date:20170801

On Wednesday, July 19, 2017 at 6:26:16 PM UTC-4, yreb-qusw wrote:
> On 07/19/2017 12:17 PM, cooloutac wrote:
> >
> >
> > secure boot isn't supported on qubes unfortunately. Hacking teams insyde 
> > bios exploit could be used remotely according to experts, so secure boot 
> > would actually defend against something like that remotely as well.  I hope 
> > people get over the anti microsoft and redhat notions about it.  Richard 
> > Stallman gives it the ok in its current state, so why spite.
> >
> >  And ya AEM seems complicated to setup so unless you travel alot and are 
> > worried about evil maids or someone breaking into your computer, a  usbvm 
> > is probably more practical.
> >
> 
> So, you do use both an Admin and User  pw  , but not secure boot  for 
> your Qubes machine?
> 
> no evil maids here, but I guess there is/was talk  of remote exploits 
> and or  USB drives  of possible uncertain   cleanliness,  that might 
> also be protected by AEM ?
> 
> 
> in my case, last time the USBVM thing  , or my attempted implementation, 
> rather,  nearly cause a meltdown, but since I've the PS2 adapter, 
> personaly, I'm also avoiding the USBVM . I suppose overall, I'm 
> still safer than running  Windows 10  :)  aren't  I ...
> or other Ubuntu  distros

aem doesn't protect anything,  its just an alert if something was compromised.  
 Secure boot on the other hand will actually prevent an exploit.   From reading 
other users experience aem also seems buggy so I don't know how reliable it is. 
 People on here have gotten false positives.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e9fa3a95-b405-4848-8ab1-c13a909fe90f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes OS 4.0 first release candidate (rc1) has been released!

On Tuesday, August 1, 2017 at 7:53:45 PM UTC-4, Jean-Philippe Ouellet wrote:
> On Tue, Aug 1, 2017 at 7:46 PM, cooloutac  wrote:
> > am I reading this right?  There is no qubes-manager in 4.0? Does that mean 
> > everything must be done in a terminal?  Tell me I read that wrong lol.
> 
> tl;dr - https://github.com/QubesOS/qubes-issues/issues/2132

oh ok I see,  so a taskbar widget or something to replace the manager.  I 
thought they lost their minds for a second. My immediate thought was what about 
attaching drives, and seeing if updates available?  Joanna addressed all my 
concerns but I'm gonna have to wait and see what happens with this.   Hopefully 
it doesn't turn out to be more confusing then the manager.

Right now my mother and family are able to use qubes no problem with no 
terminal actions required.  none at all. I don't know why that shocks some 
people when I tell them.   I hope that remains the same becvause they wouldn't 
be using Qubes without it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6c95fcce-6f09-4874-b422-3263eeb48f2d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-01 Thread Jean-Philippe Ouellet

On Tue, Aug 1, 2017 at 7:46 PM, cooloutac  wrote:
> am I reading this right?  There is no qubes-manager in 4.0? Does that mean 
> everything must be done in a terminal?  Tell me I read that wrong lol.

tl;dr - https://github.com/QubesOS/qubes-issues/issues/2132

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABQWM_AyqGT4_HFDOMrYtMPQ5hEPd%3DFvsa%3DUy1AYBQTtVhcnHA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] UEFI secureboot issue



Qubes doesn't support secure boot unfortunately.  I think its batshit crazy to 
consider a pc even reasonably secure without it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/923ca02b-d750-45a6-8a45-375e7052dfc8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes OS 4.0 first release candidate (rc1) has been released!

am I reading this right?  There is no qubes-manager in 4.0? Does that mean 
everything must be done in a terminal?  Tell me I read that wrong lol.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b0bba1cf-850c-4f97-8ca1-54cd1fe5c50f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] dvm removal ?

2017-08-01 Thread yreb-qusw

On 08/01/2017 01:05 AM, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 31, 2017 at 10:01:50PM -1000, qubester wrote:

Hello,

when I create a dvm i'm now up to dvm-17 , is one supposed to be removing
dvm's manually? because I do see how, though each ititeration, continues
to count up would that be expected behavior?

No, it isn't. For which Disposable VMs it happens? Started from menu,
opening a file in DispVM, or something else?
.often I have done, open pdf in DispVM and then when I close the
pdf the DispVM disappears. Rarely from the menu.

..fwiw, I had been using the Whonix suggested default DVM , but
wanted/want to go back to the default method, as I think the Whonix way
is/was "over my head" ; so just recently I changed the default back to
Fedora 25 template FWIW.

I don't really recall which of the 3 options I used for the Whonix
DVM setup but
(https://www.whonix.org/wiki/Qubes/Disposable_VM#Creating_a_New_DisposableVM-Template_Based_on_Whonix-Workstation)

How would I now delete DVMs that are not in my list, even when all
hidden VMs are enabled ?

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/f1e2674e-f277-72af-c9a9-d2926639e97c%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes OS 4.0 first release candidate (rc1) has been released!

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Tue, Aug 01, 2017 at 12:42:01PM -0700, mikihonz...@gmail.com wrote:
> Some bugs, one pretty deal breaking:

Thanks for the report.

> If I remove an application from the appmenu, I am unable to set it again. 
> More specifically I can set it in the VM-settings, but it won't show up in 
> the Appmenu again. 
> The color of a VM can be changed, but again this is not reflected in the 
> Appmenu. The VM itself (the running apps) have the correct window color.

Created ticket for this:
https://github.com/QubesOS/qubes-issues/issues/2952
You can see there for a workaround.

> Overall performance is OK, starting a Fedora VM takes longer than usual, 
> about 1min. Work VM (not app) didn't start when I selected the chromium app 
> from the appmenu. I had to start the VM from cli and then I could start 
> Chromium. 

That's weird, did you get any error? 

> The Qubes Manager is greatly missed! Especially the backup-restore. I tried 
> to restore VMs from 3.2 which didn't work at all:
> First it showed a lot of my VMs with the prefix "disps" ? (The backup had 
> only templates and 2 AppVms).

This is because how 4.0 deals with different DispVM settings. To restore
setting of 3.2 as much as possible, it create dispvm for each netvm used
there.

> I had to exclude -x a lot of Vms, honestly a pain when I just wanted one 
> important VM to restore, 

Instead of excluding, you can list VMs to include, just after backup
path.

> but got several python errors STDOUT and read errors. Restoring all was the 
> same and I had a list with 20 broken VMs, no apps in their menu, starting 
> gave libxl error. I used verbose and the 2 ignore options.

Do you have those messages saved somewhere? That would be really useful
to track down the issue...

> Removing them with cli, all a bit tedious ;(
> 
> Finally, If someone knows how to create a VM for iso booting from CLI I would 
> greatly appreciate a short info here. 

This is a missing part...
https://github.com/QubesOS/qubes-issues/issues/2951

> Looking forward to some docs/explanation on the changed qvm* tools since we 
> are now supposed to do it from the command line. 

There will be separate post about it, but see below.

> E.g. How to make net/proxy/app VM (qvm-create has some classes now...?) 

This one is possible also from GUI - in main menu you have "Create Qubes
VM" option and there you have "provides network" option which allow you
to create net/proxy VM.

> qvm-prefs options (kernel boot extern/intern and netvm settings), 

There is qvm-prefs --help-properties, which shows details about each
property.

> changes with LVM pools(? there was a option --boot-root-from-file?) , booting 
> VM from iso file etc.

See above...

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZgOj4AAoJENuP0xzK19csBtYIAIrt+ILqpdjskeg4aaHKa2JM
hAGHwbKSvAorCkx3DCd9eSvF7cnBOzsFuoYDjnvIC1D9W0f/5dxl6H8GP9JSH2oo
NM4vEA5QPH7C6Ed/s05HCT4D4yFE7jqM6vT71xAklI6niJxTf+AJ4oJtectBBFeA
g2S/4i65KbaBGW3Smec3ZvnY2eGSvxi9bvJXOWE8ks8siVPhhWRmsZDfmjeGmv9S
au0yuDa4Bmx1TW3hRB8wDWuXdLEm5YDn4F+EUbuAVZgl2XM3UlRK/flcQxCzzWN9
CyGO98c/DN5+7SZ5nzbEb2ZFucdVo+aij6Twp8XVt4mjMc5OYHEzNYLPUcp38bk=
=Iz/7
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170801204752.GE8495%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Tue, Aug 01, 2017 at 12:35:04PM -0700, Foppe de Haan wrote:
> Question: if we install 4.0, then restore backups, should we consider 
> replacing pv template with hvm ones, and how would you advise going about 
> that? (If this will be addressed in one of the upcoming blog posts, I can of 
> course wait. :) )

The easiest thing to do is to switch restored VMs to use templates
installed with Qubes 4.0. Templates from 3.x should work too, even as
HVM. But some features may be missing.
We'll prepare instruction how to upgrade such templates, but it isn't
done yet.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZgOjyAAoJENuP0xzK19csyBcH/0Cb1NFN/7wZZuwtW6l16O1k
DkvcSWPeY2hfeldr8KTwZZ+jKz1bYVnXGpfpXeX314BrgnaYquu8D3umSgHZobXr
ldCAOmhIRAyb/xqj9QddXsFuvLuO6/mvKO2A1O0Q8MPI4G9fdhIMNmxOSI8JXSLk
uQl4tl6TJVfMRaCgDIw8bFkmqRqZ14nihfST/dCoWZ6err8y3ksJLazxtqEwIqtI
0N66r+EbPOb8LSgji4OH5vaE+CnSy/r3QJh/WMTMZ8lmeluToqN03ebt2AuMNBIi
yDZEOGnoEz4kRwJNoQSoXizZRS9zbUGGpUIuZHJ7oI6ikTU83+m4wqCTm9wEJaY=
=1YQi
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170801204745.GD8495%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes OS 4.0 first release candidate (rc1) has been released!

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 31, 2017 at 01:10:08PM -0700, miki wrote:
> 
> Hi,
> HVM Standalone option is greyed out. Also the --cdrom option no longer exists 
> with the qvm-start command. Does anyone know if this is related to some 
> Stubdom changes/problems and will be supported again in the final release?

This is something that will be fixed. See here:
https://github.com/QubesOS/qubes-issues/issues/2951

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZgOjoAAoJENuP0xzK19cs/NIH/RWSTp/Cm1v4rbl3RI6PMIZb
j2KcP+H5lV7xo6/klZyNed+AtfswrdiENmD4qI3km1cSu9n8H2ODE2P5/+UKWbIC
c8b+XFZpfQShFexg3ya//QT4gTzwa6JViwKxuIhPU5YTejIKcQsb4Z7SH41GTLRa
A/gtJ14ZjmJ2vEAzV703U1UWO0SaXRNnLc1CY91ePftMvu4XnxK4rbRjOeTAxnD5
zDB2OP2Lv4Q54Kgw0nO78b4V/6QrFfQfszlaDxx7GWN34JMlYGHAZrBlvPd8iGUv
/XjbKNtXQaxL5KRvfVW9DgHTU7ZDLxN3EvOsloaD4vLHzr3jcLDrBkRxdPNPTuQ=
=il/n
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170801204735.GC8495%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: No bootable device -- insert boot disk and prese any key

2017-08-01 Thread tsadowski

2 Questions:
3.2 or 4.0
UEFI or Legacy

I tried 4.0 and 3.2 on a Yoga 900, both with UEFI. 4.0 did boot, 3.2 did not. 
The reason was that the 4.4 kernel could not set the UEFI boot entry. If you 
did use UEFI make a bootable USB stick with reFind. This is just a UEFI boot 
loader that will find anything bootable and will boot it. 

I had to use an additional Linux installation with a more recent kernel to set 
the boot entry with efibootmgr. Maybe it works from Qubes if you update to the 
4.9 kernel first.

Cheers,
Torsten

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2a59dd74-5a26-4795-b7a2-95e34e3fbe87%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-01 Thread Foppe de Haan

Question: if we install 4.0, then restore backups, should we consider replacing 
pv template with hvm ones, and how would you advise going about that? (If this 
will be addressed in one of the upcoming blog posts, I can of course wait. :) )

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c53bb8a1-4538-4b3b-b9fe-9c267da4d7e6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] No bootable device -- insert boot disk and prese any key

I was able to install Qubes successfully, however, now it shows 'No bootable device -- insert boot disk and prese any key'.

 

BIOS does detect the SSD but it doesn't boot :(



-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/trinity-a3aacfa5-f6c0-46a5-af70-50fdd8bdbb5e-1501615312472%403capp-mailcom-lxa09.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: QTW status in Qubes 3.2

2017-08-01 Thread Raymond Rizzuto

On Tuesday, August 1, 2017 at 1:04:36 PM UTC-4, PR wrote:
> Hello Raymond,
> 
> 
> 
> Am 01.08.2017 3:10 nachm. schrieb "Raymond Rizzuto" :
> 
> 
> Is QTW still in active development?  Will there be a QTW for Qubes 4, or has 
> it been deprecated?  I'm still hoping to be able to have a Windows VM under 
> qubes for Quicken, possibly a few other apps I can't (easily) replace with 
> Linux equivalents.
> 
> 
> 
> I am using Qubes 3.2 with a Windows 7 HVM and yes Windows is working under 
> Qubes.
> If you follow the excellent documentation you should be able to get things 
> running within 1 hour.
> Install Windows 7, install Qubes Tools for seamless mode.
> Install Quicken.
> 
> 
> 
> 
> Yes, I know there are alternatives to Quicken, but I have been using Quicken 
> since the 90's, and have a lot of data in it that I want to keep.
> 
> 
> 
> As an IT solution provider I think that Windows support is very important to 
> address business users in order to use Microsoft Office including 
> Outlook/Exchange and native ERP/CRM applications.
> 
> 
> Just start installing a Windows HVM and we'll guide you through the setup.
> Starting point:
> 
> 
> https://www.qubes-os.org/doc/hvm/
> 
> 
> 
> Kind regards
> 
> 
> - PhR

My last experience with QTW (see 
https://groups.google.com/forum/#!searchin/qubes-users/qtw%7Csort:relevance/qubes-users/ByoDzOsqOcA/iwR52h_x6HYJ)
 was not awe inspiring.  I'm hoping that QTW isn't the red haired step child of 
Qubes.  Don't want to start a flame war, but Windows on Qubes is essential for 
me.  Aside from Quicken, I need to use the company provided remote desktop tool 
(available only on Windows) when working from home.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5690cdec-f30d-4851-903c-7aa510a1c13e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: QTW status in Qubes 3.2

2017-08-01 Thread Raymond Rizzuto

On Tuesday, August 1, 2017 at 12:50:28 PM UTC-4, Grzesiek Chodzicki wrote:
> W dniu wtorek, 3 stycznia 2017 21:22:35 UTC+1 użytkownik Raymond Rizzuto 
> napisał:
> > I'm looking to find out the status of Qubes tools for Windows in Qubes 3.2. 
> >  Is it stable enough that I could run a Windows VM for things like Quicken? 
> >  Does it support audio devices yet?
> 
> You can pass a whole PCI device to the VM in order to have sound. It doesn't 
> support the Qubes audio protocol yet.

Is Qubes audio protocol on the roadmap for QTW?  Passing the PCI device off to 
the windows VM - wouldn't that deny audio from the linux VMs?  Plus, what if I 
had 2 Windows VMs?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d98af63c-533c-423d-9070-407cdc33cb2d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-01 Thread Rusty Bird

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Jean-Philippe Ouellet:
> On Tue, Aug 1, 2017 at 7:02 AM, Rusty Bird  wrote:
> > Zrubi:
> >> So I would really appreciate some statement if Qubes will really drop
> >> KDE support. I can accept that, but then I not waste my time trying to
> >> make it work. Instead focusing to fix the XFCE issues I have ;)
> >>
> >> - the default login screen is just ugly. I know that this is not the
> >> first priority, and not even a technical issue. But new users will see
> >> that ugly thing first. So it's should be a Qubes skinned one. at least.
> >
> > Or, if the login screen isn't needed anymore (to switch between XFCE
> > and KDE), why not get rid of it entirely:
> >
> > # mkdir /etc/lightdm/lightdm.conf.d
> > # cat >>/etc/lightdm/lightdm.conf.d/99-autologin.conf < > [SeatDefaults]
> > autologin-user=USERNAME
> > END
> 
> Consider a briefly-unattended laptop protected by only a lock screen.
> 
> Normally the attacker would need a way to kill the X screensaver
> without killing the X session. Would the above make crashing the X
> session (and thus being dropped back to the display manager which
> auto-logs-in) sufficient to gain access?
> 
> If so, this sounds like a bad idea (or at least an argument for
> something like physlock).

Ah, I hadn't thought about that. I've been using physlock since
forever, if only to avoid seeing XScreenSaver's fonts...

Rusty
-BEGIN PGP SIGNATURE-
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=b2nC
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170801175625.GA31472%40mutt.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-01 Thread tiopaul1958 via qubes-users

Why not include the Qubes Manager?  It's a good simple tool, and those who wish 
to use the CLI instead would still be free to do so.  

Thanks for all the work on 4.0 BTW.  And 3.2.  And 3.1 ...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fd90dfae-0753-4e02-80c7-2baef1c7fd9d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: QTW status in Qubes 3.2

2017-08-01 Thread 'P R' via qubes-users

Hello Raymond,

Am 01.08.2017 3:10 nachm. schrieb "Raymond Rizzuto" :

Is QTW still in active development? Will there be a QTW for Qubes 4, or
has it been deprecated? I'm still hoping to be able to have a Windows VM
under qubes for Quicken, possibly a few other apps I can't (easily) replace
with Linux equivalents.

I am using Qubes 3.2 with a Windows 7 HVM and yes Windows is working under
Qubes.
If you follow the excellent documentation you should be able to get things
running within 1 hour.
Install Windows 7, install Qubes Tools for seamless mode.
Install Quicken.

Yes, I know there are alternatives to Quicken, but I have been using
Quicken since the 90's, and have a lot of data in it that I want to keep.

As an IT solution provider I think that Windows support is very important
to address business users in order to use Microsoft Office including
Outlook/Exchange and native ERP/CRM applications.

Just start installing a Windows HVM and we'll guide you through the setup.
Starting point:

https://www.qubes-os.org/doc/hvm/

Kind regards

- PhR

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/CAM8xnv%2BRXzOLDkse2PuRJSuKb%3DC95ARofHyH7ds7NJjTjMq2pA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: cannot install kernel 4.9.35 from …-current-testing

2017-08-01 Thread Holger Levsen

On Mon, Jul 31, 2017 at 10:53:31PM -0700, Foppe de Haan wrote:
> 'sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing --best 
> --allowerasing' shouldn't error like that.

sadly no:


[user@dom0 ~]$ LANG=C sudo qubes-dom0-update 
--enablerepo=qubes-dom0-current-testing kernel --best 
Using sys-firewall as UpdateVM to download updates for Dom0; this may take some 
time...
Running command on VM: 'sys-firewall'...
Running command on VM: 'sys-firewall'...
Usage: "yumdownloader [options] package1 [package2] [package..]

Command line error: no such option: --best
[user@dom0 ~]$ LANG=C sudo qubes-dom0-update 
--enablerepo=qubes-dom0-current-testing --best kernel
Using sys-firewall as UpdateVM to download updates for Dom0; this may take some 
time...
Running command on VM: 'sys-firewall'...
Running command on VM: 'sys-firewall'...
Usage: "yumdownloader [options] package1 [package2] [package..]

Command line error: no such option: --best
[user@dom0 ~]$ 


-- 
cheers,
Holger

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170801165540.GA10145%40layer-acht.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: Digital signature

[qubes-users] Re: Qubes won't detect Yoga 910's SSD as the Installation Destination

Ah, nevermind.  That worked :D

 

Woo hoo!!



-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/trinity-c23b8a30-b954-4419-b2a4-0ff1f9b7e584-1501605048790%403capp-mailcom-lxa10.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes won't detect Yoga 910's SSD as the Installation Destination


Yes, I did change the disk controller mode to AHCI in the BIOS.

 

When I use UEFI, I get the 'system halted' error where it doesn't do anything afterwords (due to using Windows USB).

 

When I use Legacy Mode, I am stick at 'No Installation Destination disks detected' even with AHCI.

 

:(




-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/trinity-265ea3c1-ae22-432a-82b3-a27f259a38f1-1501604825239%403capp-mailcom-lxa10.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes won't detect Yoga 910's SSD as the Installation Destination

2017-08-01 Thread tsadowski

Hi,

did you change the disk controller mode to AHCI in the BIOS? Otherwise no Linux 
can find your SSD.

BTW, UEFI should work fine with Qubes.

Cheers,
Torsten

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6cfd8724-c12e-4591-b597-000303064ebc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes won't detect Yoga 910's SSD as the Installation Destination

I have installed Qubes on my Hp Elitebook so I know the USB works just fine.  When I put my Yoga 910 in a legacy boot mode (disabling UEFI/Secure boot, etc.) and boot the Qubes from a USB, it starts loading the installation, then it would say 'Falling back to the text mode'. In a text mode, it doesn't detect my laptop's SSD as the installation destination.

 

What can I do? 



-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/trinity-d9670b3d-6489-4ba8-8466-2d5d74cf1f10-1501599070393%403capp-mailcom-lxa10.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-01 Thread Jean-Philippe Ouellet

On Tue, Aug 1, 2017 at 7:02 AM, Rusty Bird  wrote:
> Zrubi:
>> So I would really appreciate some statement if Qubes will really drop
>> KDE support. I can accept that, but then I not waste my time trying to
>> make it work. Instead focusing to fix the XFCE issues I have ;)
>>
>> - the default login screen is just ugly. I know that this is not the
>> first priority, and not even a technical issue. But new users will see
>> that ugly thing first. So it's should be a Qubes skinned one. at least.
>
> Or, if the login screen isn't needed anymore (to switch between XFCE
> and KDE), why not get rid of it entirely:
>
> # mkdir /etc/lightdm/lightdm.conf.d
> # cat >>/etc/lightdm/lightdm.conf.d/99-autologin.conf < [SeatDefaults]
> autologin-user=USERNAME
> END

Consider a briefly-unattended laptop protected by only a lock screen.

Normally the attacker would need a way to kill the X screensaver
without killing the X session. Would the above make crashing the X
session (and thus being dropped back to the display manager which
auto-logs-in) sufficient to gain access?

If so, this sounds like a bad idea (or at least an argument for
something like physlock).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABQWM_D_-C0FS9G%2B1uNpUTgJcgsq-FT9rZrs-mAJsZdtLBr3Dg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: QTW status in Qubes 3.2

2017-08-01 Thread Raymond Rizzuto

On Tuesday, January 3, 2017 at 3:22:35 PM UTC-5, Raymond Rizzuto wrote:
> I'm looking to find out the status of Qubes tools for Windows in Qubes 3.2.  
> Is it stable enough that I could run a Windows VM for things like Quicken?  
> Does it support audio devices yet?

Is QTW still in active development?  Will there be a QTW for Qubes 4, or has it 
been deprecated?  I'm still hoping to be able to have a Windows VM under qubes 
for Quicken, possibly a few other apps I can't (easily) replace with Linux 
equivalents.

Yes, I know there are alternatives to Quicken, but I have been using Quicken 
since the 90's, and have a lot of data in it that I want to keep.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/31fe8c0c-6a5e-48b0-b33f-2b6f73794c9d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

RE: [qubes-users] UEFI secureboot issue

2017-08-01 Thread Wim Vervoorn

Hello,

I would like to use Qubes on a UEFI system with secure boot enabled.

Until now this fails with a security violation.

I assume this is because the Qubes efi application is not signed by the
"microsoft-uefica" key.

We can of course make it boot by adding the hash of the loader to the UEFI "db"
but we don't like to do this because we would need to do this again if a change
is made. We assume you also signed the laoder with an appropriate key but I
have not been able to find the certificate of the public key so I can add this
to the "db" database and allow all efi binaries that are released by Qubes. Can
you tell me where I can find that and share it with me?

Best Regards,
Wim Vervoorn

Eltan B.V.
Ambachtstraat 23
5481 SM Schijndel
The Netherlands

T : +31-(0)73-594 46 64
E : wvervo...@eltan.com
W : http://www.eltan.com

"THIS MESSAGE CONTAINS CONFIDENTIAL INFORMATION. UNLESS YOU ARE THE INTENDED
RECIPIENT OF THIS MESSAGE, ANY USE OF THIS MESSAGE IS STRICTLY PROHIBITED. IF
YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE IMMEDIATELY NOTIFY THE SENDER
BY TELEPHONE +31-(0)73-5944664 OR REPLY EMAIL, AND IMMEDIATELY DELETE THIS
MESSAGE AND ALL COPIES."

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/2a5bc82b17ab42088013f3373f3a56c7%40Eltsrv03.Eltan.local.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] cannot install kernel 4.9.35 from …-current-testing

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 31, 2017 at 08:56:07PM +, Holger Levsen wrote:
> Hi,
> 
> I fail to install kernel 4.9.35 on Qubes 3.2, any hints how I can accomplish 
> this? 
> 
> [user@dom0 ~]$ LANG=C sudo qubes-dom0-update 
> --enablerepo=qubes-dom0-current-testing   kernel kernel-qubes-vm
(...)
> Dependencies resolved.
> =
>  Package  Arch   Version 
> Repository Size
> =
> Skipping packages with conflicts:
> (add '--best --allowerasing' to command line to force their upgrade):
>  kernel   x86_64 1000:4.9.35-19.pvops.qubes  
> qubes-dom0-cached  40 M
>  kernel-qubes-vm  x86_64 1000:4.9.35-19.pvops.qubes  
> qubes-dom0-cached  56 M
>  perl-Math-BigInt noarch 1.9997-355.fc23 
> qubes-dom0-cached 188 k
> 
> Transaction Summary
> =
> Skip  3 Packages
> 
> Nothing to do.
> Complete!

Try adding --action=update 


- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZgGCwAAoJENuP0xzK19csQf4H/iTi7tRDY5sSO/sRMja/Ruxy
9MxR1757VJACelwtemqiMsSoBVu5f7FgVifHXcoYUmhBTZY2dsks7r7u4xgLpdE7
kaKFJCtAAukEIjuW5aOdmb65HxMgK14/vbdvrDa+dK9Uvw8zu30j33XWkgPJH0ix
YEYdvMoDu/IOTmwhUTE4iw21O9D63+WH4PKYeJcOQ8M0PP3VaGNfATIKYD6A7Iyu
JpIKMVyyuuQ3QXu2SDWTYE5WTH0ASKvYHD62CfqtBx8vqJCRqptKp7IXcP+6woUe
2WIOprbgXFYh8ni14qSflcQy49TtNt295B0o+3lJiip7UQbpd5GVmfvHPThFHHI=
=BIC7
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170801110624.GB8495%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] dvm removal ?

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 31, 2017 at 10:01:50PM -1000, qubester wrote:
> Hello,
> 
> when I create a dvm  i'm now up to dvm-17  , is one supposed to be removing
> dvm's manually?  because I do see how,  though each ititeration, continues
> to count up  would that be expected behavior?

No, it isn't. For which Disposable VMs it happens? Started from menu,
opening a file in DispVM, or something else?

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZgGBmAAoJENuP0xzK19cs4G0IAIzha0kXXivlgkVujIuNw7Rq
k6MxCNOYyyVkFinXHEGxy3mCvvz+pEN85teUsl7sa3ii4mbyW7Cs5ZFzQRFNvQMf
RCsXy1MSRm9YCvBd3iKT2GDI4TrKStPpHWVE5WGkKKbxqxRPr7RIQYry0UsJLm3Q
F+65urrnZPxayeYuPHygZF7Nw+UGmcSFFFQ73uWWZGfKLlDouUisdMyRmSTFmb0Y
aCl4jcxvyekYL+qZOzUumDqzAdCAx0IIy41pACpPTMqlK73Rb983GSMpUYdL9sPu
luKq2uGdWPJD2g2EqufD/HRKcSp9Lj2pBN7xw+Sx4s4bVG1pQ/QvsXdbfqaYdPQ=
=xBcX
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170801110510.GA8495%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-01 Thread Rusty Bird

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Zrubi:
> So I would really appreciate some statement if Qubes will really drop
> KDE support. I can accept that, but then I not waste my time trying to
> make it work. Instead focusing to fix the XFCE issues I have ;)
> 
> - the default login screen is just ugly. I know that this is not the
> first priority, and not even a technical issue. But new users will see
> that ugly thing first. So it's should be a Qubes skinned one. at least.

Or, if the login screen isn't needed anymore (to switch between XFCE
and KDE), why not get rid of it entirely:

# mkdir /etc/lightdm/lightdm.conf.d
# cat >>/etc/lightdm/lightdm.conf.d/99-autologin.conf

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!