Domains Have Internet But Templates No

48 views
Skip to first unread message

Repairing

unread,
Jan 11, 2017, 12:38:00 PM1/11/17
to qubes...@googlegroups.com
There's no problem to connect to the internet with domains:
anon-whonix
personal
untrusted

But i need to connect through templates:
fedora
debian

There's no connection, white blank screen when i use firefox, how i can connect to the firefox with templates?




john.david.r.smith

unread,
Jan 11, 2017, 12:43:40 PM1/11/17
to Repairing, qubes...@googlegroups.com
first you should not do this.
its a security issue (hence it is disabled).
if something owns the firefox in the template, all vms based on that
template are owned.
why do you want to do this?

how to enable access:
settings -> firewall rules -> allow full access for 5 min -> ok

Unman

unread,
Jan 11, 2017, 1:19:22 PM1/11/17
to john.david.r.smith, Repairing, qubes...@googlegroups.com
I'd recommend you read the documentation on this and weigh up what you
are doing. There's little point in having Qubes if you are going to
use it in ways that negate the security it aims for.

www.qubes-os.org/doc/software-update-vm is an excellent guide - try
reading it.

templates *do* have internet access by default. It is restricted to
access via an upstream proxy which provides some filtering. This enables
you to use tools to install software without opening full access.

You CAN open up the firewall as suggested. But you should be aware that
there is a critical bug that often means that that access is not closed
off at the end of the 5 mins.
An alternative approach would be to download whatever files or packages
you want in a dispVM nd then copy them to the template and install
them locally.

But I really would suggest that you take a little while to read and
understand what Qubes offers and how it works before launching in.

raah...@gmail.com

unread,
Jan 11, 2017, 2:05:27 PM1/11/17
to qubes-users, repa...@protonmail.com

why do you need to use firefox in the template?

Aloxis

unread,
Jan 11, 2017, 2:39:30 PM1/11/17
to raah...@gmail.com, qubes-users, repa...@protonmail.com
You need to enable network access in the template's firewall tab. Also using a browser on a template is a great way to permenately  compromise the security of all of your vms in one fell swoop. Might as well not even use Qubes at that point. You have been warned.
--
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com.
To post to this group, send email to qubes...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/aa5578ef-6f63-4ea2-9262-048fd286afd8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

raah...@gmail.com

unread,
Jan 13, 2017, 5:08:36 PM1/13/17
to qubes-users, raah...@gmail.com, repa...@protonmail.com, alo...@protonmail.com
if its because you want to install something you can use a dispvm to download it and transfer it over to the template, if worried webpage malicious. But then you'd have to worry about the file you transferred over, depends if you trust it or not.
Reply all
Reply to author
Forward
0 new messages