New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Clarification request] Is it possible to run e.g. Firefox _in_ a TemplateVM ? #2506

Closed
Wikinaut opened this Issue Dec 8, 2016 · 2 comments

Comments

Projects
None yet
2 participants
@Wikinaut

Wikinaut commented Dec 8, 2016

I noticed, that I can start Firefox in a TemplateVM (after having added this as a "shortcut"), but no network connection appears to be working then.

(You can open Terminal, Files etc. in a TemplateVM, this is why I thought that also FF can be run.)

I just wanted to know whether this is the correct behaviour (as a TemplateVM is not intended for this), or if it is a bug.

Firefox ESR is working fine in my personal AppVM, for example.

@andrewdavidwong

This comment has been minimized.

Show comment
Hide comment
@andrewdavidwong

andrewdavidwong Dec 8, 2016

Member

Yes, it is possible (but inadvisable) to run any program in a TemplateVM. However, by default, TemplateVMs allow network connections only via the updates proxy. This is for your security, since unfettered network access can easily lead to you accidentally compromising your TemplateVM, which would result in compromising every AppVM based on that TemplateVM. (Note that the updates proxy restriction does not currently apply when the TemplateVM uses sys-whonix as its NetVM.)

P.S. - These sorts of questions are more appropriate for qubes-users.

Member

andrewdavidwong commented Dec 8, 2016

Yes, it is possible (but inadvisable) to run any program in a TemplateVM. However, by default, TemplateVMs allow network connections only via the updates proxy. This is for your security, since unfettered network access can easily lead to you accidentally compromising your TemplateVM, which would result in compromising every AppVM based on that TemplateVM. (Note that the updates proxy restriction does not currently apply when the TemplateVM uses sys-whonix as its NetVM.)

P.S. - These sorts of questions are more appropriate for qubes-users.

@Wikinaut

This comment has been minimized.

Show comment
Hide comment
@Wikinaut

Wikinaut Dec 8, 2016

@andrewdavidwong thanks again, you answered exactly my (unasked) question, because of course I noticed, what makes sense, that updates in and of the TemplateVMs do work.

(no further answer needed)

Wikinaut commented Dec 8, 2016

@andrewdavidwong thanks again, you answered exactly my (unasked) question, because of course I noticed, what makes sense, that updates in and of the TemplateVMs do work.

(no further answer needed)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment