Adding a key for a yum repository inside a template

I’m looking to install 1Password inside a template via their instructions here: Get the 1Password for Linux app. I’m realizing now that since the template has no network access, I cannot perform 1 and 2 of the three steps in these instructions.

What is the correct way to do this in Qubes? I’m looking for best practices here.

Thanks in advance!

I would split the first step in two:

  1. download the key to a disposable qube (didpVM) and verify it there, then copy it to the template (qvm-copy or “Copy to VM”)
  2. in the template, import it into rpm

Does that make sense to you?

Edit: What prevents you from performing the second of the three steps?

Misread second step. You’re totally right about it not needing net access. This is perfect!

1 Like