Hi, I have been looking for official documentation explanation of this and I still can’t find any. What is the purpose of this special qube named default-mgmt-dvm? How is one supposed to use it? Is it possible to base it on a template without qubes-core-agent-passwordless-root package? How? Acco…

I didn’t look into it. The answers to your questions from my understanding: [image] qubist: What is the purpose of this special qube named default-mgmt-dvm? It’s just a DVM that is used to run different internal Qubes OS tasks outside of dom0 [image] qubist: How is one supposed to us…

Thanks. 1 and 2 are still quite vague. Hopefully someone else may tell us more. It’s not supported. Hm. If that is really so, then all the claims about passwordless root being optional and possible to disable would turn out meaningless.

[image] qubist: It’s not supported. Hm. If that is really so, then all the claims about passwordless root being optional and possible to disable would turn out meaningless. Check these issues: qubes-mgmt-salt-vm-connector fails to list dependencies on qube…

Maybe. The problem is that since I don’t know what are the actual functions of that DVM, I don’t know how to test/compare how all of them work with/without passwordless root. So, it is all related.

[image] qubist: Hm. If that is really so, then all the claims about passwordless root being optional and possible to disable would turn out meaningless. AFAIK these particular VMs only run installation/configuration scripts, which is impossible without root. And you have to trust such (signed…

AFAIK these particular VMs only run installation/configuration scripts, which is impossible without root. It is still not clear if it is only install/config. Yes, for the activity you mention root is required. However, that doesn’t necessarily mean that in-every-VM unrestricted root is required. …

You’ve been told what the functions are - the most obvious one being in passing salt states to qubes for action, and passing results back to dom0. If you are concerned about this, create a disposable template without passwordless root, and use it as base for the mgmt disposable. See what happe…

You’ve been told what the functions are - the most obvious one being in passing salt states to qubes for action, and passing results back to dom0. Which are the others (the not so obvious ones)? That is what I am trying to understand. To put it differently: What will break if one damages/delet…

[image] qubist: To put it differently: What will break if one damages/deletes that special VM? How to re-create it from scratch? I do not believe there’s special things in that qube’s private volume. You just need to create a disposable qube named “default-mgmt-dvm” based on a “full” template…

[image] qubist: My question is about whether passwordless root (installing the package for it) is required for the mgmt disposable or not, as the documentation is self-contradictory about that particular aspect. As for this, there’s no contradiction in the doc. For a minimal template ( withou…

Qubes OS Forum

Understanding default-mgmt-dvm

User Support General

high-quality-post

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled