[qubes-users] Can Qubes 4 do SVM VM snapshots like in 3.2?

2017-11-04 Thread Elias MÃ¥rtenson
In 3.2, the DVM stored a snapshot of the booted system so that new dispvm's 
could be booted very quickly. This doesn't seem to happen in 4.0, which cuases 
them to take over 30 seconds to start.

I recall reading somewhere that 4.0 would support creating snapshots for all 
VM's, not just DVM's. Is this true? And if so, how do I do it? I woul dhave 
assumed there would be a qvm-prefs setting for it, but I haven't been able to 
find anything.

Regards,
Elias

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9061bddd-0304-438e-92ac-7b29ceef4c80%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: HCL - Dell 7567

2017-11-04 Thread Vinícius M
I have the same Dell model as you! If you ever get that 1050ti IOMMU working I 
would like to know how you did it.
Also, how is the battery life running qubes?

Thanks again


On Sunday, July 23, 2017 at 10:30:21 PM UTC-3, Christopher Cameron wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> Thanks for the advice. I did try to update 8 into 9deb but I didn't do it via 
> dom0 and I lost the template I'm pretending that 'first' install of qubes 
> was a trial run. =P
> 
> This will give me something to do tonight, thank you again.
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
> 
> iQIcBAEBCAAGBQJZdUzwAAoJEMgz8gGxxG7KqWQP/3BtdwLFzZT9UhuFm8MIWv32
> AQ5pJxCB38xgvjJD8DUSsofBvNOvC5IHRglfgYDlkfsF8o3nheT/viEC6bHetrdB
> MBnpUxLh60Cxe9BHWbXKIFASK3EkttmTwAH/N4cOujBAJUdiUkH96raGgitUv6E/
> R1UTXP5Vuzg/Q5Lf9fDEV+9yp93NnEcsIbCXzaCMmL1vucpcfLKjr8o6x50ozFO8
> 14w7aAtAyb8WZ8kDJmaH1tQzutmUkaIBX/vYiRyPQqlvymBOlAT9mRjJ+jKrDkBx
> rI/pglnJmORMU5wQZzj9H+7RnoD9IjUsxswbYfMi2yXCqBpaj/H1J7QvLnszDtxI
> GeQZ+pHSVqT/ICSLleTBEXBfLM4Qf3HnZjhXdnqY28tyD+FAQ0sWjwND7xNMbrYG
> SyIra8ltR9DFqsqXJqoZbIqfVvasusXzG2oHqGqA7zVcYCPI5bvmyO5wfvv6HELe
> tFXcmXyZ50ZOJMBic3n8y8vOXF4asreLsgp4YGpmMjoq2DWxRxRmiUty6TeWXALS
> Iqp9M1uwgx57Y/jw4VwZglgyRCHG8UG8HFmPeLS2z3m2Rz1IoLaXgT6dXE2uMYeX
> zOF1/q0919K6kP0DvE3CqMFhnRrGnQU7tqFHJne1Y+F1klAgcqWgC5V1TeLn8P/I
> xQF/QOMSKb8IPtyPi+Gs
> =9e3w
> -END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8cca4048-0ada-4500-9c77-18b3b7323e2e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: HCL - Dell 7567

2017-11-04 Thread viniciusmelo
I have the same Dell model as you! If you ever get that 1050ti IOMMU working I 
would like to know how you did it.

Thanks


On Sunday, July 23, 2017 at 10:30:21 PM UTC-3, Christopher Cameron wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> Thanks for the advice. I did try to update 8 into 9deb but I didn't do it via 
> dom0 and I lost the template I'm pretending that 'first' install of qubes 
> was a trial run. =P
> 
> This will give me something to do tonight, thank you again.
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
> 
> iQIcBAEBCAAGBQJZdUzwAAoJEMgz8gGxxG7KqWQP/3BtdwLFzZT9UhuFm8MIWv32
> AQ5pJxCB38xgvjJD8DUSsofBvNOvC5IHRglfgYDlkfsF8o3nheT/viEC6bHetrdB
> MBnpUxLh60Cxe9BHWbXKIFASK3EkttmTwAH/N4cOujBAJUdiUkH96raGgitUv6E/
> R1UTXP5Vuzg/Q5Lf9fDEV+9yp93NnEcsIbCXzaCMmL1vucpcfLKjr8o6x50ozFO8
> 14w7aAtAyb8WZ8kDJmaH1tQzutmUkaIBX/vYiRyPQqlvymBOlAT9mRjJ+jKrDkBx
> rI/pglnJmORMU5wQZzj9H+7RnoD9IjUsxswbYfMi2yXCqBpaj/H1J7QvLnszDtxI
> GeQZ+pHSVqT/ICSLleTBEXBfLM4Qf3HnZjhXdnqY28tyD+FAQ0sWjwND7xNMbrYG
> SyIra8ltR9DFqsqXJqoZbIqfVvasusXzG2oHqGqA7zVcYCPI5bvmyO5wfvv6HELe
> tFXcmXyZ50ZOJMBic3n8y8vOXF4asreLsgp4YGpmMjoq2DWxRxRmiUty6TeWXALS
> Iqp9M1uwgx57Y/jw4VwZglgyRCHG8UG8HFmPeLS2z3m2Rz1IoLaXgT6dXE2uMYeX
> zOF1/q0919K6kP0DvE3CqMFhnRrGnQU7tqFHJne1Y+F1klAgcqWgC5V1TeLn8P/I
> xQF/QOMSKb8IPtyPi+Gs
> =9e3w
> -END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5b4ebffa-5aa9-415f-9f14-7567662e13be%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 1:55:04 AM UTC+1, tai...@gmx.com wrote:
> On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote:
> 
> > If I choose an older mainboard from AMD for example, which doesn't have all 
> > those bad technologies built-in, I am still much more secure than the 
> > average guy with a new Intel CPU, right ?
> Yeah definitely.
> 
> For instance a H8SCM can be had for $30 (socket C32 like the KCMA-D8), 
> with a 4386 and that you'd be playing new games in a VM with no ME/PSP.

Okay good to know!

I remember you advised to get the mainboard in new condition and everything 
else used. Is that more for security/privacy reasons or just to ensure to buy a 
functional mainboard that hasn't been degraded by years of 24/7 use ?

Because right now, I am sitting on the fence, wether I should really buy the 
mainboard new.
Sometimes I see used mainboards with almost 50% discount, so buying a used one 
would make quite a difference. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e7273856-cd33-48cf-9486-0acfb7a17c73%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 1:55:04 AM UTC+1, tai...@gmx.com wrote:
> On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote:
> 
> > If I choose an older mainboard from AMD for example, which doesn't have all 
> > those bad technologies built-in, I am still much more secure than the 
> > average guy with a new Intel CPU, right ?
> Yeah definitely.
> 
> For instance a H8SCM can be had for $30 (socket C32 like the KCMA-D8), 
> with a 4386 and that you'd be playing new games in a VM with no ME/PSP.

Okay good to know !

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/21c003f5-e7d0-41bc-91af-72015e86c72c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Mainboard buying advice :: Should we still avoid mainboards with Intel vPro ??

2017-11-04 Thread 'Marek Jenkins' via qubes-users
> Even just one 6386 is a speed demon but if you want you can eventually 
> upgrade to two if you really wanna be cooking with gas.
> 
> Although I would recommend saving money and by getting a KCMA-D8 and a 
> 4386 - you can always buy a second 4386 if you want more speed.
> 
> If you have 32 cores honestly they'll probably be sitting idle most of 
> the time (mine are), as you'd be compiling everything in a matter of 
> seconds.

Probably true ;) I just thought I spend a little bit more now to have a 
solution that serves me well for the next couple of years to come :D I plan to 
use the machine for video rendering, gaming and running quite a few VMs + HVMs 
in parallel. 

> Although an advantage of the KGPE-D16 is that it includes the $50 module 
> needed to run OpenBMC - your choice.

I looked it up, but I don't really understand the purpose of the OpenBMC 
module. Was it for TPE/AEM support ?

> Usual retail:
> KGPE-D16 - $400
> KCMA-D8 - $250-300
> 
> CPU:
> 4386 - $100-130
> 6386 - $100-200

Thanks for the overview. 

Do you by any chance know for sure, if the 6386 works with Coreboot ? 
Because on the Coreboot website they advise to avoid the whole 63xx series, due 
to the "microcode update" issue. I initially also wanted to go for a 63xx CPU 
but due to their advise I thought about switching to 62xx to avoid all those 
problems.

Maybe that can be solved ? Because the 63xx is only insignificantly more 
expensive than the 62xx CPUs...

PS: I will also switch off Google very soon, I didn't know they were doing such 
advanced things in regards to tracking..

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cad9ee04-ea5c-42fe-8489-1c39523b6c89%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
> > What is the difference between Coreboot and Libreboot ?
> Philosophy, that's it.
>
> Coreboot is sterile and corporate (as evidenced by not only the quiet 
> acceptance of boards with closed source init but the removal of older 
> open source boards from the tree, most people in the project and on the 
> list work for intel/google/etc so any questioning of this is always shot 
> down)

Thanks for that info. From what I found, Librecore also seems to a fork of 
Coreboot, they only remove all the blobs. But my main concern are Intel 
AMT/ME/vPro - so in other words any remote access / backdoor, so I guess I 
could live with Coreboot.

I am going for the KGPE-D16 and it seems they really have put in a lot of 
effort to support it. Also Raptor Engineering seems to do a lot to make 
KGPE-D16 and coreboot work.

I planned to go for a 62xx or 63xx CPU, but probably for a 62xx, because I read 
the 63xx series has a lot of issues with coreboot/libreboot and needs firmware 
/ "microcode" updates to work properly - like you mentioned as well.

Do you know if not only the KCMA-D8 but also the KGPE-D16 is also fully 
supported ? Should be, right ?

> Libreboot is like an anarchist punk scene complete with a jerk in charge 
> (ex: the FSF related drama) - although she has done quite a bit for the 
> free hardware movement (75K+ for the KGPE-D16 and KCMA-D8 board ports, 
> both entirely libre and RYF certified) and has finally paid her debt for 
> the KCMA-D8 port so I respect her a little bit.
> >
> > Is one better than the other for Qubes OS ?
> If you compile coreboot for say the KCMA-D8 (libre board I recommend 
> that supports v4.0) you're getting the same thing as libreboot if you 
> don't include the microcode update (note: microcode update needed in 
> either OS or firmware for 43xx CPU's due to a very bad exploit which 
> doesn't effect the slightly less fast 42xx CPU's)
> 
> All the libreboot boards work without the binaries contrary to what 
> holger said, you aren't going to boot up and find out there isn't any 
> video or w/e - leah laid out a lot of cash to ensure that.
> 
> I use coreboot.

Thanks for your help!

I just told Holger I probably would postpone the installation of Coreboot, 
because I have issues with compiling the ROM. 

I know that I won't have problems with flashing the BIOS chip myself - my main 
problem is getting the settings right in the Coreboot config console (i am 
using "$ make nconfig" to compile). 

But I am overwhelmed by all the settings. E.g. which payload (Seabios, 
GRUB2,etc) to use and which other settings for the KGPE-D16 ? 

So if that would be solved, I might definitely consider to use Coreboot in the 
near future.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/31de8534-35c5-4b44-a5b2-51ba08cb9c57%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread taii...@gmx.com

On 11/04/2017 08:42 PM, 'Marek Jenkins' via qubes-users wrote:


If I choose an older mainboard from AMD for example, which doesn't have all 
those bad technologies built-in, I am still much more secure than the average 
guy with a new Intel CPU, right ?

Yeah definitely.

For instance a H8SCM can be had for $30 (socket C32 like the KCMA-D8), 
with a 4386 and that you'd be playing new games in a VM with no ME/PSP.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/777005f5-b2e1-3112-dd8e-dd182134dba6%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Mainboard buying advice :: Should we still avoid mainboards with Intel vPro ??

2017-11-04 Thread taii...@gmx.com

On 11/03/2017 10:10 AM, 'Marek Jenkins' via qubes-users wrote:


Thanks again for all the info, I really appreciate your advice!


TXT is a marketing feature, it isn't really relevant.
Doing kernel code signing via coreboot with grub payload is a much
better security feature, if you lock your flash chip the only way to
flash will be externally (with a tester clip) so it is very secure.

Okay good to know, then I'll discard TXT from now on ;)


* You'd be able to play new video games at high settings in a VM, run a
bunch of VMs or do both at the same time with dual 4386 CPU's.
* You could use it as a gigabit vpn router with a router distro.
Another option for more juice is the pricier KGPE-D16 (same featureset
but with more RAM slots, support for socket g34 16 core cpu's and more
PCI-e lanes/slots) and get 16 core CPU's you would be able to have 32
cores total with the opteron 6386 (best G34 cpu) and thus for instance
have three people playing games at high settings on the same PC plus
many VM's.

Sounds perfect! I think you actually convinced me to go for the KGPE-D16 + 
Opteron 6386 + 64GB RAM then :)
Even just one 6386 is a speed demon but if you want you can eventually 
upgrade to two if you really wanna be cooking with gas.


Although I would recommend saving money and by getting a KCMA-D8 and a 
4386 - you can always buy a second 4386 if you want more speed.


If you have 32 cores honestly they'll probably be sitting idle most of 
the time (mine are), as you'd be compiling everything in a matter of 
seconds.


Although an advantage of the KGPE-D16 is that it includes the $50 module 
needed to run OpenBMC - your choice.
Also for the KGPE-D16 one can also buy an 8 core 6328 which is better 
for games than the slower per core speed of the 6386 and slightly faster 
than the D8's socket C32 4386 (btw according to the dev one can mix and 
match a 6328 and a 6386 so say one for games one for compiles) as hardly 
any games use more than 8 cores let alone 16.

Now I only need to find a trusted seller where I can buy the mainboard 
(new/affordable price) with EU shipping. Everything except mainboard can be 
used (RAM, CPU, AMD GPU).

It would be awesome if you could tell me where to buy the hardware cheap.

Dunno about that, but you should ask on the coreboot mailinglist.

Usual retail:
KGPE-D16 - $400
KCMA-D8 - $250-300

CPU:
4386 - $100-130
6386 - $100-200

Preferably via e-mail (marek.jenk...@openmailbox.org) for privacy or in your 
reply over here if you don't want to reveal your e-mail address.

(No worries, this is just one of my "throw-away" email-addresses)
You shouldn't use gmail, you are supporting their AI research and giving 
them data to spy on you and add to your marketing profile via browser 
fingerprinting (don't think they don't know about your other accounts)

You will need to buy a video card as the onboard video sucks, I advise
AMD as they are friendlier to open source and virtualization compared
with nvidia who adds "bugs" to their drivers to try and stop you from
using a geforce card in a VM to play games (see code 43 error)

Do you maybe know a AMD card that would work ?
Anything post 2012 is fine, but obviously you want something 
new/performance if you wish to play new games.

No need to buy a FirePro/Radeon Pro, the regular radeons are fine.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1f32c62b-bb82-7ce9-7792-ea33873c67b7%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Sunday, November 5, 2017 at 12:10:26 AM UTC+1, Holger Levsen wrote:
> On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users 
> wrote:
> > so from my understanding, "blobs" is a synonym for proprietary code, right ?
>  
> it's a synonym for "binary object" where in general you don't have the
> source code.
> 
> > I mean if it doesn't really matter for security I can live with those blobs 
> > inside Coreboot. 
> 
> having the source code is generally better for security...
> 
> but if you have hardware which either works with a blob, or doesnt work
> without it, you might want to choose the blob.
> 
> > But Qubes will work better with Coreboot correct or why is it recommended 
> > here ?
> 
> a free bios is better for security. Libreboot supports a lot less
> hardware than coreboot.
> 
> 
> -- 
> cheers,
>   Holger


Okay I see! 

Thanks a lot for taking the time to explain, really appreciate it.

I think Coreboot is an interesting topic, but to be honest, it seems quite 
complex.
I don't really compile code myself and have no idea which settings + payload I 
need to pick to compile the ROM for flashing. And flashing also requires some 
skill + equipment.
Additionally, I read some people have issues with Qubes + SeaBios. Maybe I 
postpone the whole thing to a later day when I have more time to learn 
something new :)

Also, because I don't really think I need that level of security that protects 
someone to tamper with my BIOS :D I just didn't like the idea of having a 
"backdoor" in my system (Intel ME, AMT, vPro), thats how I learned about 
Coreboot.

So the final question:

If I choose an older mainboard from AMD for example, which doesn't have all 
those bad technologies built-in, I am still much more secure than the average 
guy with a new Intel CPU, right ? 

Have a nice weekend!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/97dbc3bf-2d64-4360-a096-72ad1604ca1f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread taii...@gmx.com

On 11/04/2017 02:06 PM, 'Marek Jenkins' via qubes-users wrote:


Also, will you need to flash the BIOS manually for Coreboot/Libreboot to work ?

Of course.

Or will it work out-of-the-box ? I don't have the hardware / knowledege to 
flash BIOS chips.
You need a SOIC-8 test clip (don't get the one with the small pins, make 
sure you orient it properly according to the diagrams) and a CH341A usb 
flasher, it is very easy to do.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e6c53091-ea1a-1b95-e52d-56753cb790d4%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread taii...@gmx.com

On 11/04/2017 01:57 PM, 'Marek Jenkins' via qubes-users wrote:


What is the difference between Coreboot and Libreboot ?

Philosophy, that's it.

Coreboot is sterile and corporate (as evidenced by not only the quiet 
acceptance of boards with closed source init but the removal of older 
open source boards from the tree, most people in the project and on the 
list work for intel/google/etc so any questioning of this is always shot 
down)


Libreboot is like an anarchist punk scene complete with a jerk in charge 
(ex: the FSF related drama) - although she has done quite a bit for the 
free hardware movement (75K+ for the KGPE-D16 and KCMA-D8 board ports, 
both entirely libre and RYF certified) and has finally paid her debt for 
the KCMA-D8 port so I respect her a little bit.


Is one better than the other for Qubes OS ?
If you compile coreboot for say the KCMA-D8 (libre board I recommend 
that supports v4.0) you're getting the same thing as libreboot if you 
don't include the microcode update (note: microcode update needed in 
either OS or firmware for 43xx CPU's due to a very bad exploit which 
doesn't effect the slightly less fast 42xx CPU's)


All the libreboot boards work without the binaries contrary to what 
holger said, you aren't going to boot up and find out there isn't any 
video or w/e - leah laid out a lot of cash to ensure that.


I use coreboot.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/114a3ee8-ae29-cd55-8637-04ba19a8fb37%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users wrote:
> so from my understanding, "blobs" is a synonym for proprietary code, right ?
 
it's a synonym for "binary object" where in general you don't have the
source code.

> I mean if it doesn't really matter for security I can live with those blobs 
> inside Coreboot. 

having the source code is generally better for security...

but if you have hardware which either works with a blob, or doesnt work
without it, you might want to choose the blob.

> But Qubes will work better with Coreboot correct or why is it recommended 
> here ?

a free bios is better for security. Libreboot supports a lot less
hardware than coreboot.


-- 
cheers,
Holger

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20171104231020.35rgrbpvspkopsog%40layer-acht.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
On Saturday, November 4, 2017 at 10:47:12 PM UTC+1, Holger Levsen wrote:
> On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users 
> wrote:
> > What is the difference between Coreboot and Libreboot ?
> 
> Libreboot is Coreboot with all the non-free blobs removed (and no free
> software added instead). So if you happen to have hardware which needs
> those blobs, you won't be happy with Libreboot.
> 
> 
> -- 
> cheers,
>   Holger

Hi Holger,

so from my understanding, "blobs" is a synonym for proprietary code, right ?

I mean if it doesn't really matter for security I can live with those blobs 
inside Coreboot. 
I don't need extreme security on that level, I guess :D Just a decently secure 
system that respects privacy.

But Qubes will work better with Coreboot correct or why is it recommended here ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/787f83a4-2e24-4625-8c12-df1984a3ce91%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users wrote:
> What is the difference between Coreboot and Libreboot ?

Libreboot is Coreboot with all the non-free blobs removed (and no free
software added instead). So if you happen to have hardware which needs
those blobs, you won't be happy with Libreboot.


-- 
cheers,
Holger

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20171104214705.chhlfj5cmkstdphu%40layer-acht.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature


[qubes-users] Re: Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
Also, will you need to flash the BIOS manually for Coreboot/Libreboot to work ?

Or will it work out-of-the-box ? I don't have the hardware / knowledege to 
flash BIOS chips.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2b00aab1-857f-4fe6-9e83-d2f31ec503d4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread 'Marek Jenkins' via qubes-users
What is the difference between Coreboot and Libreboot ?

Is one better than the other for Qubes OS ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cab0e10e-d399-4abe-8ba2-29949fde3f1b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Mainboard buying advice :: Should we still avoid mainboards with Intel vPro ??

2017-11-04 Thread 'Marek Jenkins' via qubes-users
What is the difference between Coreboot and Libreboot ?

Is one better than the other for Qubes OS ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bdbcb7a0-3883-4613-8cf4-12d7c7fa8eaa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes 4.0-rc2 :: VMs fail to start

2017-11-04 Thread Roy Bernat
On Thursday, 2 November 2017 09:25:30 UTC-4, cooloutac  wrote:
> On Thursday, November 2, 2017 at 4:21:38 AM UTC-4, [799] wrote:
> > Hello,
> > 
> > >> Did you make it permanently ? 
> > 
> > Yes of course :-) but thank you for the reminder, I edited in once in grub 
> > for the first boot after installation and then applied it in the Grub 
> > configuration.
> > Same results, VMs won't start - it seems only the both sys network VMs work.
> > 
> > >> Dont give up :) 
> > 
> > Of course not ... Don't be afraid, there ist just nothing more I can 
> > contribute to the Devs and I am sure the topic will be solved in the next 
> > Release Candidate.
> > Happy to test then, but it seems that this horse is dead (or I have the 
> > wrong saddle to ride it).
> > 
> > [799]
> 
> Think iommu is nescessary in 4.0,  I could be wrong.  Does  the stock bios on 
> your machine support it maybe?

It is not needed .  for me now after the remove of iommu all worked .  need to 
say that the templates  need to be update in order to work .  so if you are 
update the dom0 you should also update the templates . 

R 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1187bb07-4370-466c-b451-9bc22ca0b418%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.