[qubes-users] Q: sys-firewall using "100% CPU" while updates are being installed

Mailing Lists qubes-users
1

Hi!

I have (by today's standards) just a slow DSL line to download updates.
Still I see spikes where sys-firewall is at "100% CPU" (according to xentop),so I wonder what CPU-intensive task sys-firewall might perform.
IMHO it cannot be packet filtering (the purpose of a firewall), because my line is so slow.
Am I right?

Regards,
Ulrich

2

Ulrich Windl:

Hi!

I have (by today's standards) just a slow DSL line to download updates.
Still I see spikes where sys-firewall is at "100% CPU" (according to xentop),so I wonder what CPU-intensive task sys-firewall might perform.
IMHO it cannot be packet filtering (the purpose of a firewall), because my line is so slow.
Am I right?

Sys-firewall is the default UpdateVM if you aren't using Whonix, so would be responsible for downloading updates on behalf of other VMs, etc. If you're curious what it's doing, you should be able to open a terminal window on it and run "sudo top" to see the process responsible for high load.