New/Updated templates for 4.1 (Trisquel, Debian 12, Ubuntu 2204, Kali, Mint)

General Discussion
1

I wasn’t able to announce this before.

I’ve put up new or updated templates for 4.1 -
Trisquel
Debian 12 - bookworm
Ubuntu 2204 - jammy
Kali
Linux Mint - una

Available at Index of /Templates

Feedback welcome.

7 Likes
2

will it be the same as we build with qubes-builder ?

3

bookworm and Kali - yes.
jammy - I haven’t yet put in a PR because I’m unclear on the best way of
handling reprepro. Official build will be available idc.
trisquel and mint - you will need to adapt the builder scripts.

I provide prebuilt templates for users who prefer, (for whatever reason),
not to build them.

4

Thanks again

Does this mean we can update it regularly via salt’s

sudo qubesctl --show-output state.sls update.qubes-dom0

later when bookworm becomes official?

5

You can do this right now.
(Besides the official I also host bookworm repository at https://qubes.3isec.org)

I never presume to speak for the Qubes team.
When I comment in the Forum or in the mailing lists I speak for myself.
6

Thanks. If I were you, would I switch already now all my debian-11 based templates to bookworm (excluding minimal based templates)?

7

I am unable to get audio working on Ubuntu 22.04, could you have a look at the template?

8

i’m rocking 4gb of ram, thanks bud.

9

Short question @unman : is your (new) kali template very different to mine (untouched) but up-to-date template, which always was used for getting the updates via Qubes updater ?

10

Belatedly.
I wouldnt switch all to bookworm - it’s a testing release that isnt
managed by the securty team.
Things will break.

11

Right - the builder doesn’t have the right version of headers.
But even fixing this does not get working sound.
???

12

Assuming that you started from bullseye and have now upgraded to
bookworm, then differences will be small.
Mine is native bookworm: yours is likely to have some cruft.

1 Like
13

Will you somehow try to add your templates to the official community repository?

14

I doubt this will happen.
A Ubuntu template will not be released by Qubes because of past
stupidity.
Kali has been available in the past in testing, but never made it to the community repo.
Centos has been available in the past in testing, but never made it to the community repo.
Arch hasn’t been built for some time.

The only community template that consistently gets updated to the
community repo is flavours of Whonix.

The maintenance overhead, particularly when dealing with moving targets like Arch,
Debian testing, (and derivatives like Parrot and Kali), is a real burden to a small team.

Other templates that I build on request (like Trisquel) and make
available to the community, aren’t good candidates for “Official”
support.

I never presume to speak for the Qubes team.
When I comment in the Forum or in the mailing lists I speak for myself.
15

Especially the Kali Linux image is very useful because it is used a lot. I use it every day too.

It would be great if you could build and publish an Alpine Linux template and HardenedBSD or at least FreeBSD to the community repository.

HardenedBSD could be really helpful for somebody like me when I need much more security in template and appvm :smiley:

1 Like
16

Audio still can’t work.

17

not yet

18

Any chance of a minimal Ubuntu (focal first, then others)?

19

Just built it - although smaller (800M) it needs trimming.
I’ll look at this in the morning.

2 Likes
20

Just uploaded a focal-minimal to qubes.3isec.org/Templates - now building at 205M

2 Likes