Hi @unman
do you control your salt scripts within the 3isec-qubes-task-manager application?
Scripts using template: debian12-minimal create vm’ki that do not update via update agent Dom0. It is likely that debian12-minimal itself does not have scripts that integrate the update function with dom0 - the problem was fixed by installing the qubes-vm-recommended package in template:debian12-minimal.
On the other hand, after installing the “monitor” script that creates a vm with wireshark installed, I have a problem running wireshark from the qubes menu - wireshark requires granting sudo privileges, which the entry found in the qubes menu does not do.
Additionally, have you thought about implementing a script that creates a sys-usb, sys-net, sys-firewall based on kicksecure?
Hi Pawelek85
I dont understand what you mean wrt debian-12-minimal - packages
required for various purposes are dealt with on this page
If you mean that the caching-proxy cant be used for dom0, this is
deliberate. Since dom0 uses an eol fedora and no other qubes will use
most of the packages I see little benefit in caching them.
If you do this, then a pop-up appears, telling what you to do to get
wireshark running as user. I’ve included these instruction in the
“notes” in the task manager, and in the README that accompanies the
files, so that should help. In template-monitor:
sudo dpkg-reconfigure wireshark-common
answer “YES” to the prompt whether non-root users should be able to capture packages.
sudo usermod -a -G wireshark user
No.
I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.