How to build Qubes R3.2?

137 views
Skip to first unread message

Patrick Schleizer

unread,
Jul 31, 2016, 9:27:45 PM7/31/16
to qubes...@googlegroups.com
There are no release3.2 git branches in either github marmarek or
QubesOS. Also in ./setup it is not listed (merged latest qubes-builder
source code from githu).

Is it same like R3.1?

Cheers,
Patrick

Patrick Schleizer

unread,
Jul 31, 2016, 9:45:51 PM7/31/16
to qubes...@googlegroups.com
Patrick Schleizer:
Another issue when trying to build R3.1.

+ echo '--> Fetching from
https://github.com/marmarek/qubes-core-vchan-xen.git release3.1...'
--> Fetching from https://github.com/marmarek/qubes-core-vchan-xen.git
release3.1...
+ '[' qubes-src/core-vchan-xen == . -o -d qubes-src/core-vchan-xen -a ''
'!=' 1 ']'
+ cd qubes-src/core-vchan-xen
+ git fetch -q https://github.com/marmarek/qubes-core-vchan-xen.git
--tags release3.1
fatal: Couldn't find remote ref release3.1
+ '[' '' == 1 ']'
+ exit 1
Makefile:186: recipe for target 'core-vchan-xen.get-sources' failed
make: *** [core-vchan-xen.get-sources] Error 1

Patrick Schleizer

unread,
Jul 31, 2016, 9:47:22 PM7/31/16
to qubes...@googlegroups.com
'make clean-all' also failing.

user@qubes-build:~/qubes-builder$ make clean-all
Makefile:185: target 'template-whonix.get-sources' given more than once
in the same rule
Makefile:187: target 'template-whonix.get-sources-extra' given more than
once in the same rule
Makefile:207: target 'template-whonix-vm' given more than once in the
same rule
Makefile:219: target 'template-whonix-dom0' given more than once in the
same rule
Makefile:229: target 'sign-template-whonix' given more than once in the
same rule
Makefile:236: target 'sign-dom0-template-whonix' given more than once in
the same rule
Makefile:240: target 'sign-vm-template-whonix' given more than once in
the same rule
Cleaning up debs in qubes-packages-mirror-repo/README/dists/...
Cleaning up debs in qubes-packages-mirror-repo/README/deb/...
Cleaning up deb in /home/user/qubes-builder/qubes-src/*/deb/*...
(cd qubes-src/installer-qubes-os/yum || cd
qubes-src/installer-qubes-os/yum && ./clean_repos.sh) || true
/bin/bash: line 0: cd: qubes-src/installer-qubes-os/yum: No such file or
directory
/bin/bash: line 0: cd: qubes-src/installer-qubes-os/yum: No such file or
directory
Cleaning up rpms in qubes-packages-mirror-repo/jessie/...
Cleaning up rpms in qubes-src/*/pkgs/*/*/*...
Running the %clean script of the rpmbuild...
warning: Macro %rel defined but not used within scope
error: File /home/user/qubes-builder/qubes-src/vmm-xen/xen-4.6.1.tar.gz:
No such file or directory
make[1]: *** qubes-src/linux-template-builder: No such file or
directory. Stop.
Makefile:377: recipe for target 'linux-template-builder.clean.jessie' failed
make: [linux-template-builder.clean.jessie] Error 2 (ignored)
user@qubes-build:~/qubes-builder$ echo $?
0
user@qubes-build:~/qubes-builder$ git describe
mm_367b4e5b

Marek Marczykowski-Górecki

unread,
Aug 1, 2016, 5:38:14 AM8/1/16
to Patrick Schleizer, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Mon, Aug 01, 2016 at 01:27:00AM +0000, Patrick Schleizer wrote:
> There are no release3.2 git branches in either github marmarek or
> QubesOS. Also in ./setup it is not listed (merged latest qubes-builder
> source code from githu).

release3.2 branches are created at final release time. During rc stage,
it is still in "master". It's described here:
https://www.qubes-os.org/doc/version-scheme/

> Is it same like R3.1?

Take a look at example-configs/qubes-os-master.conf - you probably need
to include some changes, like changing DIST_DOM0 to fc23 or include
app-linux-usb-proxy.

On Mon, Aug 01, 2016 at 01:45:00AM +0000, Patrick Schleizer wrote:
> Another issue when trying to build R3.1.
>
> + echo '--> Fetching from
> https://github.com/marmarek/qubes-core-vchan-xen.git release3.1...'
> --> Fetching from https://github.com/marmarek/qubes-core-vchan-xen.git
> release3.1...
> + '[' qubes-src/core-vchan-xen == . -o -d qubes-src/core-vchan-xen -a
> ''
> '!=' 1 ']'
> + cd qubes-src/core-vchan-xen
> + git fetch -q https://github.com/marmarek/qubes-core-vchan-xen.git
> --tags release3.1
> fatal: Couldn't find remote ref release3.1
> + '[' '' == 1 ']'
> + exit 1
> Makefile:186: recipe for target 'core-vchan-xen.get-sources' failed
> make: *** [core-vchan-xen.get-sources] Error 1

And generally stable branches are on QubesOS github account. For some
components I may have them on my account too, but don't treat this as a
rule.

On Mon, Aug 01, 2016 at 01:47:00AM +0000, Patrick Schleizer wrote:
> 'make clean-all' also failing.
>
> user@qubes-build:~/qubes-builder$ make clean-all

(...)

> make[1]: *** qubes-src/linux-template-builder: No such file or
> directory. Stop.
> Makefile:377: recipe for target 'linux-template-builder.clean.jessie'
> failed
> make: [linux-template-builder.clean.jessie] Error 2 (ignored)
> user@qubes-build:~/qubes-builder$ echo $?
> 0

You haven't downloaded the sources, so there is nothing to clean. And
this is also why this and other errors are (correctly) ignored.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXnxiBAAoJENuP0xzK19csoPYH/3t9/fkmu2nIsbf1x63ahor2
NH57Cn6ig6nvnqzy3BNq56ohwbdRbLJkYuVX/peqAFBLr6AMRXWME2CZC8EQGKqz
8Qttnzh0cGZsh1IRk0B9qFPgbb+M82o6v9MSUDgWUqO7m26bBFyjT9YVzEHxZTKl
/b1KxRNR3UUBZ0BA/oXFSWZfNNbXNBBbcfbCqbL/YgtFn7mN9lz2vpqUVNYYeYX4
UIkD+ROOD6oSxhf0USQ1atGfTSmkMWfB+oFawntzkncBBUPfZuW3N/X9nEpC7G1f
N9HeFpVIzAXJfT2nc0TBIsAdCutFNoLxS+b2XvdGVBBW8+n9YI+ws1S2fLDSM3Q=
=to6s
-----END PGP SIGNATURE-----

Patrick Schleizer

unread,
Aug 1, 2016, 10:44:00 AM8/1/16
to qubes...@googlegroups.com
Running into another issue.

user@qubes-build:~/qubes-builder$ make template
ln: failed to access
‘pkgs/fc23/x86_64/kernel-devel-4.4.14-11.pvops.qubes.x86_64.rpm’: No
such file or directory
/home/user/qubes-builder/qubes-src/builder-fedora/Makefile.fedora:163:
recipe for target 'update-repo' failed
make[1]: *** [update-repo] Error 1
Makefile:296: recipe for target 'template-local-fc23' failed
make: *** [template-local-fc23] Error 1

Any idea?

Marek Marczykowski-Górecki

unread,
Aug 1, 2016, 12:02:19 PM8/1/16
to Patrick Schleizer, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Have you built linux-kernel? Anyway you can remove linux-kernel from
COMPONENTS for the template-only build (kernel-devel isn't installed in
the template).

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXn3KDAAoJENuP0xzK19csV8cH/jiMY01kQJHs9u7choCC7qxG
l22Qfs44fBraqHsl2eJzd81vR6+BBaPP/pf+hnpXuZxVmoyaS9wCPPurkLmmgqcx
K652g8AVFphFB8eRIZLIZdsgH0v+IBenkqGfq7barptWTaui1vrm6+qYaryrbMtE
UhRROopupS3XpZRZUb5CNapB8A6zqEBxhNMkb+uqx9vIDC+EEq8jVttaV9fx5wdz
kPC0ubGeGDO7f5E18OlifieMvaevBI9OpMPlTyEGphng90I5tULKHq8/FVM3OcZZ
D9aN4WV/x64ny9RLiB0DPN9ByReQfyKlMwtmYaN60xKJW+vNA1lbNOIrIlkMj1w=
=KyKs
-----END PGP SIGNATURE-----

Patrick Schleizer

unread,
Aug 1, 2016, 9:37:29 PM8/1/16
to qubes...@googlegroups.com
Marek Marczykowski-Górecki:
> On Mon, Aug 01, 2016 at 02:43:00PM +0000, Patrick Schleizer wrote:
>> Running into another issue.
>
>> user@qubes-build:~/qubes-builder$ make template
>> ln: failed to access
>> ‘pkgs/fc23/x86_64/kernel-devel-4.4.14-11.pvops.qubes.x86_64.rpm’: No
>> such file or directory
>> /home/user/qubes-builder/qubes-src/builder-fedora/Makefile.fedora:163:
>> recipe for target 'update-repo' failed
>> make[1]: *** [update-repo] Error 1
>> Makefile:296: recipe for target 'template-local-fc23' failed
>> make: *** [template-local-fc23] Error 1
>
>> Any idea?
>
> Have you built linux-kernel? Anyway you can remove linux-kernel from
> COMPONENTS for the template-only build (kernel-devel isn't installed in
> the template).
>
>

Right, I don't need this.

I didn't know https://github.com/QubesOS/qubes-template-configs exists.
Glad it does!

Is
https://github.com/QubesOS/qubes-template-configs/blob/master/R3.1/templates-community/whonix.conf
still okay for R3.2?

Marek Marczykowski-Górecki

unread,
Aug 2, 2016, 5:35:46 AM8/2/16
to Patrick Schleizer, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Yes, should work just fine.

In practice I use very minimal config, which pull Qubes components
from deb.qubes-os.org. Basically COMPONENTS, with:

COMPONENTS = linux-template-builder builder builder-debian \
template-whonix
USE_QUBES_REPO_VERSION = 3.2

Will update that repo in few days.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXoGloAAoJENuP0xzK19csVG0H/1pIvbxa0Ip9YcWf6BUk7Mq1
0L3tLNFb3Fi+AvG2fqNZ9PmneS1edM9KGNMtG9son3AKQlxZl4OzgUcdX8srTJfp
ytpLQBavlQXOy1YIPGIc4Io60Q/kA3BCWOCY+ALjVWTBMB8dFqTlktOvDf2YpTBk
t7x8rzuPArnsybloR8m0bSLcTXSpoLo029pD6kuNosq362WUlmwW9KT9kGQJmCAP
Nq/bPRXlUaPJnkJdVvG1b7Ps6E8vbpa2IWSRL8IbX0i0L068JiIX77A2XGowtpi3
D79rmDIQAND0ZA53HXuiS1wCIvWH1JP58xE3M/wDZ8TMR8yOgfFVWS9lieTztwM=
=UzXN
-----END PGP SIGNATURE-----

Patrick Schleizer

unread,
Aug 4, 2016, 4:46:54 PM8/4/16
to qubes...@googlegroups.com
Marek Marczykowski-Górecki:
Could Qubes-Whonix also be build completely from command line?

I think that would be a lot easier to document than anything involving
copying builder.conf / override.conf / ./setup.

This is what I am currently using...

DISTS_VM="whonix-gateway whonix-workstation" \
COMPONENTS="linux-template-builder builder builder-debian template-whonix" \
BUILDER_PLUGINS="builder-debian template-whonix" \
USE_QUBES_REPO_VERSION=3.2 \
USE_QUBES_REPO_TESTING=1 \
VERBOSE=3 \
DEBUG=1 \
REPO_PROXY=http://127.0.0.1:3142 \
BRANCH_template_whonix=master \
GIT_URL_template_whonix=https://github.com/adrelanos/qubes-template-whonix.git
\
make template --debug=v

Is this good enough?

Marek Marczykowski-Górecki

unread,
Aug 4, 2016, 5:59:01 PM8/4/16
to Patrick Schleizer, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I think you need "make get-sources template". Unless you have the
sources already downloaded.

BTW You can use BUILDERCONF env var to point at alternative config file.
This is how I use qubes-template-configs repository. Unless build in
DispVM[1], then I put that path in BUILDER_TEMPLATE_CONF setting, like
"jessie+whonix-gateway+minimal+no-recommends:/some/path".

[1]
https://github.com/QubesOS/qubes-builder/blob/master/doc/TemplateDispVMBuild.md

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXo7qeAAoJENuP0xzK19cs4aUH/3T53VSVzjGeMy7oanGe6qke
U+nfWEJqGAw0epsESR3WejXFrug+64D+I7e1kyDFk6MMvWWjRGDkVz7lo2hhKBa9
sbaDFo02lI6nSZ61kE7PSbbzK0gNJNNXFvmKRERbHfb9lkRnTPeWPI7gbnPV4nNZ
lB268Jy9gLCZqO1Jcg2iDO22Gjc+zeRBpeo1CFsfbAMqgzBvIUPL9VP2vNE4rPnc
nqCiasOsjhhPN3nqeeqIAvmJvSeC2bNHFjhS6lIfRnzCDH97UVe22wsrUEvfQztc
dFiv6cchJbaJOcj9Ck0z0lkrR9wgY0GBfpvHxZMV+JxVlynL99WLvOm3xDQiwDo=
=wR+/
-----END PGP SIGNATURE-----
Reply all
Reply to author
Forward
0 new messages