Difference between a Dedicated and Non-dedicated DisposableVM Template

[adw]

@deeplow

disclaimer Upon re-reading the documentation, it seems that is not the way to do it correctly: […]

@deeplow

This begs the question, then: what is the recommended way of customizing software in dispVMs? If we are not supposed to run software in its DispVM Template? Are we supposed to tell people to edit configs on text files by hand? Or is there a more usable way?

@bill

What is the difference between a dedicated and non-dedicated disposable VM?

@deeplow

I was trying to understand that myself. It sounds like that’s a conceptual distinction more than anything. Maybe we should start another thread with that question to see if anyone knows? I’m also curious.

I believe this is clearly explained in the glossary entry for “DisposableVM Template” (which @deeplow partially quoted and linked above):

DisposableVM Template

(Formerly known as a “DVM Template”.) A type of TemplateBasedVM on which DisposableVMs are based. By default, a DisposableVM Template named fedora-XX-dvm is created on most Qubes installations (where XX is the Fedora version of the default TemplateVM). DisposableVM Templates are not TemplateVMs, since (being TemplateBasedVMs) they do not have root filesystems of their own to provide to other VMs. Rather, DisposableVM Templates are complementary to TemplateVMs insofar as DisposableVM Templates provide their own user filesystems to the DisposableVMs based on them. There are two main kinds of DisposableVM Templates:

• Dedicated DisposableVM Templates are intended neither for installing nor running software. Rather, they are intended for customizing or configuring software that has already been installed on the TemplateVM on which the DisposableVM Template is based (see DisposableVM Customization). This software is then intended to be run (in its customized state) in DisposableVMs that are based on the DisposableVM Template.
• Non-dedicated DisposableVM Templates are typically AppVMs on which DisposableVMs are based. For example, an AppVM could be used to generate and store trusted data. Then, a DisposableVM could be created based on the AppVM (thereby making the AppVM a DisposableVM Template) so that the data can be analyzed by an untrusted program without jeopardizing the integrity of the original data.

Specifically, note how it explains the distinctions between installing software in the TemplateVM, then customizing or configuring the software in the DisposableVM Template, before finally running the software in the DisposableVM.

If there’s something unclear about this entry, please point to the specific line and state what’s unclear about it so that I can improve it.

---

@deeplow

This begs the question

Minor pet peeve : The phrase “beg the question” means to assume the conclusion for which one is arguing. In your sentence, I would use a phrase like “raises the question” instead.