On Sun, Mar 31, 2019 at 01:10:14AM -0500, Sven Semmler wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> Very recently I migrated all my AppVMs to a debian-10 (buster)
> template, which itself was created by upgrading the debian-9 template.
> 
> Equally my sys-net, sys-usb and sys-firewall dispvms are based on a
> debian-10-minimal, which was upgraded from the debian-9-minimal. There
> was one little hick-up with the qubes-update-proxy (tinyproxy), but
> unman quickly pointed out what needed to be done.
> 
> Now I have only 2 things left that don't work as before:
> 
> 1) Currently I can't backup. I never tried the CLI way and will do so
> soon. Until now I always used the qubes manager. However, since my
> sys-usb is based on the minimal debian-10 template ... it doesn't work
> anymore. When I want to make a backup I simply get a message that the
> backup is not running. Also, in both cases (making and restoring
> backup) the dialog that lets me select target/source doesn't show up
> anymore after clicking the "..." button.
> 
> I searched qubes-users and qubes-issue and did install the
> qubes-core-admin-client in the template but that alone doesn't do the
> trick. What could my next step be? Which log file to check? Any idea
> what could be missing? (If I switch back to the fedora-minimal based
> sys-usb it works).
> 
> 2) When selecting what to backup I am used to see sys-net(0),
> sys-usb(0) and sys-firewall(0) and exclude them. They are of size zero
> as they are named disposable vms. However now I see both sys-net and
> sys-firewall having a size (~30 MB slowly increasing day by day !?!)
> But they are of class DispVM and are based on dvm-sys which in turn is
> based on the minimal debian template. What could be going on here?
> 
> Why am I doing this? ... over the last few months I have formed the
> impression that some of the more knowledgeable contributors on
> qubes-users (e.g. unman and tasket) prefer debian. And I do get
> annoyed be the super frequent updates of fedora. So I thought I'd try
> out to switch everything to debian in the hope that I would then have
> templates that can stay in use for many months if not years before I
> need to switch again (I went through fedora 24-29 since using qubes).
> Also another person with linux background said something about the
> debian package format being better and more secure against
> man-in-the-middle attacks (haven't researched that claim myself yet).
> 
> If anyone has information to confirm or disabuse me of the above
> impressions, I am all ears.
> 
> Thank you!
> 
> -----BEGIN PGP SIGNATURE-----
> 
> iQIzBAEBCgAdFiEE18ry22WNibwI1qeq2m4We49UH7YFAlygWcYACgkQ2m4We49U
> H7ZhABAA4gEFBVqImM+Xr7yjHKqJ1NC+kJez7yBUSxxPfRPoZhzoFuRJxlsSrit4
> Bkglan0auyqDWQLaUjMwy3NWJQpxvBQuv/1HpQN1q3FuZoKw0giCT1ZkZ+FhvOwv
> UsjmyiXdOmPSCXeejDLAhuwX1ZmUEV1JuLxAnexswEMe1QZV1N8Qa1DwwFG5XoEw
> SXYLXKgZceTT/OQXh8CZhiKCAEKEOX38U86w0OXVdNH4oSPcoLy14MAXa0WlDukk
> 7QXeh4kPfsOx9hWxtQMKJ3Lyw4kxZoTvXFOGzUx94WyGRuuTQpru8CQJywAdM0Xe
> sTbOmxyQAeH5ABY9ZUsO/I4BTq34uSpLEFDirNQ7FnK+vcG2MwdjnSP7xdDR1Iom
> Hw4sRhvlnJzWxFuZVoT2F2dLKnNd833d6zy4xyiy2h0LkHETDyo4Oprp5uVDrJPk
> 1J43eZHBdHF+YjAREwC1/JPkfbGWOx1q5KpVE3TtQpOf82kLjJNWBqaERyEY1J/e
> QAAnRPbXI1LNUYazOkJ1Qv992gsyglHPDqdQtl+g8bKudRznvdoEr+kLyn1uduF9
> A7IUT1Ctk+NVyA7N9msjSCdzPiANCIdMddqL94zvpRuSaRTK7qRUN7z5fspt3XZb
> 3NPvTTh0hRinNh7c1rrzLdnJfb/0QDl9bX6touxhuOOdkYwAgAE=
> =Ujwj
> -----END PGP SIGNATURE-----
> 

1. The minimal template is minimal - it doenst have any GUI file
manager.
When you click on the ... button it spawns a file manager in the backup
qube. Since you dont have one installed it cant be opened.
You could install a file manager but then you're getting closer to the
normal Debian template which is pretty minimal.
If you are committed to minimal service qubes, CLI backup .

2. DisposableVMs will still have *some* size, as they differ from the
underlying template. When they are closed those differences will be
thrown away. (Just as you can download an iso in a disposableVM and see
the size balloon.)
I dont know what exactly is happening in your case - logs perhaps?

I'm not convinced about Debian packages being more secure than rpm: they
are, of course nicer. :-)
I'm a long standing Debian user with an antipathy to RedHat and Fedora.
The biggest drawback in using Debian packages in Qubes is that they are
configured on install, which requires some user intervention across
various qubes. Fedora doesnt do this, I think.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190331143618.o32x7fhqkof7xfxl%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to