"Installing blackarch" has outdated instructions

Doria · February 24, 2021, 9:09pm

Here are some things I had to do in order to install blackarch in a template.

The instructions call for installing fedora-30-minimal. To get networking I had to install these in fedora-30-minimal:

dnf -y install qubes-core-agent-networking qubes-core-agent-dom0-updates qubes-core-agent-passwordless-root qubes-mgmt-salt-vm-connector.

Step 4 calls for wget which I had to install:

dnf -y install wget

add networking to blackarch after you create it (in Qube setting).

SHA1 sum for strap.sh is has changed to d062038042c5f141755ea39dbd615e6ff9e23121

The instructions have an older SHA1 sum.

github.com

Qubes-Community/Contents/blob/master/docs/os/pentesting/blackarch.md


**General reminder:**

- The installation scripts and provided tools may have bugs, be vulnerable to Man in the Middle (MitM) attacks or other vulnerabilities.

- Adding additional repositories or tools for installing software extends your trust to those tool providers.

Please keep in mind that using such a VM or VMs based on the template for security and privacy critical tasks is not recommended.  

How to Create a BlackArch VM
============================

[BlackArch](https://www.blackarch.org) Linux is an [Arch Linux](https://www.archlinux.org)-based distribution for penetration testers and security researchers. The repository contains [1434](https://www.blackarch.org/tools.html) tools.

- List of [tools](https://www.blackarch.org/tools.html)
- [Installation Instructions](https://www.blackarch.org/downloads.html)

Create ArchLinux Based BlackArch Template
-----------------------------------------

This file has been truncated. show original

deeplow · February 25, 2021, 11:56am

Feel free to propose a correction by clicking the on the above linked page.

edit: it may also need to be changed from fedora-30 to fedora-32 as the former has now reached EOL (end of life).

deeplow · February 25, 2021, 12:18pm

Please do keep in mind those are the community docs. And as a volunteer-lead effort don’t / can’t always have the same dedication the official ones. It’s based on improvements by people like you that they improve.

Adding network to a TemplateVM is discouraged. A better way to do it is to use the already-configured updates proxy.

Doria · February 25, 2021, 8:31pm

Thanks. I will look into this.

Is it expected that blackarch should be a template VM?

The next step is to create a qube from this template, to actually work with?

deeplow · February 26, 2021, 10:30am

I haven’t read those particular docs, but generally yes. The software itself is installed on a templateVM but not started there. What you do typically is then create an AppVM based on that TemplateVM and that’s where you run the programs. You can read more here: