sys-usb based on fedora-29-minimal >> what am I missing?

onw7two99

unread,

Mar 23, 2019, 6:20:22 AM3/23/19

to qubes-users

Hello Qubes Community,

I have been trying to get sys-usb working using a fedora-29-minimal template

Unfortunately it will not work, even after installing all packages which
"should" be enough to get sys-usb working (Link
https://www.qubes-os.org/doc/templates/fedora-minimal/).

If I use the default fedora-28 (fat template) for sys-usb, everything is
working and I can attach my external harddrive to an AppVM.
If I use my custom build template for sys-usb, other USB devices work,
but I can't attach a harddrive to another AppVM, from the GUI it looks
like the drive is attached, but it is not shown in nautilus in the
target-AppVM, where I can then click on it and mount it.

Any idea what I am missing or how I can proceed troubleshooting? As all
my VMs are based on custom build templates (fedora-29-minimal) I don't
want to have the fat fedora-28 template only because sys-usb will not work.

To reproduce the problem: this is how I build my sys-vm-Template from
scratch (fedora-29-minimal) which I am using for sys-net, sys-firewall
and sys-usb (it it would work). Hint: You might need to change the wifi
drivers if you are using another wifi card modell. "iwl6000g2a-firmware"
is for my lenovo x230.

--- --- --- 8< --- --- --- --- --- --- --- 8< --- --- ---

# script to build a sys-vm template based on fedora-29-minimal
# the base template which is used to build my own sys-template
template=fedora-29-minimal

#my custom made template for sys-vms:
systemplate=t-fedora-29-sys

# get fedora-29-minimal template (only needs to be done once)
sudo qubes-dom0-update qubes-template-$template

#remove an old template (if it exists)
qvm-kill $systemplate
qvm-remove -f $systemplate

#clone template
qvm-clone $template $systemplate

# update template
qvm-run --auto --user root --pass-io --no-gui $systemplate \
'dnf update -y'

# install a missing package for fedora-29-minimal
# without it, gui-apps will not start
qvm-run --auto --user root --pass-io --no-gui $systemplate \
'dnf install -y

# Install required packages for Sys-VMs
qvm-run --auto --user root --pass-io --no-gui $systemplate \
'dnf -y install e2fsprogs qubes-core-agent-qrexec \
   qubes-core-agent-systemd qubes-core-agent-networking polkit \
   qubes-core-agent-network-manager notification-daemon \
   qubes-core-agent-dom0-updates qubes-usb-proxy \
   iwl6000g2a-firmware qubes-input-proxy-sender iproute iputils \
   NetworkManager-openvpn NetworkManager-openvpn-gnome \
   NetworkManager-wwan NetworkManager-wifi \
   network-manager-applet qubes-core-agent-passwordless-root'

# Optional packages you might want to install in the sys-template:
qvm-run --auto --user root --pass-io --no-gui $systemplate \
'dnf -y install nano less pciutils xclip'

# Set new template as template for sys-vms
qvm-shutdown --all --wait --timeout 120
qvm-prefs --set sys-usb template $systemplate
qvm-prefs --set sys-net template $systemplate
qvm-prefs --set sys-firewall template $systemplate
qvm-prefs --set sys-vpn template $systemplate
qvm-start sys-firewall sys-usb

--- --- --- 8< --- --- --- --- --- --- --- 8< --- --- ---

- O.

pEpkey.asc

unman

unread,

Mar 26, 2019, 8:49:20 PM3/26/19

to qubes-users

On Sat, Mar 23, 2019 at 11:20:17AM +0100, onw7two99 wrote:
> Hello Qubes Community,
>
> I have been trying to get sys-usb working using a fedora-29-minimal template
>
> Unfortunately it will not work, even after installing all packages which
> "should" be enough to get sys-usb working (Link
> https://www.qubes-os.org/doc/templates/fedora-minimal/).
>
> If I use the default fedora-28 (fat template) for sys-usb, everything is
> working and I can attach my external harddrive to an AppVM.
> If I use my custom build template for sys-usb, other USB devices work,
> but I can't attach a harddrive to another AppVM, from the GUI it looks
> like the drive is attached, but it is not shown in nautilus in the
> target-AppVM, where I can then click on it and mount it.
>

The obvious question is, IS it attached to the qube? and HOW?
Check what the widget says (I assume that's what you mean by GUI), then
open a konsole in dom0 and run qvm-usb. Try to attach the device at the
command line. Run qvm-usb again.
Then in qube, run lsusb - what do you see?

Incidentally, what happens if you use qvm-block to attach partition
from the harddrive ? Does the drive appear in nautilus in the qube then?

799

unread,

Mar 31, 2019, 6:49:02 AM3/31/19

to unman, qubes-users

Hello Unman,

On Wed, 27 Mar 2019 at 01:49, unman <un...@thirdeyesecurity.org> wrote:

The obvious question is, IS it attached to the qube? and HOW?
Check what the widget says (I assume that's what you mean by GUI), then
open a konsole in dom0 and run qvm-usb. Try to attach the device at the
command line. Run qvm-usb again.
Then in qube, run lsusb - what do you see?

Incidentally, what happens if you use qvm-block to attach partition
from the harddrive ? Does the drive appear in nautilus in the qube then?

I run some additional tests with my custom sys-usb VM.

To summarize so far:

- sys-usb is working fine, but I am unable to mount usb storage devices when I use my custom build image

- if I use the default fedora-28 (fat) template for sys-usb connecting usb storage devices will work, there for the root cause must be in the template I am using for sys-usb.

Additionally I am able to mount the USB-drive manually from my sys-usb via mount in the cli as root (in sys-usb).