qubes-tunnel service fails in VPN ProxyVM

[b17b7bdb]

I set up a VPN gateway in a ProxyVM using the qubes-tunnel service, but the service fails after restarting the VM.

journalctl -u qubes-tunnel     shows the failure happening after:

... qtunnel-setup[663]: -su: notify-send: command not found

... systemd[1]: qubes-tunnel.service: Control process exited. code=exited status=127

the command:  /usr/lib/qubes/qtunnel-setup --config

worked fine, so I'm not sure what's going awry.  fwiw, I had the same setup working in R3.2, but started from scratch in R4.0.1.  I downloaded the github project and installed it in the template VM before completing the following instructions in the ProxyVM:

https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-the-qubes-tunnel-service

[Chris Laprise]

It seems like the notify-send command is missing in the templatevm. I
recommend not using minimal templates, and for now avoid fedora-29
(fedora-28 and debian are OK).

--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

[b17b7bdb]

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Wednesday, May 29, 2019 1:33 AM, Chris Laprise <> wrote:

> On 5/28/19 8:44 PM, 'b17b7bdb' via qubes-users wrote:
>
> > I set up a VPN gateway in a ProxyVM using the qubes-tunnel service, but
> > the service fails after restarting the VM.
> > journalctl -u qubes-tunnel     shows the failure happening after:
> > ... qtunnel-setup[663]: -su: notify-send: command not found
> > ... systemd[1]: qubes-tunnel.service: Control process exited.
> > code=exited status=127
> > the command:  /usr/lib/qubes/qtunnel-setup --config
> > worked fine, so I'm not sure what's going awry.  fwiw, I had the same
> > setup working in R3.2, but started from scratch in R4.0.1.  I downloaded
> > the github project and installed it in the template VM before completing
> > the following instructions in the ProxyVM:
> > https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md#set-up-a-proxyvm-as-a-vpn-gateway-using-the-qubes-tunnel-service
>
> It seems like the notify-send command is missing in the templatevm. I
> recommend not using minimal templates, and for now avoid fedora-29
> (fedora-28 and debian are OK).
>

I was indeed using a debian-9-minimal clone. After customizing the full debian-9 template my ProxyVM is now working fine. Thanks for the spot on advice and for all of your work on qubes, which is much appreciated!