[qubes-users] Problems with TorVM

Hi,
I’ve recently reinstalled qubes beta R2 for the 3rd time but I can’t seem to get torvm working this time.

There are 2 distinct errors - this one occurs if I follow the instructions in the documentation to set up the torvm from the dom0 terminal:

[user@torvm ~]$ sudo service qubes-tor status
Redirecting to /bin/systemctl status qubes-tor.service
qubes-tor.service - Qubes transparent tor proxy setup
Loaded: loaded (/usr/lib/systemd/system/qubes-tor.service; enabled)
Active: failed (Result: exit-code) since Tue 2013-10-01 01:51:36 BST; 2min 16s ago
Process: 590 ExecStart=/usr/lib/qubes-tor/start_tor_proxy.sh (code=exited, status=1/FAILURE)

Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: Oct 01 01:51:36.816 [notice] Tor can’t help you if you use it wrong! Learn how to b…warning
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: Oct 01 01:51:36.817 [notice] Read configuration file “/usr/lib/qubes-tor/torrc”.
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: Oct 01 01:51:36.817 [warn] Unable to open configuration file “/rw/usrlocal/etc/qube…torrc”.
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: Oct 01 01:51:36.818 [err] Reading config failed–see warnings above.
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: qubes-tor: Error in Tor configuration
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: WARNING: The state match is obsolete. Use conntrack instead.
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: ls: cannot access /proc/sys/net/ipv6/conf/vif*/disable_ipv6: No such file or directory
Oct 01 01:51:36 torvm systemd[1]: qubes-tor.service: control process exited, code=exited status=1
Oct 01 01:51:36 torvm systemd[1]: Failed to start Qubes transparent tor proxy setup.
Oct 01 01:51:36 torvm systemd[1]: Unit qubes-tor.service entered failed state

The second error occurs when I make the torvm via the qubes vm manager (the create a new App VM button):

[user@tor4 ~]$ sudo service qubes-tor status
Redirecting to /bin/systemctl status qubes-tor.service
qubes-tor.service - Qubes transparent tor proxy setup
Loaded: loaded (/usr/lib/systemd/system/qubes-tor.service; enabled)
Active: inactive (dead)
start condition failed at Mon 2013-09-30 23:25:40 BST; 1min

Any advice would be greatly appreciated! This has been doing my head in all evening.

Ben Kayzim:

Hi,
    I've recently reinstalled qubes beta R2 for the 3rd time but I can't
seem to get torvm working this time.

There are 2 distinct errors - this one occurs if I follow the instructions
in the documentation to set up the torvm from the dom0 terminal:

[user@torvm ~]$ sudo service qubes-tor status
Redirecting to /bin/systemctl status qubes-tor.service
qubes-tor.service - Qubes transparent tor proxy setup
      Loaded: loaded (/usr/lib/systemd/system/qubes-tor.service; enabled)
      Active: failed (Result: exit-code) since Tue 2013-10-01 01:51:36 BST;
2min 16s ago
     Process: 590 ExecStart=/usr/lib/qubes-tor/start_tor_proxy.sh
(code=exited, status=1/FAILURE)

Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: Oct 01 01:51:36.816 [notice]
Tor can't help you if you use it wrong! Learn how to b...warning
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: Oct 01 01:51:36.817 [notice]
Read configuration file "/usr/lib/qubes-tor/torrc".
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: Oct 01 01:51:36.817 [warn]
Unable to open configuration file "/rw/usrlocal/etc/qube...torrc".
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: Oct 01 01:51:36.818 [err]
Reading config failed--see warnings above.
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: qubes-tor: Error in Tor
configuration
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: WARNING: The state match is
obsolete. Use conntrack instead.
Oct 01 01:51:36 torvm start_tor_proxy.sh[590]: ls: cannot access
/proc/sys/net/ipv6/conf/vif*/disable_ipv6: No such file or directory
Oct 01 01:51:36 torvm systemd[1]: qubes-tor.service: control process
exited, code=exited status=1
Oct 01 01:51:36 torvm systemd[1]: Failed to start Qubes transparent tor
proxy setup.
Oct 01 01:51:36 torvm systemd[1]: Unit qubes-tor.service entered failed
state

This might be a bug in the startup script when it tries to disable IPv6.
It assumes there is an IPv^ interface. Do you have any IPV6 adapters?

   ls /proc/sys/net/ipv6/
   ls /proc/sys/net/ipv6/conf/

The second error occurs when I make the torvm via the qubes vm manager (the
create a new App VM button):

[user@tor4 ~]$ sudo service qubes-tor status
Redirecting to /bin/systemctl status qubes-tor.service
qubes-tor.service - Qubes transparent tor proxy setup
      Loaded: loaded (/usr/lib/systemd/system/qubes-tor.service; enabled)
      Active: inactive (dead)
              start condition failed at Mon 2013-09-30 23:25:40 BST; 1min

You'll need to fix the previous error first. You need to enable the
qubes-tor service, from dom0: qvm-service torvm -e qubes-tor

~abel