minimal Fedora template as base for sys-net and sys-firewall

[Tim Wolf]

Hello all,

I need to save some space on my harddisk, why I would like to use a
Fedora-29-minimal template as base for system and security related VMs.

Is there a list, what packages have to be added for this task?

As I'm trying out many unknown and possibly faulty packages in the
standard templates, I want to separate both parts.

Greets,

Tim

[unman]

Have a look at the excellent docs:
https://www.qubes-os.org/doc/templates/fedora-minimal/

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

It sounds like this is what you're looking for:

https://www.qubes-os.org/doc/templates/fedora-minimal/#customization

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=etwv
-----END PGP SIGNATURE-----

[799]

Hello Tim,

Tim Wolf <time...@network-application.de> schrieb am Sa., 20. Apr. 2019, 04:44:

(...)

I need to save some space on my harddisk, why I would like to use a
Fedora-29-minimal template as base for system and security related VMs.

An AppVM will not take much space, even if the template is very back as it only stores the delta? As such you won't save a single byte if the old template VM of the sys-VMs, which is likely fedora-28/fedora-29 is still in use.

Is there a list, what packages have to be added for this task?

See through the links others have provided, this was a good starting point for me to create my own template.

You can also look into my notes here:

https://github.com/one7two99/my-qubes/blob/master/docs/history.txt

This covers how I have setup my templates, you can just run all commands from dom0:

Hint: you need to make sure that you have the right wifi drivers in your sys-net VM.

I am using the iwl6000g2a-firmware package, which is for my Lenovo x230, you might need another package depending on your wifi card.

If you have trouble finding the right driver, ask here.

# Install Fedora minimal template
sudo qubes-dom0-update qubes-template-fedora-29-minimal


# ================
#  t-fedora29-sys
# ================
template=fedora-29-minimal
systemplate=t-fedora-29-sys

#clone template
qvm-clone $template $systemplate
# update template
qvm-run --auto --user root --pass-io --no-gui $systemplate \
  'dnf update -y'

# install a missing package for fedora-29-minimal
# without it, gui-apps will not start 
# not needed in the latest fedora-29-minimal template (april 2019)
qvm-run --auto --user root --pass-io --no-gui $systemplate \
  'dnf install -y e2fsprogs'

# Install required packages for Sys-VMs
qvm-run --auto --user root --pass-io --no-gui $systemplate \
  'dnf -y install qubes-core-agent-qrexec qubes-core-agent-systemd \
  qubes-core-agent-networking polkit qubes-core-agent-network-manager \
  notification-daemon qubes-core-agent-dom0-updates qubes-usb-proxy \
  iwl6000g2a-firmware qubes-input-proxy-sender iproute iputils \
  NetworkManager-openvpn NetworkManager-openvpn-gnome \
  NetworkManager-wwan NetworkManager-wifi network-manager-applet'

# Optional packages you might want to install in the sys-template:
qvm-run --auto --user root --pass-io --no-gui $systemplate \
  'dnf -y install nano less pciutils xclip'

qvm-run --auto --user root --pass-io --no-gui $systemplate \
  'dnf -y install qubes-core-agent-passwordless-root'

# Nice(r) Gnome-Terminal compared to xterm
qvm-run --auto --user root --pass-io --no-gui $systemplate \
  'dnf -y install gnome-terminal terminus-fonts dejavu-sans-fonts \
   dejavu-sans-mono-fonts'

# Set new template as template for sys-vms
qvm-shutdown --all --wait --timeout 120
qvm-prefs --set sys-usb template $systemplate
qvm-prefs --set sys-net template $systemplate
qvm-prefs --set sys-firewall template $systemplate
#qvm-prefs --set sys-vpn template $systemplate

--- 8< ---

Regards

O/799