Printer working with Debian DVMs but not when opening up a doc in a DVM from e.g. Work VM?

[vel...@tutamail.com]

I am using Qubes 3.2, I have a dedicated Debian Template for my more trusted VMs and a separate dedicated Debian Template for my DVMs with printer drivers installed.

This is tricky but I will try to explain:

I managed to get my printer set up using a Debian Template(printed Test Page fine from template).

Changed my DVM to Debian, I can print a web page and document using a Dedicated Debian based DVM i.e. Q(Top left Q menu icon) -> DisposableVM...no issues with printing web pages and transfered docs from here!

When I use a trusted VM(lets say my Work VM), I open a document using "Open in DisposableVM", I see the printer I set up, try to print and I get an error(something like "printer not connected")?

What might cause this? Any thoughts on a fix?

Thanks in advance...

[Unman]

Can you give a little more information?
I'm assuming that this is a network printer? Please correct me if
wrong.
When you spawn a disposableVM from "work" what is that connected
to?(Check the value for dispvm_netvm from qvm-prefs)

[vel...@tutamail.com]

I managed to work it out! It is a wireless printer...thank you Unman...you rock!

However my trouble shooting brought up another question: It appears as if the DVM launched from "work" inherits the firewall settings from "work"? Is that to be expected? All I needed to do was add my printers IP to my "work" firewall...is that correct? It does work! I have detailed the step-by-step instructions I followed below in case others want to do this. If I have done something wrong or there is a better way to do this...I am open to feedback.

Installing wireless network HP Printer into Debian template for DVM:
1) Clone updated Debian Template for printer
2) Download “HPLIP” driver in disposable VM(from HP website)
3) Move drivers/downloaded file to “Cloned Debian Template for printer”
4) Move file to “Cloned Debian Template for printer” desktop
5) Open terminal in “Cloned Debian Template for printer” and type:
cd Desktop
sh hplip-3.17.11.run (“hplip-3.17.11.run” was the file name for my drivers)
(when prompted for password type “su”)
6) Open printer settings in “Cloned Debian Template for printer”
7) Click “+” icon in the printer settings
8) Click “Network Printer” → “AppSocket/HP JetDirect” → enter printers ip address in “Host:” → “Forward”
9) A choose driver screen pops up → in my case I selected “HP” → I then selected my specific printer → this then allowed me to print a test page

Additional Notes:
* Assumes GNOME is installed (sudo tasksel → GNOME (use space bar to select GNOME)
* Need to temporary allow network access to “Cloned Debian Template for printer” to print test page
* If printing from “work” or other trusted VM, make sure to allow firewall access in “work” to printer IP if firewall for “work” is restricted
* Change DVM to “Cloned Debian Template for printer” https://www.qubes-os.org/doc/dispvm-customization/

[Unman]

This is expected behaviour - the disposableVM inherits netvm and firewall
rules, although there is a ticket open on the subject of considerable
vintage.
An alternative could be to have a dedicated printerVM to which you copy
files if you dont want to open up "work" firewall.

[vel...@tutamail.com]

I am not sure of the pros and cons but I actually think its OK and makes sense. I like the restricted DVM having restrictions.

Thanks again...and thanks Qubes team!