TVM Clone result = HVM?

['2109348'109348'0193284'091832'04918'03429]

Hello,

I like to test some software (and perhaps they might not be clean).

So I like to use a HVM (full file system), so nothing get compromised.

Must I define a HVM and install a new ISO Image (like Ubuntu).

Or if I clone the Debian TVM, will be this the same like a HVM with Debian8?

I read this, but still I got the doubt, if a clean HVM is the same like a TVM clone?

https://www.qubes-os.org/doc/hvm/

What will work the best, to test doubtful software, with minimal risk for exposure?

Kind Regards

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

If I understand your question correctly, your best option might be to
use an HVM template, then run temporarily install and run your risky
apps in an VM based on that HVM template. If you need to install them
permanently, then it's fine to clone the HVM template. (Or simply
clone a standalone HVM.)

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=W9o7
-----END PGP SIGNATURE-----

[808374'019384'0914328'091328'04918'032948'109243'8]

Hi Andrew,

perfect the Standalone VM works well, here also wine run good.

wine feiob.exe

Kind Regards

[Leeteqxv]

Hi, I have a strange issue:

I have copied Google Chrome and Opera browser installation files (.rpm)
into the Fedora-23 template, and then I cloned it.
When I then open a Files window on the Fedora23b (clone), and try to
right-click and "open with Software installer" to install the
applications there, after a long while with status "installing" (I get
to click on the blue Install "button") I get an error messaage saying
that the install failed due to dependency problem.

The thing that puzzles me is that the very same files could be installed
successfully in the Untrusted AppVM that is based on Fedora23... How can
it be that I get different results? The template is a clone of the same
thing that the Untrusted AppVM is based on...

Regards,

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

It's probably about network access. By default template don't have
direct access to the network, only through proxy set for this particular
purpose (why: see[1]). This is set for yum/dnf/apt, but not for
PackageKit (yet another layer above dnf/yum), see here for details:
https://github.com/QubesOS/qubes-issues/issues/982
https://github.com/QubesOS/qubes-issues/issues/1399

Package installation should work from console, using `sudo dnf install`.

[1] https://www.qubes-os.org/doc/software-update-vm/#updates-proxy

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJYNjTBAAoJENuP0xzK19csKa4H/2x7q05HjbS537Ufvc3/TvBu
tZFA2HvOdDBAF3tMbxymUK6SgyXla+dip8VkU8og4HvpSjODGMkguPTJ+bEqMJ9W
huTLTDflxT2O/7GU3/S2h8KXfp3F19yKDWtRGPQGmzgr8MVNhNgqZ3zhbrkPL3/l
L7vdllgfz9GzPaks1i68glE77FRyl6hgdbmWFfMpb1LMDXxHpDYZrUy51sOUdRLX
vB3v8zMn+Tqj87B8YP5bnwWmO3wGDumN5BZKaXRkAo5W2TJg5wUz2tRYBLffVmcU
DDiKT/7FpTeZNVbLcbVLes7EuL0/wF5WRxsBn66tKKYIDbop5UujZo7iPvdDD/I=
=6WQw
-----END PGP SIGNATURE-----