Qvm-copy-to-vm without prompt policy in domU?

Hi,

i am trying to do a thing.

For this i need qvm-copy-to-vm or qvm-move-to-vm from domUs to other domUs.

How would one set up the qubes.filecopy policy to do this without the dialog from dom0?

Also: Is there a possibility to do this with dispVMs from a specific template?

I tried a few different versions that seemed logical to me but was not able to get it to work.

As a last resort i would use something like this

Thanks for your help!

In 4.1, you would add this to dom0’s /etc/qubes/policy.d/30-user.policy:

qubes.Filecopy * srcvm destvm allow

In 4.0, if I remember correctly, you would add this to dom0’s /etc/qubes-rpc/policy/qubes.Filecopy (or create it if it doesn’t exist):

srcvm destvm allow

In srcvm, you can then run qvm-copy-to-vm destvm file1 file2 without a prompt.

2 Likes

Thank you for your help!

srcvm destvm allow

I have found the issue: This line has to be the first, otherwise the $any $any ask line is used.