hdparm?

[Guillaume Bertin]

Hi,

I don't manage installing hdparm in dom0. No package...

Have I missed something? Should harddisk management be done outside of dom0?

G.

[awokd]

Usually, for security reasons you should avoid installing software
directly in dom0 (https://www.qubes-os.org/doc/copy-from-dom0/). You can
force it by manually downloading, copying in the package, and installing,
but you'll have to also handle dependency resolution yourself. If you only
need to run hdparm once or twice, you might want to boot from a live image
instead and run it from there. Don't forget to verify signatures!

[donoban]

'sudo qubes-dom0-update hdpardm' worked for me on Qubes 3.2

[donoban]

Sorry I mean 'sudo qubes-dom0-update hdparm'

[awokd]

On Mon, February 5, 2018 5:22 pm, donoban wrote:
>
> On 02/05/2018 06:21 PM, donoban wrote:
>
>> On 02/05/2018 05:37 PM, 'Guillaume Bertin' via qubes-users wrote:
>>
>>> I don't manage installing hdparm in dom0. No package...

>

> Sorry I mean 'sudo qubes-dom0-update hdparm'

That's interesting, what version of Qubes? I tried that before (thought it
was hdparm too) and ran into the same missing package issue.

[donoban]

Qubes 3.2, really it says I had it already installed. Maybe I've
installed it time ago with other method :\

[awokd]

On Mon, February 5, 2018 5:43 pm, donoban wrote:
> On 02/05/2018 06:38 PM, 'awokd' via qubes-users wrote:
>
>> On Mon, February 5, 2018 5:22 pm, donoban wrote:

>>> Sorry I mean 'sudo qubes-dom0-update hdparm'

Sure enough, I tried the above on both versions and it worked just fine.
(But the warnings in https://www.qubes-os.org/doc/copy-from-dom0/ still
apply.) Thanks for the info!

[Guillaume Bertin]

-------- Original Message --------

On February 5, 2018 6:22 PM, donoban <don...@riseup.net> wrote:

> Sorry I mean 'sudo qubes-dom0-update hdparm'

Many thanks, that was indeed simple (and documented). "yum install" was definetely not the way to do it.

awokd: thanks for your advise. I want to have my storage harddisk going to sleep mode when idle for some time, so it needs to be done at each startup. I suppose I could also create a dedicated vm with access to this hardware, which would be launched at startup, set this setting to the harddisk, then shutdown itself. Overkill for me. :)

G.

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2018-02-05 10:57, 'awokd' via qubes-users wrote:
> On Mon, February 5, 2018 4:37 pm, 'Guillaume Bertin' via qubes-users wrote:
>> Hi,
>>
>>
>> I don't manage installing hdparm in dom0. No package...
>>
>>
>> Have I missed something? Should harddisk management be done outside of
>> dom0?
>
> Usually, for security reasons you should avoid installing software
> directly in dom0 (https://www.qubes-os.org/doc/copy-from-dom0/).

Also see:

https://www.qubes-os.org/doc/software-update-dom0/
https://www.qubes-os.org/doc/security-guidelines/#dom0-precautions

> You can
> force it by manually downloading, copying in the package, and installing,
> but you'll have to also handle dependency resolution yourself. If you only
> need to run hdparm once or twice, you might want to boot from a live image
> instead and run it from there. Don't forget to verify signatures!
>

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=s7aS
-----END PGP SIGNATURE-----