-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Wed, Aug 03, 2016 at 06:50:21AM -0700, m...@lamarciana.com wrote: > > Are you using NetworkManager in that ProxyVM? > > I assigned "network-manager" service through "Qubes VM Manager" to my debian > standalone ProxyVM, but I see this disappears once I start and shutdown the > machine... I tried again to be sure and I can reproduce the issue. I will > inspect it further and open a Qubes issue if needed. > > But, anyway, I changed my ProxyVM to use fedora template (still standalone): > Then, "network-manager" survives after reboot, but not the content in > "/etc/resolv.conf"... But, in fedora template this file has an interesting > hint: > > # Generated by NetworkManager > > I think this confirms my fears that /etc/resolv.conf should not be edited by > hand... > > I tried then to edit file > /etc/NetworkManager/system-connections/qubes-uplink-eth0 and added OpenDNS > IP's in "[ipv4]" section but changes are lost after reboot (I'm not using > ethernet cable but wifi, but there is no other file. Furthermore, "ifconfig" > only shows loop and eth0, but I suppose there is some kind of delegation to > sys-net for that).
eth0 is an uplink to sys-net. And /etc/resolv.conf there indeed is generated, so manual changes will be lost. There is a way to avoid this using /etc/qubes/protected-files.d/, but I think it isn't the way to go. Better adjust NetworkManager settings in sys-net, using standard connection editor GUI. The DNS servers in any other VM are in the end pointing to what you have in sys-net(*) (using DNAT redirections). (*) unless you use Tor/Whonix - in which case those are redirected to tor process. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXofgJAAoJENuP0xzK19csN7cH/A1gNpFZfoV1Ta7KolWAVCjF wJuEpj1reXjD/+fc5aO7jvlJCUDWgMIuGPbqCdE0QFEOjbUS/KdyJIONh2+AGnjf 6CrIflZI4ii0lOHglslVaRpK0WqbfonlPoTb6Swo0FmDJh6yI26tc6xdn0zjRU6Y B0ZVfUCDVow55Ta8Nm+XLtB1HInS0yx3WKOXff5uVvPJVbDVzsq/SncOmNiQjdU3 SmEwJoHNFel3LpUR0l3CHvSm3Bls4NDiWnmOSTn7X6wSXnqOEGWaeB8psy9VI+8W jVDLlX9+7Jca5zSexQTYAjwDy9x73SfzsXQQnRkAV/iNO1ZAK+pj3p5qdqZsPYg= =VOop -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160803135624.GO32095%40mail-itl. For more options, visit https://groups.google.com/d/optout.
