On 7/3/19 6:54 PM, 'awokd' via qubes-users wrote:
Daniil Travnikov:
On Wednesday, July 3, 2019 at 4:24:01 AM UTC+3, haaber wrote:
The "instructions" on the whonix webpage are more than confusing. There
are 3 alternative "ways" suggested. Which one is best /advised?

I got the impression that a complete reinstall requires (a) a fedora
appvm (I have none), (b) does *not* work over TOR, since the AppVM's
based on whonix must be removed (or set to dummy  template) before
removing the whonix-14-templates. Then sys-whonix is gone, right?
That seems awkward asprocedure. Can someone explain, please? Why can't I
install whonix-gw-15 and whonix-ws-15 via dnf in dom0 and THEN remove
the *-14-* ones? Cheers, Bernhard

Thank you for your post, I thought that I am alone, but I think the same.

I don't understand why in Qubes we can't install Whonix Templates of any 
version from Dom0 like we usually do when we want to install Fedora,
for example:

sudo qubes-dom0-update qubes-template-fedora-XX

I don't see why you couldn't, but you should possibly recreate
sys-whonix and anon-whonix. Not sure it's safe to re-use them. You
should try to use the Salt commands to do this, once you have the -15
templates installed and the -14 and sys/anon-whonix removed. Make sure
you're on mgmt-salt-dom0-virtual-machines v4.0.16 or higher. If you are
doing it manually, you should review everything the scripts do to make
sure you've run the appropriate qvm-features commands, etc. Not
following all the same steps as the Salt scripts could result in
unexpected traffic disclosures. Haven't upgraded these myself yet; I'll
let the early adopters work out the bugs first. ;)

See https://github.com/QubesOS/qubes-issues/issues/3765 and
https://github.com/QubesOS/qubes-issues/issues/3447 for a longer
discussion of why the upgrade procedure is the way it is. If you can
write smarter Salt scripts, I suspect the Whonix team would be appreciative.


besides the script if you don't change the "jinja" file, you won't get -15 installed

re: removing old anon-whonix TBA-AppVMs
I believe Patrick said: you can either remove sys-whonix (on my machine sys-whonix-14) before new install or just leave it (and presumably have it set to 'dummy template' -- not sure why can't just set it to any other template temporarily )

so presumably that goes for anon-whonix and its just like any other template upgrade , reassigning to the new upgraded Template


PS :  how would I check  I'm on the correct  mgmt-salt-dom0-virtual-machine


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b74540b3-e231-48ac-1509-e68d379ec7cf%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Reply via email to