-
-
Notifications
You must be signed in to change notification settings - Fork 46
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
qubes-mgmt-salt-vm-connector fails to list dependencies on qubes-core-agent-passwordless-root and socat #6229
Comments
I'm not sure about |
TBH, I think what user is a service running as should be configurable (also? only?) at the target VM, not dom0 (either in policy, or call argument when call originates from dom0). |
|
|
That’s already possible if the service is run as root ― it can drop privileges to any user it chooses. |
Yes, but currently services by default are started as |
I could add another service configuration option. |
That would be perfect. Something like Technically, it seems to require a minor refactor, because service config is loaded only within |
I agree, although once it is implemented I see no reason not to backport it to R4.1. |
Backporting itself - if the change indeed will be simple enough, then we can consider it. But in many cases we couldn't rely on such backport, because inter-VM package dependency tracking isn't a thing.
|
Closing, since this has been fixed. The qrexec enhancement is tracked as #6354. |
Qubes OS version
Qubes release 4.0 (R4.0)
Affected component(s) or functionality
qubes-mgmt-salt-vm-connector
packagingBrief summary
qubes-mgmt-salt-vm-connector
should depend onqubes-core-agent-passwordless-root
but does not.How Reproducible
100%
To Reproduce
Steps to reproduce the behavior:
qubes-template-fedora-32-minimal
in dom0qubes-mgmt-salt-vm-connector
infedora-32-minimal
fedora-mgmt-dvm
) withfedora-32-minimal
as its template.management_dispvm
property offedora-32-minimal
tofedora-mgmt-dvm
fedora-32-minimal
using Salt, or runqvm-console-dispvm
on a VM based onfedora-32-minimal
.Expected behavior
Updates and
qvm-console-dispvm
work.Actual behavior
Updates and
qvm-console-dispvm
fail.Screenshots
Additional context
Solutions you've tried
Relevant documentation you've consulted
Related, non-duplicate issues
The text was updated successfully, but these errors were encountered: