Question for google groups

45 views
Skip to first unread message

lymepo...@swissmail.be

unread,
Jun 5, 2020, 12:29:13 AM6/5/20
to qubes...@googlegroups.com
Question for https://groups.google.com/forum/#!forum/qubes-users.

Can someone help me with the commands for installing Signal in the debian
10 template vm? It seems like the official documentation from the Qubes
website is outdated, so ideally if someone could update the documentation
for debian 10 rather than the current deprecated debian 9 documentation,
that would benefit more users beyond myself.


Documentation linked below.
https://www.qubes-os.org/doc/signal/

I get an error at step 3 in the documentation after installing curl. The
software does not currently show up in my debian 10 template vm after
following this documentation.



Other messengers to consider for future documentation...
Ideally, Session, an encrypted messenger that routes messages over onion
routing, should be included in future documentation, however I dont think
they have a xen framework yet. Whonix has a page for messengers on
https://www.whonix.org/wiki/Chat
which includes a matrix client that I also hope to get running eventually.



sysad.andes

unread,
Jun 5, 2020, 1:34:15 AM6/5/20
to qubes...@googlegroups.com
It's not outdated, it's just slightly wrong, the curl command is actually:
And then substitute buster for xenial in the following command to update for the distribution

Sven Semmler

unread,
Jun 5, 2020, 1:10:47 PM6/5/20
to lymepo...@swissmail.be, qubes...@googlegroups.com
On Fri, Jun 05, 2020 at 04:28:59AM -0000, lymepopsicle via qubes-users wrote:
> Can someone help me with the commands for installing Signal in the debian
> 10 template vm? It seems like the official documentation from the Qubes
> website is outdated, so ideally if someone could update the documentation
> for debian 10 rather than the current deprecated debian 9 documentation,
> that would benefit more users beyond myself.

I just did it the other day. The one piece of information that's missing in the documentation is that for curl to work the template needs to have a netvm. Normally you want your templates to be offline and only use the UpdateProxy to install software. Here step-by-step:


dom0# qvm-prefs debian-10 netvm sys-firewall

debian-10# curl -s https://updates.signal.org/desktop/apt/keys.asc | sudo apt-key add -

dom0# qvm-prefs debian-10 netvm ''

debian-10# echo "deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main" | sudo tee -a /etc/apt/sources.list.d/signal-xenial.list

debian-10# sudo apt update && sudo apt install signal-desktop

That's it!

If you decide that giving your template a netvm for a moment is a risk you don't want to take, then you have to download https://updates.signal.org/desktop/apt/keys.asc in a browser VM and copy it over to the template. You can then simply run:

debian-10# echo keys.asc | sudo apt-key add -

I'll submit a PR later today to update the website.

/Sven

--
public key: https://www.svensemmler.org/0x8F541FB6.asc
fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6

signature.asc

unman

unread,
Jun 6, 2020, 10:58:11 AM6/6/20
to qubes...@googlegroups.com, lymepo...@swissmail.be
On Fri, Jun 05, 2020 at 12:09:54PM -0500, Sven Semmler wrote:
> On Fri, Jun 05, 2020 at 04:28:59AM -0000, lymepopsicle via qubes-users wrote:
> > Can someone help me with the commands for installing Signal in the debian
> > 10 template vm? It seems like the official documentation from the Qubes
> > website is outdated, so ideally if someone could update the documentation
> > for debian 10 rather than the current deprecated debian 9 documentation,
> > that would benefit more users beyond myself.
>
> I just did it the other day. The one piece of information that's missing in the documentation is that for curl to work the template needs to have a netvm. Normally you want your templates to be offline and only use the UpdateProxy to install software. Here step-by-step:
>

Since the proxy is *just* a proxy you can (ab)use it as you will, as has
already been pointed out. Much better than giving the template a netvm.
You can use the proxy for grabbing PGP keys as well as curl.
Reply all
Reply to author
Forward
0 new messages