-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-07-31 13:38, Marek Marczykowski-Górecki wrote: > On Sun, Jul 31, 2016 at 01:30:42PM -0700, Andrew David Wong wrote: >> On 2016-07-31 10:41, donoban wrote: >>> On 07/30/2016 11:52 PM, Marek Marczykowski-Górecki wrote: >>>> On Sat, Jul 30, 2016 at 02:44:24PM -0700, tel wrote: >>>>> Sorry for the delay, Chris. I was waiting for 3.2-rc2, which I >>>>> just installed. It seems to come with the latest AEM package, so I >>>>> didn't have to install that package myself. >>> >>>>> I added the parameter to the tboot line. It didn't reboot, but it >>>>> hung before asking for the password with "Waiting for >>>>> /dev/disk/by-label/aem* to be connected..." >>> >>>>> Not sure where to go from here. >>> >>>> Do you use also USB VM? In that case, dom0 has no access to USB >>>> controllers... >>> >>>> But you can re-enable it just for boot time by editing >>>> /etc/default/grub and removing the line with "hide_all_usb" (or just >>>> comment it out). Then rerun `grub2-mkconfig -o /boot/grub2/grub.cfg`. >>>> It will expose dom0 for all connected USB devices for a short time >>>> during system startup. >>> >>> >>> >>> Nice, this should be added to: >>> https://www.qubes-os.org/doc/usb/#tocAnchor-1-1-4 >>> >>> With some warning: "Caution! Enabling usb-vm with LUKS encryption and a >>> USB keyboard could stop you from booting your system" >>> >>> :) >>> > >> If a USB keyboard is detected, the installer does not allow the option >> of creating a USB qube, so it should not be possible for a user to >> accidentally get him- or herself into this predicament. > > But using USB qube will not stop you from creating AEM usb stick (or the > other way around). >
So, the problem is that if rd.qubes.hide_all_usb is added to grub.cfg when the USB qube is created, but the user later decides to create an AEM USB stick, then the user must be told to remove rd.qubes.hide_all_usb, or else it will not work. Is that correct? - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXnmLMAAoJENtN07w5UDAw1H8P/if8V4KAF7/QR+jNEiJkg7sN STv9tLfVxk08HmTUTVRGK4GjezZakUjhtEGOGyF/mKPs39uJ1NOzIY4QtO21M7nH A8M3yNNUuFbfdykvs4yP1c3gkLmkJcVdsLIGMFHye9VP51TBjsEmHT8s3DltmG1l 7HRzvhTvWcWmP6n3ZGBUEdNEiWt68CuK6lKWOaTWRFIDfHEeCJJymw4r5yA/81Oy vQcOBCdBZR/8yU9veHrQeTvAfttJTBUO/uiudO1q006eCK7LHmcrEQ5M39LZk5H8 X5mycno2p7kGwDSrcgEnsakqcSJlPu9untfw1bdVQwxvPP2Lnkk03zwTu/fh+n+B hNKdNwW+8NzqlyRP2cguk4qJjtV3VIB1STNulhNMMspoO+e6T44JvpYWCCGiYSXn SLSrkzTHzFjr956dXPMGg2jZJaEEaixYAAxTeQMae9YLIjVFMIsyu/ttNrOmI5Y6 gN7GL7B7bj1zmHlHykvrGi8fIoQWXLQ/23RvqtGzqY5OXCsJ46nuMLn+qpqiSehB /3s7hL2pNk/lEacfVfpa0X/EdATFzQS3CK5Bds+rqtVH0hTE8Y+R6wz7BoD2wQQ1 seJN7aiIOdTKOeQ3yR90VXyLffnjwOzdirYmfbJDgG6xRiWegc0fu2Pi6ANWPPxR g8cJxWORzkmZCp4ECH2G =WHkx -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/49d0ddb6-df8a-f6ba-5040-cada6bbc2c1f%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
