Re: [qubes-users] Installing templates.
tirsdag den 17. marts 2020 kl. 16.27.47 UTC+1 skrev unman: > > On Tue, Mar 17, 2020 at 03:39:36AM -0700, 'M' via qubes-users wrote: > > > > Unman I have tried to download and install the following file as I > expected > > the file to create a GUI Ubuntu desktop: > > > https://qubes.3isec.org/Templates_4.0/qubes-template-bionic-desktop-4.0.1-202001121248.noarch.rpm > > > > > Your expectation was misplaced. It is a template that provides the > desktop flavor, and thus includes normal desktop tools. (Like choosing > this during course of install.) > > > I got a template shortcut in the qube-menu, but I can't see any GUI > Ubuntu > > desktop. > > Install Ubuntu and run it as a standalone HVM, although I dont > understand why you would want to do this. > > > > > Shall I do some more to be able to get a window with the GUI Ubuntu > > desktop, and if so what ? > > Install Ubuntu and run it as a standalone HVM, although I dont > understand why you would want to do this. > > > > > You may also see or answer my thread here about it: > > https://groups.google.com/forum/#!topic/qubes-users/9tjB9vTbArc > > > > As I've said before it's not helpful running across multiple threads. I > mean helpful to other people - I have no idea if you find it helpful. I > suspect not. > You need to step back, think about what you are trying to do, and doing, > and then clearly state any problem you have. > You're right. My question in my other thread was about how to install Ubuntu 18.14 in a HVM with a GUI desktop. Then I was told to try to install a Ubuntu template, which lead me here. So that's the reason why I made a post in this thread. In case you know how to get Ubuntu 18.14 running in a HVM with a GUI desktop, I would appreciate if you would answer my other thread about this issue - link: https://groups.google.com/forum/#!topic/qubes-users/9tjB9vTbArc And if you know how to get on the internet from inside a Debian 10.3 HVM with a GUI desktop, I would also appreciate if you would answer my thread about this issue - link: https://groups.google.com/forum/#!topic/qubes-users/oxaXPDU9SNU -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a8f5b485-fb72-463b-aa4c-115069dbffc4%40googlegroups.com.
Re: [qubes-users] Installing templates.
On Tue, Mar 17, 2020 at 03:39:36AM -0700, 'M' via qubes-users wrote: > > Unman I have tried to download and install the following file as I expected > the file to create a GUI Ubuntu desktop: > https://qubes.3isec.org/Templates_4.0/qubes-template-bionic-desktop-4.0.1-202001121248.noarch.rpm > Your expectation was misplaced. It is a template that provides the desktop flavor, and thus includes normal desktop tools. (Like choosing this during course of install.) > I got a template shortcut in the qube-menu, but I can't see any GUI Ubuntu > desktop. Install Ubuntu and run it as a standalone HVM, although I dont understand why you would want to do this. > > Shall I do some more to be able to get a window with the GUI Ubuntu > desktop, and if so what ? Install Ubuntu and run it as a standalone HVM, although I dont understand why you would want to do this. > > You may also see or answer my thread here about it: > https://groups.google.com/forum/#!topic/qubes-users/9tjB9vTbArc > As I've said before it's not helpful running across multiple threads. I mean helpful to other people - I have no idea if you find it helpful. I suspect not. You need to step back, think about what you are trying to do, and doing, and then clearly state any problem you have. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200317152743.GA29569%40thirdeyesecurity.org.
Re: [qubes-users] Installing templates.
torsdag den 12. marts 2020 kl. 17.14.15 UTC+1 skrev unman: > > On Wed, Mar 11, 2020 at 06:53:58PM +0100, dhorf-hfr...@hashmail.org > wrote: > > On Wed, Mar 11, 2020 at 10:46:12AM -0700, redpo...@gmail.com > wrote: > > > I've downloaded some ubuntu templates with the .rpm extension. I have > been > > > told by someone that I need to put the rpm file into dom0 and then > install > > > via cli with dnf etc. > > > > this means you are giving the person who created those rpms or anyone > > who managed to compromise their build process or storage/distro chain > > full root access in your dom0 == full control over the whole system. > > > > "not recommended" > > > > I provide Ubuntu templates - have done for years. I dont know if these > are mine. > I provide pre-built Qubes packages for Ubuntu too, at > https://qubes.3isec.org > I *always* recommend building your own, but there are users who want to > try them out or dont think they are able to use QubesBuilder - for those > people - "recommended" (with or without quote marks) > > let's dig in to your comment a bit - > Compromise the build process - are you aware of new issues in the > QubesBuilder process? > Compromise storage/distro chain - Nothing is trusted here - the > infrastructure is never trusted. > > *Any* package to be installed in dom0 should be signed, and it's for users > to determine whether they choose to trust the signer, in awareness of > the risk. > Dont underestimate it, but dont exaggerate either. > > > And for anyone wondering about OPs original questions, dom0 has dolphin > file manager. > > You can verify the signature on a package using `rpm -K `. > `rpm -qpi ` will show you the keyID used to sign the package > You should verify the key from multiple sources. > > If you are satisfied, then you may be prepared to copy the package in to > dom0. > If you have downloaded in /home/user/Downloads on "dload", and package is > "foo.rpm", the > canonical way to do this is: > qvm-run -p dload 'cat /home/user/Downloads/foo.rpm' > foo.rpm > > Then verify the package again, and install as you will, with > `dnf install foo.rpm` > Unman I have tried to download and install the following file as I expected the file to create a GUI Ubuntu desktop: https://qubes.3isec.org/Templates_4.0/qubes-template-bionic-desktop-4.0.1-202001121248.noarch.rpm I got a template shortcut in the qube-menu, but I can't see any GUI Ubuntu desktop. Shall I do some more to be able to get a window with the GUI Ubuntu desktop, and if so what ? You may also see or answer my thread here about it: https://groups.google.com/forum/#!topic/qubes-users/9tjB9vTbArc -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/64a12cc6-f68f-4cf8-bf95-edd0fc6fd04e%40googlegroups.com.
Re: [qubes-users] Installing templates.
Thank you SO much for taking time to do this. I have the weekend coming up so I am going to follow your guide. At least I understand this as you've made it simple. I really appreciate you taking the time to do this. Its a time consuming thing just to type that much so thanks. Its not gone unnoticed or unappreciated I can assure you! On Friday, 13 March 2020 08:25:45 UTC+11, Sven Semmler wrote: > > On Thu, Mar 12, 2020 at 01:03:50PM -0700, drbg...@gmail.com > wrote: > > Pardon my basic understanding, but I probably need someone to serve this > up > > to me in a very easy way. I haven't asked this question because its so > > basic so maybe I can get a lead here? > > I'll take a shot at it. > > Let's say you have a VM called 'web' in which you downloaded a file > 'template.rpm' which is not stored under > /home/user/Downloads/template.rm in that 'web' VM. > > You want to transfer it to dom0. > > So in dom0 you will be using a command called qvm-run, which allows you > to run/start programs inside VMs. It has a parameter called --pass-io > which let's you see the output of that program in your dom0 terminal. > > You can test this for example with a simple text file. In your 'web' VM > start a terminal and use gedit to create a text file test.txt in your > home directory (/home/user/test.txt). Put some "hello world!" text > inside and safe it / close gedit. Not in your terminal write "cat > /home/user/test.txt" and you will see the contents of that text file in > the terminal. > > Next, go to dom0 and open a terminal there. In that terminal write: > "qvm-run --pass-io web 'cat /home/user/test.txt'" > > Now you see the context of the text file in your dom0 terminal. The > final step is to add something to the end of this command: "qvm-run > --pass-io web 'cat /home/user/test.txt' > /home/user/test.txt > > When you run this, instead of seeing the output in the terminal it is > now written into /home/user/test.txt in dom0! You can verify with "cat > /home/user/test.txt" > > I've explained this with a little text file to make it easy to > understand. Back to your /home/user/Downloads/template.rpm in the web > VM. We can use the same mechanism: > > qvm-run --pass-io web 'cat /home/user/Downloads/template.rpm' > > /home/user/template.rpm > > It'll take a few secondes or maybe even a minute depending on your > computer and the size of the file. But when it's done you know have > successfully copied the template.rpm into dom0 and can now run > > sudo dnf install template.rpm > > This is all described a bit more brief at > https://www.qubes-os.org/doc/copy-from-dom0/ > > Cheers, > /Sven > > -- > public key: https://www.svensemmler.org/0x8F541FB6.asc > fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6 > > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a121a256-6e6e-4b22-9096-2d4c72d588cf%40googlegroups.com.
Re: [qubes-users] Installing templates.
On Thu, Mar 12, 2020 at 04:25:20PM -0500, Sven Semmler wrote: > inside and safe it / close gedit. Not in your terminal write "cat ... close gedit. *Now* in your terminal ... > computer and the size of the file. But when it's done you know have ... when it's done you *now* have ... Sorry for the typos. /Sven -- public key: https://www.svensemmler.org/0x8F541FB6.asc fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200312212935.GC1113%40app-email-private. signature.asc Description: PGP signature
Re: [qubes-users] Installing templates.
On Thu, Mar 12, 2020 at 01:03:50PM -0700, drbgw...@gmail.com wrote: > Pardon my basic understanding, but I probably need someone to serve this up > to me in a very easy way. I haven't asked this question because its so > basic so maybe I can get a lead here? I'll take a shot at it. Let's say you have a VM called 'web' in which you downloaded a file 'template.rpm' which is not stored under /home/user/Downloads/template.rm in that 'web' VM. You want to transfer it to dom0. So in dom0 you will be using a command called qvm-run, which allows you to run/start programs inside VMs. It has a parameter called --pass-io which let's you see the output of that program in your dom0 terminal. You can test this for example with a simple text file. In your 'web' VM start a terminal and use gedit to create a text file test.txt in your home directory (/home/user/test.txt). Put some "hello world!" text inside and safe it / close gedit. Not in your terminal write "cat /home/user/test.txt" and you will see the contents of that text file in the terminal. Next, go to dom0 and open a terminal there. In that terminal write: "qvm-run --pass-io web 'cat /home/user/test.txt'" Now you see the context of the text file in your dom0 terminal. The final step is to add something to the end of this command: "qvm-run --pass-io web 'cat /home/user/test.txt' > /home/user/test.txt When you run this, instead of seeing the output in the terminal it is now written into /home/user/test.txt in dom0! You can verify with "cat /home/user/test.txt" I've explained this with a little text file to make it easy to understand. Back to your /home/user/Downloads/template.rpm in the web VM. We can use the same mechanism: qvm-run --pass-io web 'cat /home/user/Downloads/template.rpm' > /home/user/template.rpm It'll take a few secondes or maybe even a minute depending on your computer and the size of the file. But when it's done you know have successfully copied the template.rpm into dom0 and can now run sudo dnf install template.rpm This is all described a bit more brief at https://www.qubes-os.org/doc/copy-from-dom0/ Cheers, /Sven -- public key: https://www.svensemmler.org/0x8F541FB6.asc fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200312212520.GB1113%40app-email-private. signature.asc Description: PGP signature
Re: [qubes-users] Installing templates.
I am glad to see this discussed. I downloaded some of your templates buy gave up trying to get them to work. When you say "downloaded in /home/user/Downloads on "dload" Are you saying that the foo.rpm template is in dom0 at that point? I'm not sure how to download straight to dom0? Pardon my basic understanding, but I probably need someone to serve this up to me in a very easy way. I haven't asked this question because its so basic so maybe I can get a lead here? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b57be510-1c3b-4b1a-8f88-78f12d9a9ebd%40googlegroups.com.
Re: [qubes-users] Installing templates.
On Wed, Mar 11, 2020 at 06:53:58PM +0100, dhorf-hfref.4a288...@hashmail.org wrote: > On Wed, Mar 11, 2020 at 10:46:12AM -0700, redpoll...@gmail.com wrote: > > I've downloaded some ubuntu templates with the .rpm extension. I have been > > told by someone that I need to put the rpm file into dom0 and then install > > via cli with dnf etc. > > this means you are giving the person who created those rpms or anyone > who managed to compromise their build process or storage/distro chain > full root access in your dom0 == full control over the whole system. > > "not recommended" > I provide Ubuntu templates - have done for years. I dont know if these are mine. I provide pre-built Qubes packages for Ubuntu too, at https://qubes.3isec.org I *always* recommend building your own, but there are users who want to try them out or dont think they are able to use QubesBuilder - for those people - "recommended" (with or without quote marks) let's dig in to your comment a bit - Compromise the build process - are you aware of new issues in the QubesBuilder process? Compromise storage/distro chain - Nothing is trusted here - the infrastructure is never trusted. *Any* package to be installed in dom0 should be signed, and it's for users to determine whether they choose to trust the signer, in awareness of the risk. Dont underestimate it, but dont exaggerate either. And for anyone wondering about OPs original questions, dom0 has dolphin file manager. You can verify the signature on a package using `rpm -K `. `rpm -qpi ` will show you the keyID used to sign the package You should verify the key from multiple sources. If you are satisfied, then you may be prepared to copy the package in to dom0. If you have downloaded in /home/user/Downloads on "dload", and package is "foo.rpm", the canonical way to do this is: qvm-run -p dload 'cat /home/user/Downloads/foo.rpm' > foo.rpm Then verify the package again, and install as you will, with `dnf install foo.rpm` -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200312161411.GB31957%40thirdeyesecurity.org.
Re: [qubes-users] Installing templates.
On Wed, Mar 11, 2020 at 10:46:12AM -0700, redpoll...@gmail.com wrote: > I've downloaded some ubuntu templates with the .rpm extension. I have been > told by someone that I need to put the rpm file into dom0 and then install > via cli with dnf etc. this means you are giving the person who created those rpms or anyone who managed to compromise their build process or storage/distro chain full root access in your dom0 == full control over the whole system. "not recommended" -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200311175358.GX8973%40priv-mua.
