[qubes-users] Network problem since upgrade to fedora-24 template

[BePe]

Hi All,
I have an installation of QubeOS 3.2  inside a KVM VM (I know that it's
not recommended but it's very practical for testing) that was working
without any major issue since last week when I decided to upgrade to the
fedora-24 template and have migrated the net-vm et the firewall-vm to
use the new template.
Since then, the networking (e.g. internet access) is no longer working
on all the AppVM except on the net-vm.
I noted that when an AppVM is started there is no vif interface that is
brought up in its configured NetVM as it used be the case when fedora-23
template was used for the NetVM.
Does somebody have the same issue? How could I fix/workaround the problem?
Is there a way to manually and properply bring up the vif.XX interface
to establish the connection between a VM and its configured NetVM?
Thanks for your help.
Regards,

-- 
BePe

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5da1fac9-f750-0968-0c5f-f59f00ac67d7%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: SUCCESS: GPU passthrough on Qubes 3.1 (Xen 4.6.1) / Radeon 6950 / Win 7 & Win 8.1 (TUTORIAL + HCL)

[tomhet]

So, after Marek's fix here, https://github.com/QubesOS/qubes-issues/issues/1659
is it true that I can expect this from it:
- HVM passthrough working using stub domain via xl ?
  (following your guide above, exlcuding 'qemu-xen-traditional')
And not:
- HVM passthrough working via VM created with Qubes manager and started with it 
/ qvm-start ?

regards,
  tom



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/26ac8cbc-1490-4df6-80ec-1e48d7008c40%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Quickest and easiest way to manage updates via command line?

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Wed, Nov 23, 2016 at 03:19:30PM -0800, jkitt wrote:
> As the title states. Can this be done through salt?
> 
> I'm looking for put together something that will manage the updates for all 
> my template VMs and even Dom0.

Yes, see here:
https://groups.google.com/d/msgid/qubes-users/20161122121019.GX1145%40mail-itl


- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYNjUtAAoJENuP0xzK19cs8T4H/R1OZEHhqpSkwC4OG9nMzp/q
fs64xz7wzJ4GogBqAA0Xrj1c+yepGXxbGjFmuDGOr131Ma8rrM+Lble4v/VIIvLE
V6hPrfYhggszoOioXwvP6I9uE6D+X88LoGXHNNd1dWVmgXxtJNiDuXkoKo2ZVJNM
OC8FkHbWWJZSMhauwWyXMEy4fXDMaCrUhS1gPMVKHcCELodCa/tJgFZXl/FWaxN6
bPWYIL+d3rtsCqwLFCp7fBaPAifvHFzSPuphno+cSNHSqbZGC9n51Nt6C+IxsK0q
NL3orgYSLXcFl1+u181ZdWKgv2x6zrRPXl/HJBTp7pRjxDJ3z1A0wJ4UntB9EzM=
=bnf1
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161124003243.GP1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] After cloning Fedora23 template, the same applications does not install on the clone.

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Wed, Nov 23, 2016 at 11:07:26PM +0100, Leeteqxv wrote:
> Hi, I have a strange issue:
> 
> I have copied Google Chrome and Opera browser installation files (.rpm) into
> the Fedora-23 template, and then I cloned it.
> When I then open a Files window on the Fedora23b (clone), and try to
> right-click and "open with Software installer" to install the applications
> there, after a long while with status "installing" (I get to click on the
> blue Install "button") I get an error messaage saying that the install
> failed due to dependency problem.
> 
> The thing that puzzles me is that the very same files could be installed
> successfully in the Untrusted AppVM that is based on Fedora23... How can it
> be that I get different results? The template is a clone of the same thing
> that the Untrusted AppVM is based on...

It's probably about network access. By default template don't have
direct access to the network, only through proxy set for this particular
purpose (why: see[1]). This is set for yum/dnf/apt, but not for
PackageKit (yet another layer above dnf/yum), see here for details:
https://github.com/QubesOS/qubes-issues/issues/982
https://github.com/QubesOS/qubes-issues/issues/1399

Package installation should work from console, using `sudo dnf install`.

[1] https://www.qubes-os.org/doc/software-update-vm/#updates-proxy

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYNjTBAAoJENuP0xzK19csKa4H/2x7q05HjbS537Ufvc3/TvBu
tZFA2HvOdDBAF3tMbxymUK6SgyXla+dip8VkU8og4HvpSjODGMkguPTJ+bEqMJ9W
huTLTDflxT2O/7GU3/S2h8KXfp3F19yKDWtRGPQGmzgr8MVNhNgqZ3zhbrkPL3/l
L7vdllgfz9GzPaks1i68glE77FRyl6hgdbmWFfMpb1LMDXxHpDYZrUy51sOUdRLX
vB3v8zMn+Tqj87B8YP5bnwWmO3wGDumN5BZKaXRkAo5W2TJg5wUz2tRYBLffVmcU
DDiKT/7FpTeZNVbLcbVLes7EuL0/wF5WRxsBn66tKKYIDbop5UujZo7iPvdDD/I=
=6WQw
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161124003055.GO1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes 4 with Grsec could make a big splash

[jkitt]

On Tuesday, 22 November 2016 19:49:07 UTC, Ronald Duncan  wrote:
> Will this be using the latest linux kernel since grsecurity only provide the 
> latest version free.

Yes, it will be an "unstable" kernel. A bare metal grsec kernel is actually 
available in Debian's testing repo. However, it is not compiled with optimal 
hypervisor guest options, and will be slow (if working at all) in a Xen guest 
environment. And because it's in the testing repo it probably doesn't receive 
as much attention to security as stable.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/53e4f203-21a9-4f2e-8cc9-b7bca64113de%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes 4 with Grsec could make a big splash

[jkitt]

On Tuesday, 22 November 2016 18:58:33 UTC, kev27  wrote:
> On Tuesday, November 22, 2016 at 8:57:56 PM UTC+2, kev27 wrote:
> > I saw this being retweeted by the Qubes account on Twitter. Can Grsec 
> > support still land in Qubes 4.0, or should we expect it for 4.1 or 4.2, etc?
> > 
> > I think if Grsec would be enabled by default in Qubes, it would be no 
> > question that Qubes is the most secure operating system out there.
> 
> Forgot to add the link:
> 
> https://twitter.com/coldhakca/status/801107979126784000

That's great news! Except PAX protections require more than just the kernel - 
they require PIE/PIC compiled binaries/SO's. There's also a number of security 
options that should be enabled in the GCC compiler (see the Gentoo hardened GCC 
profile). This means that the entire userspace would need to be recompiled and 
distributed as a hardened image - someone will need to do the legwork; and it 
will need to be signed by a trusted party.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ef008e2c-4682-43c8-8118-e80435faba97%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Quickest and easiest way to manage updates via command line?

[jkitt]

As the title states. Can this be done through salt?

I'm looking for put together something that will manage the updates for all my 
template VMs and even Dom0.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7d1add90-ac73-47b5-8f25-d1e01b578e55%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: beginner trying to choose a laptop question

[jkitt]

On Monday, 21 November 2016 16:45:10 UTC, Warren  wrote:
> I'm looking at the "HP Laptop 250 G5 (X9U07UT#ABA) Intel Core i5 6200U (2.30 
> GHz) 8 GB Memory 256 GB SSD Intel HD Graphics 520" at 
> (http://www.newegg.com/Product/Product.aspx?Item=N82E16834266056_re=HP_Laptop_250_G5_%28X9U07UT%23ABA%29-_-34-266-056-_-Product).
>  
> ark.intel.com says that VT-d and VT-x is supported by the processor but I 
> can't find out, so far, whether it's actually enabled or can be enabled. 
> HP site says the chipset is intel SoC. 
> 
> Would anyone care to hazard a guess as to whether or not I could use this 
> laptop to run qubes?
> 
> Thanks

As others have pointed out - the chipset has to also support IOMMU (VT-d). A 
lot of chipsets don't. There is the Qubes HCL that defines a lot of supported 
hardware.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/21f97e0e-de98-4897-b86c-4326f7ac404e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] After cloning Fedora23 template, the same applications does not install on the clone.

[Leeteqxv]

Hi, I have a strange issue:

I have copied Google Chrome and Opera browser installation files (.rpm) 
into the Fedora-23 template, and then I cloned it.
When I then open a Files window on the Fedora23b (clone), and try to 
right-click and "open with Software installer" to install the 
applications there, after a long while with status "installing" (I get 
to click on the blue Install "button") I get an error messaage saying 
that the install failed due to dependency problem.


The thing that puzzles me is that the very same files could be installed 
successfully in the Untrusted AppVM that is based on Fedora23... How can 
it be that I get different results? The template is a clone of the same 
thing that the Untrusted AppVM is based on...


Regards,

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2f2ee47d-db6e-e368-e4df-4d62f01a1787%40leeteq.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Is Qubes for the Asus X205ta ?

[Eric Shelton]

On Wednesday, November 23, 2016 at 11:26:56 AM UTC-5, Ronald Duncan wrote:
> On Tuesday, 22 November 2016 07:15:38 UTC, Me  wrote:
> > p*@gmail.com:
> > > Hi, I wonder if the Asus X205ta can handle Qubes ?
> > > Thank,
> > >
> 
> I find the latest ubuntu works well with most things.  I have an ASUS ROC 
> that I got to run Qubes.
> 
> It has 32gb of RAM since I want to be able to have a reasonable collection of 
> VM's.
> 
> It ran with kernal 4.4 4.6 and 4.8 under Ubuntu (all ok wifi/ethernet etc).  
> Powermangement etc was better with the latest kernel.
> 
> Not yet managed to run qubes on it.  Trying to get fedora running so I can 
> build qubes with latest kernel and hypervisor.
> 
> Fedora is not behaving off the live cd (will not connect to wifi) or bring up 
> a terminal :( will not comment on Fedora since one of the Dev's kindly 
> supports Qubes.
> 
> I liked the few seconds I got with it before it crashed never to recover.
> 
> Regards
> Ronald

Although that is made the same manufacturer, it is in an entirely different 
class than the Atom-based chromebook discussed in the original post.

Eric

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4735d19c-efa0-4abf-b5d4-3c2604410ffd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] message error;invalid argument could not find capabilities for arch=x86_64

[Willy SEDINSKI]

Hello
For all i thinks to find
In bios activate cpu option vt-x
Regards

Le 23 nov. 2016 20:38, "Marek Marczykowski-Górecki" <
marma...@invisiblethingslab.com> a écrit :

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> On Wed, Nov 23, 2016 at 07:03:34AM -0800, willy.sedin...@gmail.com wrote:
> > Bonjour, je voulez savoir si quelle qu'un a u ce type de message lors de
> la création d'une vm(HVM) pour installe un OS( Windows 64 )via un DVD ?
> > message error;invalid argument could not find capabilities for
> arch=x86_64
> > Merci d'avance
>
> Sorry, I don't speak French, but I think I can guess what you are asking
> ;)
>
> Take a look here:
> https://www.qubes-os.org/doc/hvm/
>
> In short: you need to have VT-x supported and enabled in BIOS.
>
> - --
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJYNfAnAAoJENuP0xzK19csU0MH/Az04kX/D3plVVdVJXXY51NA
> y5OQ5XLteoIV5tXyQb7yiaP1XI2eMDHhykCa5uXaVL0MijlXudbsyZ708CEQbaaD
> xonRvLHsU2Clq9pEujWlFhQIcdQc0sav9QTRUOHy5nwhgDarkdZRpXV7uWRTm0r/
> 3FYF1637cQJFF9QHGPvFbLF8rQsxK/hLXlAgpy5ZKK+E9drzbetdT5a9FeSDoQFK
> 7ro1a6vApN9FMNfEHOQk5vmpflI2p6iSKY/pGyM4PNs1LE/o5IT+G3/Hop/31Ivg
> SugERqzYsN7iGxR6GrLoAppl17S/5ZOf8zHkWTwcCRXBxRtG0kjpJzQaVsNixaE=
> =VVJv
> -END PGP SIGNATURE-
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAOv4%3DSvkgnGBLobzSc5LPjN4MXtp0tgQAFuWgd-O2pAYsB%2BUwg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] message error;invalid argument could not find capabilities for arch=x86_64

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Wed, Nov 23, 2016 at 07:03:34AM -0800, willy.sedin...@gmail.com wrote:
> Bonjour, je voulez savoir si quelle qu'un a u ce type de message lors de la 
> création d'une vm(HVM) pour installe un OS( Windows 64 )via un DVD ?
> message error;invalid argument could not find capabilities for arch=x86_64
> Merci d'avance 

Sorry, I don't speak French, but I think I can guess what you are asking
;)

Take a look here:
https://www.qubes-os.org/doc/hvm/

In short: you need to have VT-x supported and enabled in BIOS.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYNfAnAAoJENuP0xzK19csU0MH/Az04kX/D3plVVdVJXXY51NA
y5OQ5XLteoIV5tXyQb7yiaP1XI2eMDHhykCa5uXaVL0MijlXudbsyZ708CEQbaaD
xonRvLHsU2Clq9pEujWlFhQIcdQc0sav9QTRUOHy5nwhgDarkdZRpXV7uWRTm0r/
3FYF1637cQJFF9QHGPvFbLF8rQsxK/hLXlAgpy5ZKK+E9drzbetdT5a9FeSDoQFK
7ro1a6vApN9FMNfEHOQk5vmpflI2p6iSKY/pGyM4PNs1LE/o5IT+G3/Hop/31Ivg
SugERqzYsN7iGxR6GrLoAppl17S/5ZOf8zHkWTwcCRXBxRtG0kjpJzQaVsNixaE=
=VVJv
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161123193814.GK1145%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Is Qubes for the Asus X205ta ?

[Ronald Duncan]

On Tuesday, 22 November 2016 07:15:38 UTC, Me  wrote:
> pierremartinf...@gmail.com:
> > Hi, I wonder if the Asus X205ta can handle Qubes ?
> > Thank,
> >

I find the latest ubuntu works well with most things.  I have an ASUS ROC that 
I got to run Qubes.

It has 32gb of RAM since I want to be able to have a reasonable collection of 
VM's.

It ran with kernal 4.4 4.6 and 4.8 under Ubuntu (all ok wifi/ethernet etc).  
Powermangement etc was better with the latest kernel.

Not yet managed to run qubes on it.  Trying to get fedora running so I can 
build qubes with latest kernel and hypervisor.

Fedora is not behaving off the live cd (will not connect to wifi) or bring up a 
terminal :( will not comment on Fedora since one of the Dev's kindly supports 
Qubes.

I liked the few seconds I got with it before it crashed never to recover.

Regards
Ronald

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9fa43995-c2da-40fd-a220-67a9f9fd4bae%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes Security Bulletin #27

[Franz]

On Wed, Nov 23, 2016 at 7:05 AM, Fred  wrote:

> Will qubes-dom0-update work for Qubes users not using the testing
> repositories?
>

Yes, but just wait a few days after testing is passed.
Best
Fran

>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/ms
> gid/qubes-users/b6e7a8d9-f40f-46ac-7d34-d274574c1eca%40gmsl.co.uk.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAPzH-qBek_nxrj3Z9PO%3D-ofLRpy8KOa400-kPXZxz0X3_qc1yw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] message error;invalid argument could not find capabilities for arch=x86_64

[willy . sedinski]

Bonjour, je voulez savoir si quelle qu'un a u ce type de message lors de la 
création d'une vm(HVM) pour installe un OS( Windows 64 )via un DVD ?
message error;invalid argument could not find capabilities for arch=x86_64
Merci d'avance 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c1d824d2-72a8-408b-865e-447e0816a217%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes and Broadcom BCM4360 - A Success Story

[kent . f . davis]

On Tuesday, November 22, 2016 at 8:25:25 PM UTC-5, tfor...@gmail.com wrote:
> On Wednesday, November 16, 2016 at 11:05:52 AM UTC-5, kent.f...@gmail.com 
> wrote:
> > On Saturday, March 12, 2016 at 2:29:21 PM UTC-7, Dave C wrote:
> > > On Saturday, March 12, 2016 at 1:52:19 AM UTC-8, Marek 
> > > Marczykowski-Górecki wrote:-BEGIN PGP SIGNED MESSAGE-
> > > 
> > > Hash: SHA256
> > > 
> > > 
> > > 
> > > On Fri, Mar 11, 2016 at 10:30:35PM -0800, Dave C wrote:
> > > 
> > > > With earlier Qubes I tried to get a broadcom BCM4360 wireless card 
> > > > working, 
> > > 
> > > > but had no luck.  Recently I tried again with Qubes 3.1 and guess what, 
> > > > its 
> > > 
> > > > working.  I'm using it to post this message now.
> > > 
> > > 
> > > 
> > > Thanks!
> > > 
> > > 
> > > 
> > > I'm happy to contribute a little something back.
> > >  
> > > 
> > > See below for a little comment.
> > > 
> > > 
> > > 
> > > > # Background
> > > 
> > > > 
> > > 
> > > > I have a MacBookPro which sometimes I boot as a Mac, but also want to 
> > > > be 
> > > 
> > > > able to boot to Qubes.  Rather than install directly to the hard drive, 
> > > > I 
> > > 
> > > > installed Qubes on a portable SSD (http://amzn.com/B00N0V4JG2), but I 
> > > > don't 
> > > 
> > > > think that makes any difference in getting broadcom drivers set up.
> > > 
> > > > 
> > > 
> > > > If you try the portable SSD, I found I had to use standard partitioning 
> > > > as 
> > > 
> > > > LVM didn't not work.  Otherwise its a normal Qubes install with all but 
> > > > the 
> > > 
> > > > boot sector encrypted.  Qubes will boot just fine on the MacBookPro.  
> > > > But 
> > > 
> > > > it won't recognize the Broadcom wifi hardware.
> > > 
> > > > 
> > > 
> > > > # Getting a Network Connection
> > > 
> > > > 
> > > 
> > > > There's a chicken and egg problem here.  You'll need to get online in 
> > > > order 
> > > 
> > > > to install the software needed to make the broadcom work.  This is 
> > > > tricky 
> > > 
> > > > if like mine the macbook has no ethernet port.  There's only one USB 
> > > > PCI 
> > > 
> > > > device, you can't associate it with a netvm (i.e. to tether).  But 
> > > > there 
> > > 
> > > > are a couple thunderbolt ports.
> > > 
> > > > 
> > > 
> > > > To get online I used a thunderbolt to ethernet with USB adapter 
> > > 
> > > > (http://amzn.com/B00PY194CK).  This adapter should work with ethernet, 
> > > 
> > > > obviously, and also a USB tether through android device.  I was able to 
> > > > get 
> > > 
> > > > both to work, although the tethering was flakey.  The point of this 
> > > > awkward 
> > > 
> > > > device is to use it just long enough to get the broadcom working, then 
> > > > you 
> > > 
> > > > shouldn't need it any more.
> > > 
> > > > 
> > > 
> > > > Since I installed Qubes on the portable SSD, I could have instead taken 
> > > > the 
> > > 
> > > > portable SSD drive and booted it on some other hardware (i.e. a desktop 
> > > 
> > > > with more linux-friendly hardware) and downloaded the necessary 
> > > > software 
> > > 
> > > > there.  That's what I'd do if I had to do this all over again, but the 
> > > 
> > > > first time through it was handy to be on the machine with the broadcom, 
> > > > as 
> > > 
> > > > there was some trial and error.
> > > 
> > > > 
> > > 
> > > > # Some Assembly Required
> > > 
> > > > 
> > > 
> > > > Once online, all the steps needed to get broadcom working can be found. 
> > > >  
> > > 
> > > > It's a matter of sorting through the weeds to get to what works.  What 
> > > 
> > > > follows should help.
> > > 
> > > > 
> > > 
> > > > ## Net VM Setup
> > > 
> > > > 
> > > 
> > > > I decided not to modify sys-net directly.  I created a new net vm 
> > > > called 
> > > 
> > > > net-powerbook.  I even cloned the fedora-23 template, so my 
> > > > net-powerbook 
> > > 
> > > > uses a template called f23-broadcom.  I don't think the additional 
> > > > template 
> > > 
> > > > is necessary.  At the time, I thought I'd simply `sudo yum install 
> > > 
> > > > broadcom-wl akmod-wl` and presto I'd have the drivers.  With Qubes it 
> > > > is 
> > > 
> > > > not that simple.
> > > 
> > > > 
> > > 
> > > > Attach the right PCI device to net-powerbook.  In my case it is:
> > > 
> > > > 
> > > 
> > > > 03:00.0 Network controller: Broadcom Corporation BCM4360 802.11ac 
> > > > Wireless 
> > > 
> > > > Network Adapter (rev 03)
> > > 
> > > > 
> > > 
> > > > Note, while using the thunderbolt adapter, I also had another PCI 
> > > > device 
> > > 
> > > > attached.  It's not plugged in now, so Qubes doesn't even list the PCI 
> > > 
> > > > device, otherwise I'd paste it here.
> > > 
> > > > 
> > > 
> > > > Fire up a net-powerbook terminal.
> > > 
> > > > 
> > > 
> > > > ## Install Broadcom Driver (on net-powerbook)
> > > 
> > > > 
> > > 
> > > > As I mentioned, a simple `sudo yum install broadcom-wl akmod-wl` didn't 
> > > 
> > > > work for me.
> > > 
> > > 
> > > 
> > > I wonder how pvgrub2 

[qubes-users] Re: Qubes OS 3.2 Installation Issues: anaconda 'text mode' Installation Destination autopart failed LUKS

[pixelite25]

There is no previous partition scheme as this SSD has never been used before, 
it is blank. I didn't see any option as you describe and I had selected the 
option that indicates using all of the storage on the drive. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a1e038ef-fc79-4a64-b246-cb470528f26f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes OS 3.2 Installation Issues: anaconda 'text mode' Installation Destination autopart failed LUKS

[Jarle Thorsen]

> I did exactly that; selected the Full option and it produced the error 
> message I listed. Using the Standard Partition Scheme has the same result, 
> but with a second error message that is identical to the first, except for 
> "sda3" instead of "sda2".

Did you remember to tick the little box called "use unused space" or similar? 
It seems like QubesOS is trying to re-use your previous partition-scheme?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/65d1af83-3583-4181-b69c-6c8f2d46ff86%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes Security Bulletin #27

[Fred]

Will qubes-dom0-update work for Qubes users not using the testing
repositories?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b6e7a8d9-f40f-46ac-7d34-d274574c1eca%40gmsl.co.uk.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes OS 3.2 Installation Issues: anaconda 'text mode' Installation Destination autopart failed LUKS

[Jarle Thorsen]

onsdag 23. november 2016 01.16.40 UTC+1 skrev pixel...@gmail.com følgende:
> Device: Lenovo ThinkPad L450 modified with OCZ Trion 150 (480GB) SSD
> Installation Setup: USB Drive with prepared ISO, using Basic Graphics mode 
> under Troubleshooting due to system lockup in GUI mode.
> 
> Primary Problem: When trying to setup partitioning, and selecting either 
> Standard or LVM, this error occurs: "storage configuration failed: autopart 
> failed: Encryption requested for LUKS device sda2 but no encryption key 
> specified for this device.
> 
> Could this have something to do with the fact that the original SSD had OPAL 
> 2.0 and the replacement SSD does NOT have that feature? Am I unable to use 
> the OCZ drive as a result, or is this something entirely different.
> 
> Background: I am a first time user of Qubes OS and have only marginal 
> experience with installing any type of Linux disto. I'm mostly a Windows guy, 
> where things like this 'just work' usually.
> 
> Thanks for the support.

Is there a reason why you do not want to just give QubeOS the full disk, and 
let it set up the partitions automatically?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e4c34495-05e1-434a-97a6-3f6d5a081224%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.