Q: sys-firewall using "100% CPU" while updates are being installed

3 views
Skip to first unread message

Ulrich Windl

unread,
Apr 17, 2022, 5:07:13 PM4/17/22
to qubes...@googlegroups.com
Hi!

I have (by today's standards) just a slow DSL line to download updates.
Still I see spikes where sys-firewall is at "100% CPU" (according to
xentop),so I wonder what CPU-intensive task sys-firewall might perform.
IMHO it cannot be packet filtering (the purpose of a firewall), because
my line is so slow.
Am I right?

Regards,
Ulrich

awokd

unread,
Apr 18, 2022, 1:02:34 PM4/18/22
to qubes...@googlegroups.com
Ulrich Windl:
Sys-firewall is the default UpdateVM if you aren't using Whonix, so
would be responsible for downloading updates on behalf of other VMs,
etc. If you're curious what it's doing, you should be able to open a
terminal window on it and run "sudo top" to see the process responsible
for high load.

--
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots
Reply all
Reply to author
Forward
0 new messages