qubes-issues

qubes-issues copied to clipboard

Qubes OS release

R4.1 & R4.2 - much more prevalent in 4.2

Brief summary

Enabling the "Allow full access for 5 mins" option results in a critical error the next time the qube's settings are opened within the five-minute window.

Steps to reproduce

1. In the "Firewall rules" tab of a qube's Settings, select "Limit outgoing connections to..." and "Allow full access for 5 mins."
2. Press "OK."
3. Within the next five minutes, attempt to open the settings for that qube again.

Expected behavior

Qube Settings opens normally.

Actual behavior

Full log in that error window:

----
line: expire_time = model.temp_full_access_expire_time - \
func: set_fw_model
line no.: 1464
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: self.set_fw_model(model)
func: __init__
line no.: 192
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: window = window_class(qt_app, qubes_app)
func: run_synchronous
line no.: 558
file: /usr/lib/python3.11/site-packages/qubesmanager/utils.py
----
line: utils.run_synchronous(functools.partial(VMSettingsWindow, vm, args.tab))
func: main
line no.: 1540
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: sys.exit(load_entry_point('qubesmanager==4.2.8', 'console_scripts', 'qubes-vm-settings')())
func: <module>
line no.: 33
file: /usr/bin/qubes-vm-setting

Update: the problem with the immediate Houston popup when requesting settings rectifies itself eventually, probably when the timer expires. Don't need to restart the qube.

BTW the reason I used "[dom0] Houston, we have a problem..." as the title of this issue is that is the title of the error dialogue that appears, and what someone would search for.

I just experienced I think a variant of this on 4.2. In this case it was:

TypeError: unsupported operand type(s) for -: 'int' and 'str'
at line 33
of file /usr/bin/qubes-vm-settings.

I was able to workaround by commenting out the bottom 2 lines of func, opening Qube Manager, removing all firewall entries & disabling "allow full access". I could then uncomment the lines and all good.

Here is the more detailed information from the dom0 popup.

----
line: expire_time = model.temp_full_access_expire_time - \
func: set_fw_model
line no.: 1464
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: self.set_fw_model(model)
func: __init__
line no.: 192
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: window = window_class(qt_app, qubes_app)
func: run_synchronous
line no.: 558
file: /usr/lib/python3.11/site-packages/qubesmanager/utils.py
----
line: utils.run_synchronous(functools.partial(VMSettingsWindow, vm, args.tab))
func: main
line no.: 1540
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: sys.exit(load_entry_point('qubesmanager==4.2.8', 'console_scripts', 'qubes-vm-settings')())
func: <module>
line no.: 33
file: /usr/bin/qubes-vm-settings

This seems like a duplicate of #8757 but that is supposed to be fixed now...~~Edit2: it's not fixed, can still reproduce.~~ Edit: or rather my linked issue is a duplicate of this one, which I didn't see when I opened it, as this one was opened earlier.

Edit3: the manager version that fixes this is not yet in stable as I just saw (I got confused by the stable labels in the linked issue). So presumably updating with testing repo enabled should fix this issue.

This seems like a duplicate of #8757 but that is supposed to be fixed now...~Edit2: it's not fixed, can still reproduce.~ Edit: or rather my linked issue is a duplicate of this one, which I didn't see when I opened it, as this one was opened earlier.

Edit3: the manager version that fixes this is not yet in stable as I just saw (I got confused by the stable labels in the linked issue). So presumably updating with testing repo enabled should fix this issue.

Ordinarily, you're correct that we would close #8757 (the newer issue) as a duplicate of #8685 (the older issue). However, since #8757 is already closed as fixed, and the commits are associated with #8757, we can close #8685 as a duplicate instead.

This issue has been closed as a "duplicate." This means that another issue exists that is very similar to or subsumes this one. If any useful information on this issue is not already present on the other issue, please add it in a comment on the other issue. Here are some common cases of duplicate issues:

• The other issue is closed. The other issue being closed does not prevent this issue from duplicating it. We will examine the closed issue and, if appropriate, reopen it.
• The other issue is for a different Qubes release. We usually maintain only one issue for all affected Qubes releases.
• The other issue is very old. The mere age of an issue is not, by itself, a relevant factor when determining duplicates.

By default, the newer issue will be closed in favor of the older issue. However, we make exceptions when we determine that it would be significantly more useful to keep the newer issue open instead of the older one.

We respect the time and effort you have taken to file this issue, and we understand that this outcome may be unsatisfying. Please accept our sincere apologies and know that we greatly value your participation and membership in the Qubes community.

If anyone reading this believes that this issue was closed in error or that the resolution of "duplicate" is not accurate, please leave a comment below saying so, and we will review this issue again. For more information, see How issues get closed.

This issue is not yet fixed! I only just caught up to date and checked. Firewall tab in settings with "Limit outgoing connections.." set, and allow for 5 min ticked, then hit "OK" then this is the result of attempting to open the settings in that qube until the timer expires:

This issue is not yet fixed!

Can confirm and reproduce with the same method as @Eric678 and same result. Full log in that error window:

----
line: expire_time = model.temp_full_access_expire_time - \
func: set_fw_model
line no.: 1464
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: self.set_fw_model(model)
func: __init__
line no.: 192
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: window = window_class(qt_app, qubes_app)
func: run_synchronous
line no.: 558
file: /usr/lib/python3.11/site-packages/qubesmanager/utils.py
----
line: utils.run_synchronous(functools.partial(VMSettingsWindow, vm, args.tab))
func: main
line no.: 1540
file: /usr/lib/python3.11/site-packages/qubesmanager/settings.py
----
line: sys.exit(load_entry_point('qubesmanager==4.2.8', 'console_scripts', 'qubes-vm-settings')())
func: <module>
line no.: 33
file: /usr/bin/qubes-vm-setting

@Eric678, @UndeadDevel: It looks like you're commenting on the wrong issue. This issue (#8685) was closed as a duplicate of #8757, see https://github.com/QubesOS/qubes-issues/issues/8685#issuecomment-1937877032. You should comment on #8757 instead.

If you think this issue is not really a duplicate of #8757, please say so.

Intentional! Simply if the other issue is fixed then this must be different, so undo the dup!

I suppose we could make this issue about the new error message with operands int and str, while we leave the other one as fixed and being about the error message with operand float...in that case it would make sense to update the OP of this issue to reflect the different error message. Up to @andrewdavidwong to decide.

Agreed - it's not a duplicate. The new error message should be noted in OP, and this should be re-opened.

Encountered the same issue as the steps above (Tick Allow all for 5 Minutes). Qubes Release: 4.2.1 (R4.2)