{"action":"created","issue":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1985","repository_url":"https://api.github.com/repos/QubesOS/qubes-issues","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1985/labels{/name}","comments_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1985/comments","events_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1985/events","html_url":"https://github.com/QubesOS/qubes-issues/issues/1985","id":154352770,"number":1985,"title":"/var/run/qubes-service qvm-sevice available too late breaks systemd services","user":{"login":"adrelanos","id":1985040,"avatar_url":"https://avatars.githubusercontent.com/u/1985040?v=3","gravatar_id":"","url":"https://api.github.com/users/adrelanos","html_url":"https://github.com/adrelanos","followers_url":"https://api.github.com/users/adrelanos/followers","following_url":"https://api.github.com/users/adrelanos/following{/other_user}","gists_url":"https://api.github.com/users/adrelanos/gists{/gist_id}","starred_url":"https://api.github.com/users/adrelanos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adrelanos/subscriptions","organizations_url":"https://api.github.com/users/adrelanos/orgs","repos_url":"https://api.github.com/users/adrelanos/repos","events_url":"https://api.github.com/users/adrelanos/events{/privacy}","received_events_url":"https://api.github.com/users/adrelanos/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/C:%20Debian","name":"C: Debian","color":"cccccc"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/milestones/21","html_url":"https://github.com/QubesOS/qubes-issues/milestones/Release%203.0%20updates","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/milestones/21/labels","id":1343732,"number":21,"title":"Release 3.0 updates","description":"Updates for stable release","creator":{"login":"marmarek","id":726704,"avatar_url":"https://avatars.githubusercontent.com/u/726704?v=3","gravatar_id":"","url":"https://api.github.com/users/marmarek","html_url":"https://github.com/marmarek","followers_url":"https://api.github.com/users/marmarek/followers","following_url":"https://api.github.com/users/marmarek/following{/other_user}","gists_url":"https://api.github.com/users/marmarek/gists{/gist_id}","starred_url":"https://api.github.com/users/marmarek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marmarek/subscriptions","organizations_url":"https://api.github.com/users/marmarek/orgs","repos_url":"https://api.github.com/users/marmarek/repos","events_url":"https://api.github.com/users/marmarek/events{/privacy}","received_events_url":"https://api.github.com/users/marmarek/received_events","type":"User","site_admin":false},"open_issues":48,"closed_issues":103,"state":"open","created_at":"2015-10-08T01:08:26Z","updated_at":"2016-06-24T23:53:51Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2016-05-11T21:59:42Z","updated_at":"2016-06-25T18:44:24Z","closed_at":"2016-05-18T01:00:16Z","body":"#### Qubes OS version\r\n\r\nR3.1\r\n\r\n#### Affected TemplateVMs\r\n\r\ndebian-8 (standalone)\r\n\r\n### Steps to reproduce the behavior:\r\n\r\nQubes VM Manager -> right click on VM -> services -> enter (without the single quotes) 'netfilter-persistent' -> click on + -> OK\r\n\r\nStart VM.\r\n\r\n```\r\nuser@sys-vpn:~$ sudo service netfilter-persistent status\r\n● netfilter-persistent.service - netfilter persistent configuration\r\n   Loaded: loaded (/lib/systemd/system/netfilter-persistent.service; enabled)\r\n  Drop-In: /lib/systemd/system/netfilter-persistent.service.d\r\n           └─30_qubes.conf\r\n   Active: inactive (dead)\r\n           start condition failed at Wed 2016-05-11 23:45:35 CEST; 25s ago\r\n           ConditionPathExists=/var/run/qubes-service/netfilter-persistent was not met\r\n\r\nMay 11 23:45:35 localhost systemd[1]: Started netfilter persistent configuration.\r\n```\r\n\r\n```\r\nuser@sys-vpn:~$ ls /var/run/qubes-service/netfilter-persistent\r\n/var/run/qubes-service/netfilter-persistent\r\n```\r\n\r\n\r\n### Expected behavior:\r\n\r\n/var/run/qubes-service files should be readable before netfilter-persistent (or any other) systemd service starts.\r\n\r\n### Actual behavior:\r\n\r\n/var/run/qubes-service is available too late.\r\n\r\n### General notes:\r\n\r\nThis breaks VPN-Firewall. (A project maintained by me that could theoretically in future provide a bulletproof sys-vpn implementation, that (in development branch) would also defeat fixed shared VPN/Tor server leak bug (https://github.com/adrelanos/vpn-firewall/issues/12) and solve #1941.\r\n\r\n#### Related issues:\r\n\r\n#1941\r\n"},"comment":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/comments/228564378","html_url":"https://github.com/QubesOS/qubes-issues/issues/1985#issuecomment-228564378","issue_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1985","id":228564378,"user":{"login":"marmarek","id":726704,"avatar_url":"https://avatars.githubusercontent.com/u/726704?v=3","gravatar_id":"","url":"https://api.github.com/users/marmarek","html_url":"https://github.com/marmarek","followers_url":"https://api.github.com/users/marmarek/followers","following_url":"https://api.github.com/users/marmarek/following{/other_user}","gists_url":"https://api.github.com/users/marmarek/gists{/gist_id}","starred_url":"https://api.github.com/users/marmarek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marmarek/subscriptions","organizations_url":"https://api.github.com/users/marmarek/orgs","repos_url":"https://api.github.com/users/marmarek/repos","events_url":"https://api.github.com/users/marmarek/events{/privacy}","received_events_url":"https://api.github.com/users/marmarek/received_events","type":"User","site_admin":false},"created_at":"2016-06-25T18:44:24Z","updated_at":"2016-06-25T18:44:24Z","body":"**Automated announcement from [builder-github]**\n\nThe package `python2-dnf-plugins-qubes-hooks-3.1.17-1.fc21` has been pushed to the `r3.1` testing repository for the Fedora `fc21` template.\nTo test this update, please install it with the following command:\n```\nsudo yum update --enablerepo=qubes-vm-r3.1-current-testing\n```\n[Changes included in this update][commits]\n\n[builder-github]: https://github.com/QubesOS/qubes-builder-github\n[commits]: https://github.com/QubesOS/qubes-core-agent-linux/compare/af8181ee48f2075a7f65583a0e1a48c3f5fd06d7...5518828c59f13b0eb8b05872f827296061b408a1\n"}}
{"actor":{"display_login":"marmarek"}}