Re: [qubes-users] Debian minimal template

2019-02-04 Thread haaber



thank you unman. I tried to use it as sys-net, but
1) network-manager did not start on boot
2) when starting it by hand, I got the impression that the
network-manager data is stored elsewhere under debian than under fedora
- to the effect that I lost all saved wireless connections!

  Is there an easy way to cure that?  Bernhard


Andrew has quite correclty pointed out the complete absence of any
documentation on how to use the debian-9-minimal template. I'll try to
remedy this soon.
In the meantime you could follow the guidelines for using the
fedora-minimal template. (Apologies if you've already done this.)


Remark: I did manage to run debian-minimal as sys-usb that way (let me
mention that  the required package qubes-proxy is not mentioned in the
online DOC! this is the same for fedora-minimal and debian-minimal ).


That did not work exactly the same for sys-net, since

NetworkManager-wifi   will be called network-manager  under debian
  I guess that is the one I need?
  Are there other packages to be added ??
dejavu-sans-fonts does not seem to exist under debian
  Is it really needed?
Of course I added firmware for my wireless chipset.


The wireless connection information is actually stored under /rw/config , so it
wont be lost.(Check it's there)

Yes, it is there, no worries.


In Debian, Network manager information is held under
/etc/NetworkManager, which is, I would have thought, the same as Fedora.

maybe you're right and the problem is somewhere else. I re-bootet
sys-net with debian-minimal, and here is what I see (no clue what it
means, though). Any ideas?  Bernhard


root@sys-net:~# service network-manager status
● NetworkManager.service - Network Manager
   Loaded: loaded (/lib/systemd/system/NetworkManager.service; enabled;
vendor preset: enabled)
  Drop-In: /lib/systemd/system/NetworkManager.service.d
   └─30_qubes.conf
   Active: failed (Result: exit-code) since Tue 2019-02-05 12:00:59
AEDT; 45s ago
 Docs: man:NetworkManager(8)
  Process: 568
ExecStartPre=/usr/lib/qubes/network-manager-prepare-conf-dir
(code=exited, status=203/EXEC)

Feb 05 12:00:58 sys-net systemd[1]: Failed to start Network Manager.
Feb 05 12:00:58 sys-net systemd[1]: NetworkManager.service: Unit entered
failed state.
Feb 05 12:00:58 sys-net systemd[1]: NetworkManager.service: Failed with
result 'exit-code'.
Feb 05 12:00:59 sys-net systemd[1]: NetworkManager.service: Service
hold-off time over, scheduling restart.
Feb 05 12:00:59 sys-net systemd[1]: Stopped Network Manager.
Feb 05 12:00:59 sys-net systemd[1]: NetworkManager.service: Start
request repeated too quickly.
Feb 05 12:00:59 sys-net systemd[1]: Failed to start Network Manager.
Feb 05 12:00:59 sys-net systemd[1]: NetworkManager.service: Unit entered
failed state.
Feb 05 12:00:59 sys-net systemd[1]: NetworkManager.service: Failed with
result 'exit-code'.
root@sys-net:~#

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1d1dd534-b97d-34cb-0339-c1001f9c1796%40web.de.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-02-04 Thread unman
On Tue, Feb 05, 2019 at 11:34:24AM +1100, haaber wrote:
> > On Mon, Feb 04, 2019 at 04:47:44PM +1100, haaber wrote:
> > > Hello, does someone know if the debian-9-minimal template is pre- or
> > > post-  APT-vulnerability? Is it being "maintained" as well as debian-9
> > > itself?  Thank you, Bernhard
> > > 
> > > 
> > 
> > The debian-9-minimal template in the templates-itl-testing repository
> > (201901271906) is post-APT vuln.
> > It is maintained in precisely the same way as debian-9 itself.
> > 
> thank you unman. I tried to use it as sys-net, but
> 1) network-manager did not start on boot
> 2) when starting it by hand, I got the impression that the
> network-manager data is stored elsewhere under debian than under fedora
> - to the effect that I lost all saved wireless connections!
> 
>  Is there an easy way to cure that?  Bernhard

Andrew has quite correclty pointed out the complete absence of any
documentation on how to use the debian-9-minimal template. I'll try to
remedy this soon.
In the meantime you could follow the guidelines for using the
fedora-minimal template. (Apologies if you've already done this.)

The wireless connection information is actually stored under /rw/config , so it
wont be lost.(Check it's there)
In Debian, Network manager information is held under
/etc/NetworkManager, which is, I would have thought, the same as Fedora.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190205004243.u3cfklfh26colrrk%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-02-04 Thread haaber

On Mon, Feb 04, 2019 at 04:47:44PM +1100, haaber wrote:

Hello, does someone know if the debian-9-minimal template is pre- or
post-  APT-vulnerability? Is it being "maintained" as well as debian-9
itself?  Thank you, Bernhard




The debian-9-minimal template in the templates-itl-testing repository
(201901271906) is post-APT vuln.
It is maintained in precisely the same way as debian-9 itself.


thank you unman. I tried to use it as sys-net, but
1) network-manager did not start on boot
2) when starting it by hand, I got the impression that the
network-manager data is stored elsewhere under debian than under fedora
- to the effect that I lost all saved wireless connections!

 Is there an easy way to cure that?  Bernhard

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e860c549-c5cd-6eaf-827d-5cde2b00d4a9%40web.de.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-02-04 Thread unman
On Mon, Feb 04, 2019 at 04:47:44PM +1100, haaber wrote:
> Hello, does someone know if the debian-9-minimal template is pre- or
> post-  APT-vulnerability? Is it being "maintained" as well as debian-9
> itself?  Thank you, Bernhard
> 
> 

The debian-9-minimal template in the templates-itl-testing repository
(201901271906) is post-APT vuln.
It is maintained in precisely the same way as debian-9 itself.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190205003051.qrtxfivfjbksy34f%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-02-03 Thread haaber

Hello, does someone know if the debian-9-minimal template is pre- or
post-  APT-vulnerability? Is it being "maintained" as well as debian-9
itself?  Thank you, Bernhard


On 1/12/19 2:25 AM, Zrubi wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 1/10/19 1:14 AM, unman wrote:

If any one is interested there's a prebuilt debian-9-minimal
template currently available in itl-testing.


would you mind sending the output of
dpkg -l

Thanks.
- --
Zrubi
-BEGIN PGP SIGNATURE-
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=2GJk
-END PGP SIGNATURE-



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3f2dc8d1-9bae-b5d3-27f8-cefbc434938b%40web.de.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-01-13 Thread unman
On Fri, Jan 11, 2019 at 04:25:00PM +0100, Zrubi wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> On 1/10/19 1:14 AM, unman wrote:
> > If any one is interested there's a prebuilt debian-9-minimal
> > template currently available in itl-testing.
> 
> would you mind sending the output of
> dpkg -l
> 
> Thanks.
> - -- 
> Zrubi

Of course:

acl  2.2.52-3+b1   
adduser  3.115 
adwaita-icon-theme   3.22.0-1+deb9u1   
amd64-microcode  3.20160316.3  
apt  1.4.8 
apt-listchanges  3.10  
apt-transport-https  1.4.8 
apt-utils1.4.8 
aptitude 0.8.7-1   
aptitude-common  0.8.7-1   
aspell   0.60.7~20110707-3+b2  
aspell-en2016.11.20-0-0.1  
at-spi2-core 2.22.0-6+deb9u1   
avahi-daemon 0.6.32-2  
base-files   9.9+deb9u6
base-passwd  3.5.43
bash 4.4-5 
bash-completion  1:2.1-4.3 
bc   1.06.95-9+b3  
bind9-host   1:9.10.3.dfsg.P4-12.3+deb9u4  
binutils 2.28-5
bsdmainutils 9.0.12+nmu1   
bsdutils 1:2.29.2-1+deb9u1 
busybox  1:1.22.0-19+b3
bzip21.0.6-8.1 
ca-certificates  20161130+nmu1+deb9u1  
colord   1.3.3-2   
colord-data  1.3.3-2   
console-setup1.164 
console-setup-linux  1.164 
coreutils8.26-3
cpio 2.11+dfsg-6   
cpp  4:6.3.0-4 
cpp-66.3.0-18+deb9u1   
crda 3.18-1
cron 3.0pl1-128+deb9u1 
cryptsetup   2:1.7.3-4 
cryptsetup-bin   2:1.7.3-4 
cups 2.2.1-8+deb9u2
cups-browsed 1.11.6-3  
cups-client  2.2.1-8+deb9u2
cups-common  2.2.1-8+deb9u2
cups-core-drivers2.2.1-8+deb9u2
cups-daemon  2.2.1-8+deb9u2
cups-filters 1.11.6-3  
cups-filters-core-drivers1.11.6-3  
cups-pk-helper   0.2.6-1+b1
cups-ppdc2.2.1-8+deb9u2
cups-server-common   2.2.1-8+deb9u2
dash 0.5.8-2.4 
dbus 1.10.26-0+deb9u1  
dbus-user-session1.10.26-0+deb9u1  
dbus-x11 1.10.26-0+deb9u1  
dconf-cli0.26.0-2+b1   
dconf-gsettings-backend:amd640.26.0-2+b1   
dconf-service0.26.0-2+b1   
debconf  1.5.61
debconf-i18n 1.5.61
debian-archive-keyring   2017.5
debian-faq   8.1   
debianutils  4.8.1.1   
debugedit4.12.0.2+dfsg1-2  
desktop-file-utils   0.23-1
dh-python2.20170125
dictionaries-common  1

Re: [qubes-users] Debian minimal template

2019-01-11 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 1/10/19 1:14 AM, unman wrote:
> If any one is interested there's a prebuilt debian-9-minimal
> template currently available in itl-testing.

would you mind sending the output of
dpkg -l

Thanks.
- -- 
Zrubi
-BEGIN PGP SIGNATURE-
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=2GJk
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/00c61ea1-e080-40dd-e35b-f57d20d82845%40zrubi.hu.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-01-10 Thread unman
On Thu, Jan 10, 2019 at 06:33:13PM +0100, 799 wrote:
> Hello,
> 
> Am Do., 10. Jan. 2019, 01:15 hat unman 
> geschrieben:
> 
> > If any one is interested there's a prebuilt debian-9-minimal template
> > currently available in itl-testing.
> 
> You can install it:
> > qubes-dom0-update --enablerepo=qubes-template-itl-testing
> > qubes-template-debian-9-minimal
> >
> 
> Short question regarding the templates in testing:
> Are those templates also build by the Qubes team and therefore reasonable
> trustable or how is the process that a package finds its way into the
> testing repo?
> 
> Also when will a package move from testing to stable?
> 
> I'm always interested at the minimal packages I like to build my personal
> templates from a lean template.
> 
> - O

Templates in testing, like packages, are built as part of the build
infrastructure. -for an idea of this see
https://github.com/QubesOS/qubes-issues/issues/3935

Authorised users can trigger builds of templates which will be placed in
testing.
So the packages in testing are as trustable as any other package
produced by Qubes.
Authorised users can trigger movement to stable "when it's ready".

In case of debian minimal I'll watch out for comments, but as I've
been using it myself for some time with no issues it will probably
appear in stable pretty soon.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190110234725.u6smqkgt2wi2uuc7%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-01-10 Thread seshu
On Thursday, January 10, 2019 at 11:50:04 AM UTC, unman wrote:
> On Wed, Jan 09, 2019 at 07:43:41PM -0800, seshu wrote:
> > On Thursday, January 10, 2019 at 12:30:11 AM UTC, unman wrote:
> > > On Thu, Jan 10, 2019 at 12:14:59AM +, unman wrote:
> > > > If any one is interested there's a prebuilt debian-9-minimal template
> > > > currently available in itl-testing.
> > > > You can install it:
> > > > qubes-dom0-update --enablerepo=qubes-template-itl-testing 
> > > > qubes-template-debian-9-minimal
> > > > 
> > > > The template is a little smaller than stock stretch, and somewhat
> > > > leaner. To get root you'll need to use 'qvm-run -u root  xterm';
> > > > install qubes-core-agent-passwordless-root (and polkit) if you want
> > > > that feature.
> > > 
> > > Forget the polkit. Dont know what I was thinking.
> > > 
> > > > 
> > > > If you have any comments or suggestions for debian minimal post them 
> > > > here.
> > > > There's no documentation as yet, but the Fedora-minimal guide should 
> > > > come
> > > > in handy.
> > > > 
> > > > Enjoy
> > > > 
> > > > unman
> > 
> > When I tried the link you mentioned. I get an error message that says the 
> > repo is unknown?
> > 
> > I've doubled checked spelling etc.
> > 
> 
> I misspoke: it should be templates, not template:
> qubes-dom0-update --enablerepo=qubes-templates-itl-testing 
> qubes-template-debian-9-minimal

Thanks unman, that did the trick. I appreciate you putting together this 
template also!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8f9785b2-9128-4242-b0c7-e3921f25e908%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-01-10 Thread 799
Hello,

Am Do., 10. Jan. 2019, 01:15 hat unman 
geschrieben:

> If any one is interested there's a prebuilt debian-9-minimal template
> currently available in itl-testing.

You can install it:
> qubes-dom0-update --enablerepo=qubes-template-itl-testing
> qubes-template-debian-9-minimal
>

Short question regarding the templates in testing:
Are those templates also build by the Qubes team and therefore reasonable
trustable or how is the process that a package finds its way into the
testing repo?

Also when will a package move from testing to stable?

I'm always interested at the minimal packages I like to build my personal
templates from a lean template.

- O

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2sjPbq%3D1NtBkJa4ZkXJ3JntE191bAW_TM3fT1%3Dus0FKBQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-01-10 Thread unman
On Wed, Jan 09, 2019 at 07:43:41PM -0800, seshu wrote:
> On Thursday, January 10, 2019 at 12:30:11 AM UTC, unman wrote:
> > On Thu, Jan 10, 2019 at 12:14:59AM +, unman wrote:
> > > If any one is interested there's a prebuilt debian-9-minimal template
> > > currently available in itl-testing.
> > > You can install it:
> > > qubes-dom0-update --enablerepo=qubes-template-itl-testing 
> > > qubes-template-debian-9-minimal
> > > 
> > > The template is a little smaller than stock stretch, and somewhat
> > > leaner. To get root you'll need to use 'qvm-run -u root  xterm';
> > > install qubes-core-agent-passwordless-root (and polkit) if you want
> > > that feature.
> > 
> > Forget the polkit. Dont know what I was thinking.
> > 
> > > 
> > > If you have any comments or suggestions for debian minimal post them here.
> > > There's no documentation as yet, but the Fedora-minimal guide should come
> > > in handy.
> > > 
> > > Enjoy
> > > 
> > > unman
> 
> When I tried the link you mentioned. I get an error message that says the 
> repo is unknown?
> 
> I've doubled checked spelling etc.
> 

I misspoke: it should be templates, not template:
qubes-dom0-update --enablerepo=qubes-templates-itl-testing 
qubes-template-debian-9-minimal

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190110115001.qtofxmmu46jmkmhh%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-01-09 Thread seshu
On Thursday, January 10, 2019 at 12:30:11 AM UTC, unman wrote:
> On Thu, Jan 10, 2019 at 12:14:59AM +, unman wrote:
> > If any one is interested there's a prebuilt debian-9-minimal template
> > currently available in itl-testing.
> > You can install it:
> > qubes-dom0-update --enablerepo=qubes-template-itl-testing 
> > qubes-template-debian-9-minimal
> > 
> > The template is a little smaller than stock stretch, and somewhat
> > leaner. To get root you'll need to use 'qvm-run -u root  xterm';
> > install qubes-core-agent-passwordless-root (and polkit) if you want
> > that feature.
> 
> Forget the polkit. Dont know what I was thinking.
> 
> > 
> > If you have any comments or suggestions for debian minimal post them here.
> > There's no documentation as yet, but the Fedora-minimal guide should come
> > in handy.
> > 
> > Enjoy
> > 
> > unman

When I tried the link you mentioned. I get an error message that says the repo 
is unknown?

I've doubled checked spelling etc.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ab10f789-57ba-4c3e-b27d-483989a5e5ce%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template

2019-01-09 Thread unman
On Thu, Jan 10, 2019 at 12:14:59AM +, unman wrote:
> If any one is interested there's a prebuilt debian-9-minimal template
> currently available in itl-testing.
> You can install it:
> qubes-dom0-update --enablerepo=qubes-template-itl-testing 
> qubes-template-debian-9-minimal
> 
> The template is a little smaller than stock stretch, and somewhat
> leaner. To get root you'll need to use 'qvm-run -u root  xterm';
> install qubes-core-agent-passwordless-root (and polkit) if you want
> that feature.

Forget the polkit. Dont know what I was thinking.

> 
> If you have any comments or suggestions for debian minimal post them here.
> There's no documentation as yet, but the Fedora-minimal guide should come
> in handy.
> 
> Enjoy
> 
> unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190110003008.xgubprjthq2bcn3t%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Debian minimal template

2019-01-09 Thread unman
If any one is interested there's a prebuilt debian-9-minimal template
currently available in itl-testing.
You can install it:
qubes-dom0-update --enablerepo=qubes-template-itl-testing 
qubes-template-debian-9-minimal

The template is a little smaller than stock stretch, and somewhat
leaner. To get root you'll need to use 'qvm-run -u root  xterm';
install qubes-core-agent-passwordless-root (and polkit) if you want
that feature.

If you have any comments or suggestions for debian minimal post them here.
There's no documentation as yet, but the Fedora-minimal guide should come
in handy.

Enjoy

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190110001459.4zjw4r4r5lvng7q7%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian minimal

2017-05-14 Thread Bernhard
Hi Unman & ubestemt,

thank you for your patience. I followed Unmans hints. The difference is
that, due to no-full-fedora-appvm-working-error I was using a
f-24-minimal als starting point. This is bad, since minimal means
minimal.. so the setup script failed miserably several times without
surprise. The first ones seemed easy. I added dialog, dialog-devel. Then
it was dpkg-dev and debootstrap that were missing. Got them as well.
Since gpg is used & installed I added as a guess additionally openssl &
openssl-devel as well. Now I am stuck: Setup spills out

Traceback (most recent call last)
 File ./setup, line 1919 in 
   main(sys.arg)
 File ./setup, line 1902, in main
   Wizard(DialogUI(), **args)**
 File ./setup, line 1190 in __call__
   self.verify_keys(self.keys, force=False)
 File ./setup, line 1233, in gpg-verify_key
   _env=env
..
UnicodeDecodeError: 'ascii' code can't decode byte 0xc3 in position 91:
ordinal not in range(128)

This error, as suggested here
https://stackoverflow.com/questions/21129020/how-to-fix-unicodedecodeerror-ascii-codec-cant-decode-byte

is due to some coding problems. Maybe some 'errors' in the setup script
never appear in a rich-fedora system, but fail in fedora-minimal? I have
no clue how too fix that.   Anyone might help?

Bernhard

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fc72dc9f-e4ce-4ef7-e609-2380e533c73b%40web.de.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian minimal

2017-05-13 Thread Unman
On Sat, May 13, 2017 at 02:38:18PM +0200, Bernhard wrote:
> Hello,
> I ask again about a debian-8/9-minimal (preferably with coldkernel). I
> know there was already a discussion on the subject, but I could not
> gather enough information yet to start myself. There is a conf file
> debian-8-minimal-3.0.2-201505170018.conf on github. The date "2015" is
> not completely re-assuring. Is there a newer one? Even if it were
> up-to-date, what do I do with this file? Could someone give me a brief
> summary (or give diff's to the well documented archlinux building process)?
> 
> Thank you!  Bernhard
> 

Hello Bernhard

I thought that this had been adequately dealt with before.


If you want to follow the instructions for archlinux, do so.
Step 2 is optional - you do not need a github account.
Step 5 is optional - you are able to deselect Fedora23 during setup
stage.

At step 6, (run ./setup)  follow the instructions until the "Builder
Plugin Selection" screen - Select builder-debian instead of
builder-archlinux. (If you skipped Step5 you will have to leave
builder-fedora selected.)

At the "Template distribution selection" screen, (deselect fedora-23 if
selected), select jessie+minimal.

Follow the rest of the instructions.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170513224957.GA23088%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] debian minimal

2017-05-13 Thread u+qbsu
Are these instructions of any help? You basically just follow the
instructions for building Arch.

https://groups.google.com/d/msgid/qubes-users/20170428154944.xt4ggq6xhhd3wxe3%40bestemt.no

-- 
ubestemt

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170513161449.hy6nq7vasvbfhp4u%40bestemt.no.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] debian minimal

2017-05-13 Thread Bernhard
Hello,
I ask again about a debian-8/9-minimal (preferably with coldkernel). I
know there was already a discussion on the subject, but I could not
gather enough information yet to start myself. There is a conf file
debian-8-minimal-3.0.2-201505170018.conf on github. The date "2015" is
not completely re-assuring. Is there a newer one? Even if it were
up-to-date, what do I do with this file? Could someone give me a brief
summary (or give diff's to the well documented archlinux building process)?

Thank you!  Bernhard


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1cccd7ad-008a-6b69-7231-5b3cc092eeb4%40web.de.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Debian minimal template?

2016-07-13 Thread Ben Wika
On Tuesday, 21 June 2016 18:18:42 UTC+10, Ben Wika  wrote:
> Perhaps I'm blind but I'm not seeing any mini package list in this thread. 
> Only a discussion about who was going to post one. 
> 
> On Tuesday, 21 June 2016 10:06:50 UTC+10, Unman  wrote:On Sun, Jun 19, 2016 
> at 07:39:45PM -0700, Ben Wika wrote:
> 
> > Hi,
> 
> > 
> 
> > Not sure what's been happening on this subject since September (maybe 
> 
> > discussion has moved?) but thought I'd make a contribution. Pretty new to 
> 
> > some of this so appreciate the feedback.
> 
> > 
> 
> > If we install the base qubes template for Debian-8, and then do:
> 
> > 
> 
> >     dpkg-query -f '${binary:Package} ' -W >> ~/inst
> 
> > 
> 
> > (refer https://wiki.debian.org/ListInstalledPackages )
> 
> > 
> 
> > Then we end up with a file in the home directory that lists all installed 
> 
> > packages.
> 
> > I can use "apt-mark auto" against all these items to clear out the list, 
> 
> > but before doing the autoremove, there's obviously some that have to 
> 
> > remain. 
> 
> > 
> 
> > To not 'break' the template completely, I'm finding that qubes-gui-agent is 
> 
> > the only one that needs to be set to manual.
> 
> > But for good measure I follow it up with the following apps which I know 
> 
> > I'll be leaving in the minimal template:
> 
> >     sudo apt-get install firefox-esr lxterminal leafpad xfe
> 
> > 
> 
> > Finally we do the autoremove step and end up saving about 100MB. Not alot, 
> 
> > but I'm more focused on simply reducing the attack surface.
> 
> > 
> 
> > Having done this, all seems to work fine but I imagine some features are 
> 
> > missing behind the scenes (particularly qubes features).
> 
> > So I appreciate any further recommendations or suggestions as to why debian 
> 
> > minimal has to be any more complicated than what I've stated.
> 
> > 
> 
> > Regards
> 
> > Ben
> 
> >  
> 
> > 
> 
> > On Thursday, 24 September 2015 07:15:42 UTC+10, Jason M wrote:
> 
> > >
> 
> > > On 22 September 2015 at 21:19, Unman  
> > > > wrote:
> 
> > >
> 
> > >> On Tue, Sep 22, 2015 at 07:37:37PM +, Axon wrote:
> 
> > >> > -BEGIN PGP SIGNED MESSAGE-
> 
> > >> > Hash: SHA512
> 
> > >> >
> 
> > >> > V??t ??est??k:
> 
> > >> > > I have created something like "minimal" Debian TemplateVM by
> 
> > >> > > removing (almost) all needless things. I can share the list of
> 
> > >> > > packages (e.g. output of apt-mark showmanual) if someone is
> 
> > >> > > interested.
> 
> > >> > >
> 
> > >> > > The sparse root.img has just 1.2GiB. OK, I admit it is not as
> 
> > >> > > minimal as Fedora.
> 
> > >> > >
> 
> > >> >
> 
> > >> > To be fair, fedora-21-minimal is actually larger than that after doing
> 
> > >> > a normal yum update (without installing any new packages), and of
> 
> > >> > course it's almost always a good idea to update the software before
> 
> > >> > using the template for anything important.
> 
> > >> >
> 
> > >> > > Regards, V??t ??est??k 'v6ak'
> 
> > >> > >
> 
> > >> > > On Thursday, August 27, 2015 at 7:19:36 AM UTC+2, cprise wrote:
> 
> > >> > >>
> 
> > >> > >> On 08/26/2015 08:38 PM, nrgaway wrote:
> 
> > >> > >>> On 26 August 2015 at 16:04, Marek Marczykowski-G??recki
> 
> > >> > >>> 
> 
> > >> > >>> > wrote:
> 
> > >> > >>>
> 
> > >> > >>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
> 
> > >> > >>>
> 
> > >> > >>> On Wed, Aug 26, 2015 at 05:50:41PM +, Qubed One wrote:
> 
> > >> >  Hi, just curious if anyone has any plans for a
> 
> > >> >  Debian-minimal
> 
> > >> > 
> 
> > >> > >>> template
> 
> > >> >  for Qubes R3 (ITL or community-maintained)?
> 
> > >> > >>>
> 
> > >> > >>> Jason, does the minimal template flavor (which exists in
> 
> > >> > >> configuration)
> 
> > >> > >>> is usable in the current state? Could you provide short
> 
> > >> > >>> description
> 
> > >> > >> what
> 
> > >> > >>> functionality is there (like working as NetVM etc) and what
> 
> > >> > >>> requires additional packages. Something like the same for
> 
> > >> > >>> Fedora minimal:
> 
> > >> > >>> http://www.qubes-os.org/doc/Templates/FedoraMinimal/
> 
> > >> > >>>
> 
> > >> > >>> Then I could simply build and upload the package.
> 
> > >> > >>>
> 
> > >> > >>>
> 
> > >> > >>> I will document this for you.  I do not use minimal template
> 
> > >> > >>> since it's not that much smaller than the regular one so I
> 
> > >> > >>> will need to test it all out again.
> 
> > >> > >>>
> 
> > >> > >>> --
> 
> > >> > >>
> 
> > >> > >> Then it would be good to make the Debian template selections
> 
> > >> > >> similar to Fedora, with the supplied 'regular' Debian template
> 
> > >> > >> having desktop features and apps. This would allow a user
> 
> > >> > >> preferring Debian over Fedora to use their system as a desktop
> 
> > >> > >> immediately instead of going through manual steps.
> 
> > >> > >>
> 
> > >> > >>
> 
> > >> > >>
> 
> > >> > >
> 
> > >> >
> 
> > >> > -BEGIN PGP SIGNATURE-
>

Re: [qubes-users] Debian minimal template?

2016-06-21 Thread Ben Wika
Perhaps I'm blind but I'm not seeing any mini package list in this thread. 
Only a discussion about who was going to post one. 

On Tuesday, 21 June 2016 10:06:50 UTC+10, Unman wrote:
>
> On Sun, Jun 19, 2016 at 07:39:45PM -0700, Ben Wika wrote: 
> > Hi, 
> > 
> > Not sure what's been happening on this subject since September (maybe 
> > discussion has moved?) but thought I'd make a contribution. Pretty new 
> to 
> > some of this so appreciate the feedback. 
> > 
> > If we install the base qubes template for Debian-8, and then do: 
> > 
> > dpkg-query -f '${binary:Package} ' -W >> ~/inst 
> > 
> > (refer https://wiki.debian.org/ListInstalledPackages ) 
> > 
> > Then we end up with a file in the home directory that lists all 
> installed 
> > packages. 
> > I can use "apt-mark auto" against all these items to clear out the list, 
> > but before doing the autoremove, there's obviously some that have to 
> > remain. 
> > 
> > To not 'break' the template completely, I'm finding that qubes-gui-agent 
> is 
> > the only one that needs to be set to manual. 
> > But for good measure I follow it up with the following apps which I know 
> > I'll be leaving in the minimal template: 
> > sudo apt-get install firefox-esr lxterminal leafpad xfe 
> > 
> > Finally we do the autoremove step and end up saving about 100MB. Not 
> alot, 
> > but I'm more focused on simply reducing the attack surface. 
> > 
> > Having done this, all seems to work fine but I imagine some features are 
> > missing behind the scenes (particularly qubes features). 
> > So I appreciate any further recommendations or suggestions as to why 
> debian 
> > minimal has to be any more complicated than what I've stated. 
> > 
> > Regards 
> > Ben 
> >   
> > 
> > On Thursday, 24 September 2015 07:15:42 UTC+10, Jason M wrote: 
> > > 
> > > On 22 September 2015 at 21:19, Unman  > > > wrote: 
> > > 
> > >> On Tue, Sep 22, 2015 at 07:37:37PM +, Axon wrote: 
> > >> > -BEGIN PGP SIGNED MESSAGE- 
> > >> > Hash: SHA512 
> > >> > 
> > >> > V??t ??est??k: 
> > >> > > I have created something like "minimal" Debian TemplateVM by 
> > >> > > removing (almost) all needless things. I can share the list of 
> > >> > > packages (e.g. output of apt-mark showmanual) if someone is 
> > >> > > interested. 
> > >> > > 
> > >> > > The sparse root.img has just 1.2GiB. OK, I admit it is not as 
> > >> > > minimal as Fedora. 
> > >> > > 
> > >> > 
> > >> > To be fair, fedora-21-minimal is actually larger than that after 
> doing 
> > >> > a normal yum update (without installing any new packages), and of 
> > >> > course it's almost always a good idea to update the software before 
> > >> > using the template for anything important. 
> > >> > 
> > >> > > Regards, V??t ??est??k 'v6ak' 
> > >> > > 
> > >> > > On Thursday, August 27, 2015 at 7:19:36 AM UTC+2, cprise wrote: 
> > >> > >> 
> > >> > >> On 08/26/2015 08:38 PM, nrgaway wrote: 
> > >> > >>> On 26 August 2015 at 16:04, Marek Marczykowski-G??recki 
> > >> > >>>  
> > >> > >>> > wrote: 
> > >> > >>> 
> > >> > >>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 
> > >> > >>> 
> > >> > >>> On Wed, Aug 26, 2015 at 05:50:41PM +, Qubed One wrote: 
> > >> >  Hi, just curious if anyone has any plans for a 
> > >> >  Debian-minimal 
> > >> >  
> > >> > >>> template 
> > >> >  for Qubes R3 (ITL or community-maintained)? 
> > >> > >>> 
> > >> > >>> Jason, does the minimal template flavor (which exists in 
> > >> > >> configuration) 
> > >> > >>> is usable in the current state? Could you provide short 
> > >> > >>> description 
> > >> > >> what 
> > >> > >>> functionality is there (like working as NetVM etc) and what 
> > >> > >>> requires additional packages. Something like the same for 
> > >> > >>> Fedora minimal: 
> > >> > >>> http://www.qubes-os.org/doc/Templates/FedoraMinimal/ 
> > >> > >>> 
> > >> > >>> Then I could simply build and upload the package. 
> > >> > >>> 
> > >> > >>> 
> > >> > >>> I will document this for you.  I do not use minimal template 
> > >> > >>> since it's not that much smaller than the regular one so I 
> > >> > >>> will need to test it all out again. 
> > >> > >>> 
> > >> > >>> -- 
> > >> > >> 
> > >> > >> Then it would be good to make the Debian template selections 
> > >> > >> similar to Fedora, with the supplied 'regular' Debian template 
> > >> > >> having desktop features and apps. This would allow a user 
> > >> > >> preferring Debian over Fedora to use their system as a desktop 
> > >> > >> immediately instead of going through manual steps. 
> > >> > >> 
> > >> > >> 
> > >> > >> 
> > >> > > 
> > >> > 
> > >> > -BEGIN PGP SIGNATURE- 
> > >> > 
> > >> > iQIcBAEBCgAGBQJWAa3+AAoJEJh4Btx1RPV8OGMQAOb/QipOtiPaBLpccTZaZsr5 
> > >> > yxfYrwjfFzpkLNhNU8ta0ClWl9MkoLp/tgUiAEfTC8c/DxA65UXGakKvmZrY4bfZ 
> > >> > WiEuL1Y5lGcJraABrdC+ehTl7Fd/jRufnuyQE5d9UWleu5VBHfvGvBKMn6wwZmwN 
> > >> > kXT1nfh5+SKHb3QaFMXz8l4pkLbQSy52TfscvgYPap

Re: [qubes-users] Debian minimal template?

2016-06-20 Thread Unman
On Sun, Jun 19, 2016 at 07:39:45PM -0700, Ben Wika wrote:
> Hi,
> 
> Not sure what's been happening on this subject since September (maybe 
> discussion has moved?) but thought I'd make a contribution. Pretty new to 
> some of this so appreciate the feedback.
> 
> If we install the base qubes template for Debian-8, and then do:
> 
> dpkg-query -f '${binary:Package} ' -W >> ~/inst
> 
> (refer https://wiki.debian.org/ListInstalledPackages )
> 
> Then we end up with a file in the home directory that lists all installed 
> packages.
> I can use "apt-mark auto" against all these items to clear out the list, 
> but before doing the autoremove, there's obviously some that have to 
> remain. 
> 
> To not 'break' the template completely, I'm finding that qubes-gui-agent is 
> the only one that needs to be set to manual.
> But for good measure I follow it up with the following apps which I know 
> I'll be leaving in the minimal template:
> sudo apt-get install firefox-esr lxterminal leafpad xfe
> 
> Finally we do the autoremove step and end up saving about 100MB. Not alot, 
> but I'm more focused on simply reducing the attack surface.
> 
> Having done this, all seems to work fine but I imagine some features are 
> missing behind the scenes (particularly qubes features).
> So I appreciate any further recommendations or suggestions as to why debian 
> minimal has to be any more complicated than what I've stated.
> 
> Regards
> Ben
>  
> 
> On Thursday, 24 September 2015 07:15:42 UTC+10, Jason M wrote:
> >
> > On 22 September 2015 at 21:19, Unman  > > wrote:
> >
> >> On Tue, Sep 22, 2015 at 07:37:37PM +, Axon wrote:
> >> > -BEGIN PGP SIGNED MESSAGE-
> >> > Hash: SHA512
> >> >
> >> > V??t ??est??k:
> >> > > I have created something like "minimal" Debian TemplateVM by
> >> > > removing (almost) all needless things. I can share the list of
> >> > > packages (e.g. output of apt-mark showmanual) if someone is
> >> > > interested.
> >> > >
> >> > > The sparse root.img has just 1.2GiB. OK, I admit it is not as
> >> > > minimal as Fedora.
> >> > >
> >> >
> >> > To be fair, fedora-21-minimal is actually larger than that after doing
> >> > a normal yum update (without installing any new packages), and of
> >> > course it's almost always a good idea to update the software before
> >> > using the template for anything important.
> >> >
> >> > > Regards, V??t ??est??k 'v6ak'
> >> > >
> >> > > On Thursday, August 27, 2015 at 7:19:36 AM UTC+2, cprise wrote:
> >> > >>
> >> > >> On 08/26/2015 08:38 PM, nrgaway wrote:
> >> > >>> On 26 August 2015 at 16:04, Marek Marczykowski-G??recki
> >> > >>> 
> >> > >>> > wrote:
> >> > >>>
> >> > >>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
> >> > >>>
> >> > >>> On Wed, Aug 26, 2015 at 05:50:41PM +, Qubed One wrote:
> >> >  Hi, just curious if anyone has any plans for a
> >> >  Debian-minimal
> >> > 
> >> > >>> template
> >> >  for Qubes R3 (ITL or community-maintained)?
> >> > >>>
> >> > >>> Jason, does the minimal template flavor (which exists in
> >> > >> configuration)
> >> > >>> is usable in the current state? Could you provide short
> >> > >>> description
> >> > >> what
> >> > >>> functionality is there (like working as NetVM etc) and what
> >> > >>> requires additional packages. Something like the same for
> >> > >>> Fedora minimal:
> >> > >>> http://www.qubes-os.org/doc/Templates/FedoraMinimal/
> >> > >>>
> >> > >>> Then I could simply build and upload the package.
> >> > >>>
> >> > >>>
> >> > >>> I will document this for you.  I do not use minimal template
> >> > >>> since it's not that much smaller than the regular one so I
> >> > >>> will need to test it all out again.
> >> > >>>
> >> > >>> --
> >> > >>
> >> > >> Then it would be good to make the Debian template selections
> >> > >> similar to Fedora, with the supplied 'regular' Debian template
> >> > >> having desktop features and apps. This would allow a user
> >> > >> preferring Debian over Fedora to use their system as a desktop
> >> > >> immediately instead of going through manual steps.
> >> > >>
> >> > >>
> >> > >>
> >> > >
> >> >
> >> > -BEGIN PGP SIGNATURE-
> >> >
> >> > iQIcBAEBCgAGBQJWAa3+AAoJEJh4Btx1RPV8OGMQAOb/QipOtiPaBLpccTZaZsr5
> >> > yxfYrwjfFzpkLNhNU8ta0ClWl9MkoLp/tgUiAEfTC8c/DxA65UXGakKvmZrY4bfZ
> >> > WiEuL1Y5lGcJraABrdC+ehTl7Fd/jRufnuyQE5d9UWleu5VBHfvGvBKMn6wwZmwN
> >> > kXT1nfh5+SKHb3QaFMXz8l4pkLbQSy52TfscvgYPapDWuoM6JoQwOwQbtkdPOmxh
> >> > m1sLgj7I8zq7yT6OEgS5+gJO1qrtbfFNafaEuyaYeWep1zoMRLYhgr2HSWWCeCEi
> >> > 5bkKoWoIqvZVjMvhzM7vM2PMiPFHzQ4xvOtHY0v0+j2QZjhuhA9LvcjUZMDAH8rY
> >> > i+ZONMjxqWGrd4VH3kQsqb8YESl1reQXIlMgro4KTr5y3Y2lvNbsPjdNiiyWLgpZ
> >> > 1JM6aa4uCMLTviNiSFz++i2o40uPJXRwjOcB8hE8Kz/g17W+IpP6QEDbYUdJwG8U
> >> > 1lyBnSF/ShARCthbJSzgoXvmZbZ0DuNE1j3MK/NSuE3QXIgnTrUqtJM8IfcfaPX+
> >> > 4jF7cNdtDJcq4gn25rGVUR3jMTfFqX/n3dtNnjcIX4d/VG799rvj8n71ghxEamDQ
> >> > iavGE3q3JaH1Hq+9P4koKJhoR/8wefMFkZnwTacg44ZpiVzxj7XvhTQg0kIVb

Re: [qubes-users] Debian minimal template?

2016-06-19 Thread Ben Wika
Hi,

Not sure what's been happening on this subject since September (maybe 
discussion has moved?) but thought I'd make a contribution. Pretty new to 
some of this so appreciate the feedback.

If we install the base qubes template for Debian-8, and then do:

dpkg-query -f '${binary:Package} ' -W >> ~/inst

(refer https://wiki.debian.org/ListInstalledPackages )

Then we end up with a file in the home directory that lists all installed 
packages.
I can use "apt-mark auto" against all these items to clear out the list, 
but before doing the autoremove, there's obviously some that have to 
remain. 

To not 'break' the template completely, I'm finding that qubes-gui-agent is 
the only one that needs to be set to manual.
But for good measure I follow it up with the following apps which I know 
I'll be leaving in the minimal template:
sudo apt-get install firefox-esr lxterminal leafpad xfe

Finally we do the autoremove step and end up saving about 100MB. Not alot, 
but I'm more focused on simply reducing the attack surface.

Having done this, all seems to work fine but I imagine some features are 
missing behind the scenes (particularly qubes features).
So I appreciate any further recommendations or suggestions as to why debian 
minimal has to be any more complicated than what I've stated.

Regards
Ben
 

On Thursday, 24 September 2015 07:15:42 UTC+10, Jason M wrote:
>
> On 22 September 2015 at 21:19, Unman  > wrote:
>
>> On Tue, Sep 22, 2015 at 07:37:37PM +, Axon wrote:
>> > -BEGIN PGP SIGNED MESSAGE-
>> > Hash: SHA512
>> >
>> > V??t ??est??k:
>> > > I have created something like "minimal" Debian TemplateVM by
>> > > removing (almost) all needless things. I can share the list of
>> > > packages (e.g. output of apt-mark showmanual) if someone is
>> > > interested.
>> > >
>> > > The sparse root.img has just 1.2GiB. OK, I admit it is not as
>> > > minimal as Fedora.
>> > >
>> >
>> > To be fair, fedora-21-minimal is actually larger than that after doing
>> > a normal yum update (without installing any new packages), and of
>> > course it's almost always a good idea to update the software before
>> > using the template for anything important.
>> >
>> > > Regards, V??t ??est??k 'v6ak'
>> > >
>> > > On Thursday, August 27, 2015 at 7:19:36 AM UTC+2, cprise wrote:
>> > >>
>> > >> On 08/26/2015 08:38 PM, nrgaway wrote:
>> > >>> On 26 August 2015 at 16:04, Marek Marczykowski-G??recki
>> > >>> 
>> > >>> > wrote:
>> > >>>
>> > >>> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256
>> > >>>
>> > >>> On Wed, Aug 26, 2015 at 05:50:41PM +, Qubed One wrote:
>> >  Hi, just curious if anyone has any plans for a
>> >  Debian-minimal
>> > 
>> > >>> template
>> >  for Qubes R3 (ITL or community-maintained)?
>> > >>>
>> > >>> Jason, does the minimal template flavor (which exists in
>> > >> configuration)
>> > >>> is usable in the current state? Could you provide short
>> > >>> description
>> > >> what
>> > >>> functionality is there (like working as NetVM etc) and what
>> > >>> requires additional packages. Something like the same for
>> > >>> Fedora minimal:
>> > >>> http://www.qubes-os.org/doc/Templates/FedoraMinimal/
>> > >>>
>> > >>> Then I could simply build and upload the package.
>> > >>>
>> > >>>
>> > >>> I will document this for you.  I do not use minimal template
>> > >>> since it's not that much smaller than the regular one so I
>> > >>> will need to test it all out again.
>> > >>>
>> > >>> --
>> > >>
>> > >> Then it would be good to make the Debian template selections
>> > >> similar to Fedora, with the supplied 'regular' Debian template
>> > >> having desktop features and apps. This would allow a user
>> > >> preferring Debian over Fedora to use their system as a desktop
>> > >> immediately instead of going through manual steps.
>> > >>
>> > >>
>> > >>
>> > >
>> >
>> > -BEGIN PGP SIGNATURE-
>> >
>> > iQIcBAEBCgAGBQJWAa3+AAoJEJh4Btx1RPV8OGMQAOb/QipOtiPaBLpccTZaZsr5
>> > yxfYrwjfFzpkLNhNU8ta0ClWl9MkoLp/tgUiAEfTC8c/DxA65UXGakKvmZrY4bfZ
>> > WiEuL1Y5lGcJraABrdC+ehTl7Fd/jRufnuyQE5d9UWleu5VBHfvGvBKMn6wwZmwN
>> > kXT1nfh5+SKHb3QaFMXz8l4pkLbQSy52TfscvgYPapDWuoM6JoQwOwQbtkdPOmxh
>> > m1sLgj7I8zq7yT6OEgS5+gJO1qrtbfFNafaEuyaYeWep1zoMRLYhgr2HSWWCeCEi
>> > 5bkKoWoIqvZVjMvhzM7vM2PMiPFHzQ4xvOtHY0v0+j2QZjhuhA9LvcjUZMDAH8rY
>> > i+ZONMjxqWGrd4VH3kQsqb8YESl1reQXIlMgro4KTr5y3Y2lvNbsPjdNiiyWLgpZ
>> > 1JM6aa4uCMLTviNiSFz++i2o40uPJXRwjOcB8hE8Kz/g17W+IpP6QEDbYUdJwG8U
>> > 1lyBnSF/ShARCthbJSzgoXvmZbZ0DuNE1j3MK/NSuE3QXIgnTrUqtJM8IfcfaPX+
>> > 4jF7cNdtDJcq4gn25rGVUR3jMTfFqX/n3dtNnjcIX4d/VG799rvj8n71ghxEamDQ
>> > iavGE3q3JaH1Hq+9P4koKJhoR/8wefMFkZnwTacg44ZpiVzxj7XvhTQg0kIVbkFy
>> > DudC0rAk6dy5lUdAoyWI
>> > =wiQV
>> > -END PGP SIGNATURE-
>> >
>> There's already a debian minimal spec which is easy to build.
>> I use it for most VMs - it is perfectly usable as is.
>> Jason - are you doing that write up or do you want me to pick it up?
>>
>
> I am currently fin