Arch-template and Firefox (49.0.2)

[Achim Patzner]

Hi!


I just tried moving my main working environments from the Fedora
template to Arch. All in all a much better user experience for nearly
everything besides one thing: Firefox tabs are constantly crashing. If
I'm opening the same URLs on a native Arch installation or other
templates the contents is displayed without any problems. Am I the only
one with that problem?


And no, no plugins installed at all.


Besides that: I could live without ever getiing a Ubuntu (or lookalike)
template but it might be time to adopt the Arch template (even if that
means the debian template was dropped completely). (Marek: What could we
offer to convince a core developer that he always wanted to do this?)



Achim

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

http://explosm.net/comics/2243/

In short: more people to help with handling those over 500 issues on
github already. Then we can think of something possibly resulting in
more issues to handle.

That's said, I've pointed template builder at config with
BUILDER_PLUGINS+=builder-archlinux and tried to build it - to have it in
qubes-templates-community repository. Every package uploaded to official
repository is built in Disposable VM connected through Tor - to minimize
risk of targeted attacks. After roughly hundred tries I gave up - it
failed every time on downloading some package, which fails the whole
build. If someone know how to convince pacman to retry failed downloads,
that would help. Pull request to builder-archlinux would be even better
;)

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJYJHRkAAoJENuP0xzK19csZ0wH/Aq6nJFOL15ErdM1RV9S3uVd
P3lUFqMK5F3ackdXyVBaIVacqs8zl2taGGuM9/EJ8kir5IU3K7qUeP6N87+nhc7g
Mf7qEY72aG4sGiDFgRbtphMEn/+7G1qQZuh9PwnvRT7vSSmiaIWPRnx34IIjdlD4
KIqaf6km8e6roB449J8I0tXEcthTNsWMB2pT/e6K3XadhrgwdU+SY338LyiKTnOe
ZtXciFTL2lNWprV+HFCf2ZlWDcQmb9NpU2INly7McGUWfNmTwW3wtc3QaH9hMwxD
BmioadvADGgNqkkwWoohNQio79j7IhCYamC+3019qrKsXGAAM7o9m0vfTRWYp2Q=
=mP9Y
-----END PGP SIGNATURE-----

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Ok, I've changed pacman mirror (echo PACMAN_MIRROR=mirrors.kernel.org >>
builder.conf) and it worked at third try. This means:

qubes-template-archlinux package is available qubes-templates-community repository!

I haven't tested it in any way. It include only what builder-archlinux
scripts does - especially powerpill (or some other mean to use updates
proxy) still needs to be configured manually:
https://www.qubes-os.org/doc/templates/archlinux/#package-manager-proxy-setup-section

Further work include:
- test it out
- automate powerpill setup (probably as part of core-agent-linux
repository - some post-installation script or such)
- adjust https://www.qubes-os.org/doc/templates/archlinux/
- write some separate announcement(?)

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJYJ+tfAAoJENuP0xzK19csmPoH/jXvtYSMYp3eH0UEOWtjoKdM
JsNqu4MfQlxosARHjxtUqeBBHGRBIK1RLnZAjFvxPKAyOLsHKr3zk81ZhDzMNJZQ
gjo4OTCX9/4x7pJ3A0VhPQOkFId337gQgSQdL6ymofJHYIKpq3gUVE2OakY9Fcmh
0kMxWlmWIOdk3udUVLmpFPA+1ss6kRrolkRxMh/u9JYv6mwHb+QuWD9ZGJX7NAgg
b784vlfHE22qpr+bymUp+EjOJbxh6nhHsdv9SyGLCQsZLjyS0jGsj6l61SENEjvP
Ae8KzYRXqdYY5bNMh9rB00lVRFCF4iqXcrFqn6zS5wNKl8rUReOgV4dAE9blGx0=
=MBCn
-----END PGP SIGNATURE-----

[Achim Patzner]

> qubes-template-archlinux package is available qubes-templates-community repository!

Make a wish 8-). But watch the movie “Wishmaster” first to see why getting more Genies is not a good idea.

> I haven't tested it in any way. It include only what builder-archlinux
> scripts does

> - test it out

Without testing it (I do not have real bandwidth in the middle of nowhere right now): Did you modify /etc/fstab to mount a /dev/shm larger than 256MB?

> - automate powerpill setup (probably as part of core-agent-linux
> repository - some post-installation script or such)

As much as I am in favor of it, everybody with a good grasp on security should think what was the least of three evils: Adding another repository (for powerpill as package), using the AUR to install powerpill or giving his template access to the network for updating (while updating). I’m still not clear about it myself (although using powerpill at home with a 400 MBit line is… fascinating).

> - adjust https://www.qubes-os.org/doc/templates/archlinux/
> - write some separate announcement(?)

Just change the subject on this message 8-)


Achim

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sun, Nov 13, 2016 at 01:00:17PM +0100, Achim Patzner wrote:
> > qubes-template-archlinux package is available qubes-templates-community repository!
>
> Make a wish 8-). But watch the movie “Wishmaster” first to see why getting more Genies is not a good idea.

If you wonder what could be useful, a big, fast SSD disk, like 1TB. That
would really speed up some things (like test-building templates), as
currently the only storage>500GB I have is not-so-fast HDD...

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJYWDOTAAoJENuP0xzK19cs8XcH/jInKDjyGUxEuUsFYyur5bZs
w1rSiZWUFZrx5KaAMjiuZc4HntPkQjVr7alWreT4m2rG6okzzwu/kDhy5u31fFws
LBZv927wwEUAUfEA5IDXf834ymdawRkK9I9OCdWQ9RvEbYvv97K+uSTLHuHFRM8T
KIG1WtwLDhRYOeIAiONUosZcO0gpSluQf6MnsAmApvckU/7Bz0SkNVGh1QbLm1S6
ZutHVve/1dl+b4bWK8rE5myNUUWSJdDRsTFjSBzHNTYEkPgwp4YZVjmX96kT7Noo
EUGsNhdD0TgdjcoXvuJyDm9Oq0+L/Xj4mGix/pGlEgvz6EJgYcWdWv6NuLn0ZYw=
=OFHa
-----END PGP SIGNATURE-----

[Nick Darren]

On November 13, 2016 12:26:06 PM GMT+08:00, "Marek Marczykowski-Górecki" <marm...@invisiblethingslab.com> wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA256
>

>Ok, I've changed pacman mirror (echo PACMAN_MIRROR=mirrors.kernel.org
>>>
>builder.conf) and it worked at third try. This means:
>
>qubes-template-archlinux package is available qubes-templates-community
>repository!
>
>I haven't tested it in any way. It include only what builder-archlinux
>scripts does - especially powerpill (or some other mean to use updates
>proxy) still needs to be configured manually:
>https://www.qubes-os.org/doc/templates/archlinux/#package-manager-proxy-setup-section
>
>Further work include:
> - test it out
> - automate powerpill setup (probably as part of core-agent-linux
> repository - some post-installation script or such)
> - adjust https://www.qubes-os.org/doc/templates/archlinux/
> - write some separate announcement(?)

I'm prefer using pacaur over powerpill. I don't have any issues on using it inside archlinux on qubes. It's easy to manage the cache files ~/.cache/pacaur/* too.

[Nick Darren]

I don't have any issues using it inside archlinux on qubes. It's easy to manage the cache files on
~/.cache/pacaur/*. It's the most popular AUR package manager and widely used.