Re: [qubes-users] Re: Installing software.. deb-9 lists qubes-r4.list
On Wed, Apr 17, 2019 at 01:16:57AM +, john s. wrote: > On 3/23/19 6:31 PM, Jon deps wrote: > > On 3/19/19 4:59 PM, Steven Walker wrote: > > > I am still pretty new to Qubes. I have managed to create a new qube, > > > but I want to install some software for use with this qube. I have > > > read that it has to be installed to the template and not the actual > > > qube. As the template has no actual network connection, how do I go > > > about this? > > > > > > Using 4.0.1, Fedora 29 > > > > > > Any help greatly appeciated. > > > > > > Steve > > > > > > > pretty sure, there are different ways to skin the cat, though > > > > > > the Templates are designed to obtain access indirectly, that is what the > > "salt" stuff is they talk about it seems by default to be setup to > > use sys-whonix-14 to install updates , somewhat magically > > > > you can actually change the netvm without shutting down the templates > > > > generally it's bad form to give the templates direct access, though > > may you might want to once in while in order to troubleshoot something > > , etc .testing it the morning , you should be able to install non > > updates without Direct access > > > > > > > > for me Templates aren't worth backing up , I'm not worried about my > > system melting down much . and anyway its going to be best to > > fresh install , which is easy-ist in Qubes, which is one of the > > beauties of the technology > > > > hence, I clone for other reasons > > > > one word of advice is keep a paper list of custom packages you > > install so when it goes to Fedora-30 you install fresh and then add > > back fresh packages , your files will persist, > > > > > > my problem what few files I have end up spread out over 10 App Qubes > > > > > > > > If I do this : > > echo "deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main" | > sudo tee -a /etc/apt/sources.list.d/signal-xenial.list > deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main > > > > > then I do NOT need to add anything to /etc/apt/sources.list.d/qubes-r4.list > ?? > > nor > > /etc/apt/sources.list ?? > > > for Debian-9 stretch ? > > > ty > > That's right. 'man sources.list' gives you chapter and verse. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190417012442.xborbtdc5w7xctsn%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Installing software..
22...@tutamail.com wrote on 3/23/19 11:22 PM: What would be the commands to install lets say: LibraOffice into a Debian template? I have used Protonmail bridge on whonix and debian and have only been able to get it to install by giving full access temporarily to the template... Libreoffice is in Debian's repos so all you'd need to run in the template is: sudo apt install libreoffice You might be thinking of software that's not available from Debian repos. For those, it's usually best to see if there's something else that will work and available. If not, it's better to download the package in a qube already internet connected, then qvm-copy it to the template. That way you can avoid touching the Internet from your template. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3cc1eb8b-9ed3-af09-0b59-963005e116c9%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Installing software..
On Sat, Mar 23, 2019 at 06:31:07PM +, Jon deps wrote: > On 3/19/19 4:59 PM, Steven Walker wrote: > > I am still pretty new to Qubes. I have managed to create a new qube, but I > > want to install some software for use with this qube. I have read that it > > has to be installed to the template and not the actual qube. As the > > template has no actual network connection, how do I go about this? > > > > Using 4.0.1, Fedora 29 > > > > Any help greatly appeciated. > > > > Steve > > > > pretty sure, there are different ways to skin the cat, though > > > the Templates are designed to obtain access indirectly, that is what the > "salt" stuff is they talk about it seems by default to be setup to use > sys-whonix-14 to install updates , somewhat magically > > you can actually change the netvm without shutting down the templates > > generally it's bad form to give the templates direct access, though may > you might want to once in while in order to troubleshoot something , etc > .testing it the morning , you should be able to install non updates > without Direct access > > > > for me Templates aren't worth backing up , I'm not worried about my > system melting down much . and anyway its going to be best to fresh > install , which is easy-ist in Qubes, which is one of the beauties of the > technology > > hence, I clone for other reasons > > one word of advice is keep a paper list of custom packages you install > so when it goes to Fedora-30 you install fresh and then add back fresh > packages , your files will persist, > > > my problem what few files I have end up spread out over 10 App Qubes > It's only if you selected the "update over Whonix" option on install that you get updating using sys-whonix qube. It's not the default. Salt doesnt have anything to do with the "indirect" access - the access is using qubes-rpc to the UpdateProxy - the proxy to use is set in /etc/qubes-rpc/policy/qubes.UpdateProxy. You can change the proxy to use by editing that file. You *can* use salt to install software in to the templates. If you do this then you need only maintain the salt formula and you can easily recreate a template, without having to keep a paper list. That's an ideal way of using salt to configure your systems. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190324022714.q3dwlyogduwbsohn%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
