-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-07-31 13:42, Andrew David Wong wrote: > On 2016-07-31 13:38, Marek Marczykowski-Górecki wrote: >> On Sun, Jul 31, 2016 at 01:30:42PM -0700, Andrew David Wong wrote: >>> On 2016-07-31 10:41, donoban wrote: >>>> On 07/30/2016 11:52 PM, Marek Marczykowski-Górecki wrote: >>>>> On Sat, Jul 30, 2016 at 02:44:24PM -0700, tel wrote: >>>>>> Sorry for the delay, Chris. I was waiting for 3.2-rc2, which I >>>>>> just installed. It seems to come with the latest AEM package, so >>>>>> I didn't have to install that package myself. >>>> >>>>>> I added the parameter to the tboot line. It didn't reboot, but >>>>>> it hung before asking for the password with "Waiting for >>>>>> /dev/disk/by-label/aem* to be connected..." >>>> >>>>>> Not sure where to go from here. >>>> >>>>> Do you use also USB VM? In that case, dom0 has no access to USB >>>>> controllers... >>>> >>>>> But you can re-enable it just for boot time by editing >>>>> /etc/default/grub and removing the line with "hide_all_usb" (or >>>>> just comment it out). Then rerun `grub2-mkconfig -o >>>>> /boot/grub2/grub.cfg`. It will expose dom0 for all connected USB >>>>> devices for a short time during system startup. >>>> >>>> >>>> >>>> Nice, this should be added to: >>>> https://www.qubes-os.org/doc/usb/#tocAnchor-1-1-4 >>>> >>>> With some warning: "Caution! Enabling usb-vm with LUKS encryption and >>>> a USB keyboard could stop you from booting your system" >>>> >>>> :) >>>> > >>> If a USB keyboard is detected, the installer does not allow the option >>> of creating a USB qube, so it should not be possible for a user to >>> accidentally get him- or herself into this predicament. > >> But using USB qube will not stop you from creating AEM usb stick (or the >> other way around). > > > So, the problem is that if rd.qubes.hide_all_usb is added to grub.cfg when > the USB qube is created, but the user later decides to create an AEM USB > stick, then the user must be told to remove rd.qubes.hide_all_usb, or else > it will not work. Is that correct? >
(And, as you said, the converse: If a user creates an AEM USB stick, then later decides to create a USB qube, they should be warned not to add rd.qubes.hide_all_usb to grub.cfg.) - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXnmNKAAoJENtN07w5UDAwnj0P/2uVn7FhDYbF8Zus0kx8MZKo A1h6LBqepzZjpesfWifQ3sbgX5FnjADOgrWsFPWQyEtGxrw1Bb2UtJl3cPcqIBGG 4KQVWLL9bGmdS9d9VdZVL0snRKIHlr4z5R4A/1UDoKUhbGs/OtP7iN3w0zAUD8/3 DY1FLejTFCSu7jhTpd3pwAOe8b18g8PKnfBHuY4J2nXMxcHLhLjZiPYNvmXEFgnb nXEChbBHshg/DtwuK8cx6oYZyK7Y3v2yr6ZGACv4ZGSfNThNZXpPralblBB7FPFT fvAIjKzPZ0yUOjBVeAEqwO1h+P5+ruZPWsKo/CLJwG7h9ZuPXiNHCVGy1LTmHBRe dvYQF9hl1WCwjbicmWRg/UqgbKA1lHMKqK/Ty/90SNbMpvqio6+g0GINf+c8Qw6Y uYYmsHkTjr+N77xf1994jtk4aMTPu3NovAGj6jFOBrfuq+6z+GWQ99aqzo8bARdV e83SDowqMv21XmV19gEVN36O8fJG/Lds1KUIqOVF/ZS6gysnWKqiEb7jSH5KZG3g BBuduYca0JKGW0Vdeqt/MlDa8VShpX2LfvsLkRvocGxDor8fbWZXEKT3mFOyFpFi 27E0Paya6SiBwFU2N9pKS17XAfVfbW/grFgTLZ+Nh6ko0kVkGOkKExceVcP4MTSp x8rVryXIsEqs2s0MfJwU =cat0 -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/d2983f7e-ea7e-4bf4-79f9-9b64d4254409%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
