Admin API and secure of a client

[Nicolas Mojon]

Hi, as a new 4.0 qubes user and new qubes user, I have questions about the Admin API

As an admin in my society, I would like to make my users use Qubes, but, to be sure that they doesn't broke anything and that no secured information goes out, I would like that they have the minimum right on the VM they are using.

I would like by exemple to make that they are not able to create other VM then those I have created for them.

So for that I have tried to create an "admin VM" like you propose with the Admin API to not have all on Dom0. for the rights, it seems that there is no problem, I have follow your post on "introducing Admin API" so the must be right, but the problem is that even with the rights, the VM I want to use keep said to me that they don't know the command.

By exemple when I try the: qvm-ls to monitor my VM's it said me:
Bash: qvm-ls command not found

Could you help me to find where is my mistake

Thank you in advance...

Best regards

Nicoals

[Wojtek Porczyk]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Tue, Aug 08, 2017 at 05:23:19AM -0700, Nicolas Mojon wrote:
> Bash: qvm-ls command not found

Did you install the "qubes-core-admin-client" package?


- --
pozdrawiam / best regards _.-._
Wojtek Porczyk .-^' '^-.
Invisible Things Lab |'-.-^-.-'|
| | | |
I do not fear computers, | '-.-' |
I fear lack of them. '-._ : ,-'
-- Isaac Asimov `^-^-_>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=bGwD
-----END PGP SIGNATURE-----

[Nicolas Mojon]

My question may be stupid but how can I do that cause no package seems to exist from repository

Best regards

Nicolas

[Wojtek Porczyk]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Tue, Aug 08, 2017 at 07:13:51AM -0700, Nicolas Mojon wrote:
> My question may be stupid but how can I do that cause no package seems to exist from repository

Those packages (.rpm and .deb, respectively) are for now in current-testing
repository. You have to change "enable=" to "1" in /etc/yum.repos.d/qubes*
and/or uncomment relevant line in /etc/apt/sources.list.d/*qubes* .

(Sorry I don't remember exact file names).

https://www.qubes-os.org/doc/software-update-vm/

- --
pozdrawiam / best regards _.-._
Wojtek Porczyk .-^' '^-.
Invisible Things Lab |'-.-^-.-'|
| | | |
I do not fear computers, | '-.-' |
I fear lack of them. '-._ : ,-'
-- Isaac Asimov `^-^-_>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJZidfUAAoJEL9r2TIQOiNRzIcQAIPn68b/f/UkuQ4ILYmAQUmX
SaH5DtPfTlhiBh/U1l0kZPbEX7yN1LslmhSHAuroqohNoTPmRBuxtyZFNNCFQYQU
Kguw5YIxEoW6cPfouoxQa+bOhTCpopxWONbnzSoQ0lBUeViAFXChgfRkfz4+sP/F
r7rQFx5yd/J9eZ0hNk/fwQAYoWkcXshUk2Vc1zQR04V7ImAvnzYMLd8VHGp1qYoU
haekTa/xIe+YVPplUY0XuDa8V32/1dM8Jh9FoqrUUr3J2xDPm8YzB3++OpmBLkTh
do0gTQ2HU+gO4wwpBLJ5eZFcFH6lGtbgvp0JN2T+f53PceGndvWA+/P8XWkISqyB
Bu88kT+s2IRUJ7+TTPwWK+k5Ms9rxELE2Lzdh832Jm+DyP+6WoORITr+4hvQDUxN
aYyW8oVVQiEbV2kghfZ+ZfpG2eZTnYE4KPvilLzUGFvHfd8tQNMMx+2EwrWEBMCa
/olK5nj2MdjYrJp8w/5MDhF9YVt8yGjapPq1yYQDJf96a83naxO3aIby71OY4/mT
pniww0vcRyvatv4XJ+B/jjTMJbOzG/x2IAQnFemwCg/bBzCOXaqHAMA6+3qj0Ngw
n0m/y4HoD8OQln5+652HMqvJwCeLC8g8d55mSKvzAc/DkE2pG3OmuXoK2ZI+IlYk
21HJf28n1uFP0j74+p4u
=tcZm
-----END PGP SIGNATURE-----