Offline Qubes with default-dvm template (yellow network triangle)

Hey guys,

just discovered the yellow triangle on my offline qubes (net qube set to ‘none’) and read the info… I learned that this is the case when default disposable template has net qube set to anything else then ‘none’. They all have set default-dvm as dvm template and default-dvm has set net qube to ‘sys-firewall’… Am I right that I should set the ‘Default disposable template’ for these offline qubes to none?

Thank you guys!

Either that or create a separate offline-dvm disposable template with net qube set to none and use it as a disposable template for your offline qubes.

By cloning default-dvm to offline-dvm with net qube set to ‘none’? What about the templates? Their net qube is set to ‘none’, also set it to offline-dvm?

Yes.

They can use updates proxy to connect to the internet so it doesn’t really matter for them.

Okay, but generally saying, when a qube has not checked ‘Disposable template’ checkbox, the ‘Default disposable template’ should be set to ‘none’ or offline-dvm?

I’m not sure what are you asking about.
If the qube has ‘Disposable template’ checkbox set then this qube is a disposable template.
You can set the disposable template’s ‘Default disposable template’ to the disposable template with any net qube that you want.

But when a qube is not a disposable template, it doesn’t need a ‘Default disposable template’, right? So I simply would set the ‘Default disposable template’ to none for these qubes…

It needs a ‘Default disposable template’ if you want to open files/URLs/etc in a disposable from this qube.

But I’m talking about qubes which are NOT marked as Disposable Templates…

I guess I understand now, even if a qube is no Disposable Template I can still open files from this qube in a Disposable Qube which is defined in this Standard Setting, right?

Yes,

But shouldn’t it matter for safety reasons as we don’t want template qubes to get in contact with the internet directly?

Templates don’t have the direct internet connection, the apps inside the templates need to use updates proxy to access the internet:
How to install software | Qubes OS

So the yellow triangle I mentioned has no relevance for template qubes?

Yes.

Thank you very much, but I think I’ll set their default disp template also to offline-dvm to get rid of the yellow triangle…

Just saw sys-usb has Template and Default DispVM is set to ‘fedora-40-sys-dvm’… ‘fedora-40-sys-dvm’ has also net qube set to ‘sys-firewall’ so I got the yellow triangle in sys-usb Settings… Should I do the same here but instead with a offline copy of ‘fedora-40-sys-dvm’?

You can just change it to your existing offline-dvm if you don’t need the disposables used by sys-usb to be specifically based on a fedora template.

That’s the problem, I don’t know why the disposables are based on this fedora template and if I loose functionality if I change it?

You won’t lose any default functionality if you change it.

Okay, great, just asking me if this was a change I made or if this is standard setting for sys-usb Default DispVM…

I didn’t use fedora templates when installing Qubes OS so I don’t know what is used for fedora by default.