How to Prevent Qvm-connect-tcp Starting Another VM?

Hello,

I have two VM’s, vmA and vmB.
I have properly set up QubesOS to allow a qvm-connect-TCP from A to B.

Inside vmA I execute:
qvm-connect-tcp 1000:@default:2000

Fact 1: this command is executed properly even if vmB is not running.

Fact 2: when I make a tcp connection to vmA at port 1000, if vmB is not running, Qubes automatically starts it!

Fact3: as a consequence of Fact2, if there are continuous connections to vmA:1000 , Qubes makes it almost impossible to shutdown vmB, which is indeed restarted immediately every time.

Question: is there a way to prevent the behaviour of Fact2? Ideally I would like the tcp connection to fail (as if the server was down) if vmB is not running.

Thanks!

1 Like

You can add an autostart=no parameter (like here) to your qubes.ConnectTCP policy line.

4 Likes

works great! thank you very much for the quick answer!

4 Likes