Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2025-12-14 23:45:07 -05:00
Code Issues Projects Releases Packages Wiki Activity

pr #1582

Browse source 
Revert documentation about custom persist because it's not in R4.2
https://github.com/QubesOS/qubes-doc/pull/1582/files
This commit is contained in:
Solène Rapenne 2025-12-13 23:34:29 +01:00
commit 0a82385c47
No known key found for this signature in database
GPG key ID: 8CD42DFD57F0A909
2 changed files with 1 additions and 55 deletions
Download patch file Download diff file Expand all files Collapse all files

54
user/advanced-topics/bind-dirs.rst
View file

@ -133,60 +133,6 @@ How to remove binds from bind-dirs.sh?
(Editing ``/usr/lib/qubes-bind-dirs.d/40_qubes-whonix.conf`` directly is strongly discouraged, since such changes get lost when that file is changed in the package on upgrades.)
Custom persist feature
----------------------
Custom persist is an optional advanced feature allowing the creation of minimal state AppVM. The purpose of such an AppVM is to avoid unwanted data to persist as much as possible by disabling the ability to configure persistence from the VM itself. When enabled, the following happens:
- ``/rw/config/rc.local`` is no longer executed
- ``/rw/config/qubes-firewall-user-script`` is ignored
- ``/rw/config/suspend-module-blacklist`` is ignored
- User bind dirs defined in ``/rw/config/qubes-bind-dirs.d`` are no longer read
- ``/home`` and ``/user/local`` are not persistent anymore unless explicitly configured.
Bind dirs are obviously still supported but this must be configured either in the template (``/usr/lib/qubes-bind-dirs.d`` and ``/etc/qubes-bind-dirs.d``) or from dom0 using ``qvm-features``. The bind dirs declaration must be done this way: ``qvm-features <VMNAME> custom-persist.<ARBITRARY NAME> [PRE-CREATION SETTINGS]<PATH>``
To use this feature, first, enable it:
.. code:: console
$ qvm-service -e my-app-vm custom-persist
Then, configure a persistent directory with ``qvm-features``:
.. code:: console
$ qvm-features my-app-vm custom-persist.my_persistent_dir /var/my_persistent_dir
To re-enable ``/home`` and ``/usr/local`` persistence, just add them to the list:
.. code:: console
$ qvm-features my-app-vm custom-persist.home /home
$ qvm-features my-app-vm custom-persist.usrlocal /usr/local
When starting the VM, declared custom-persist bind dirs are automatically added to the ``binds`` variable described above and are handled in the same way.
A user may want their bind-dirs to be automatically pre-created in ``/rw/bind-dirs``. Custom persist can do this for you by providing the type of the resource to create (file or dir), owner, group and mode. For example:
.. code:: console
$ qvm-features my-app-vm custom-persist.downloads dir:user:user:0755:/home/user/Downloads
$ qvm-features my-app-vm custom-persist.my_ssh_known_hosts_file file:user:user:0600:/home/user/.ssh/known_hosts
Discussion

2
user/templates/templates.rst
View file

@ -42,7 +42,7 @@ These are the official Qubes OS Project templates. We build and release updates
- :doc:`Debian GNOME </user/templates/debian/debian>`
- :doc:`Debian Minimal </user/templates/minimal-templates>`
- :doc:`Debian Minimal </user/templates/minimal-templates>
You can see the current supported versions: :ref:`user/downloading-installing-upgrading/supported-releases:templates`.