How to configure Qubes OS 4.2 manually?

dalaylapka · January 6, 2024, 7:41pm

Qubes Initial Setup I choose "do not configure anything

Empty Qubes OS. No templates. Nothing.

How do I install default template fedora-38 offline? Salt is not working because of no templates in system

Also, is there any guide how-to configure qubes manually by terminal and salt from scratch?

solene · January 6, 2024, 8:06pm

I guess this is for advanced users, and that there are no benefits except if you have a specific need and know how to implement it

Did you try to install a template with qvm-template?

dalaylapka · January 6, 2024, 8:16pm

I have installed template by dnf install from installation usb drive.

Now I have default template. Next step is create disposable usb+net qube. What salt command should I use for it?

Where do I find actual names of sls configs? I found qvm.sys-net, but I need somthing like “qvm.sys-net-usb-disposable” thing

dalaylapka · January 6, 2024, 9:33pm

I got it. For those who will seek it later

(1) qubesctl saltutil.sync_all (initial setup of salt)
(1.5) qubesctl state.sls qvm.default-dispvm qvm.default-mgmt-dvm (installing default dispvm and mgmt vm for salt)
(2) qubesctl top.enable qvm.sys-net qvm.sys-usb (configure your system to have sys-usb and sys-net)
(3) qubesctl top.enable qvm.sys-net-as-usbvm pillar=True (configure that sys-net and sys-usb is one vm using configs in pillar directory)
(4) qubesctl top.enable qvm.disposable-sys-usb qvm.disposable-sys-net pillar=True (configuring sys-usb and sys-net to be disposable)
(4.5) qubesctl top.enable qvm.usb-keyboard (enabling usb keyboard to work)
(4.6) qubesctl top.enable qvm.sys-usb-allow-mouse pillar=True (enabling usb mouse to work)
(5) qubesctl state.highstate (executing configured setup)

Done. You have sys-net and sys-usb in one vm and disposable via salt.

Minio · January 7, 2024, 8:41pm

You might want to disable the non-pillar states again: qubesctl top.disable ...

For future reference in case of changes, the setup process and the commands can be found in the following files:

github.com

QubesOS/qubes-anaconda-addon/blob/main/org_qubes_os_initial_setup/service/tasks.py

#
# The Qubes OS Project, https://www.qubes-os.org/
#
# Copyright (C) 2023 Marek Marczykowski-Górecki
#                           <marmarek@invisiblethingslab.com>
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public
# License as published by the Free Software Foundation; either
# version 2 of the License, or (at your option) any later version.
#
# This library is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU General Public
# License along with this library; if not, see <https://www.gnu.org/licenses/>.
import logging
import os

This file has been truncated. show original

github.com

QubesOS/qubes-anaconda-addon/blob/main/org_qubes_os_initial_setup/service/qubes.py

#
# The Qubes OS Project, https://www.qubes-os.org/
#
# Copyright (C) 2019 Marek Marczykowski-Górecki
#                           <marmarek@invisiblethingslab.com>
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public
# License as published by the Free Software Foundation; either
# version 2 of the License, or (at your option) any later version.
#
# This library is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU General Public
# License along with this library; if not, see <https://www.gnu.org/licenses/>.
import logging

This file has been truncated. show original