Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread taii...@gmx.com

On 12/29/2017 10:28 PM, Wael M. Nasreddine wrote:


On Fri, Dec 29, 2017 at 3:06 PM taii...@gmx.com  wrote:


Those dual 6386 are a good price I would get them if I was you, there
will always be plenty of buyers if you want to sell the second one.


Ok got the CPU and the cooler.

Man dual 6386, that is gonna be one speed demon :D lucky bastard!

  I'm struggling to find a good case.
If you have the money I would get a supermicro 4U case, they are nice 
(one that comes with front drive trays preferably)

  There
are plenty of choice, and since this would be my first server case build,
I'm not sure what to look for. For example, here's newegg search

for 4U cases having EEB keyword (no EEB filter offered), this case seems
cheap enough
https://www.newegg.com/Product/Product.aspx?Item=N82E16811219020 but has
80mm fans in the middle, not 120mm. I've seen a few cases with 120mm
mid-fans but did not support EEB. Do you have a link for a case you work
with?
My case is a shorter model 80mil in the back 120 for both front drive 
bays no room for middle fans.


That case seems fine, although can you tell me the price and shipping? I 
can't see it as I browse with JS off.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/01189d4f-4709-12ae-a10e-71c0ceeff4bf%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread Wael M. Nasreddine
On Fri, Dec 29, 2017 at 3:06 PM taii...@gmx.com  wrote:

> Those dual 6386 are a good price I would get them if I was you, there
> will always be plenty of buyers if you want to sell the second one.
>

Ok got the CPU and the cooler. I'm struggling to find a good case. There
are plenty of choice, and since this would be my first server case build,
I'm not sure what to look for. For example, here's newegg search

for 4U cases having EEB keyword (no EEB filter offered), this case seems
cheap enough
https://www.newegg.com/Product/Product.aspx?Item=N82E16811219020 but has
80mm fans in the middle, not 120mm. I've seen a few cases with 120mm
mid-fans but did not support EEB. Do you have a link for a case you work
with?

>
> The KGPE-D16 almost always comes with the module so don't worry - btw
> MSRP is $415 for brand new KGPE-D16 so don't overpay.
>

Awesome, I'll order the board now then and hopefully will have the module.


> Yeah that cooler is the one to get for the 140W CPU's, pricey but I am
> not aware of any others.
> https://noctua.at/en/nh-u12do-a3
> https://noctua.at/en/noctua-intros-new-amd-opteron-coolers-with-g34-support
> MSRP USD 64.90 (7 years ago)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CA%2BkKtKDUAcfkcp3X%2BB1V8TU2OHDOcd6p%3DcK1v%2BKWAvi48V4wXQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread Sandy Harris
On Sat, Dec 30, 2017 at 2:23 AM, taii...@gmx.com  wrote:

> On 12/29/2017 12:01 PM, Sandy Harris wrote:

>> That may be good advice, but there's another point of view. ...

> What exactly are you trying to say here? That either one of us are idiots
> like the man in your example?

No,only that it is worth considering factors other than price. My
example is extreme, but I think a fair number of people lack the
expertise or tools to assemble & test a system themselves, or don't
want the possib, or would rather spend money than their time. They
would be better off buying tested sub-systems.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CACXcFm%3D3xAm4VciPcrqnYocv%2BFiRJm-k9-fW95QfM%3Dd57YxH6A%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread 'awokd' via qubes-users
On Fri, December 29, 2017 11:56 pm, Ivan Ivanov wrote:
> Maybe its just a driver which can't find a blob - by itself the GPU
> should have this blob loaded on it by coreboot.
> https://bugs.freedesktop.org/show_bug.cgi?id=101473
> Alex Deucher says that "Invalid PCI ROM header signature: expecting
> 0xaa55, got 0x" message can be ignored
>
>
> BTW this "0x" issue is not G505S specific, seems T400s also has it
> - https://lists.gnu.org/archive/html/libreboot/2016-05/msg00050.html

There were other issues with it too, like at one point the IRQ was set to
255 and it always an  memory region. Hard to troubleshoot
without having it in front of you.

> There aren't many coreboot supported laptops with dual GPU perhaps
> thats why its not fixed yet

Probably this.

> Also, maybe it could be possible to somehow pass a copy of that
> vgabios blob from GRUB to a Linux kernel, so that its' driver detects this
> blob. If i'm not mistaken i've seen the people trying it for their Mac Pro
>  (similar problem but got another value, maybe 0x), forgot how its
> ended though
>
> The research about GPUs is not over, we are going to continue it soon ;)

Looking forward to it!


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8d2f136210208d1f9a613efb6b60a521.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HOWTO restore old qubes-backup in Q4.0-rc3 using qvm-backup-restore?

2017-12-29 Thread cooloutac
On Friday, December 29, 2017 at 3:34:06 PM UTC-5, awokd wrote:
> On Fri, December 29, 2017 7:53 pm, cooloutac wrote:
> > or woman,  force of habit slang.
> 
> Don't worry about it, I don't get triggered about that.
> 
> I don't think there's a user friendly way to do it yet in 4.0. See
> https://groups.google.com/forum/?_escaped_fragment_=topic/qubes-users/aM_0sFesbbk/discussion#!topic/qubes-users/aM_0sFesbbk/discussion.

Saw that thread but i was confused.  Guess I'll wait a bit.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7441db84-0710-498f-9787-3cf7e885db7c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread taii...@gmx.com

On 12/29/2017 06:39 PM, awokd wrote:


On Fri, December 29, 2017 11:32 pm, Ivan Ivanov wrote:

2017-12-30 1:57 GMT+03:00 taii...@gmx.com :

Yes, I am also very disappointed in purism, and its still unclear for
me why they went the Intel road, when - at 2013 - they could have created a
more freedom-respecting equivalent of G505S, instead of

This was hashed over in the Coreboot mailing list recently, see
https://mail-archive.com/coreboot@coreboot.org/msg50746.html. To be
honest, I'm kind of tired of hearing about Purism now. ;) I think people
have made their positions clear.

:<
I only make so much noise because no one else is doing so - they have 
strangely universal positive coverage in the mainstream tech media and 
the real facts and downsides are never mentioned or investigated - not 
to mention that the real libre products like TALOS 2 and Novena get 
little to no press for some reason.


I respect your opinion, but there are still so many laymen who think 
that "LibreM" means "Libre" (the purism goons say it doesn't and that 
its not their fault people are confused) so I feel as though I must 
continue.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3a3c692e-b03c-88a2-f56b-ee38a486723f%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread Ivan Ivanov
Maybe its just a driver which can't find a blob - by itself the GPU
should have this blob loaded on it by coreboot.
https://bugs.freedesktop.org/show_bug.cgi?id=101473
Alex Deucher says that "Invalid PCI ROM header signature: expecting
0xaa55, got 0x" message can be ignored

BTW this "0x" issue is not G505S specific, seems T400s also has it
- https://lists.gnu.org/archive/html/libreboot/2016-05/msg00050.html
There aren't many coreboot supported laptops with dual GPU perhaps
thats why its not fixed yet

Also, maybe it could be possible to somehow pass a copy of that
vgabios blob from GRUB to a Linux kernel, so that its' driver detects
this blob.
If i'm not mistaken i've seen the people trying it for their Mac Pro
(similar problem but got another value, maybe 0x), forgot how its
ended though

The research about GPUs is not over, we are going to continue it soon ;)


2017-12-30 2:25 GMT+03:00 awokd :
> On Fri, December 29, 2017 10:50 pm, Ivan Ivanov wrote:
>> awokd, Thank you very much for your microcode research ;)
>>
>> Please remind me, which version of G505S do you have:
>> integrated /// integrated + HD 8570M /// integrated + R5 M230 ?
>
> Mine's the integrated. Blooorp turned out to have the integrated + R5
> M230. We managed to get his working with Qubes 4.0 by adding
> xen-pciback.hide(04:00.0) to the dom0 command line in GRUB so it wouldn't
> attempt to initialize the M230 at all. That's why his kept crashing.
>
>> Last time we experimented with Mike, we were 100% sure we extracted
>> vgabios'es correctly, in the best possible way, but - maybe because of
>> unstable AMDGPU at Linux -
>> we couldn't get our discrete GPUs working at this time, no matter what we
>> tried :P
>
>> If you have integrated + one of the discretes:
>> do you have a discrete GPU working when you are using two vgabios'es ? If
>> yes, at what Linux distro and what kernel, your software setup?
>>
>> I'm going to re-test it soon with a more stable kernel, probably
>> something like 4.14.8 at Void Linux: excellent not-systemd distro which is
>> stable while having very modern packages
>>
>> Not Qubes OS, because at Qubes its very difficult to test any GPU,
>> this OS isn't for gaming ;-)
>
> We troubleshot his in a similar way but with Stretch. If you load the
> firmware-amd-graphics package it gave us some helpful output. In this case
> it seemed like it was missing the blob (signature 0x instead of what
> it wanted) so we just hid it. I'm curious too to see if it would work
> properly with one but unfortunately can't try on mine!
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAAaskFAkZUtREMzkvXX%3DL0yse02bXype1mdmzzHCQdQAytxb0g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread 'awokd' via qubes-users
On Fri, December 29, 2017 11:32 pm, Ivan Ivanov wrote:
> 2017-12-30 1:57 GMT+03:00 taii...@gmx.com :
>
> Yes, I am also very disappointed in purism, and its still unclear for
> me why they went the Intel road, when - at 2013 - they could have created a
> more freedom-respecting equivalent of G505S, instead of

This was hashed over in the Coreboot mailing list recently, see
https://mail-archive.com/coreboot@coreboot.org/msg50746.html. To be
honest, I'm kind of tired of hearing about Purism now. ;) I think people
have made their positions clear.



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bcdc5a10fcf0bc09156ec38398fe35cc.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread Ivan Ivanov
2017-12-30 1:57 GMT+03:00 taii...@gmx.com :
> I am glad there are still some good people in the coreboot community.
>
> Thanks for the info, yeah I have put up a stink about it many times but it
> seemed like no one cared. I have been moderated from the list many times for
> complaining about the direction the project is going in (corporate
> controlled, only unobtainable intel dev boards supported due to absurd
> standards etc) and all the shady money people like purism censoring
> developers (they even tried to get someone fired from google from posting a
> simple fact about their products on the coreboot blog) and constantly
> badgering the FSF to try and get them to ruin the RYF standard.
>
> I assume purism is behind the requests to remove half the useful coreboot
> boards - it makes financial sense for them to do this and they certainly
> have the low morals required for it.

Yes, I am also very disappointed in purism, and its still unclear for
me why they went the Intel road, when - at 2013 - they could have
created a more freedom-respecting equivalent of G505S, instead of
yet-another-Intel-laptop-with-ME-crapware. but deep in the heart i
still hope they'd use their (a bit fraudulently earned) money for a
good cause - e.g. if they would create a truly libre laptop based at
not-ME/PSP cpu

Taiidan, same questions to you (if your G505S has a discrete graphics):
do you have a discrete graphics working with two vgabios'es, and if
yes - at what setup?

Great idea is to stockpile the G505S and its spare replacement parts /
IC components , so that - if your current one breaks - you had a more
than one replacement. Lenovo tells that the average lifespan of G505S
laptop is 4 years - and, while it could survive longer in the caring
hands - it would really help if you have the replacement G505S / G505S
motherboards / major components of G505S motherboard like the spare
KB9012QF A3 controllers and southbridge, Especially the KB9012's -
they are very cheap, and at the same time - vulnerable to voltage
spikes, so if you have unstable electricity at house and your power
adapter wouldn't block a spike - KB9012 could easily die. AliExpress
is your friend... :P

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAAaskFDvfoemy3NfK9sT25RB%2B7OU%2BdZcroJYPirekqsFvk9zwQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread 'awokd' via qubes-users
On Fri, December 29, 2017 10:50 pm, Ivan Ivanov wrote:
> awokd, Thank you very much for your microcode research ;)
>
> Please remind me, which version of G505S do you have:
> integrated /// integrated + HD 8570M /// integrated + R5 M230 ?

Mine's the integrated. Blooorp turned out to have the integrated + R5
M230. We managed to get his working with Qubes 4.0 by adding
xen-pciback.hide(04:00.0) to the dom0 command line in GRUB so it wouldn't
attempt to initialize the M230 at all. That's why his kept crashing.

> Last time we experimented with Mike, we were 100% sure we extracted
> vgabios'es correctly, in the best possible way, but - maybe because of
> unstable AMDGPU at Linux -
> we couldn't get our discrete GPUs working at this time, no matter what we
> tried :P

> If you have integrated + one of the discretes:
> do you have a discrete GPU working when you are using two vgabios'es ? If
> yes, at what Linux distro and what kernel, your software setup?
>
> I'm going to re-test it soon with a more stable kernel, probably
> something like 4.14.8 at Void Linux: excellent not-systemd distro which is
> stable while having very modern packages
>
> Not Qubes OS, because at Qubes its very difficult to test any GPU,
> this OS isn't for gaming ;-)

We troubleshot his in a similar way but with Stretch. If you load the
firmware-amd-graphics package it gave us some helpful output. In this case
it seemed like it was missing the blob (signature 0x instead of what
it wanted) so we just hid it. I'm curious too to see if it would work
properly with one but unfortunately can't try on mine!


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b65b9f1adceda83fc9ce2e64c51414d4.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread taii...@gmx.com
Those dual 6386 are a good price I would get them if I was you, there 
will always be plenty of buyers if you want to sell the second one.


The KGPE-D16 almost always comes with the module so don't worry - btw 
MSRP is $415 for brand new KGPE-D16 so don't overpay.


Yeah that cooler is the one to get for the 140W CPU's, pricey but I am 
not aware of any others.

https://noctua.at/en/nh-u12do-a3
https://noctua.at/en/noctua-intros-new-amd-opteron-coolers-with-g34-support
MSRP USD 64.90 (7 years ago)

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d4d9de92-8c4f-4782-9421-cc6a68aa250e%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Dumping BIOS

2017-12-29 Thread Tim W
BIOS today especially with all the extra intel coding have balloned into an 
actual full OS between your user installed OS and the bare metal.

As most all the BIOS code is propriety how exactly can anyone on here claim 
there are no hacks or otherwise?

There is a HUGE difference between chain of trust or having to accept having to 
trust hardware and actually trusting it.

I really do not want to spend any real time digging up bios hacks but a google 
search would at least get you the reports of them. 

Just to offer up one take a look at Bruce Schneier's blog as he wrote on this 
topic very briefly here:  
https://www.schneier.com/blog/archives/2015/03/bios_hacking.html

Not to mention today bios can interact remotely with the hardware vs cellular 
radio ethernet etc.. Unless there is a manual switch to separate it like some 
wifi etc have compared to a software on off mode is basically meaningless as 
its open to being modified and you have no way to audit the code even if you 
wanted to. You have no way of knowing there is not a backdoor that allows them 
to be turned on or settings changed.

While I may no be able to control it I would say with the direction BIOS 
software has been going over the last 1o yrs it presents a very real security 
threat.  Anything that is between my installed OS and the bare metal IMO is of 
the most serious of threats as we are extremely limited in protecting ourselves 
from anything below what we install.  The BIOS is a master key to everything 
above it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d5e12bdb-6d03-459d-86f6-dfa9a19b156c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread taii...@gmx.com

I am glad there are still some good people in the coreboot community.

Thanks for the info, yeah I have put up a stink about it many times but 
it seemed like no one cared. I have been moderated from the list many 
times for complaining about the direction the project is going in 
(corporate controlled, only unobtainable intel dev boards supported due 
to absurd standards etc) and all the shady money people like purism 
censoring developers (they even tried to get someone fired from google 
from posting a simple fact about their products on the coreboot blog) 
and constantly badgering the FSF to try and get them to ruin the RYF 
standard.


I assume purism is behind the requests to remove half the useful 
coreboot boards - it makes financial sense for them to do this and they 
certainly have the low morals required for it.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/149b4644-c877-f76b-74b8-dfacfec9a092%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread Ivan Ivanov
awokd, Thank you very much for your microcode research ;)

Please remind me, which version of G505S do you have:
integrated /// integrated + HD 8570M /// integrated + R5 M230 ?

Last time we experimented with Mike, we were 100% sure we extracted vgabios'es
correctly, in the best possible way, but - maybe because of unstable
AMDGPU at Linux -
we couldn't get our discrete GPUs working at this time, no matter what
we tried :P

If you have integrated + one of the discretes:
do you have a discrete GPU working when you are using two vgabios'es ?
If yes, at what Linux distro and what kernel, your software setup?

I'm going to re-test it soon with a more stable kernel, probably
something like 4.14.8
at Void Linux: excellent not-systemd distro which is stable while
having very modern packages

Not Qubes OS, because at Qubes its very difficult to test any GPU,
this OS isn't for gaming ;-)
 

  https://www.avast.com/sig-email?utm_medium=email_source=link_campaign=sig-email_content=webmail;
target="_blank">https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif;
alt="" width="46" height="29" style="width: 46px; height: 29px;"
/>
Без вирусов. https://www.avast.com/sig-email?utm_medium=email_source=link_campaign=sig-email_content=webmail;
target="_blank" style="color: #4453ea;">www.avast.ru




2017-12-30 1:11 GMT+03:00 awokd :
> On Fri, December 29, 2017 9:57 pm, qma ster wrote:
>
>> The complete "trying-to-kill-AGESA-boards" story:
>
> Thank you for the background, and for your nice work with Mike on the GPUs!
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAAaskFC2J2O9P7wOqgwEqz0f-FrvQ0pWUU36KWvmJ%3DMYv1_47g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread 'awokd' via qubes-users
On Fri, December 29, 2017 9:57 pm, qma ster wrote:

> The complete "trying-to-kill-AGESA-boards" story:

Thank you for the background, and for your nice work with Mike on the GPUs!


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/beb6b567a708b100a157ee7da4aeb855.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505s with Coreboot and Qubes R4-rc3 fails to boot

2017-12-29 Thread qma ster
Tuesday, 28 December 2017 , 4:30:51 UTC+6 awokd wrote:
> On Wed, December 27, 2017 6:05 pm, Taiidan [at] gmx [dot] com wrote:
> > What version of coreboot are you using, they are removing AGESA from the
> > latest versions due to some dumb choices by the leadership.
> 
> I'm not sure that's accurate. From the thread on the Coreboot mailing list
> a few months ago, it sounded to me like they had been considering it, but
> someone did the work necessary to keep them alive.
> 
> And Blooorp, you might want to try that mailing list too if you are still
> stuck! Would be more there who'd know about Coreboot specific issues.

The complete "trying-to-kill-AGESA-boards" story:

1) At the end of 2015 some coreboot devs didn't like AGESA and its' "long" 
compilation times, and because of that + maybe some other personal/financial 
reasons : they wanted to quietly move AGESA boards from the main coreboot to 
some separate soon-to-be-abandoned-for-death branch, or even remove it 
completely!

For example: 
https://mail.coreboot.org/pipermail/coreboot/2015-November/080578.html - 
"[coreboot] A case for branching AGESA" 

But, thanks to Vladimir Shipovalov raising the heated discussion threads like 
this - https://mail.coreboot.org/pipermail/coreboot/2015-November/080637.html - 
"[coreboot] Removal of AGESA - to be or NOT to be? A story of G505S" - and 
thanks to the kind developers who supported his side, we all dodged a 'rotting 
code' bullet !

2) Second attempt has been made by the Google people, who want to set up the 
higher standards for coreboot sources - e.g. by removing all the boards which 
didn't support EARLY_CBMEM_INIT ---> which included AGESA boards like G505S:

https://mail.coreboot.org/pipermail/coreboot/2017-May/084255.html - "[coreboot] 
Platform / Chip removals after upcoming releases"

Huge thanks to Kyösti Mälkki and everyone who financially supported his work, 
he brought that EARLY_CBMEM_INIT feature to many boards and now the majority of 
AGESA boards - including G505S - are safe again. But we should never relax:

Carefully watch the coreboot mailing lists - so that, when a threat of G505S 
removal appears again - we will be able to address this threat in a timely 
manner, not just by modifying the source code to fix the "not matching the 
standard" issues - but also starting the big discussions to show that a huge 
amount of people TRULY CARE about AGESA boards and wouldn't let a silent 
removal happen. And, if "introducing a standard" means dropping half of 
coreboot supported boards, maybe we could argue that this standard shouldn't be 
introduced?

If you can't contribute by source, contribute by your support voice ;)

The next potential danger is:

* After the 4.8 release, and with every release after that, platforms that
have not been updated in the board-status repository within the previous
year will be removed

You need to learn how to submit a board status, and also re-test coreboot 
building at least one-two months, so that - if some commit suddenly breaks 
coreboot - we'll be able to quickly find that commit and do something with that 
offending code before the other parts of repository started to really depend on 
it

Best regards,
Ivan Ivanov

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/18e65624-5fc7-43ae-8934-16625c55ac5b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread 'Tom Zander' via qubes-users
On Friday, 29 December 2017 19:23:01 CET taii...@gmx.com wrote:
>  I am sure the massive
> markup over parts cost is worth it for a "tested working properly"
> system right?

Yes. Yes it is.

-- 
Tom Zander
Blog: https://zander.github.io
Vlog: https://vimeo.com/channels/tomscryptochannel


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2639293.tW9BGqeZ3M%40strawberry.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Missing dom0-updates-directory after clean

2017-12-29 Thread James Goodwin
On Friday, December 29, 2017 at 3:10:07 AM UTC-8, Matthias Mueller wrote:
> Hello,
> 
> I'm using 4.0 RC3 and after a 
> 
> sudo qubes-dom0-updates --action="clean all"
> 
> it looks like it cleaned a little a bit too much. If I try to update or 
> install something I get this error message:
> 
> tar: /var/lib/qubes/dom0-updates: Cannot open: No such file or directory
> 
> And if I look in /var/lib/qubes, there is really not such a directory. Can I 
> just create it or is there any other fix?
> 
> Thanks in advance.
> 
> Regards
> Michael

The /var/lib/qubes directory is supposed to contain information pertaining to 
all appvms, servicevms, updates, backup data,dvmdata, qubes.xml, and 
vm-kernels/vm-templates, but mostly stores the icon.png files for each vm 
except for vm-kernels directory which has the initramfs, modules.img, and 
vmlinuz files as well as a modules directory.

Have you checked your journalctl log to see exactly what happened, and if it's 
directly related to the act of cleaning?.

Maybe someone can offer more help, but personally, I'd re-install Qubes 
(because I'd have no clue how to remedy the situation).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/345b5730-861f-4a8e-a4a7-2201e924a5c6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HOWTO restore old qubes-backup in Q4.0-rc3 using qvm-backup-restore?

2017-12-29 Thread 'awokd' via qubes-users
On Fri, December 29, 2017 7:53 pm, cooloutac wrote:
> or woman,  force of habit slang.

Don't worry about it, I don't get triggered about that.

I don't think there's a user friendly way to do it yet in 4.0. See
https://groups.google.com/forum/?_escaped_fragment_=topic/qubes-users/aM_0sFesbbk/discussion#!topic/qubes-users/aM_0sFesbbk/discussion.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2727a5d5d925c0b7bab6d26ff689b9cb.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread Wael M. Nasreddine
On Fri, Dec 29, 2017 at 12:02 PM Wael M. Nasreddine <
wael.nasredd...@gmail.com> wrote:

> On Thu, Dec 28, 2017 at 5:19 PM taii...@gmx.com  wrote:
>
>> On 12/28/2017 05:43 PM, Wael M. Nasreddine wrote:
>>
>> > Thx for the tip, yea might not worth the $70 to buy used, I'll keep an
>> eye
>> > out for RAM/CPU on eBay. BTW on the manual of the board, it says that I
>> can
>> > go with <4 or >4 RAM sticks but from what you said so far, it sounded
>> like
>> > I need to fill all the slots, is that necessary? I'm intending to get
>> 8Gb a
>> > stick to fill 64Gb. I don't think I need more than that.
>> You need two sticks per CPU for dual channel, four per CPU for quad
>> channel (very slight performance improvement)
>>
> Thanks for the tip.
>
>> The life of board components is much shorter than
>> >> Hey I am curious are you from the middle east?
>> >>
>> >> Yes, I'm originally from Lebanon, but I left a decade and half ago. I
>> live now in the US.
>> Oh neat.
>> It is so sad whats happening in that area, so many people and so much
>> cultural heritage sites gone just because of a difference in
>> ideologymy I can't believe some people still think the black outfit
>> scumbag unit just showed up out of a mirage in the desert like magic.
>>
> Yes, it's aweful, it got me depressed for many years, history just keep
> repeating itself :(
>
>
>> > On 12/27/2017 02:49 PM, Wael M. Nasreddine wrote:
>> >>> I have a 1U server and it's pretty loud, unusable as a Desktop
>> machine,
>> >> are
>> >>> the 4U also loud? Any suggetions on a specific case?
>> >>>
>> >> 4U always is recommended as you can use larger fans, with decent fans
>> >> and running fancontrol or the OpenBMC firmware on the KCMA-D8 and
>> >> KGPE-D16 they are almost silent and one can watch a film without
>> complaint.
>> >>
>> > Thx for the tip, I'll opt for OpenBMC in that case.
>> If you want this make sure your vendor is selling your the KGPE-D16 with
>> the ASMB module so you don't have to buy it later, it should say it in
>> the SKU title.
>>
>
> I couldn't find one with the module, is the module really needed?
>
> Also, what do you think about this CPU fan
> https://www.ebay.com/itm/Noctua-NH-U12DO-A3/332385518775? It'll end up
> $87 ea, on Newegg it's $129 each. I'm going with this CPU
> https://www.ebay.com/itm/332501959819,
>

I found two 6386
https://www.ebay.com/itm/2x-AMD-Opteron-6386-OS6386YETGGHK-16-Core-2-8GHz-Socket-G34-CPU-TQ1488/122885384670
also is near me, I'll contact the seller to see if I can pick it up.

the person selling is near me. I couldn't find a 6380SE for less than $150.
> I'm looking right now for the case, there are so many out there but I'm
> going to focus on a 4U case with 120mm fans.
>
> What GPU do you have? I don't plan to purchase it now, but I would love to
> be able to play some games sometime in the future.
>
> I'm wondering, which state are you in?
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CA%2BkKtKA62xSecu1kT_081Noo2MNCYrAPz44h36GKFEWBzY0AjA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Atheros AR928X & Q4.0rc3 Passthrough

2017-12-29 Thread 'awokd' via qubes-users
On Sun, December 17, 2017 11:59 am, awokd wrote:
> On Sun, December 17, 2017 11:44 am, Holger Levsen wrote:
>
>> On Sat, Dec 16, 2017 at 02:21:30PM -, 'awokd' via qubes-users
>> wrote:
>>
>>
>>> Getting crashes on domU boot with an assigned Atheros wireless PCIe
>>> card under Qubes 4.0rc3 with both PV and HVM. Any suggestions how to
>>> accomplish it? Some of the posts/threads I find go back to 2010 but
>>> I'm
>>> still stumped.
>> [...]
>>
>>
>
>> I cannot really help you, but for me it's good to see someone else has
>> this problem with an Atheros AR928X card as well. I was testing it on
>> Qubes
>> 3.2 with coreboot and wasnt 100% sure this was due to Qubes/Xen,
>> or coreboot or hardware… still need to try that hw with pure Debian to
>> rule out that it's a hw problem.
>
> Thanks for taking a look! It works with no problems under pure Debian on
> the same machine. If I swap drives I can also test it on a plain Xen
> 4.8.2/Fedora 26 setup but since Qubes tweaks Xen I'm not sure a success
> or failure there would provide any useful information...

So I got around to testing under Xen 4.8.2/Fedora 26 on the same machine
and pass-through to a Stretch HVM worked! Hit it with a bunch of iw
commands and couldn't make it crash.

Main difference I could find between Fedora's Xen and Qubes' was that
Fedora's had CONFIG_SHADOW_PAGING=y. I know it's off in Qubes
intentionally, but shouldn't matter since I'm using HAP HVM?

An AR9565 does work in pass-through under Q4.0rc3 on here.

Attached debug log for the Personal HVM. Xen/apic.c has multiple traces,
and why does it seem to be randomly assigning registers?

{"execute": "device_add", "arguments": {"driver": "xen-pci-passthrough",
"id": "xen-pci-pt_-02-00.0", "hostaddr": ":00:00.00",
"machine_addr": ":02:00.0", "permissive": false}}
[00:05.0] xen_pt_realize: Assigning real physical device 00:00.0 to devfn
0x28
[00:05.0] xen_pt_register_regions: IO region 0 registered (size=0x0001
base_addr=0xf010 type: 0x4)
[00:05.0] xen_pt_config_reg_init: Offset 0x000e mismatch! Emulated=0x0080,
host=0x, syncing to 0x.
[00:05.0] xen_pt_config_reg_init: Offset 0x0010 mismatch! Emulated=0x,
host=0xf014, syncing to 0xf014.
[00:05.0] xen_pt_config_reg_init: Offset 0x0042 mismatch! Emulated=0x,
host=0x03c2, syncing to 0x0202.
[00:05.0] xen_pt_config_reg_init: Offset 0x0064 mismatch! Emulated=0x,
host=0x0cc0, syncing to 0x0cc0.
[00:05.0] xen_pt_config_reg_init: Offset 0x0072 mismatch! Emulated=0x,
host=0x1011, syncing to 0x1011.
[00:05.0] xen_pt_pci_intx: intx=1
[00:05.0] xen_pt_realize: Real physical device 00:00.0 registered
successfully


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/842362b1de6324590160b3e3ca245ce5.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.
Linux version 4.9.65-xen-stubdom (user@build-fedora4) (gcc version 6.4.1 20170727 (Red Hat 6.4.1-1) (GCC) ) #1 Sat Dec 23 02:26:04 UTC 2017
Command line: debug console=hvc0
x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'
x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers'
x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers'
x86/fpu: xstate_offset[2]:  576, xstate_sizes[2]:  256
x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format.
x86/fpu: Using 'eager' FPU context switches.
Released 0 page(s)
e820: BIOS-provided physical RAM map:
Xen: [mem 0x-0x0009] usable
Xen: [mem 0x000a-0x000f] reserved
Xen: [mem 0x0010-0x08ff] usable
NX (Execute Disable) protection: active
Hypervisor detected: Xen
e820: update [mem 0x-0x0fff] usable ==> reserved
e820: remove [mem 0x000a-0x000f] usable
e820: last_pfn = 0x9000 max_arch_pfn = 0x4
x86/PAT: Configuration [0-7]: WB  WT  UC- UC  WC  WP  UC  UC  
Base memory trampoline at [8809a000] 9a000 size 24576
BRK [0x01516000, 0x01516fff] PGTABLE
RAMDISK: [mem 0x0180-0x028befff]
Zone ranges:
  DMA32[mem 0x1000-0x08ff]
  Normal   empty
Movable zone start for each node
Early memory node ranges
  node   0: [mem 0x1000-0x0009]
  node   0: [mem 0x0010-0x08ff]
Initmem setup node 0 [mem 0x1000-0x08ff]
On node 0 totalpages: 36767
  DMA32 zone: 504 pages used for memmap
  DMA32 zone: 21 pages reserved
  DMA32 zone: 36767 pages, LIFO batch:7
p2m virtual area at c900, size is 20
Remapped 0 page(s)
e820: [mem 0x0900-0x] available for PCI devices
Booting paravirtualized 

[qubes-users] Re: Touchscreen not working on Qubes 3.2

2017-12-29 Thread cooloutac
On Thursday, March 2, 2017 at 6:02:56 AM UTC-5, atlahua wrote:
> ISSUE: Touchscreen and all other USB devices assigned to the same USB bus 
> stop working
> 
> On Qubes 3.1 I found a workaround solution assining the USB bus that manages 
> the touchscreen to dom0 (on sys-usb services tab). The touch screen started 
> working. The disadvantage in terms of security is that the other devices 
> assigned to this bus (USB port and built-in camera were also assigned to dom0.
> 
> The news is that after upgrading to Qubes 3.2, this workaround solution does 
> not work anymore. Thinking that it might be related to having Xfce instead of 
> KDE I swaped the desktop environment to KDE as instructed in your help pages 
> but it seems that was not the issue. Also all other devices on the same bus 
> stopped working, that is, the computer does not even detect a pendrive to one 
> of the USB ports on the computer.
> 
> All the USB devices work fine when re-assinged to sys-usb, except from the 
> touchscreen, that is.
> 
> ___Laptop: Asus TP300LA 
> 4GB
> [user@sys-usb /]$ lsusb
> Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> **Bus 002 Device 005: ID 03eb:8b03 Atmel Corp.** 
> Bus 002 Device 004: ID 064e:9700 Suyin Corp. Asus Integrated Webcam
> Bus 002 Device 003: ID 8087:07dc Intel Corp. 
> Bus 002 Device 002: ID 8087:8000 Intel Corp. 
> Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
> Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> 
i'm not sure, but maybe you need to manually enable mouse proxy for it, check 
its enabled correctly?  https://www.qubes-os.org/doc/usb/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c996a3a3-4e38-4062-8d9d-7fb771c80fe6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread Wael M. Nasreddine
On Thu, Dec 28, 2017 at 5:19 PM taii...@gmx.com  wrote:

> On 12/28/2017 05:43 PM, Wael M. Nasreddine wrote:
>
> > Thx for the tip, yea might not worth the $70 to buy used, I'll keep an
> eye
> > out for RAM/CPU on eBay. BTW on the manual of the board, it says that I
> can
> > go with <4 or >4 RAM sticks but from what you said so far, it sounded
> like
> > I need to fill all the slots, is that necessary? I'm intending to get
> 8Gb a
> > stick to fill 64Gb. I don't think I need more than that.
> You need two sticks per CPU for dual channel, four per CPU for quad
> channel (very slight performance improvement)
>
Thanks for the tip.

> The life of board components is much shorter than
> >> Hey I am curious are you from the middle east?
> >>
> >> Yes, I'm originally from Lebanon, but I left a decade and half ago. I
> live now in the US.
> Oh neat.
> It is so sad whats happening in that area, so many people and so much
> cultural heritage sites gone just because of a difference in
> ideologymy I can't believe some people still think the black outfit
> scumbag unit just showed up out of a mirage in the desert like magic.
>
Yes, it's aweful, it got me depressed for many years, history just keep
repeating itself :(


> > On 12/27/2017 02:49 PM, Wael M. Nasreddine wrote:
> >>> I have a 1U server and it's pretty loud, unusable as a Desktop machine,
> >> are
> >>> the 4U also loud? Any suggetions on a specific case?
> >>>
> >> 4U always is recommended as you can use larger fans, with decent fans
> >> and running fancontrol or the OpenBMC firmware on the KCMA-D8 and
> >> KGPE-D16 they are almost silent and one can watch a film without
> complaint.
> >>
> > Thx for the tip, I'll opt for OpenBMC in that case.
> If you want this make sure your vendor is selling your the KGPE-D16 with
> the ASMB module so you don't have to buy it later, it should say it in
> the SKU title.
>

I couldn't find one with the module, is the module really needed?

Also, what do you think about this CPU fan
https://www.ebay.com/itm/Noctua-NH-U12DO-A3/332385518775? It'll end up $87
ea, on Newegg it's $129 each. I'm going with this CPU
https://www.ebay.com/itm/332501959819, the person selling is near me. I
couldn't find a 6380SE for less than $150. I'm looking right now for the
case, there are so many out there but I'm going to focus on a 4U case with
120mm fans.

What GPU do you have? I don't plan to purchase it now, but I would love to
be able to play some games sometime in the future.

I'm wondering, which state are you in?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CA%2BkKtKCu2%3DMNV1grYfyQzaXhh%2Bn2bbr9euTf6dNDWaJVVEJ2hA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HOWTO restore old qubes-backup in Q4.0-rc3 using qvm-backup-restore?

2017-12-29 Thread cooloutac
or woman,  force of habit slang.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e2f79937-1841-4df6-a305-4fd8c4a89a8d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HOWTO restore old qubes-backup in Q4.0-rc3 using qvm-backup-restore?

2017-12-29 Thread cooloutac
On Friday, December 29, 2017 at 12:27:52 PM UTC-5, Kushal Das wrote:
> On Fri, Dec 29, 2017 at 10:31 PM, cooloutac  wrote:
> 
> > seems marmarek posted an update,  he suggest to update the fedora.
> >
> > But it seems passthrough for usb3 is still not supported yet,  only block 
> > device.
> >
> > I'm glad for these posts before I attempted to try 4.0 and restore my old 
> > backups.  I think I might wait a while.
> >
> It seems I missunderstood the comment from marmarek. I just now updated the
> Fedora 26 template as suggested and I can attach and mount external
> USB3 storage device.
> 
> 
> Kushal
> -- 
> Staff, Freedom of the Press Foundation
> CPython Core Developer
> Director, Python Software Foundation
> https://kushaldas.in

nice!  so umm awokd.  you wouldn't happen to have instructions to do this in 
paranoid mode do ya? grateful in advance.  Tks for your posts man.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8435afbd-649b-4761-94aa-86b04335024a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread cooloutac
On Friday, December 29, 2017 at 1:23:10 PM UTC-5, tai...@gmx.com wrote:
> On 12/29/2017 12:01 PM, Sandy Harris wrote:
> 
> >> I would buy the RAM and CPU off of ebay, there is no reason to pay $80/ea
> >> for that ram or $172 for a 6380 ($100 on ebay) you could get a 6386SE for
> >> that price. (needs 140W cooler FYI) No reason to get the "protection plan"
> >> for anything either its a waste of money.
> > That may be good advice, but there's another point of view. A couple
> > of decades back I worked in a computer store & saw many instances of a
> > pattern I found really irritating.
> >
> > As customer comes in and asks about prices on various things, comes
> > back & buys a CPU from me because we have it a bit cheaper than
> > elsewhere. He gets the board across the street since they are cheaper
> > for that & RAM in a third shop. He goes home, puts it all together &
> > it does not work. So, then he comes back to me claiming the CPU is
> > dead. Our technician pulls it out, tests in another board & says it is
> > fine. Now he wants us to make it work in his board & gets upset when I
> > tell him "fine, but we'll charge for the technician time to do that."
> > He storms off to hassle the people who sold him the board.
> >
> > Any of the stores where he got parts -- CPU, cooler, board & RAM --
> > would happily have sold him all four as an assembled & tested system
> > for not much more than he paid for his pile of parts. This would have
> > saved quite a bit of time for him & saved shop staff time &
> > irritation.
> Well hey now that you said that I think I am just going to throw away 10 
> years of what works, maybe I will go buy some pre-built optiplex from 
> dell and tell everyone else to do the same - after all for an extra 
> twenty euro they will give you a "disabled" ME and I am sure the massive 
> markup over parts cost is worth it for a "tested working properly" 
> system right?
> 
> What exactly are you trying to say here? That either one of us are 
> idiots like the man in your example? Here we have you another guy who 
> doesn't give real advice only criticizes others who do.

I think he is saying people get burned,  and I have had the same experience 
when ordering online or buying used parts.  I wouldn't even think about 
trusting ebay,  I don't even trust amazon for computer parts anymore. 
 Tiger Direct has burned me more times than I can count.  I've gotten wrong 
parts, parts that don't work.  Its a nightmare.

  Nowadays I only buy my parts from Microcenter directly off the shelf at the 
store.  Or If its a hard to find item only "new" from newegg.com, verifying the 
genuine sticker is in there,  or it goes back...

 sure maybe ram or the cpu will not be tampered with.  But what is the return 
policy like on ebay when it doesn't work?  Forget about a damage claim if 
something happens.

I agree there is no reason to buy a protection plan from a store.  But you 
definitely want that manufacturer warranty.  Everything in my system has at 
least 3 year warranty for peace of mind.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b0becdfd-0d59-4f58-a83d-d12d646a74ba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread taii...@gmx.com

On 12/29/2017 12:01 PM, Sandy Harris wrote:


I would buy the RAM and CPU off of ebay, there is no reason to pay $80/ea
for that ram or $172 for a 6380 ($100 on ebay) you could get a 6386SE for
that price. (needs 140W cooler FYI) No reason to get the "protection plan"
for anything either its a waste of money.

That may be good advice, but there's another point of view. A couple
of decades back I worked in a computer store & saw many instances of a
pattern I found really irritating.

As customer comes in and asks about prices on various things, comes
back & buys a CPU from me because we have it a bit cheaper than
elsewhere. He gets the board across the street since they are cheaper
for that & RAM in a third shop. He goes home, puts it all together &
it does not work. So, then he comes back to me claiming the CPU is
dead. Our technician pulls it out, tests in another board & says it is
fine. Now he wants us to make it work in his board & gets upset when I
tell him "fine, but we'll charge for the technician time to do that."
He storms off to hassle the people who sold him the board.

Any of the stores where he got parts -- CPU, cooler, board & RAM --
would happily have sold him all four as an assembled & tested system
for not much more than he paid for his pile of parts. This would have
saved quite a bit of time for him & saved shop staff time &
irritation.
Well hey now that you said that I think I am just going to throw away 10 
years of what works, maybe I will go buy some pre-built optiplex from 
dell and tell everyone else to do the same - after all for an extra 
twenty euro they will give you a "disabled" ME and I am sure the massive 
markup over parts cost is worth it for a "tested working properly" 
system right?


What exactly are you trying to say here? That either one of us are 
idiots like the man in your example? Here we have you another guy who 
doesn't give real advice only criticizes others who do.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/071ba9bf-8e88-ce24-14e9-fb41d2e20d47%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HCL - Dell XPS 15 9560

2017-12-29 Thread placeholderdaily
Upadte: Started 4.0 installation via USB and pressed tab and then typed the 
above cmd and enter > Everything went smooth! Thanks for help! 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2acd221d-6cd4-4fc4-a01a-f83fa2aed498%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HOWTO restore old qubes-backup in Q4.0-rc3 using qvm-backup-restore?

2017-12-29 Thread Kushal Das
On Fri, Dec 29, 2017 at 10:31 PM, cooloutac  wrote:

> seems marmarek posted an update,  he suggest to update the fedora.
>
> But it seems passthrough for usb3 is still not supported yet,  only block 
> device.
>
> I'm glad for these posts before I attempted to try 4.0 and restore my old 
> backups.  I think I might wait a while.
>
It seems I missunderstood the comment from marmarek. I just now updated the
Fedora 26 template as suggested and I can attach and mount external
USB3 storage device.


Kushal
-- 
Staff, Freedom of the Press Foundation
CPython Core Developer
Director, Python Software Foundation
https://kushaldas.in

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAAzeMbw0RzrZGNQzmkeFd%2BfjSOu9h2Or5h9BSb3_C0tkvJCYyQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: new Desktop build recommendation

2017-12-29 Thread Sandy Harris
> I would buy the RAM and CPU off of ebay, there is no reason to pay $80/ea
> for that ram or $172 for a 6380 ($100 on ebay) you could get a 6386SE for
> that price. (needs 140W cooler FYI) No reason to get the "protection plan"
> for anything either its a waste of money.

That may be good advice, but there's another point of view. A couple
of decades back I worked in a computer store & saw many instances of a
pattern I found really irritating.

As customer comes in and asks about prices on various things, comes
back & buys a CPU from me because we have it a bit cheaper than
elsewhere. He gets the board across the street since they are cheaper
for that & RAM in a third shop. He goes home, puts it all together &
it does not work. So, then he comes back to me claiming the CPU is
dead. Our technician pulls it out, tests in another board & says it is
fine. Now he wants us to make it work in his board & gets upset when I
tell him "fine, but we'll charge for the technician time to do that."
He storms off to hassle the people who sold him the board.

Any of the stores where he got parts -- CPU, cooler, board & RAM --
would happily have sold him all four as an assembled & tested system
for not much more than he paid for his pile of parts. This would have
saved quite a bit of time for him & saved shop staff time &
irritation.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CACXcFmmRk476KGqCY%3DC0WsSY7Y6fekVgVUwzL3M4qd49RtqO%3DA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HOWTO restore old qubes-backup in Q4.0-rc3 using qvm-backup-restore?

2017-12-29 Thread cooloutac
On Friday, December 29, 2017 at 11:42:35 AM UTC-5, Kushal Das wrote:
> On Sat, Dec 23, 2017 at 1:28 AM, 'awokd' via qubes-users
>  wrote:
> > On Fri, December 22, 2017 6:12 pm, Josefa Hays wrote:
> >
> >
> >> I recently installed Q4.0-rc3. I have an old qubes-backup (from 2016) on
> >> a LUKS encrypted external HDD. How do I restore my backup in 4.0 using
> >> qvm-backup-restore? I guess I don't want to mount the drive directly in
> >> Dom0, so, how do I do? Create a designated "backup-vm" and then exactly
> >> how do I proceed?
> >>
> >> What would be the step-by-step guide for restoring an old qubes-backup
> >> using the commandline interface? Until the backup-GUI gets up and running
> >> in 4.0 I guess many users will have the same question.
> >
> > Attach external drive to sys-usb
> > "qvm-block" to list partitions
> > "qvm-block a backup-vm sys-usb:sda1" (whichever is your LUKS partition)
> > mount and unlock inside backup-vm
> > "qvm-backup-restore -d backup-vm /path/to/backupfileinbackupvm oldvm1
> > oldvm2 oldvm3" to selectively restore certain vms
> > unmount inside backup-vm
> > "qvm-block d backup-vm sys-usb:sda1"
> > Detach drive
> Does this mean USB3 based storage devices started working in 4.0?
> 
> No update in the following bug on the same.
> 
> https://github.com/QubesOS/qubes-issues/issues/3351
> 
> Kushal
> -- 
> Staff, Freedom of the Press Foundation
> CPython Core Developer
> Director, Python Software Foundation
> https://kushaldas.in
seems marmarek posted an update,  he suggest to update the fedora.

But it seems passthrough for usb3 is still not supported yet,  only block 
device.

I'm glad for these posts before I attempted to try 4.0 and restore my old 
backups.  I think I might wait a while.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0a7c5868-47c6-4b5b-ae19-33a7f47072d5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HOWTO restore old qubes-backup in Q4.0-rc3 using qvm-backup-restore?

2017-12-29 Thread Kushal Das
On Sat, Dec 23, 2017 at 1:28 AM, 'awokd' via qubes-users
 wrote:
> On Fri, December 22, 2017 6:12 pm, Josefa Hays wrote:
>
>
>> I recently installed Q4.0-rc3. I have an old qubes-backup (from 2016) on
>> a LUKS encrypted external HDD. How do I restore my backup in 4.0 using
>> qvm-backup-restore? I guess I don't want to mount the drive directly in
>> Dom0, so, how do I do? Create a designated "backup-vm" and then exactly
>> how do I proceed?
>>
>> What would be the step-by-step guide for restoring an old qubes-backup
>> using the commandline interface? Until the backup-GUI gets up and running
>> in 4.0 I guess many users will have the same question.
>
> Attach external drive to sys-usb
> "qvm-block" to list partitions
> "qvm-block a backup-vm sys-usb:sda1" (whichever is your LUKS partition)
> mount and unlock inside backup-vm
> "qvm-backup-restore -d backup-vm /path/to/backupfileinbackupvm oldvm1
> oldvm2 oldvm3" to selectively restore certain vms
> unmount inside backup-vm
> "qvm-block d backup-vm sys-usb:sda1"
> Detach drive
Does this mean USB3 based storage devices started working in 4.0?

No update in the following bug on the same.

https://github.com/QubesOS/qubes-issues/issues/3351

Kushal
-- 
Staff, Freedom of the Press Foundation
CPython Core Developer
Director, Python Software Foundation
https://kushaldas.in

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAAzeMbw0_07KZ%2B%3D270AQWjrhi4ZyFUvqF9v53A486U_-SHk-2g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] HOWTO restore old qubes-backup in Q4.0-rc3 using qvm-backup-restore?

2017-12-29 Thread cooloutac
On Friday, December 22, 2017 at 2:58:34 PM UTC-5, awokd wrote:
> On Fri, December 22, 2017 6:12 pm, Josefa Hays wrote:
> 
> 
> > I recently installed Q4.0-rc3. I have an old qubes-backup (from 2016) on
> > a LUKS encrypted external HDD. How do I restore my backup in 4.0 using
> > qvm-backup-restore? I guess I don't want to mount the drive directly in
> > Dom0, so, how do I do? Create a designated "backup-vm" and then exactly
> > how do I proceed?
> >
> > What would be the step-by-step guide for restoring an old qubes-backup
> > using the commandline interface? Until the backup-GUI gets up and running
> > in 4.0 I guess many users will have the same question.
> 
> Attach external drive to sys-usb
> "qvm-block" to list partitions
> "qvm-block a backup-vm sys-usb:sda1" (whichever is your LUKS partition)
> mount and unlock inside backup-vm
> "qvm-backup-restore -d backup-vm /path/to/backupfileinbackupvm oldvm1
> oldvm2 oldvm3" to selectively restore certain vms
> unmount inside backup-vm
> "qvm-block d backup-vm sys-usb:sda1"
> Detach drive

oh man  are they planning to implement a gui option?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/07acd8eb-86dd-4429-be8a-3444caf8f6c7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Missing dom0-updates-directory after clean

2017-12-29 Thread Matthias Mueller
Hello,

I'm using 4.0 RC3 and after a 

sudo qubes-dom0-updates --action="clean all"

it looks like it cleaned a little a bit too much. If I try to update or 
install something I get this error message:

tar: /var/lib/qubes/dom0-updates: Cannot open: No such file or directory

And if I look in /var/lib/qubes, there is really not such a directory. Can I 
just create it or is there any other fix?

Thanks in advance.

Regards
Michael

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/18700719.NkrVj9Npbl%40personal.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] qubes-mirage-firewall 0.4

2017-12-29 Thread Roy Bernat
On Monday, 25 December 2017 09:20:02 UTC+2, Roy Bernat  wrote:
> On Sunday, 24 December 2017 16:24:37 UTC+2, donoban  wrote:
> > On 12/24/2017 12:57 PM, Roy Bernat wrote:
> > > 
> > > Hi 
> > > 
> > > Not seems to work for me . 
> > > 
> > > Ideas ? 
> > > 
> > > R
> > > 
> > 
> > Could you paste your 'qvm-prefs mirage-firewall' output?
> 
> autostart D  False
> backup_timestamp  D  
> debug -  False
> default_dispvmD  fedora-25-dvm
> default_user  D  user
> gateway   D  
> gateway6  D  
> include_in_backupsD  True
> installed_by_rpm  D  False
> ipD  10.137.0.33
> ip6   D  
> kernel-  mirage-firewall
> kerneloptsD  nopat
> klass D  AppVM
> label -  green
> mac   D  
> maxmem-  320
> memory-  32
> name  -  mirage-firewall
> netvm -  sys-net
> provides_network  -  False
> qid   -  33
> qrexec_timeoutD  60
> stubdom_mem   U
> stubdom_xid   D  -1
> template  -  fedora-26-minimal
> template_for_dispvms  D  False
> updateableD  False
> uuid  -  378b816e-b7bf-4ec3-a22a-03218cc433bd
> vcpus -  1
> virt_mode -  pv
> visible_gateway   D  10.137.0.5
> visible_gateway6  D  
> visible_ipD  10.137.0.33
> visible_ip6   D  
> visible_netmask   D  255.255.255.255
> xid   D  -1

Someone ???

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8af94b2d-52b3-4b21-b0b1-fb5383c1642e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.