Manager (in qube settings), or using qvm-prefs command line tool. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYJ+OXAAoJENuP0xzK19csWa8H/RqO4RjNVeeIEb7s8KRgUMzg VjQUOrC5YmirnFACrq7t8VDZxbcvSrQ88pifMsIKZYzAzfIHa2s3O6m9XzkDetQO +of7iUIQaijlec5BKkCGM+3cP3zQSHyrCdb6udOEzYkkSLkeWaYoC6+F/dPrFLVx 1Wb2pNeUY0eWGuL64/WjpozpUGXKtD1tp1RbFv7cqVdF530THVXX+W7g3fp6zmUS k4goQv0rjhdlhWr9ZYwvlUbGRMpJHaIix4Q4ajXNToVnql69fZxGhhSOtPwBasGe j4TIbyTKr01a0mQn6mIa+MKkS19H8RwLpu+25EaOlmd2f91vVO8IJrPBSmwvZ84= =+DPm -END PGP SIGNATURE- I have several templates based on Fedora 23 where I've installed various software. When I follow the manual upgrade instructions the update proceeds without error. However, when I get to the step were I am supposed to trim the newly upgraded templates I get an error. ... File "/usr/lib64/python2.7/site-packages/qubes/modules/000QubesVm.py", line 1854, in start_quexec_daemon raise OSError ("Cannot execute qrexec-daemon!") I cannot open a terminal in these templates, nor can I base AppVMs on them. I just get the qrexec-daemon error. My Fedora 24 template works fine. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2ab97c2ba52204bc3cd3babc8855460b%40riseup.net. For more options, visit https://groups.google.com/d/optout.