[qubes-users] Re: Installing VPN in Qubes Versus VPN on a Router

[Me]

amadaus:
> amad...@riseup.net:
>> We see much correspondence in these forums about installing a VPN within
>> Qubes. Surely, the most secure place for VPN is to install on a Router?
>> I say these things after reading the following paper [
>> https://cryptome.org/2013/12/Full-Disclosure.pdf ] in which a group of
>> hackers demonstrate that the majority of routers (in-particular those
>> provided by ISP's] have backdoors to government agencies. These
>> adversary's are able attack our LAN and its devices; including the
>> ability to intercept VPN and Tor traffic.
>> The solution they say is to isolate these rogue routers in the
>> Militarized Zone by creating a DMZ [demilitarized zone]. Achieved by
>> installing a 2nd router [flashed with open source firmware such as
>> OPenWRT]. It is here, on the router, that we should enable and run OpenVPN.
>> Thoughts on this paper and it's conclusions are welcomed
>>
> Thanks everyone for your contributions.
> Implicit in most of your replies is a distinct distrust of the
> modems/routers provided to us.
> If anyone is interested, the solution we adopted to securing our LAN is
> copied from this blog;
> https://tokyobreeze.wordpress.com/2015/02/01/create-a-nsa-and-hacker-proof-home-network-that-you-control/
> This guy uses a couple of cheap routers loaded with OpenWRT which sit
> behind his infected Modem. His 2nd routed utilises OpenVPN Client and is
> configured to protect "high value" devices.
> We've successfully copied this configuration and it seems!! to work. -
> unless you know better??
> 
The Blogger is correct, the best place to install OpenVPN is to use it
within OpenWRT on a Router.  As well as helping protect incoming and
outgoing traffic to your Qubes device, it can help protect smart phones,
tablets & IoT devices from being attacked and employed for Denial of
Service purposes


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/32bb2ecc-7e3f-3a88-c3da-834a5500b585%40tutanota.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Is Qubes for the Asus X205ta ?

[Me]

pierremartinf...@gmail.com:
> Hi, I wonder if the Asus X205ta can handle Qubes ?
> Thank,
> 


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2d69ffcc-94d4-175f-35dc-0fa42bf5c3b3%40tutanota.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Any chance the freezing could be resolved?

[Andrew]

Drew White:
> On Monday, 21 November 2016 14:31:10 UTC+11, Andrew  wrote:
>> Drew White:
>>> Still getting Dom0 crash / parts not responding. 
>>>
>>> Primarily it's a guest that causes the whole of Dom0 to slow and stop.
>>>
>>> I have yet to find out what the root cause it, but it's still locking 
>>> things up.
>>>
>>> Sometimes after running a guest for a few hours will cause the system to 
>>> start having a coronary.
>>>
>>> I'm not doing anything super intensive, only programming.
>>>
>>>
>>> IF I run ANY guest with Firefox, and have it running for a couple of days, 
>>> I come back from the weekend or sometimes even 1 night, and the PC is 
>>> locked up solid. At that point, not even the logging in Dom0 is working.
>>> Sometimes, as I have said before, the logging in Dom0 is still running and 
>>> working but I can't get access to the machine any more and have to 
>>> physically power it down to then start it up again. Which causes an fsck to 
>>> be run because the filesystem wasn't cleanly unmounted.
>>>
>>> Any help on these bugs would be greatly appreciated.
>>> Mainly I find the issue is with FireFox running. I've found other guests 
>>> running for days on end don't cause the system to lock up.
>>>
>>> If information for the developers is required, I would be happy to email 
>>> you the details, logs, and specs.
>>>
>>
>> Drew,
>>
>> Is there any chance you are using a recent (Braswell or maybe Broadwell
>> or similar) low-end Intel CPU?  If so, your problem may actually be due
>> to a bug in the Linux kernel.
>>
>> For example, I recently acquired just such a system and experienced
>> seemingly random total system freezes with Qubes 3.2 ranging anywhere
>> from 5m to 12h after boot.  What fixed the problem, or worked around it,
>> was:
>> -use the 4.8.* kernel in the unstable repository
>> -change the "i915.preliminary_hw_support=1" in the kernel boot command
>> line to "intel_idle.max_cstate=1", which limits the CPU to drawing the
>> maximum power :-\
>> -(may be unnecessary) disabling DRI in my dom0 Xorg.conf (I had to
>> create a new file):
>> -"NoAccel" "true"
>> -"DRI" "false"
>>
>> Let me know if you're affected by the same bug.
>>
>> Cheers,
>> Andrew
> 
> I have no second CPU in the system at the moment. Not the extra RAM. That' 
> shwy it says there is a second, but there is none.
> 
> 
> I have no Xorg.conf anywhere on my system to alter or move and create a new.
> 
> 
> So you did EVERYTHING there at once?
> Or did you do one thing, check it, then try a different thing, check it, then 
> when they didn't work on their own you tried them in combination?
> 

It doesn't look like this is the same bug, but...

> I have no Xorg.conf anywhere on my system to alter or move and create
a new.

Yes, as I said, I had to create one.

> So you did EVERYTHING there at once?
> Or did you do one thing, check it, then try a different thing, check
it, then when they didn't work on their own you tried them in combination?

Originally I tried them piecemeal, but this is the only combination I
have found that works.  I have not tried without the Xorg.conf
modifications but with the other two, though.

Andrew

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d8711cc3-53b2-cee8-16b0-225b1f8823b8%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Replacing Dolphin on Whonix-ws

[Patrick Schleizer]

Nautilus previews are still enabled unfortunately. TODO:

https://github.com/QubesOS/qubes-issues/issues/1108

Dolphin [and Nautilus] previews are disabled in Qubes-Whonix, but not in
other Qubes VMs. TODO:

https://github.com/QubesOS/qubes-issues/issues/1885

Help welcome!

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7ec978b9-cd71-459a-8189-125429749895%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Problem creating Win7 HVM

[Sec Tester]

I downloaded another Win7_64bit.iso from another source, same problem. 

>>Getting Stuck at a glowing windows logo Before windows even starts the 
>>install process.

I found the Qubes VM directory dom0 /var/lib/qubes/vm-templates/

And confirmed when i delete the VM, that the VM is deleted from the directory. 
So it cant be an issue of trying to continue part of a failed install.


Ive tried creating both a HVM & a HVM-template
Allocated 2048Gb of ram (Not memory balanced)


Need some help trouble shooting.
Is there a log somewhere that could provide insight?

Cheers

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/16dbb006-58cd-466d-9235-468348d2dda1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes Cannot See disk drives on Dell XPS 15 9550

[Steve Creeper]

Qubes-R3.2-x86_64

I booted up the installation ISO (in legacy and UEFI modes) using a USB
flash drive on a Dell XPS 15 9550. I navigated through the language
selection, and when I reached the installation summary screen, it said that
in the Installation Destination there were no disks selected. I clicked
that, and was greeted with an empty disk list, and a suggestion to,
"...shut down the computer, connect at least one disk, and restart to
complete installation."

I have tried every promising setting in the BIOS, enable/disable secure
boot, enable/disable thunderbolt USB boot, boot using legacy and UEFI, and
even switching SATA operation from RAID to ahcp. I upgraded/downgraded the
BIOS, tested other linux distros incase Qubes was somehow in error, and
even (as a desperate measure of last resort), called Dell to see if they
happened to have any useful information (they didn't, but then, they
wouldn't know it if it bit them in the ***).

Long story short, nothing will get Qubes to even see my hard drives. So
I've come straight to the source, and I'm asking. Any idea how to work
around this?


Thanks in advance,
Drako365


-- 
"*We could live forever, if you've got the time.*"
*Drako365*

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAFSwjVpqqAu2xgABNKEAi_%3DzVwOhdbwA_tQJEvePg7mUO9Dfyw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: "What does "supported" mean"? was: Re: [qubes-users] Fedora 24 Template for Qubes 3.1?

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Nov 21, 2016 at 04:45:33PM +0100, Achim Patzner wrote:
> 
> > Am 20.11.2016 um 21:16 schrieb Joonas Lehtonen 
> > :
> > 
> > Hi,
> > 
> > since Qubes 3.1 is supported until 2017-03-29
> 
> This is a question I always wanted to ask: What does “support” mean in 
> relation to Qubes? Security fixes? Plus bug fixes? Plus feature upgrades?

That's a good question. Surely not major changes in behaviour (new
features etc). But for the other two categories I'd say yes.

AFAIR there was some major incompatibility in qubes-core-vm package in
R3.1 preventing it being fully compatible with Fedora 24 (and requiring
a change falling far outside of "bug fixes" category). But after brief
test, it looks like my memory fails me (maybe that was about R3.0?) and
the only needed thing was replacing tabs with spaces in one file:
https://github.com/QubesOS/qubes-gui-agent-linux/commit/16c98bc7ebebc0c4025ab02ec2e5bbf4dc9a77d2

So, expect Fedora 24 template being supported in R3.1 soon too :)

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYM7qrAAoJENuP0xzK19csMZgH/RryNKJq9wsrnJ9T4djHvSRh
HbHvWe+CEfLGnbbO7DIKMrSJr2iJAVcTTuevu4JrI6wSeN48IK5/OzFYqgM6RJiG
UFfDCYwM6VnfA5dSIko6XdpZOqFGURJ/ZGDHb+UOMP/CImz6r/COQ4e18kzrLEMZ
SeV3SlKpQ6yJgmzTp37Q0LtwmjdTlJ04NTYAPLdaig/gbu2O2prsj8coxP5+d8Ll
osWaPTAP8sD4C6JObQawBWJyH1OQnG3eb2bweXHtBWltUP2dCU5m88xDISDr8ZOt
jc+ZshW1sKoQEJWrW+WyJgkf1zqfJRxNEj6GUiRUGkZkAVNk5XZAm51CzE5pVQA=
=OJdh
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161122032529.GC2130%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes not shutting down

[Loren Rogers]

On 11/21/2016 06:24 PM, Drew White wrote:

On Tuesday, 22 November 2016 06:04:43 UTC+11, Loren Rogers  wrote:

On 11/21/2016 11:04 AM, Loren Rogers wrote:

On 11/21/2016 12:42 AM, Drew White wrote:

On Sunday, 20 November 2016 04:56:03 UTC+11, Loren Rogers  wrote:

Another correlation I've noticed is that my machine randomly shuts
itself down without warning when I'm browsing in the Anon-Whonix VM. It
seems that simply having the Whonix browser open causes the problem.
I've not been able to pin down an exact cause, but it seems to happen
after about 5-20min. When this happens, the machine sometimes ends
up in
a hung state (black screen) at the end of the shutdown process.

I've also noticed that the fan speeds up right at it starts to
shutdown.
(The screen turns to the Qubes logo with the progress bar, then the fan
cranks up.) Sometimes the bar makes it all the way to the end, other
times it seems to simply crash to a hault. As I mentioned elsewhere,
the
Thinkpad X201t is known to have overheating issues, but I'm not sure if
this is related. I'm not working the machine particularly hard (just
browsing articles on the web), and the hardware is not particularly hot
to the touch.

When it gets to the qubes logo screen, press ESC to see what it's
actually doing.

If you wish to always know what it's doing, turn off rhgb and quiet
in the boot config.

Then you will see where the issue is.

Thanks, I'll give that a shot next time it happens. I feel like it'll
go by too quickly for me to see what's happening; does it also write
its activity to a log somewhere?

I can now confirm that it's an over heating issue. When it went into the
automatic shutdown sequence, I pressed escape and managed to take note
of a few of the messages. One of the very first ones was something about
"thermal_zone_0 critical temperature reached: 128C", which I assume is
the cause. (This isn't an exact quote, since I noted it from memory.)

This raises some questions:
- What could be causing this overheating issue in Whonix?
- Is 128C a normal temperature for the safety shutdown to kick in?
- Does Qubes have a warning / alert system for potential overheat? (Like
low battery)

It is a high temperature, but does it ONLY happen in Whonix?
Or if you push the PC does it happen also?
Have you tried limiting the threads Whonix can use?

Sometimes CPUs have shutdown at 99 degrees.
So 128 degrees is a bit high in my own opinion.

I recommend you check the CPU Fan and heatsinks (if it has them).


Thanks for the input - I just dusted out the fan, and we'll see if it 
helps. It wasn't too bad, but we'll see if there's an improvement.


No, it also randomly goes into auto-shutdown when backing up VMs. 
However, that happens about 20% of the time. Whonix seems to do it about 
80% of the time, the other 20% I figure I shut it down before it does so 
on its own. I figure there may be something in the Whonix VM that's 
causing my processor to over work itself. The auto-shutdowns may be 
ultimately linked to dust in the fan or something like that, but if 
there's something processor intensive in Whonix, it may be worth looking 
into.


Also, a heat warning message would be nice. I assume the thresholds are 
set via the bios - is there a standard way of monitoring this? (I'm not 
particularly well versed in this sort of thing.)





--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/395808dd-82e6-4b69-79b7-8827766aa748%40lorentrogers.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Setup Fails to Install netvm, firewallvm, work, personal, etc - Fedora 23 Error

[lmayeur06]

Trying to install Qubes 3.2

-Lenovo P70 with nvidia graphic card
-Followed recommended settings for Lenovo bios: 
https://www.qubes-os.org/doc/thinkpad-troubleshooting/
-Intel SSD (not NVME)
-Followed instructions here to get qubes to boot 
https://www.qubes-os.org/doc/uefi-troubleshooting/

-After install but before reboot I add the Xen flags as recommended on that 
page:
Edit /mnt/sysimage/boot/efi/EFI/qubes/xen.cfg and add to every kernel section:
mapbs=1
noexitboot=1

Then I reboot and qubes setup continues normally until it gets to setting up 
the TemplateVMs

I get the following error:

['/usr/bin/qubes/pref','--set','default-template','fedora-23'] failed:
stdout:""
stderr: "A VM with the name 'fedora-23' does not exist in the system"

Here is the error: http://imgur.com/a/zgE6Q


When I click OK, the setup says that it has completed and boots to the desktop 
but I have none of the VMs that were supposed to be setup (none that are based 
on Fedora). 

Resulting Qubes VM Manager: http://imgur.com/a/sxkVM

I cannot get online to do any updates because there is no way to set up a NetVM

I have
-dom0
-debian-8 Template
-whonix-gw Template
-whonix-ws Template

Do NOT have
-NetVM
-FirewallVM
-Fedora 23 Template
-Work
-Personal
-Untrusted
-Vault

Is there any way to fix this and get all the defaults? (I'm happy to reinstall 
rather than trying to set it all up manually)

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f735458d-1203-44b0-9c53-d1236e1eedd5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] beginner trying to choose a laptop question

[Jean-Philippe Ouellet]

On Mon, Nov 21, 2016 at 8:04 PM, taii...@gmx.com  wrote:
> or go to a store and boot a liveCD then run the HCL.

^ This! It can be fun...

You may wish to try to explain to an employee what you are doing, to
avoid getting "banned" (thrown out) from that store for "trying to put
malware on the computers". Been there, done that (a while ago, and not
for qubes). Best Buy is disappointing. But... got dmesgs, doesn't
matter! :)

However, simply borrowing friends' laptops seems to be a far less
adversarial approach to testing hardware compatibility (assuming they
trust you and are not concerned you are trying to backdoor them).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABQWM_BQbYrkYzcN7ZOKW%3D3zr2udWKAULiG2iYAa0q4hY-OcGg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] How to update fedora-23-dvm to fedora-24?

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Tue, Nov 22, 2016 at 01:27:28AM +, Gaijin wrote:
> On 2016-11-21 13:28, Marek Marczykowski-Górecki wrote:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA256
> > 
> > On Mon, Nov 21, 2016 at 05:18:39AM -0800, Opal Raava wrote:
> > > Hi, I updated everything to fedora-24 template, but I don't know how
> > > to update fedora-23-dvm. It uses the old fedora-23 template and when
> > > i change this in the manager to use fedora-24, it says making save
> > > file but then no browser or terminal runs.
> > > 
> > > What is the best way to update fedora-23-dvm?
> > 
> > Simply don't - instead use fedora-24-dvm. To create (and use it), call:
> > 
> > qubes-create-default-dvm fedora-24
> 
> According to https://www.qubes-os.org/doc/dispvm-customization/ that should
> be:
>   qvm-create-default-dvm fedora-24

Yes.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYM6EsAAoJENuP0xzK19cssHUH/iEwyHMZX+CQuwyXjtFN8WCd
se7vx+tUeTXQ7vrFFcW4CyNhrWdSr5iNMNHSxo3Y27sv/e65lx0zeaE4mTEIuqtK
wZXPKwzEQAGxizzMIXqXdQEl3V2GEM3mxxk/OKvHENxgSHpTq0UD7iVC5G8k1X92
RSd3mWYM6JluPPTNv799Y0rT9oVbhgFEqsQnaC/REt00l8WrBUIk3yquDGBbdUtc
OHCtiwoxSxMZdPHvO7mqi0K59ksTCjiuTql9Pxm2gVAeasvr7eOlw6o3//CJjP/D
xnVKrZQD8MNKQhSc1mLggfBIH6ISXL0VMUy7Iq/rjBbgMLezkJ5UprmEm8Std34=
=O6fs
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161122013642.GS1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] How to update fedora-23-dvm to fedora-24?

[Gaijin]

On 2016-11-21 13:28, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Nov 21, 2016 at 05:18:39AM -0800, Opal Raava wrote:
Hi, I updated everything to fedora-24 template, but I don't know how 
to update fedora-23-dvm. It uses the old fedora-23 template and when i 
change this in the manager to use fedora-24, it says making save file 
but then no browser or terminal runs.


What is the best way to update fedora-23-dvm?


Simply don't - instead use fedora-24-dvm. To create (and use it), call:

qubes-create-default-dvm fedora-24

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYMvZxAAoJENuP0xzK19cs1cEH/j9ZXhBfSSjT07qnVudMn6Wi
OR1GG6jOPqb2n1LVAcn7CZmIl4bn/VfUdpObOixLXC5bLrG0DqZVBmQoG8SgAeWi
8VH1u6nej1RDJSAhNARpTeNinOD7qeZIkPsrwP7wzt32/tFzGZ8B1nXyQoaR2gO5
aE5i6V6GUpFfmFEgpwpHR7kI1OOSfjU6hSIJ5zHpN8VoHTLFKtT4qkwQRq7FFYpu
WyF5otpshGAftCFFFyaxh8aHs+4oXjwYiJ3S0o+9QrYqHbt1haeQcv6dxL+QNjHs
0FONzkPJUafrOI0Amy6dcYvve1OGMg4RL3zPKIz+ZZWTH6VgbydrHErSDZ5w6yE=
=L8z6
-END PGP SIGNATURE-


According to https://www.qubes-os.org/doc/dispvm-customization/ that 
should be:

  qvm-create-default-dvm fedora-24

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/722765965895733dce69e284d15c3848%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Any chance the freezing could be resolved?

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Nov 21, 2016 at 03:36:05PM -0800, Drew White wrote:
> did not work...
> $ qubes-dom0-update xen*

Another quirk of yum->dnf transformation...

> did work...
> $ qubes-dom0-update xen* --action=update

Did it changed anything?

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYM5KJAAoJENuP0xzK19csV4UH/2bldPEzU8rgqZp4WdpcKz2b
7XnrclfsiCwPHQYfetZHP/oZmjYDm9/wazKeW7UeP6bAvC3TxoB5/2oiGJT7pnL5
AStMt06ETdYeDAXC3EsJTyHthD7RpTEtPzbgZQ/CGNFoLhp9Gympv9tqUl3zsuZv
qaPdL5jZ1cLoisnNYPs6W/LnzuQBcoHIxwDukRzQN42SkMCXH5yj4AdF6TR078fM
6ln3aHJQsV8cXc9relDWJ/uWx1BvYTCdgBnNKdDwJVDcICetYTElCLOaEE6MrDvU
3cQ01XLH6TPnHLBRWSWLA5wub9P4MkgYGBbOAjiFdX9bJqHjPLyCV5LtK0Oz9ko=
=yGcH
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161122003415.GR1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: Enigmial and Splig GPG2 (previously Re: [qubes-users] Upgrading from Split GPG1 to Split GPG2?)

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 11/20/16 03:41, Marek Marczykowski-Górecki wrote:
> On Sat, Nov 19, 2016 at 09:11:21PM -0800, Andrew David Wong wrote:
>> On 2016-11-19 03:43, Andrew David Wong wrote:
>>> On 2016-11-17 10:05, cubit wrote:
 17. Nov 2016 15:33 by dmoer...@gmail.com:
>>>
> On Wednesday, November 16, 2016 at 10:21:33 PM UTC-5, george wrote:
>> Yes. I get the same issue too. I can read the message, but I can't 
>> write, and I'm also in Debian-8 VM on Qubes 3.2, with Enigmail and 
>> Thunderbird. I can READ messages, but I can't send them, nor 
>> verify/encrypt/sign them. I'm not sure what to do with this...
>
> What template are you using for the gpg VM? 
>
  For me both my vault VM and thunderbird VM are sharing the same Debian 8 
 template.   This template does have gnupg-agent 2.0.26-6+deb8u1  installed
>>>
>>>
>>> Sorry, this is a known issue. Enigmail 1.9 is incompatible with Split GPG 
>>> on Debian 8:
>>>
>>> https://github.com/QubesOS/qubes-issues/issues/2170
>>>
>>> Until this is resolved, I recommend using the Fedora template instead.
>>>
> 
>> Update: 3n7r0p1 has pointed out that this is not an issue, since Enigmail 
>> 1.9 is not contained in the Debian 8 repos to begin with.
> 
> Isn't it possible to install enigmail directly from thunderbird/icedove?
> That would result in the most recent version.
> 

Yes. It all depends on which versions (or version combinations) Qubes is 
willing to support. I take this to mean that we're willing to support the 
latest version available from addons.mozilla.org, so I've reopened the issue.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=tFsT
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ac685725-f67b-8d84-d761-bc608eea7d1a%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Any chance the freezing could be resolved?

[Drew White]

On Tuesday, 22 November 2016 00:11:17 UTC+11, Marek Marczykowski-Górecki  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> On Sun, Nov 20, 2016 at 07:58:45PM -0800, Drew White wrote:
> > [{user}@dom0 {folder}]$ xl dmesg | head -1
> >  Xen 4.6.1-20.fc23
> 
> Have you tried 4.6.3-21 which is already in stable repository?
> 
> - -- 
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
> 
> iQEcBAEBCAAGBQJYMvJwAAoJENuP0xzK19cspS0H/3kYr8MkfgqUBZwrWdZu9G0J
> EeSW/eUALJ35yjEw16lF+21eadDsGSmNW762exgGoZ5SvlGdl/MgFulwlgWJLcX3
> 3OlRt4Tq0rbannpjzPmAeOsKkkh7ctFgh8ZOB0KBWqTZiTByD1uCGikjPbdkOlcX
> SU6i9UvPapkU1sSFQXhMJRSR81I5FM2ichsjuQaMEPrCFMIFw97pxgY+wLhoaTVt
> IHof1TVFUJjUxfGdj8uVXTN2l5Ihb5OGLKd08QnINoAjQPlpePf7r3I7brek6vJ3
> wcySGMFzjUurG00k3RR909sQZ7fFvUZ9Nrywj1BpCGyE2f8YGZVPyKFW/XuTSqs=
> =JMyu
> -END PGP SIGNATURE-

What is the package name I'd have to install to get that?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/54ab9c38-cc4a-494e-bc5d-55314bedd122%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Any chance the freezing could be resolved?

[Drew White]

On Tuesday, 22 November 2016 00:11:17 UTC+11, Marek Marczykowski-Górecki  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> On Sun, Nov 20, 2016 at 07:58:45PM -0800, Drew White wrote:
> > [{user}@dom0 {folder}]$ xl dmesg | head -1
> >  Xen 4.6.1-20.fc23
> 
> Have you tried 4.6.3-21 which is already in stable repository?
> 
> - -- 
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
> 
> iQEcBAEBCAAGBQJYMvJwAAoJENuP0xzK19cspS0H/3kYr8MkfgqUBZwrWdZu9G0J
> EeSW/eUALJ35yjEw16lF+21eadDsGSmNW762exgGoZ5SvlGdl/MgFulwlgWJLcX3
> 3OlRt4Tq0rbannpjzPmAeOsKkkh7ctFgh8ZOB0KBWqTZiTByD1uCGikjPbdkOlcX
> SU6i9UvPapkU1sSFQXhMJRSR81I5FM2ichsjuQaMEPrCFMIFw97pxgY+wLhoaTVt
> IHof1TVFUJjUxfGdj8uVXTN2l5Ihb5OGLKd08QnINoAjQPlpePf7r3I7brek6vJ3
> wcySGMFzjUurG00k3RR909sQZ7fFvUZ9Nrywj1BpCGyE2f8YGZVPyKFW/XuTSqs=
> =JMyu
> -END PGP SIGNATURE-

Will that affect all the VMs?
Or is it just for Dom0?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b45a7075-92ce-420c-ac64-436768c3a0f3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Any chance the freezing could be resolved?

[Drew White]

On Tuesday, 22 November 2016 00:11:17 UTC+11, Marek Marczykowski-Górecki  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> On Sun, Nov 20, 2016 at 07:58:45PM -0800, Drew White wrote:
> > [{user}@dom0 {folder}]$ xl dmesg | head -1
> >  Xen 4.6.1-20.fc23
> 
> Have you tried 4.6.3-21 which is already in stable repository?
> 
> - -- 
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
> 
> iQEcBAEBCAAGBQJYMvJwAAoJENuP0xzK19cspS0H/3kYr8MkfgqUBZwrWdZu9G0J
> EeSW/eUALJ35yjEw16lF+21eadDsGSmNW762exgGoZ5SvlGdl/MgFulwlgWJLcX3
> 3OlRt4Tq0rbannpjzPmAeOsKkkh7ctFgh8ZOB0KBWqTZiTByD1uCGikjPbdkOlcX
> SU6i9UvPapkU1sSFQXhMJRSR81I5FM2ichsjuQaMEPrCFMIFw97pxgY+wLhoaTVt
> IHof1TVFUJjUxfGdj8uVXTN2l5Ihb5OGLKd08QnINoAjQPlpePf7r3I7brek6vJ3
> wcySGMFzjUurG00k3RR909sQZ7fFvUZ9Nrywj1BpCGyE2f8YGZVPyKFW/XuTSqs=
> =JMyu
> -END PGP SIGNATURE-

Is that still FC23?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3ed6940e-9290-4893-b9b6-2666a1673f80%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes not shutting down

[Drew White]

On Tuesday, 22 November 2016 06:04:43 UTC+11, Loren Rogers  wrote:
> On 11/21/2016 11:04 AM, Loren Rogers wrote:
> >
> > On 11/21/2016 12:42 AM, Drew White wrote:
> >> On Sunday, 20 November 2016 04:56:03 UTC+11, Loren Rogers  wrote:
> >>> Another correlation I've noticed is that my machine randomly shuts
> >>> itself down without warning when I'm browsing in the Anon-Whonix VM. It
> >>> seems that simply having the Whonix browser open causes the problem.
> >>> I've not been able to pin down an exact cause, but it seems to happen
> >>> after about 5-20min. When this happens, the machine sometimes ends 
> >>> up in
> >>> a hung state (black screen) at the end of the shutdown process.
> >>>
> >>> I've also noticed that the fan speeds up right at it starts to 
> >>> shutdown.
> >>> (The screen turns to the Qubes logo with the progress bar, then the fan
> >>> cranks up.) Sometimes the bar makes it all the way to the end, other
> >>> times it seems to simply crash to a hault. As I mentioned elsewhere, 
> >>> the
> >>> Thinkpad X201t is known to have overheating issues, but I'm not sure if
> >>> this is related. I'm not working the machine particularly hard (just
> >>> browsing articles on the web), and the hardware is not particularly hot
> >>> to the touch.
> >> When it gets to the qubes logo screen, press ESC to see what it's 
> >> actually doing.
> >>
> >> If you wish to always know what it's doing, turn off rhgb and quiet 
> >> in the boot config.
> >>
> >> Then you will see where the issue is.
> >
> > Thanks, I'll give that a shot next time it happens. I feel like it'll 
> > go by too quickly for me to see what's happening; does it also write 
> > its activity to a log somewhere?
> 
> I can now confirm that it's an over heating issue. When it went into the 
> automatic shutdown sequence, I pressed escape and managed to take note 
> of a few of the messages. One of the very first ones was something about 
> "thermal_zone_0 critical temperature reached: 128C", which I assume is 
> the cause. (This isn't an exact quote, since I noted it from memory.)
> 
> This raises some questions:
> - What could be causing this overheating issue in Whonix?
> - Is 128C a normal temperature for the safety shutdown to kick in?
> - Does Qubes have a warning / alert system for potential overheat? (Like 
> low battery)

It is a high temperature, but does it ONLY happen in Whonix?
Or if you push the PC does it happen also?
Have you tried limiting the threads Whonix can use?

Sometimes CPUs have shutdown at 99 degrees.
So 128 degrees is a bit high in my own opinion.

I recommend you check the CPU Fan and heatsinks (if it has them).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/829e8fec-8ad4-4979-8889-af1bd75d873b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] sparse fedora template

[Eva Star]

On 11/19/2016 03:42 PM, Andrew David Wong wrote:

-BEGIN PGP SIGNED MESSAGE-




You can use the qvm-trim-template tool to do this. For example:

$ qvm-trim-template fedora-24

https://www.qubes-os.org/doc/fedora-template-upgrade-23/#compacting-the-upgraded-template


And how to trim AppVM storage?

Maybe separated page for trimming templates and VMs?

--
Regards

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6fe52ab3-0487-9255-a9d0-fbb9d9545663%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] sparse fedora template

[Eva Star]

On 11/19/2016 03:42 PM, Andrew David Wong wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-11-18 15:31, Eva Star wrote:

Hello,

is it possible to sparse fedora template like Windows template? How to fill it 
with nulls before cleaning?

I have this question because fedora-24 template 1 gb bigger after same programs 
installed, then fedora-23.




You can use the qvm-trim-template tool to do this. For example:

$ qvm-trim-template fedora-24

https://www.qubes-os.org/doc/fedora-template-upgrade-23/#compacting-the-upgraded-template


Very nice. Thank you for help)

--
Regards

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6e4eaf84-6f7a-dcf3-6490-dc713b4a0f55%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Is Qubes for the Asus X205ta ?

[Chris Laprise]

On 11/21/2016 03:51 PM, Eric Shelton wrote:
Third, it looks like there are problems getting Linux running on 
these, which does not bode well for getting Qubes to boot:

https://wiki.debian.org/InstallingDebianOn/Asus/X205TA

You are going to run into these types of issues with these inexpensive little 
machines where the manufacturer puts in just enough effort to get Windows 
running on it.  Plus, a good number of these machines have problems booting 
anything other than the Windows OS it shipped with, as demonstrated by that 
last link.

Eric



If a computer is not already Qubes certified or on the Qubes HCL, its 
good practice to look for it in a Linux HCL as the second step. Although 
I'm not aware of many lists that are well-maintained, the Ubuntu HCL 
appears to be the most comprehensive by far. One can also check with the 
manufacturer to see if a particular model was designed to work with 
Linux. Using these resources will improve the chances that Qubes will 
work well on a computer model that is not on the Qubes HCL.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/30998bf7-aeee-d7ab-812e-1cc0aeb79167%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Is Qubes for the Asus X205ta ?

[Eric Shelton]

On Monday, November 21, 2016 at 12:39:47 PM UTC-5, pierrema...@gmail.com wrote:
> Hi, I wonder if the Asus X205ta can handle Qubes ?
> Thank,

It's not even near a good choice, based on the processor info:

http://ark.intel.com/products/80274/Intel-Atom-Processor-Z3735F-2M-Cache-up-to-1_83-GHz

A lot of issues come from it using an Atom processor, rather than a Core i3, 
i5, or i7.

First, the max memory size of 2 GB is not going to work out well.  At a 
minimum, you would want 4 GB RAM, and 8 GB would be better.

Second, it will fail the minimum hardware requirements for Qubes 4:
https://www.qubes-os.org/news/2016/09/02/4-0-minimum-requirements-3-2-extended-support/
- Intel VT-x with EPT?  Probably missing EPT
- Intel VT-d?  Definitely missing.
- 4 GB RAM?  No, as discussed above.

Third, it looks like there are problems getting Linux running on these, which 
does not bode well for getting Qubes to boot:
https://wiki.debian.org/InstallingDebianOn/Asus/X205TA

You are going to run into these types of issues with these inexpensive little 
machines where the manufacturer puts in just enough effort to get Windows 
running on it.  Plus, a good number of these machines have problems booting 
anything other than the Windows OS it shipped with, as demonstrated by that 
last link.

Eric

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e7dd5488-27fe-4d9c-ba5f-43123f4ffde1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Access all vm data from a backup-vm?

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sun, Nov 20, 2016 at 09:13:36PM -0800, pixel fairy wrote:
> On Sunday, November 20, 2016 at 10:15:44 AM UTC-5, Marek Marczykowski-Górecki 
> wrote:
> 
> > > what do you think of "qvm-copy-to-vm backupvm ." followed by rdiff-backup 
> > > on the backupvm to luks encrypted disks? 
> > 
> > It's better, but personally I wouldn't do that either.
> 
> how would you do incremental backups? would lvm/btrfs/zfs snapshots on the 
> backup volume work?

Impossible right now. Some ideas:
https://github.com/QubesOS/qubes-issues/issues/858

> > > if you were using qubes-backup, how would you restore a single file or 
> > > folder?
> > 
> > Restore selected VM (under another name - it's done automatically), 
> > copy that single file to original VM, then remove restored VM.
> 
> just tried that, it complained that there was already a vm of the same name. 
> did you mean to rename the original and then restore the old name? 

There is qvm-backup-restore --rename-conflicting option. It isn't
available in GUI unfortunately...

> it would be nice to have it offer to restore foo to foo_backup- with out 
> networking and maybe even start the file browser or shell

There is tight limit on VM name length (31 chars)...

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYM1X+AAoJENuP0xzK19csjaUH/1oRgLtiG8Wplrd5737QpOl8
wxsrgR9lM3tt6lj8sRPOz6SlxBASewcBsmIcXNFUAqnZu11Fg/lb8NujngI1oxcf
POYYTDLFcZkHK2mhkrRxXiTfrwm9/cfFMye2mQSzA9KxfuoPltKJqCQmgSqVMb+n
T96l/9vA7p0m4OCjzs4/Ra9zXqctctLYbxCI8DcCxnpEW5yDptFtAIdnp454lGPF
eIZPrloznEutN0OXZ58yHOP8DMx0QfnzAh7qCixUf0ZL3Gecp+wrpBcMG8q/of7P
GU/MSN/RYnaOFDULeAocowCgvfRLYyL6iU73FGVrQtYsHjfsJnwgNccVSwD8m4U=
=DHGj
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161121201556.GO1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Access all vm data from a backup-vm?

[Stickstoff]

>> what do you think of "qvm-copy-to-vm backupvm ." followed by rdiff-backup on 
>> the backupvm to luks encrypted disks? 
> 
> It's better, but personally I wouldn't do that either.
> 
>> if you were using qubes-backup, how would you restore a single file or 
>> folder?
> 
> Restore selected VM (under another name - it's done automatically), 
> copy that single file to original VM, then remove restored VM.

How large would the attack surface be if I create a huge .img container
(50% of diskspace), mount it in dom0, do an rsync of all app-vm data
onto it, then mount it in my backup-vm for the actual remote backup?
Even if the backup-vm was compromised, all malicious changes _in_ the
.img container would be overwritten by the next rsync.
I am unsure if "sharing" the blockdevice-metadata (partitiontable etc)
is such a high risk?
Also, as dom0 and the backup-vm don't see any userdata, but only the
other vms .img files, this should be pretty safe?

For me, it would be nice as the backup-vm handles all backup-logic, can
do incremental backups, and there is almost no backchannel from
backup-vm to dom0.
Of course, as soon as my backup-vm or remote backup target is
compromised, I have a huge problem anyway. At least some (vault) data
would always be encrypted (by the regular qubes procedure), and would
necessarily be full-backupped every time.

In general, availability of my data is more important to me than
privacy. I'm still trying to achieve both, though :-)


N2

p.s.:
Please let me know if generally I should leave single emailadresses in
CC, I removed all but the list itself.



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/583351EA.80501%40posteo.de.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

Re: [qubes-users] Re: Qubes not shutting down

[Loren Rogers]

On 11/21/2016 11:04 AM, Loren Rogers wrote:


On 11/21/2016 12:42 AM, Drew White wrote:

On Sunday, 20 November 2016 04:56:03 UTC+11, Loren Rogers  wrote:

Another correlation I've noticed is that my machine randomly shuts
itself down without warning when I'm browsing in the Anon-Whonix VM. It
seems that simply having the Whonix browser open causes the problem.
I've not been able to pin down an exact cause, but it seems to happen
after about 5-20min. When this happens, the machine sometimes ends 
up in

a hung state (black screen) at the end of the shutdown process.

I've also noticed that the fan speeds up right at it starts to 
shutdown.

(The screen turns to the Qubes logo with the progress bar, then the fan
cranks up.) Sometimes the bar makes it all the way to the end, other
times it seems to simply crash to a hault. As I mentioned elsewhere, 
the

Thinkpad X201t is known to have overheating issues, but I'm not sure if
this is related. I'm not working the machine particularly hard (just
browsing articles on the web), and the hardware is not particularly hot
to the touch.
When it gets to the qubes logo screen, press ESC to see what it's 
actually doing.


If you wish to always know what it's doing, turn off rhgb and quiet 
in the boot config.


Then you will see where the issue is.


Thanks, I'll give that a shot next time it happens. I feel like it'll 
go by too quickly for me to see what's happening; does it also write 
its activity to a log somewhere?


I can now confirm that it's an over heating issue. When it went into the 
automatic shutdown sequence, I pressed escape and managed to take note 
of a few of the messages. One of the very first ones was something about 
"thermal_zone_0 critical temperature reached: 128C", which I assume is 
the cause. (This isn't an exact quote, since I noted it from memory.)


This raises some questions:
- What could be causing this overheating issue in Whonix?
- Is 128C a normal temperature for the safety shutdown to kick in?
- Does Qubes have a warning / alert system for potential overheat? (Like 
low battery)





--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5d728ca5-6354-5d47-21c9-ad2e8fbeb1c3%40lorentrogers.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Can't update dom0?

[Loren Rogers]

On 11/19/2016 06:31 AM, Andrew David Wong wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-11-16 12:10, Loren Rogers wrote:

I can't seem to update dom0 using the regular updater. The system keeps telling 
me there are updates for dom0, but I can't get anything to actually update. Is 
there something I'm missing here?

Clicking the "Update VM System" button with dom0 selected seems like it starts, 
but it doesn't really go anywhere. I attached a screenshot of the system after it gets 
going. Eventually, it'll just silently crash. I can re-start the process, but it does the 
exact same thing.

I'm using R3.2 on a Thinkpad X201 Tablet.

Thanks!
Loren


Are you sure it's crashing instead of simply not finding any updates? There's a 
known issue with the update notification icon showing even when no updates are 
available:

https://github.com/QubesOS/qubes-issues/issues/2086

- -- 
Andrew David Wong (Axon)

Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=fctT
-END PGP SIGNATURE-


No, I don't actually know what happens when it disappears. What would be 
a good way to determine if it crashes or exits without updates? Is there 
any indication that the process completed?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c11c9d2f-d061-943d-4074-7f1bbf386f1b%40lorentrogers.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] beginner trying to choose a laptop question

[Warren]

I'm looking at the "HP Laptop 250 G5 (X9U07UT#ABA) Intel Core i5 6200U (2.30 
GHz) 8 GB Memory 256 GB SSD Intel HD Graphics 520" at 
(http://www.newegg.com/Product/Product.aspx?Item=N82E16834266056_re=HP_Laptop_250_G5_%28X9U07UT%23ABA%29-_-34-266-056-_-Product).
 
ark.intel.com says that VT-d and VT-x is supported by the processor but I can't 
find out, so far, whether it's actually enabled or can be enabled. 
HP site says the chipset is intel SoC. 

Would anyone care to hazard a guess as to whether or not I could use this 
laptop to run qubes?

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/31a663bf-d8cf-4133-9534-d56534c14547%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Can't update dom0?

[Pawel Debski]

> 
> On 2016-11-16 12:10, Loren Rogers wrote:
> > I can't seem to update dom0 using the regular updater. The system keeps 
> > telling me there are updates for dom0, but I can't get anything to actually 
> > update. Is there something I'm missing here?
> > 
> > Clicking the "Update VM System" button with dom0 selected seems like it 
> > starts, but it doesn't really go anywhere. I attached a screenshot of the 
> > system after it gets going. Eventually, it'll just silently crash. I can 
> > re-start the process, but it does the exact same thing.
> > 
> > I'm using R3.2 on a Thinkpad X201 Tablet.
> > 
> > Thanks!
> > Loren
> > 
> 
> Are you sure it's crashing instead of simply not finding any updates? There's 
> a known issue with the update notification icon showing even when no updates 
> are available:
> 
> https://github.com/QubesOS/qubes-issues/issues/2086
> 

I had a very similar issue: right clicking updates run for a while and shown 
"no updates available", while

sudo qubes-dom0-update 

installed a number of updates. Apparently there is a bug in GUI. Anyway I can 
live with it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2a9524b2-c3aa-458d-9a1d-3787eee0ec41%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes not shutting down

[Loren Rogers]

Thanks, I'll give that a shot next time it happens. I feel like it'll go 
by too quickly for me to see what's happening; does it also write its 
activity to a log somewhere?



On 11/21/2016 12:42 AM, Drew White wrote:

On Sunday, 20 November 2016 04:56:03 UTC+11, Loren Rogers  wrote:

Another correlation I've noticed is that my machine randomly shuts
itself down without warning when I'm browsing in the Anon-Whonix VM. It
seems that simply having the Whonix browser open causes the problem.
I've not been able to pin down an exact cause, but it seems to happen
after about 5-20min. When this happens, the machine sometimes ends up in
a hung state (black screen) at the end of the shutdown process.

I've also noticed that the fan speeds up right at it starts to shutdown.
(The screen turns to the Qubes logo with the progress bar, then the fan
cranks up.) Sometimes the bar makes it all the way to the end, other
times it seems to simply crash to a hault. As I mentioned elsewhere, the
Thinkpad X201t is known to have overheating issues, but I'm not sure if
this is related. I'm not working the machine particularly hard (just
browsing articles on the web), and the hardware is not particularly hot
to the touch.

When it gets to the qubes logo screen, press ESC to see what it's actually 
doing.

If you wish to always know what it's doing, turn off rhgb and quiet in the boot 
config.

Then you will see where the issue is.



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/83204320-8cc9-e3f4-bd06-3de63d995af7%40lorentrogers.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes not shutting down

[Loren Rogers]

On 11/21/2016 12:42 AM, Drew White wrote:

On Sunday, 20 November 2016 04:56:03 UTC+11, Loren Rogers  wrote:

Another correlation I've noticed is that my machine randomly shuts
itself down without warning when I'm browsing in the Anon-Whonix VM. It
seems that simply having the Whonix browser open causes the problem.
I've not been able to pin down an exact cause, but it seems to happen
after about 5-20min. When this happens, the machine sometimes ends up in
a hung state (black screen) at the end of the shutdown process.

I've also noticed that the fan speeds up right at it starts to shutdown.
(The screen turns to the Qubes logo with the progress bar, then the fan
cranks up.) Sometimes the bar makes it all the way to the end, other
times it seems to simply crash to a hault. As I mentioned elsewhere, the
Thinkpad X201t is known to have overheating issues, but I'm not sure if
this is related. I'm not working the machine particularly hard (just
browsing articles on the web), and the hardware is not particularly hot
to the touch.

When it gets to the qubes logo screen, press ESC to see what it's actually 
doing.

If you wish to always know what it's doing, turn off rhgb and quiet in the boot 
config.

Then you will see where the issue is.


Thanks, I'll give that a shot next time it happens. I feel like it'll go 
by too quickly for me to see what's happening; does it also write its 
activity to a log somewhere?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f610fc12-ab66-e039-0a4e-c5d952b4d84b%40lorentrogers.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes - Revocation of the Qubes Signing Key

[Me]

Do Qubes have any intention of following in the footsteps of TAILS as
proposed below:
[ see link
https://tails.boum.org/doc/about/openpgp_keys/signing_key_revocation/index.en.html
]
This document proposes a mechanism for the distribution and activation
of the revocation certificate of the Tails signing key.
Goals

Covered by current proposal:

Prevent any single individual from revoking our signing key.
Allow a coalition of people from ta...@boum.org to revoke our
signing key in case most of the people from ta...@boum.org become
unavailable.
Allow a coalition of people, not necessarily from ta...@boum.org, to
revoke our signing key in case everybody or almost everybody from
ta...@boum.org becomes unavailable.
Make it hard for a coalition of people not from ta...@boum.org to
revoke our signing key unless everybody or almost everybody from
ta...@boum.org becomes unavailable.
People not from ta...@boum.org shouldn't know how the shares are
spread and who has them.
People in possession of a share of the signing key should have
instructions on how to use it if needed.

Groups

We define four complementary groups of trusted people:

Group A: people from ta...@boum.org themselves
Group B
Group C
Group D

All these people should have an OpenPGP key and understand what a
revocation certificate is.
Cryptographic shares

We generate a revocation certificate of the signing key and split it
into a number of cryptographic shares, using for example Shamir's secret
sharing scheme implemented by gfshare.

The following combinations of people could get together and reassemble
their shares to reconstruct a complete revocation certificate:

Three people from ta...@boum.org: A{3}
Two people from ta...@boum.org and one person not from
ta...@boum.org: A{2}+(B|C|D)
One person from ta...@boum.org, and two people not from
ta...@boum.org but from two different groups: A+(B|C|D){2}
Three people not from ta...@boum.org but from three different
groups: (B+C+D){3}

We generate these shares:

N shares, one for each person from ta...@boum.org
1 share for people in group B
1 share for people in group C
1 share for people in group D

Who knows what

People from ta...@boum.org know the composition of each group
People not from ta...@boum.org:
Are explained in which circumstances they should revoke the
signing key
Are told to write to a certain contact email address if they
decide to revoke the signing key
Are told that they need three different shares to reassemble the
revocation certificate

Infrastructure

Everybody who owns a share is subscribed to a mailing list.
This mailing list is hosted on a trusted server different from
boum.org to be more resilient than our usual communication channels.

Changing the members of the groups B, C, or D

To add someone to a given group:

Request someone from that group to send her share to the new person
in the group.

To remove someone from a given group:

Send new shares to everybody except to the person who is being removed.
Request everybody to delete their previous share and track this.
Once everybody in 2 groups amongst B, C, or D have deleted their share,
it becomes impossible for them to reassemble the revocation certificate
with the previous set of shares.
Let's hope that this doesn't happen very often :)

Expiry

There is no expiry date on revocation certificates. One way of
cancelling the revocation power is to destroy all copies of shares of 2
groups amongst B, C, or D.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/o0v4t9%24rd4%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.

"What does "supported" mean"? was: Re: [qubes-users] Fedora 24 Template for Qubes 3.1?

[Achim Patzner]

> Am 20.11.2016 um 21:16 schrieb Joonas Lehtonen 
> :
> 
> Hi,
> 
> since Qubes 3.1 is supported until 2017-03-29

This is a question I always wanted to ask: What does “support” mean in relation 
to Qubes? Security fixes? Plus bug fixes? Plus feature upgrades?


Achim

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/51E5C22F-D678-4486-860D-BD4B94928B92%40noses.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: installing nvidia

[Grzesiek Chodzicki]

W dniu poniedziałek, 21 listopada 2016 13:11:56 UTC+1 użytkownik 
nezn...@xy9ce.tk napisał:
> but i can't to see youtube in the fullscreen mode and some similar services. 
> Video just freezing, stuck and i hear only sound.

Did you enable fullscreen for the machine you use to watch youtube videos?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0ff14b0a-00d1-4388-92a2-4a8da803dd46%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Date/Time panel plugin appears with white backgroud after yesterday's upgrade

[55qpno+2vc52qkc122uo via qubes-users]

Hi,

After yesterday's upgrade my date/time panel on the XFCE panel appears with a 
white-ish background that makes almost impossible to verifying the current 
time/date.
Is anyone else experience the same thing? Any ideas how to resolve this? 

Thanks






Sent using Guerrillamail.com
Block or report abuse: 
https://www.guerrillamail.com/abuse/?a=UFR2AB5NVqcQmh2U93EQdRjCStifx8dDiadNcQ%3D%3D


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1006a2025fa6d0a335216c65ac06c5ab5b18%40guerrillamail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Stuck during boot with processor stuck

[Ronald Duncan]

Asus ROG GL752VW-GS71-HID6 using Inteli7 processor

Boot process
.
.
.
Starting Switch Boot
Error: Driver 'processor_agregator' is already registered, aborting
Error: Driver 'processor_agregator' is already registered, aborting
A start job is running for Qubes NetVM startup  (2m 49s /no limit NMI 
watchdog:Bug soft lockup - CPU1 stuck for 22s! [libvirtd:2306]

This error repeats a number of times whilst I typed the above :)

with the occasional
1-:(6 ticks this GP) idle=0ef/1400..lots..01/0 softirq-1076/1076 
fqs=0
(t=6 jiffies g=2600 c=25999 q=0)

These two lines are consistent, the part that changes is the number of ticks 
that increases :)

I installed into an unencrypted partition so I can access boot logs if that 
helps.

Regards
Ronald

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5542faa0-4a89-4b67-8e8d-1c320aa3d9d4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] How to update fedora-23-dvm to fedora-24?

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Nov 21, 2016 at 05:18:39AM -0800, Opal Raava wrote:
> Hi, I updated everything to fedora-24 template, but I don't know how to 
> update fedora-23-dvm. It uses the old fedora-23 template and when i change 
> this in the manager to use fedora-24, it says making save file but then no 
> browser or terminal runs.
> 
> What is the best way to update fedora-23-dvm?

Simply don't - instead use fedora-24-dvm. To create (and use it), call:

qubes-create-default-dvm fedora-24

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYMvZxAAoJENuP0xzK19cs1cEH/j9ZXhBfSSjT07qnVudMn6Wi
OR1GG6jOPqb2n1LVAcn7CZmIl4bn/VfUdpObOixLXC5bLrG0DqZVBmQoG8SgAeWi
8VH1u6nej1RDJSAhNARpTeNinOD7qeZIkPsrwP7wzt32/tFzGZ8B1nXyQoaR2gO5
aE5i6V6GUpFfmFEgpwpHR7kI1OOSfjU6hSIJ5zHpN8VoHTLFKtT4qkwQRq7FFYpu
WyF5otpshGAftCFFFyaxh8aHs+4oXjwYiJ3S0o+9QrYqHbt1haeQcv6dxL+QNjHs
0FONzkPJUafrOI0Amy6dcYvve1OGMg4RL3zPKIz+ZZWTH6VgbydrHErSDZ5w6yE=
=L8z6
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161121132816.GM1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] How to update fedora-23-dvm to fedora-24?

[Opal Raava]

Hi, I updated everything to fedora-24 template, but I don't know how to update 
fedora-23-dvm. It uses the old fedora-23 template and when i change this in the 
manager to use fedora-24, it says making save file but then no browser or 
terminal runs.

What is the best way to update fedora-23-dvm?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5cd2857d-474a-406e-8145-6cbf8037185b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: installing nvidia

[neznaika]

but i can't to see youtube in the fullscreen mode and some similar services. 
Video just freezing, stuck and i hear only sound.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6c5b50c6-5c8c-46a0-a925-ff59fc16fd54%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Broken update process / re Fedora 24 template available for Qubes 3.2

[Thomas Sprinzing]

> 
> > 
> > Uhm, it looks like you've uninstalled qubes tools in the process...
I am trying to update and follow the manual in the documentation. See
here where things go south:

[user@fedora-24 ~]$ sudo dnf  --releasever=24 --
setopt=cachedir=/mnt/removable distro-sync
Last metadata expiration check: 0:03:35 ago on Mon Nov 21 08:22:49
2016.
Error: package python3-dnf-plugins-qubes-hooks-3.1.18-1.fc23.x86_64
requires python(abi) = 3.4, but none of the providers can be installed.
package qubes-gui-vm-3.1.7-1.fc23.x86_64 requires pulseaudio = 7.1, but
none of the providers can be installed.
package xen-qubes-vm-2001:4.6.0-13.fc23.x86_64 requires xen-libs =
2001:4.6.0-13.fc23, but none of the providers can be installed.
package qubes-core-vm-3.1.18-1.fc23.x86_64 requires python3-dnf-
plugins-qubes-hooks, but none of the providers can be installed.
package qubes-core-vm-systemd-3.1.18-1.fc23.x86_64 requires qubes-core-
vm, but none of the providers can be installed
(try to add '--allowerasing' to command line to replace conflicting
packages)


-- 
Now, when i --allowerasing , this happens:

...
...
Removing:
 python3-dnf-plugins-qubes-hooks x86_64 3.1.18-
1.fc23  @qubes-vm-r3.1-current
   
3.7 k
 qubes-core-vm   x86_64 3.1.18-
1.fc23  @qubes-vm-r3.1-current
   
1.8 M
 qubes-core-vm-systemd   x86_64 3.1.18-
1.fc23  @qubes-vm-r3.1-current
   
 19 k
 qubes-gui-vmx86_64 3.1.7-
1.fc23   @qubes-vm-r3.1-current
   
135 k
 xen-qubes-vmx86_64 2001:4.6.0-
13.fc23 @template-builder-repo
   
368 k
Downgrading:
 xen-libsx86_64 4.6.4-
1.fc24   updates 575 k
 xen-licensesx86_64 4.6.4-
1.fc24   updates 104 k

Transaction Summary
===
==
Install  99 Packages
Upgrade1351 Packages
Remove5 Packages
Downgrade 2 Packages

Total download size: 1.5 G
Is this ok [y/N]: 

so, i assume, it's not okay, but i say yes just to give it a shot:

...
...
Downgraded:
  xen-libs.x86_64 4.6.4-1.fc24  xen-licenses.x86_64 4.6.4-
1.fc24 

Traceback (most recent call last):
  File "/bin/dnf", line 58, in 
main.user_main(sys.argv[1:], exit_code=True)
  File "/usr/lib/python3.4/site-packages/dnf/cli/main.py", line 174, in
user_main
  File "/usr/lib/python3.4/site-packages/dnf/cli/main.py", line 60, in
main
  File "/usr/lib/python3.4/site-packages/dnf/cli/main.py", line 120, in
_main
  File "/usr/lib/python3.4/site-packages/dnf/cli/main.py", line 159, in
resolving
  File "/usr/lib/python3.4/site-packages/dnf/plugin.py", line 82, in fn
  File "/usr/lib/python3.4/site-packages/dnf/util.py", line 183, in
mapall
  File "/usr/lib/python3.4/site-packages/dnf-plugins/qubes-hooks.py",
line 40, in transaction
  File "/usr/lib/python3.4/site-packages/iniparse/compat.py", line 146,
in getboolean
  File "/usr/lib/python3.4/site-packages/iniparse/compat.py", line 219,
in get
configparser.NoSectionError: No section: 'main'


after i shutdown the terminal, i cannot get it going via qubes
startmenu (cannot execute qrexec-daemon)



Ssooo, imho, the upgrade process is borken.
At least, --allowerasing is not the way to go!


best of luck to everyone else!

Thomas

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1479729370.970.40.camel%40sprinzing.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Broken update process / re Fedora 24 template available for Qubes 3.2

[Thomas Sprinzing]

> 
> > 
> > Uhm, it looks like you've uninstalled qubes tools in the process...
I am trying to update and follow the manual in the documentation. See
here where things go south:

[user@fedora-24 ~]$ sudo dnf  --releasever=24 --
setopt=cachedir=/mnt/removable distro-sync
Last metadata expiration check: 0:03:35 ago on Mon Nov 21 08:22:49
2016.
Error: package python3-dnf-plugins-qubes-hooks-3.1.18-1.fc23.x86_64
requires python(abi) = 3.4, but none of the providers can be installed.
package qubes-gui-vm-3.1.7-1.fc23.x86_64 requires pulseaudio = 7.1, but
none of the providers can be installed.
package xen-qubes-vm-2001:4.6.0-13.fc23.x86_64 requires xen-libs =
2001:4.6.0-13.fc23, but none of the providers can be installed.
package qubes-core-vm-3.1.18-1.fc23.x86_64 requires python3-dnf-
plugins-qubes-hooks, but none of the providers can be installed.
package qubes-core-vm-systemd-3.1.18-1.fc23.x86_64 requires qubes-core-
vm, but none of the providers can be installed
(try to add '--allowerasing' to command line to replace conflicting
packages)


-- 
Now, when i --allowerasing , this happens:

...
...
Removing:
 python3-dnf-plugins-qubes-hooks x86_64 3.1.18-
1.fc23  @qubes-vm-r3.1-current
   
3.7 k
 qubes-core-vm   x86_64 3.1.18-
1.fc23  @qubes-vm-r3.1-current
   
1.8 M
 qubes-core-vm-systemd   x86_64 3.1.18-
1.fc23  @qubes-vm-r3.1-current
   
 19 k
 qubes-gui-vmx86_64 3.1.7-
1.fc23   @qubes-vm-r3.1-current
   
135 k
 xen-qubes-vmx86_64 2001:4.6.0-
13.fc23 @template-builder-repo
   
368 k
Downgrading:
 xen-libsx86_64 4.6.4-
1.fc24   updates 575 k
 xen-licensesx86_64 4.6.4-
1.fc24   updates 104 k

Transaction Summary
===
==
Install  99 Packages
Upgrade1351 Packages
Remove5 Packages
Downgrade 2 Packages

Total download size: 1.5 G
Is this ok [y/N]: 

so, i assume, it's not okay, but i say yes just to give it a shot:

...
...
Downgraded:
  xen-libs.x86_64 4.6.4-1.fc24  xen-licenses.x86_64 4.6.4-
1.fc24 

Traceback (most recent call last):
  File "/bin/dnf", line 58, in 
main.user_main(sys.argv[1:], exit_code=True)
  File "/usr/lib/python3.4/site-packages/dnf/cli/main.py", line 174, in
user_main
  File "/usr/lib/python3.4/site-packages/dnf/cli/main.py", line 60, in
main
  File "/usr/lib/python3.4/site-packages/dnf/cli/main.py", line 120, in
_main
  File "/usr/lib/python3.4/site-packages/dnf/cli/main.py", line 159, in
resolving
  File "/usr/lib/python3.4/site-packages/dnf/plugin.py", line 82, in fn
  File "/usr/lib/python3.4/site-packages/dnf/util.py", line 183, in
mapall
  File "/usr/lib/python3.4/site-packages/dnf-plugins/qubes-hooks.py",
line 40, in transaction
  File "/usr/lib/python3.4/site-packages/iniparse/compat.py", line 146,
in getboolean
  File "/usr/lib/python3.4/site-packages/iniparse/compat.py", line 219,
in get
configparser.NoSectionError: No section: 'main'


after i shutdown the terminal, i cannot get it going via qubes
startmenu (cannot execute qrexec-daemon)



Ssooo, imho, the upgrade process is borken.
At least, --allowerasing is not the way to go!


best of luck to everyone else!

Thomas

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1479729256.970.39.camel%40hdm-stuttgart.de.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes doesn't install - CPU issue ?

[urgtak]

Hello, 
I tried to install Qubes-OS but it's doesn't do anythings when i launch the 
install via USB.
I got the same issue with Ubuntu 16.04.I read somewhere that the kernel linux 
isn't 4.6 wasn't ok with that CPU. But the 4.8 will be, so i tried the 16.10 
'Yakkety' and it's working. I got it installed and working.

So I think the problem is from my CPU's, that was launched on Q3'16.


Here my laptop : http://www.ldlc.com/fiche/PB00217508.html
Here the CPU/chipset informations : 
http://ark.intel.com/fr/products/95598/Intel-Celeron-Processor-N3350-2M-Cache-up-to-2_4-GHz

(Sorry my  english isn't m'y main language :D)

Syl'

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/45db5c5f-2266-4a2b-9b81-77bf7ae0fc37%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes R3.2 on Thinkpad X250: cannot install Windows 7 (hangs on "Starting Windows" at install)

[Pablo Di Noto]

El domingo, 20 de noviembre de 2016, 20:11:45 (UTC), Scot Anderson escribió:

> New to Qubes (installed today!), and this is my first post, but I had this 
> same problem on my Thinkpad T420 and have gotten past it. Some light google 
> sleuthing led me to a Proxmox issue that was similar, and they suggested 
> trying a 'cirrus' video card instead of default.
> 
> Digging around in Qubes source, I found you can pass a custom config to 
> qvm-start. I copied the config for the vm to another location (from 
> /var/lib/qubes/vm-templates/win7/win7.conf in my case) and edited the line in 
> domain->devices->video->model and changed the type from 'xen' to 'cirrus'. So 
> the result looked like this:
> 
> 
> 
> Then I started the vm with:
> qvm-start win7 --custom-config=[path to new config]
> 
> This allowed me to get past the install hang. I haven't completed the install 
> yet, so don't know if it'll be necessary once the install is complete.
> 

Great tip, Scot!
Doing that I was able to move on into the install process.

Being a long-time proxmox user, it never occurred to me that look there for 
tips (my understanding is that proxmox is kvm- or lxc-based, and since Qubes is 
trying to move away from qemu-related stuff that sort of things would not apply 
here).

So, for the record, storage pools and specific Lenovo X250 had nothing to do 
with this Windows 7 "no further than glowing logo" issue.

Thanks again!
///Pablo 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f3645941-fb07-49e6-8b31-0f055b2febfc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: installing nvidia

[taii...@gmx.com]

Just as a tip you aren't likely to gain performance over the latest 
versions of nouveau as everything on qubes is done via a VMM that 
doesn't support 2d acceleration (including multimedia), considering the 
security tradeoff (nvidia has no https and no hashes/sigs) it really 
isn't worth it.



On 11/21/2016 03:52 AM, nezna...@xy9ce.tk wrote:

Anybody know how install the nvidia proprietary driver? Anybody did it?



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/085d984a-f256-0978-f3f2-b8b48d0e60c2%40gmx.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: installing nvidia

[neznaika]

Anybody know how install the nvidia proprietary driver? Anybody did it?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ed0d1b28-36cf-4f21-b61c-a8ca5fce958e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.