On Fri, Sep 22, 2017 at 2:21 PM, John Maher <john.e.ma...@gmail.com> wrote:
> On Friday, September 22, 2017 at 1:06:03 PM UTC-4, John Maher wrote: > > On Friday, September 22, 2017 at 10:08:30 AM UTC-4, Francesco wrote: > > > On Fri, Sep 22, 2017 at 9:08 AM, John Maher <john.e...@gmail.com> > wrote: > > > > > > > > > On Thursday, September 21, 2017 at 2:23:18 PM UTC-4, Marek > Marczykowski-Górecki wrote: > > > > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > > > > > Hash: SHA256 > > > > > > > > > > > > > > On Wed, Sep 20, 2017 at 05:46:56AM -0700, John Maher wrote: > > > > > > > > I've been trying to get my Yubikey to attach to my gpg qube by > doing the following: > > > > > > > > > > > > > > > > [dom0 ~]$ qvm-usb -a gpg `qvm-usb | grep Yubikey | cut -f1` > > > > > > > > > > > > > > > > but I'm presented with: > > > > > > > > > > > > > > > > ERROR: qubes-usb-proxy not installed in the VM > > > > > > > > > > > > > > > > But that package is installed in the VM (in the template). > > > > > > > > > > > > > > > > I got this to work fine on my laptop but not on my desktop. > > > > > > > > > > > > > > > > Any suggestions would be great. > > > > > > > > > > > > > > You need that package in both source and destination VM (template). > So, > > > > > > > both template of gpg and sys-usb in this case. > > > > > > > > > > > > > > - -- > > > > > > > Best Regards, > > > > > > > Marek Marczykowski-Górecki > > > > > > > Invisible Things Lab > > > > > > > A: Because it messes up the order in which people normally read text. > > > > > > > Q: Why is top-posting such a bad thing? > > > > > > > -----BEGIN PGP SIGNATURE----- > > > > > > > Version: GnuPG v2 > > > > > > > > > > > > > > iQEcBAEBCAAGBQJZxAOQAAoJENuP0xzK19csf7EH/A4VSx4RqlQob2eFfxz+PSER > > > > > > > EwkbF90Tu7wu9haeRAhvwyWdh7BVwkA+Qb4wtsPnggZyYxCyeNtn+1qVYTZL5Ov5 > > > > > > > ZwLMCSwsIj7s+pK3Rh28GQfnyMgLE2Y5iUor9gLItO54+kYoPWBW0tygXFxeOqIj > > > > > > > NWYVHNlo+RiJDPGD3xqa6H7zRiTX+3IlYOtB6C8Gr2tYITcM1s8u5wYTs2/MpKbE > > > > > > > JsEph8OSiLY8YsM+u2/TvWt30Ajpdvx7sRlblOvvZg1Rn/7KZqIqnFydyt0uMeUY > > > > > > > 39DykFZ0WaJF28lpVcdy92kViZE8gTM00KNGulHaMc4pW/N65p5L97o1ldoQulw= > > > > > > > =KvN4 > > > > > > > -----END PGP SIGNATURE----- > > > > > > > > > > > > Thank you, Marek. I now believe I'm confused about sys-usb. I have no > sys-usb VM in either my desktop or my laptop (both 3.2) displayed in the > Qubes VM Manager, but I remember selecting sys-usb during the > installations. In terms of behavior, both my systems require that I attach > a USB drive to a particular qube after inserting the drive. Doesn't that > mean I have a USB qube (sys-usb)? > > > > > > > > > > > > So, I don't know how I would install qubes-usb-proxy when I can't see > sys-usb. > > > > > > > > > > > > > > > > > > qvm-ls will list all installed VMs so you can check if sys-usb exists > > > > > > best > > > > > > Fran > > > > > > > > > John > > > > > > > > > > > > -- > > > > > > You received this message because you are subscribed to the Google > Groups "qubes-users" group. > > > > > > To unsubscribe from this group and stop receiving emails from it, send > an email to qubes-users...@googlegroups.com. > > > > > > To post to this group, send email to qubes...@googlegroups.com. > > > > > > To view this discussion on the web visit https://groups.google.com/d/ > msgid/qubes-users/dc559bd3-0947-4350-8a86-5863f5fb93ed%40googlegroups.com. > > > > > > > > > > > > For more options, visit https://groups.google.com/d/optout. > > > > Francesco, thanks. That helps. My confusion continues to be high, but I > guess mostly because I thought my computer had a USB qube because of it's > behavior. Like I said, I can attach my Yubikey to one Qubes computer but > not another. It's likely that I installed them slightly different from each > other. > > > > I vaguely remember checking a "sys-usb" box during installation of both, > but the laptop (installed most recently) I think I also check a box that > referenced an experimental feature. > > > > Perhaps I just need to install a USB qube on my desktop, but clearly I > don't have one on my laptop, and attaching the Yubikey works there. > > > > John > > One thing that might be useful is the difference between my desktop and my > laptop when I run qvm-usb (with the Yubikey plugged in). > > Desktop: > -------------- > $ qvm-usb > dom0:7-5 1050:0407 Yubico_Yubikey_4_OTP+U2F+CCID > > Here the USB controller is assigned to dom0 which is what Qubes tries to avoid for security reasons. So yes you need a USB qube here > Laptop: > -------------- > $ qvm-usb > sys-net:2-3 1050:0407 Yubico_Yubikey_4_OTP+U2F+CCID > > Here the USB controller is assigned to sys-net, which may work as a USB Qubes, specially for machines that to not have enough RAM to support an independent sys-usb. > Might the dom0 vs sys-net indicate an important configuration difference? > > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-users+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-users@googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/qubes-users/5ca39fc6-5b6d-483c-99b5-ce8730e9659e%40googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAPzH-qD5YsSkTaF7dyEb-z3faECi1dnx8UtNnDKv-%3DrLZzOdfQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
