Networking with debian10-minimal instead of fedora-33

[taran1s]

Hi, I am trying to make work the sys-net and sys-firewall under
debian-10-minimal template, instead of fedora-33, but without success.
Fedora is annoying with its updates and also I would like to decrease
the exposure to the complexity of fedora-33 full template wherever
possible.

I followed these guides regarding networking:

https://www.qubes-os.org/doc/templates/minimal/
https://github.com/Qubes-Community/Contents/blob/master/docs/privacy/anonymizing-your-mac-address.md

I installed following packages into debian-10-minimal template and based
the sys-net and sys-firewall on it:

qubes-core-agent-networking qubes-core-agent-dom0-updates
qubes-core-agent-network-manager qubes-core-agent-passwordless-root nano
qubes-mgmt-salt-vm-connector qubes-core-agent-nautilus nautilus
gnome-terminal

Once I change the sys-whonix and sys-firewall, the network icon doesnt
show any Wi-Fi Networks, only ethernet.

Any workaround?

[taran1s]

'taran1s' via qubes-users:

Sorry, sys-net and sys-firewall, not sys-whonix of course.

>
> Any workaround? >


--
Kind regards
taran1s

gpg: 12DDA1FE5FB39C110F3D1FD5A664B90BD3BE59B3

[Steve Coleman]

On Wed, Jun 30, 2021, 10:55 AM 'taran1s' via qubes-users <qubes...@googlegroups.com> wrote:

Hi, I am trying to make work the sys-net and sys-firewall under
debian-10-minimal template, instead of fedora-33, but without success.
Fedora is annoying with its updates and also I would like to decrease
the exposure to the complexity of fedora-33 full template wherever
possible.

I don't have any suggestion for the Debian issue, but what I do to limit the updates is clone the fedora-33-minimal to a template called fedora-33-net, strip out any apps not needed, and then use that for my networking AppVM's. With fewer apps there are far fewer updates to deal with. 

[Dominique]

 Hi,

I use Debian 10 for sys-net. It works great.

Here are the steps that works for me.

1 - Install the minimal template for debian 10

2 - Update the template

3 - Install the qubes-core-agent-passwordless-root package (if you want)

4 - Shutdown the template

5 - Create a clone of the template (deb-10-sys)

6 - Start deb-10-sys

7 - Install the following package: qubes-core-agent-networking qubes-core-agent-network-manager pciutils

8 - Shutdown deb-10-sys

9 - Change the template for sys-net to deb-10-sys (after shutting down all qubes) and start sys-net

10 - If everything works (wired and wireless) you are good to go if not

11 - Start xterm in sys-net

12 - Use lspci to see the info of the card that is not working

13 - Search the web to see which firmware needs to be installed in debian to support that card

14 - Start deb-10-sys, install the firmware and shutdown deb-10-sys

15 - Restart sys-net - everything should work

I know I have use debian for firewall and USB in the past but went back to Fedora for USB because of some issue (don't even remember what issue) and I am now trying Mirage for firewall.

Hope it helps!

D.

[Sven Semmler]

On 7/1/21 7:47 AM, Dominique wrote:
> Search the web to see which firmware needs to be installed in debian
> to support that card

If your WiFi is Intel just install the "firmware-iwlwifi"

--
public key: https://www.svensemmler.org/2A632C537D744BC7.asc
fingerprint: DA59 75C9 ABC4 0C83 3B2F 620B 2A63 2C53 7D74 4BC7

[799]

Hello,

Steve Coleman <stevenlc...@gmail.com> schrieb am Do., 1. Juli 2021

I don't have any suggestion for the Debian issue, but what I do to limit the updates is clone the fedora-33-minimal to a template called fedora-33-net, strip out any apps not needed, and then use that for my networking AppVM's. With fewer apps there are far fewer updates to deal with. 

Not sure if there is a big benefit using Debian over Fedora 33 but I would like to hear if there is a benefit.

I am using my own "minimalized" Templates which are build from a fedora-33-minimal template.

You can find more about my templates here:

https://github.com/one7two99/my-qubes/blob/master/my-qubes-templates/20%20template-sys-vms.md

The template will work for sys-net / sys-firewall / sys-usb and also for a vpn-qube.

I don't see that updating my fedora-based template takes much longer than my debian templates.

One7two99

[Sven Semmler]

On 7/11/21 3:23 PM, 799 wrote:
> Not sure if there is a big benefit using Debian over Fedora 33 but I would
> like to hear if there is a benefit.

Personally I like that once I setup a Debian qube, it'll run and receive
security updates for many years. I haven't looked up how quickly a
Fedora qube EOLs but it 'feels' like year, maybe 18 months.

It kind of depends what you want from your setup. I've reached a point
where I have plenty of stuff to do and don't want to deal with things
like updates and changing interfaces any more than necessary. Don't get
me wrong: I thoroughly enjoyed the learning curve and setting everything
up, but now that it works I enjoy not having to think about it all the time.

/Sven