Question on Qubes docs "Using kernel installed in the VM"

User Support
1

Hello, I tried to follow instructions of Managing qube kernels | Qubes OS for a Debian 12 minimal template, but they are not quite clear to me:

  • First paragraph

    “Both debian-9 and fedora-26 templates already have grub and related tools preinstalled […]”

    sounds like this is only for full templates, so I continued.

  • qvm-clone debian-12-minimal deb-12-min-waydroid

  • Within template VM deb-12-min-waydroid:

    sudo apt install linux-image-amd64 linux-headers-amd64 grub2 qubes-kernel-vm-support
sudo grub-install /dev/xvda # there was no auto-popup

  • Shutdown template

  • dom0 → Qubes VM Manger → right click on the VM → Qube settings → Advanced

  • Kept PVH virtualization, as docs say: “Virtualization mode PVH: Possible.” and PVH seems safer (more secure as well?) default than HVM.

  • Tried to change kernel to pvgrub2-pvh, as docs state:

    “If Virtualization is set to PVH → Kernel → choose pvgrub2-pvh → OK”

    , but there is no entry for this value.

  • Manually setting kernel:

    qvm-prefs deb-12-min-waydroid kernel pvgrub2-pvh

    results in

    Kernel ‘pvgrub2-pvh’ not installed

  • Setting kernel to (provided by qube) results at start in

    Qube deb-12-min-waydroid has failed to start: virt_mode PVH require kernel to bet set

  • Only docs’ very first instructions, which I thought are for full templates work:

    qvm-prefs deb-12-min-waydroid virt_mode hvm
qvm-prefs deb-12-min-waydroid kernel ''

Could anyone clarify? Either I did something wrong or docs are unclear. Thanks!

2

You need to install grub2-xen-pvh in dom0 to use the in-VM kernel in PVH mode

sudo qubes-dom0-update grub2-xen-pvh

I guess the docs should be updated to clarify this.

1 Like
3

Thanks @apparatus, this is good to know. With regards to grub2-xen-pvh: I’ll try HVM first with Waydroid, to keep dom0 as minimal as possible.

4

Is there any other way to contribute docs changes than with an existing GitHub account?
I’d like to edit that page based on your given answer, but I don’t have an account on said platform (and don’t want to make one either).

5

You can send the proposed changes to @unman:

Docs polishing - #4 by unman

1 Like