Skip to content

Modularize sys-gui.install #136

@3nprob

Description

@3nprob

Commitment

I confirm that I have read the following resources:

Current problem (if any)

The sys-gui.install state installs the following systems which are really optional to get it working:

  • qubes-admin tools, qubes-manager, etc
    • I personally want to minimize permissions, capabilities and background processes in my GUIVM(s) and keep systems administration in dom0 or mgmt. GUIVM shouldn't be allowed or trying to do maintenance or operations tasks. Turning GUIVM into admin is a step backwards in this frame.
    • Currently something seems really broken if one actually tries to admin from guivm in any case. qrexec policies would need adjusting to make it meaningful. It keeps spuriously starting and not shutting down every template and triggers a flood of qrexec permission errors.
  • XFCE Desktop Environment

Proposed solution

  • Split out sys-gui.install-xfce from sys-gui.install
  • Split out sys-gui.install-admin from sys-gui.install
    • Update prefs and docs accordingly

Related:

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions