How to make an appvm a template at the same time

[rogeragrimes]

I’m trying to get audio working on my new qubes. I’m following:

Audio qube

An audio qube acts as a secure handler for potentially malicious audio devices, preventing them from coming into contact with dom0 (which could otherwise be fatal to the security of the whole system). It thereby mitigates some of the security risks of using USB devices and Bluetooth devices. Nonetheless, we strongly recommend carefully reading the security warning on USB input devices devices before proceeding. With an audio qube, many kinds of devices can be used (that previously were eit…

The first three instructions are:

1. Create a template named ‘audio-template’ – You can clone ‘fedora-XX’ template (or a fedora minimal template) for that –
2. Then create an appvm named ‘audio-app’ and mark it as a disposablevm template
3. Finally, create a disposablevm named ‘sys-audio’

I’m having problems with instruction #2. It seems to be asking me to make an appvm…that is also a template at the same time. I’m confused. Is it just asking me to make an appvm or a template or is it possible to make an appvm a template at the same time?

[solene]

@rogeragrimes

I’m having problems with instruction #2. It seems to be asking me to make an appvm…that is also a template at the same time. I’m confused. Is it just asking me to make an appvm or a template or is it possible to make an appvm a template at the same time?

You can turn an AppVM into a template to create disposable AppVM, which is what you need to do here (ideally).

Just open the qube settings, go in the tab “Advanced” and check “Disposable template”. Then, you can make a new disposable qube that will be able to use this appVm as a template.

There are 2 templates at work here: the base template offering the system, the appvm template providing the customization of /rw and /home/ and the disposable qube starting a copy of the appvm but… disposable

[rogeragrimes]

@solene

You can turn an AppVM into a template to create disposable AppVM, which is what you need to do here (ideally).

Just open the qube settings, go in the tab “Advanced” and check “Disposable template”. Then, you can make a new disposable qube that will be able to use this appVm as a template.

There is no "check “Disposable template” option under Advanced. I see the ‘Default disposable template’ setting, which allows me to choose 4 options (default-dvm, whonix-workstation-17-dvm, (none), and default (default-dvm) (current). The problem is no matter what I select, it doesn’t seem to turn the audio-app appvm into a template, that I can then choose in step 3. So, I’m still confused. Sorry.

[solene]

@rogeragrimes

I see the ‘Default disposable template’ setting

it’s 4 pixels above, a bit on the left

[rogeragrimes]

Ah, I apologize. I’m an idiot.

[rogeragrimes]

Mine is grayed out. It’s not started. So I have to figure out why it is grayed out.

[solene]

Is your qube an AppVM? If it’s a template or a disposable qube, it will be greyed out.

[rogeragrimes]

The second instruction is “create an appvm named ‘audio-app’ and mark it as a disposablevm template”

I created an appvm called audio-app. It’s appearing under the appvms. It is based on the default-dvm template. The Default disposable template is default (default-dvm)(current). And now I’m trying to enable the Disposable Template option to mark it as disposable (which is grayed out). I apologize for going around in circles here…but perhaps it would be easier if someone typed out the correct qvm-create command for me? I’m apparently pretty dense.

[solene]

@rogeragrimes

The second instruction is “create an appvm named ‘audio-app’ and mark it as a disposablevm template”

not really, but I can understand it’s hard to sort it out

1. Create a template named ‘audio-template’ – You can clone ‘fedora-XX’ template (or a fedora minimal template) for that –
2. Then create an appvm named ‘audio-app’ and mark it as a disposablevm template
3. Finally, create a disposablevm named ‘sys-audio’

1. tells to create a new template clone from a fedora template
2. tells to create a new appvm “audio-app” and mark it disposable as I explained earlier
3. tells to create a disposable qube based on the disposable template audio-app

[rogeragrimes]

Thanks so much for your patience. I finally got it. I think my mistake was choosing DisposableVM as the template for the second step instead of just AppVM and marking it as disposable…as you said 2-3 times. Again. Thank you.