From 7b1b721f5834b096f89222f43486fc8c60083d67 Mon Sep 17 00:00:00 2001 From: trueriver Date: Sat, 21 Apr 2018 09:37:03 +0100 Subject: [PATCH 1/2] Update fedora-minimal.md I found the existing doc misleading, as it claims sudo is not installed. This misled me to try to install sudo, which dnf said was already there. Also, the fact that the template does not have passwordless root is not a bug and therefore the relevant install should not be described as a "fix" in the doc. I have also included explicit instructions to enable passwordless root, which will also serve as an example to newcomers of how to install the packages listed in the following section. --- managing-os/templates/fedora-minimal.md | 20 ++++++++++++++++++-- 1 file changed, 18 insertions(+), 2 deletions(-) diff --git a/managing-os/templates/fedora-minimal.md b/managing-os/templates/fedora-minimal.md index 78a6f6a5..02e3704e 100644 --- a/managing-os/templates/fedora-minimal.md +++ b/managing-os/templates/fedora-minimal.md @@ -66,17 +66,33 @@ A comprehensive guide to customizing the minimal template is available [here][GU Qubes 4.0 --------- -In Qubes R4.0, sudo is not installed by default in the minimal template. To update or install packages to it, from a dom0 terminal window: +In Qubes R4.0 the minimal template is not configured for passwordless root. To update or install packages to it, from a dom0 terminal window: ~~~ [user@dom0 ~]$ qvm-run -u root fedora-26-minimal xterm ~~~ +to open a root terminal in the template, from which you can use dnf without sudo. You will have to do this every time if you choose not to enable passwordless root. + +If you want the usual qubes ~sudo dnf ...~ commands, open the root terminal just this once using the above command, and in the root xterm window enter + +~~~ +bash-4.4# dnf install qubes-core-agent-passwordless-root polkit +~~~ + +Optionally check this worked: from the gui open the minimal template's xterm and give the command + +~~~ +[user@fed-min-clone ~]$ sudo -l +~~~ + +which should give you output that includes the NOPASSWD keyword. + In Qubes 4.0, additional packages from the `qubes-core-agent` suite may be needed to make the customized minimal template work properly. These packages are: - `qubes-core-agent-qrexec`: Qubes qrexec agent. Installed by default. - `qubes-core-agent-systemd`: Qubes unit files for SystemD init style. Installed by default. -- `qubes-core-agent-passwordless-root`, `polkit`: By default the 'fedora-26-minimal' template doesn't have passwordless root. These two packages fix the situation. +- `qubes-core-agent-passwordless-root`, `polkit`: By default the 'fedora-26-minimal' template doesn't have passwordless root. These two packages enable this feature. (Note from R4.0 a design choice was made that passwordless should be optional, so is left out of the minimal templates) - `qubes-core-agent-nautilus`: This package provides integration with the Nautilus file manager (without it things like "copy to VM/open in disposable VM" will not be shown in Nautilus). - `qubes-core-agent-sysvinit`: Qubes unit files for SysV init style or upstart. - `qubes-core-agent-networking`: Networking support. Required if the template is to be used for a `sys-net` or `sys-firewall` VM. From 0ba2b9f99cfc6a7e4c9933bf4e9cafb2ee65b11f Mon Sep 17 00:00:00 2001 From: Andrew David Wong Date: Sat, 21 Apr 2018 15:02:49 -0500 Subject: [PATCH 2/2] Fix inline code syntax (#634) --- managing-os/templates/fedora-minimal.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/managing-os/templates/fedora-minimal.md b/managing-os/templates/fedora-minimal.md index 02e3704e..ec29ef10 100644 --- a/managing-os/templates/fedora-minimal.md +++ b/managing-os/templates/fedora-minimal.md @@ -73,7 +73,7 @@ In Qubes R4.0 the minimal template is not configured for passwordless root. To ~~~ to open a root terminal in the template, from which you can use dnf without sudo. You will have to do this every time if you choose not to enable passwordless root. -If you want the usual qubes ~sudo dnf ...~ commands, open the root terminal just this once using the above command, and in the root xterm window enter +If you want the usual qubes `sudo dnf ...` commands, open the root terminal just this once using the above command, and in the root xterm window enter ~~~ bash-4.4# dnf install qubes-core-agent-passwordless-root polkit