[qubes-users] Re: Will there be a gentoo template in the plans?

2018-02-26 Thread fepitre
Le mardi 27 février 2018 00:23:32 UTC+1, Tim W a écrit :
> If you get it working I am happy 5o write up a hpw to doc for qubes doc.

Thank you! Yesterday I was thinking about releasing a first pre-version of the 
builder-gentoo I've made to eventually be helped. If I remember I was ending on 
packaging linux-utils. So maybe I could ask to Andrew to open a project on 
qubes-issues or something like it to track the progress.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cf671dee-38f5-4d1d-9268-59518b77b6fb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Building Centos template conflict error?

2018-02-26 Thread fepitre
Le mardi 27 février 2018 00:30:10 UTC+1, Tim W a écrit :
> Great that was failing basically on all non standard templates i.e. not 
> fedora, debain, or whonix.   They would all fail but it seems each had issues 
> ubuntu, centos, arch.  Seems they are each getting fixed for 3.2 and getting 
> updated for 4.0 now.  I was just testing to ensure things were still working 
> for building as I know many prefer to build their own iso and templates vs 
> binary.  I am one.  Figured if docs had to be updated I would do that but it 
> seems at most just a tweak or two in docs is all thats needed.

Indeed, it was just an adjustment with respect to the rpm spec of the 
conflicting package. CentOS is shipping a file in their own dconf but not 
Fedora. Recently a file /etc/dconf/profile/user has been used and provided by 
Qubes and that is why there was a recent conflict. The template for R4.0 is on 
the road! I finished last week to do all the necessary and Marek is currently 
implementing it.
 
> Thanks again for you and Marek getting it working

You're welcome.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/14632955-075a-41ad-91cb-af2ddec1daf5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes 4.0 rc4 / Qubes backup doesn't find the directory

2018-02-26 Thread ThierryIT
Le mardi 27 février 2018 02:50:05 UTC+2, Yuraeitha a écrit :
> On Monday, February 26, 2018 at 8:04:44 PM UTC+1, ThierryIT wrote:
> > Hi,
> > 
> > I would like to backup few of my VMs.
> > I have mount my external usb (not using sys-usb) HDD.
> > From the console where my HDD is attached/mounted, I have access through 
> > /mnt/removable to all my previous (3.2) backup files.
> > I have created, in /mnt/removable, a new folder.
> > When running the Qubes backup, and choosing the newly created folder, I 
> > have this error:
> > 
> > Selected directory do not exists or not a directory
> > 
> > I have created others folders, I have change permissions ... Same problem.
> > Today all my folders are:
> > 
> > - drwxrwxr-x 3 user:user AppVM_bck
> > 
> > Same pb if root:root
> > 
> > ??
> 
> Apologies, I overlooked the "- drwxrwxr-x 3 user:user AppVM_bck" line in your 
> post. Since your USB controller then must be directly passed into the AppVM, 
> you can try create a direct path copy directly in dom0, even though you won't 
> be using this path. As suggested in Rusty Bird's link. Does it work for you?

I have created the "/mnt/removable" in dom0.
If using as path: /mnt/removable/AppVM_bck I do still have the same error 
message.
If using as path: /mnt/removable I do have a permission denied.

drwxr-xr-x root rootmnt
drwxr-xr-x root rootremovable
drwxrwxr-x user user AppVM_bck

Are the permissions correct ? It should be root:root or user:user ?

Thx 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f1f24511-84fc-4c85-907e-0524f740991a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] removing fedora-26 template from Qubes ?

2018-02-26 Thread 'Max Andersen' via qubes-users


> Den 27. feb. 2018 kl. 06.16 skrev ThierryIT :
> 
> Hi,
> How to properly remove this template ?

> user@dom0 ~]$ sudo dnf remove qubes-template-fedora-23
> Thx
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/8b630b1c-3c72-4ac7-a2d2-f714e5161434%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/FC933BCC-A43F-4990-9A9E-4FAEFC3A1D94%40militant.dk.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] removing fedora-26 template from Qubes ?

2018-02-26 Thread ThierryIT
Hi,
How to properly remove this template ?
Thx

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8b630b1c-3c72-4ac7-a2d2-f714e5161434%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes 4.0 without IOMMU/VT-d/AMD-Vi or Interrupt Remapping

2018-02-26 Thread Utility Panel
> Apparently there are some problems with the 63xx series Opterons and
> coreboot: 
> https://www.coreboot.org/Board:asus/kgpe-d16#CPUs_recommended_by_users

I saw that, but the same page mentions Taiidan's solution for providing the 
needed microcode updates. Luckily, Taiidan seems to like Qubes, so he's an easy 
guy to find. :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5f9e3f1b-c871-4582-88d3-78754c1ca073%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Re: AW: Re: [qubes-users] Installing Chrome

2018-02-26 Thread brendan . hoar
On Monday, February 26, 2018 at 7:21:11 PM UTC-5, [799] wrote:
> An 27. Feb. 2018, 00:59, Yuraeitha schrieb:
> > It is by no means a complete guide as you
> > make it sound though, it's relying overly much
> > on closed code, and Chromium is no good
> > here to look into Google Chrome. I wouldn't
> > call it the "go to" guide to get everything
> > working. 
> 
> Seriously? Do you know how much time it takes to write a how-to? To test all
> steps and to use the feedback from other committed users to make it better?
> And as mentioned the guide is written for a special use case, playing
> multimedia on Qubes as I wanted an OS which I can use for everything I'm using
> a laptop for.

Hey, just wanted to say: thanks for the guide, it's great. :)

One of the strengths of Qubes is that you *can* divide your usage into 
compartments which have different compromises (both security-wise and 
philosophy-wise). A full-out "yes, we can Netflix and ... well, popcorn in this 
case" Qube and separately have a "open source intelligence research behind VPN 
and/or TOR" Qube or "develop sensitive open source application" Qube on the 
same machine, *and* worry less about cross contamination (security, software 
development ethics, identities, etc.) is just a big win.

Again: thanks! I am already using your guide and I appreciate all the work you 
and others put into it.

...
> > The fact that Firefox isn't even mentioned in
> > that "between the lines self-proclaimed all
> > solution page guide", makes me a bit sad and
> > disappointed in Qubes. I hope this is a
> > mistake. 
> 
> Honestly it was me writing this "self-proclaimed all solution page guide"
> which took me lots of hours starting from the first version and following the
> excellent feedback from other users to improve it.
> Maybe you should provide content instead of being sad that others try to
> contribute to the Qubes project?

Great idea! Maybe Yuraeitha can write up a "multimedia, most of it, with 
firefox" guide? I have seen Yuraeitha add useful information on other threads 
in this forum, appears to be very engaged and generally appears to mean well.

> Do you know how motivating it feels if people comment on your work like you're
> doing?

I hope I have at least added some positive balance. :)

> If my how-to will convince one user to try out Qubes because he can even do 
> the "evil closed source" stuff, I am happy.

:)

Brendan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/24823396-5c20-4c93-ba52-1398ea8a905f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Re: AW: Re: [qubes-users] Installing Chrome

2018-02-26 Thread Yuraeitha
On Tuesday, February 27, 2018 at 1:21:11 AM UTC+1, [799] wrote:
> Hello,
> 
>  Original-Nachricht 
> An 27. Feb. 2018, 00:59, Yuraeitha schrieb:
> 
> > It is by no means a complete guide as you
> > make it sound though, it's relying overly much
> > on closed code, and Chromium is no good
> > here to look into Google Chrome. I wouldn't
> > call it the "go to" guide to get everything
> > working. 
> 
> Seriously? Do you know how much time it takes to write a how-to? To test all 
> steps and to use the feedback from other committed users to make it better?
> And as mentioned the guide is written for a special use case, playing 
> multimedia on Qubes as I wanted an OS which I can use for everything I'm 
> using a laptop for.
> 
> > Also as far as my opinion goes, Google
> > Chromes one and only strong point is the
> > support of Silverlight content, which is not a
> > technical strength, but monopolize of pure
> > power on a free market in a democracy. It just
> > downright sucks. 
> 
> The good thing is that you are totally free to use whatever you want to 
> choose.
> And yes it would be better if all content and app providers are offering 
> solutions for "the rest of us", but they aren't and the workarround using 
> chrome is good for everyone who likes to use Netflix & Co. I don't think that 
> sucks. It's better (for some) to use chrome on qubes instead of Windows to 
> stream video content.
> But yes, if we could use a default Linux installation to do all this task, 
> this would be great.
> 
> > Firefox will play everything around, as long as
> > the content delivery isn't scamming their
> > customers by using platform monopolized
> > Silverlight. 
> 
> Doesn't make sense to me, as you're saying Firefox plays everything, as long 
> ...
> The fact is: currently Firefox is not playing all content. And yes it sucks.
> 
> > Microsoft's hate towards Linux seems as
> > strong as ever, despite their so called claims
> > for otherwise. 
> 
> Any evidence for this strong argument? As far as I know Microsoft is even 
> using some Linux technologies (Linux on Windows / Linux on Azure / ...)
> 
> > If possible, we really shouldn't support
> > scumbag companies doing something as
> > manipulative like this, which is on a level only
> > a real psychopathic sick person would pull
> > off. 
> 
> the good thing is ... You don't have to.
> 
> > The fact that Firefox isn't even mentioned in
> > that "between the lines self-proclaimed all
> > solution page guide", makes me a bit sad and
> > disappointed in Qubes. I hope this is a
> > mistake. 
> 
> Honestly it was me writing this "self-proclaimed all solution page guide" 
> which took me lots of hours starting from the first version and following the 
> excellent feedback from other users to improve it.
> Maybe you should provide content instead of being sad that others try to 
> contribute to the Qubes project?
> Do you know how motivating it feels if people comment on your work like 
> you're doing?
> The Qubes documentation is done by all of us, if you want to add a section 
> how you can use Firefox to play content, feel free to do so.
> Make a difference!
> And if you think Chrome, closed source content providers are the devil, don't 
> use it, but I think giving users options is always a good thing.
> 
> If my how-to will convince one user to try out Qubes because he can even do 
> the "evil closed source" stuff, I am happy.
> 
> [799]

Okay I may have come on a bit strong worded, I apologize that I ended up being 
rude. Nevertheless I'm not reclaiming my criticism before convinced otherwise.

I didn't know who wrote that guide, or the name awokd mentioned. I didn't 
check, and frankly I don't need to know who wrote it to criticize it, it's not 
that I would have second thoughts about criticizing it if it was someone else 
who wrote it. If you've read some of my other posts here on Qubes user threads, 
I naturally criticize without holding back, it's within my personality to 
oppose institutionalized logic which appear to show flaws, it's not a personal 
attack. My goal is objective truth, I don't care about reputation or things 
like that, we can't live in a functional peaceful world if we don't seek out 
truth. I also expect others to criticism me or my criticism, not only for the 
sake of objective truth, but also because it's the greatest way to learn, to 
learn from mistakes. Being able to admit a mistake, will even accelerate 
learning.

btw I know very well how long it takes to write how to's, as I write how to's 
my self. None of them have been posted to Qubes doc's yet, but I definitely 
have projects I'm working on, such as QubesTV, QubesNAS, Qubes update script, 
Qubes screenshot scripts, etc.

My beef with this is that Qubes is about being open source, decentralization 
(Qubes Air which was planned almost a decade ago now), retaining control of 
ones own system, etc. If there are just as good open source solutions, or even 
nearly just 

[qubes-users] Re: Qubes 4.0 rc4 / Qubes backup doesn't find the directory

2018-02-26 Thread Yuraeitha
On Monday, February 26, 2018 at 8:04:44 PM UTC+1, ThierryIT wrote:
> Hi,
> 
> I would like to backup few of my VMs.
> I have mount my external usb (not using sys-usb) HDD.
> From the console where my HDD is attached/mounted, I have access through 
> /mnt/removable to all my previous (3.2) backup files.
> I have created, in /mnt/removable, a new folder.
> When running the Qubes backup, and choosing the newly created folder, I have 
> this error:
> 
> Selected directory do not exists or not a directory
> 
> I have created others folders, I have change permissions ... Same problem.
> Today all my folders are:
> 
> - drwxrwxr-x 3 user:user AppVM_bck
> 
> Same pb if root:root
> 
> ??

Apologies, I overlooked the "- drwxrwxr-x 3 user:user AppVM_bck" line in your 
post. Since your USB controller then must be directly passed into the AppVM, 
you can try create a direct path copy directly in dom0, even though you won't 
be using this path. As suggested in Rusty Bird's link. Does it work for you?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6d93c97d-912c-4db6-b191-3d1d7a94e08e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes 4.0 rc4 / Qubes backup doesn't find the directory

2018-02-26 Thread Yuraeitha
On Monday, February 26, 2018 at 8:04:44 PM UTC+1, ThierryIT wrote:
> Hi,
> 
> I would like to backup few of my VMs.
> I have mount my external usb (not using sys-usb) HDD.
> From the console where my HDD is attached/mounted, I have access through 
> /mnt/removable to all my previous (3.2) backup files.
> I have created, in /mnt/removable, a new folder.
> When running the Qubes backup, and choosing the newly created folder, I have 
> this error:
> 
> Selected directory do not exists or not a directory
> 
> I have created others folders, I have change permissions ... Same problem.
> Today all my folders are:
> 
> - drwxrwxr-x 3 user:user AppVM_bck
> 
> Same pb if root:root
> 
> ??

I don't think it's a permission issue, it can't find the folder, so it's likely 
not even getting to the point where it's asking the system for permissions.

Missing information:
- If you're not using sys-usb, are you then running backup from dom0 or from an 
USB controller directly pass-through into an AppVM?

- Did you remember to use '' marks for spaces in the address?

- Did you mixup the domain:device flag with the -d flag, such as between 
qvm-usb/qvm-pci and qvm-backup?

- What is the full qvm-backup path you use? By full, I mean the whole thing.


In case you're not doing this from dom0, but from an USB controller directly 
passed into "any" AppVM, then to followup on the answer and link from Rusty 
Bird, to quote mig5 in the link:

"As proof, I can 'cheat' this by running sudo mkdir /mnt/removable on my dom0, 
and then I can proceed to backup my VMs on the disk mounted on sys-usb at 
/mnt/removable"

Essentially, it seems you can bypass this error by making a similar path 
available in dom0, even though the path in dom0 won't be used. Apparently it 
fails if the path isn't available in dom0, despite the path being used is 
actually inside the AppVM.


However, if you're running the USB from dom0 directly, then to my knowledge it 
has never really worked in Qubes 4, be it RC-1 or RC-4, due to the redesign 
including the admin tools, and it seemingly was not made to include dom0 
qvm-backup. I haven't checked, but maybe it was fixed since not all hardware 
can make a sys-usb (for example when touchscreen is tied to USB and the 
controller can't be moved away from dom0 without freezing the entire screen, 
not just touch, but literally freezing the picture <--- which is just one 
example why some still need to run USB controllers in dom0). 

What is your situation? More information?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/764ee7ac-ec3d-431a-a762-ffc7d80bb4b8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


AW: Re: AW: Re: [qubes-users] Installing Chrome

2018-02-26 Thread '[799]' via qubes-users
Hello,

 Original-Nachricht 
An 27. Feb. 2018, 00:59, Yuraeitha schrieb:

> It is by no means a complete guide as you
> make it sound though, it's relying overly much
> on closed code, and Chromium is no good
> here to look into Google Chrome. I wouldn't
> call it the "go to" guide to get everything
> working.

Seriously? Do you know how much time it takes to write a how-to? To test all 
steps and to use the feedback from other committed users to make it better?
And as mentioned the guide is written for a special use case, playing 
multimedia on Qubes as I wanted an OS which I can use for everything I'm using 
a laptop for.

> Also as far as my opinion goes, Google
> Chromes one and only strong point is the
> support of Silverlight content, which is not a
> technical strength, but monopolize of pure
> power on a free market in a democracy. It just
> downright sucks.

The good thing is that you are totally free to use whatever you want to choose.
And yes it would be better if all content and app providers are offering 
solutions for "the rest of us", but they aren't and the workarround using 
chrome is good for everyone who likes to use Netflix & Co. I don't think that 
sucks. It's better (for some) to use chrome on qubes instead of Windows to 
stream video content.
But yes, if we could use a default Linux installation to do all this task, this 
would be great.

> Firefox will play everything around, as long as
> the content delivery isn't scamming their
> customers by using platform monopolized
> Silverlight.

Doesn't make sense to me, as you're saying Firefox plays everything, as long ...
The fact is: currently Firefox is not playing all content. And yes it sucks.

> Microsoft's hate towards Linux seems as
> strong as ever, despite their so called claims
> for otherwise.

Any evidence for this strong argument? As far as I know Microsoft is even using 
some Linux technologies (Linux on Windows / Linux on Azure / ...)

> If possible, we really shouldn't support
> scumbag companies doing something as
> manipulative like this, which is on a level only
> a real psychopathic sick person would pull
> off.

the good thing is ... You don't have to.

> The fact that Firefox isn't even mentioned in
> that "between the lines self-proclaimed all
> solution page guide", makes me a bit sad and
> disappointed in Qubes. I hope this is a
> mistake.

Honestly it was me writing this "self-proclaimed all solution page guide" which 
took me lots of hours starting from the first version and following the 
excellent feedback from other users to improve it.
Maybe you should provide content instead of being sad that others try to 
contribute to the Qubes project?
Do you know how motivating it feels if people comment on your work like you're 
doing?
The Qubes documentation is done by all of us, if you want to add a section how 
you can use Firefox to play content, feel free to do so.
Make a difference!
And if you think Chrome, closed source content providers are the devil, don't 
use it, but I think giving users options is always a good thing.

If my how-to will convince one user to try out Qubes because he can even do the 
"evil closed source" stuff, I am happy.

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/PHliEufZeFQnasw_JBqvvRtLQTDrqm9ZFfLsjxC0rYnV0fmH_KUbglf05EIJqlwp_dm7GDLhUZ3-cyFBSTJEwrGXN8AN1oTyLT4ahpyGJwY%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes 4.0 rc4 / Qubes backup doesn't find the directory

2018-02-26 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

ThierryIT:
> When running the Qubes backup, and choosing the newly created folder, I have 
> this error:
> 
> Selected directory do not exists or not a directory

https://github.com/QubesOS/qubes-issues/issues/3594

Rusty
-BEGIN PGP SIGNATURE-
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=I+Ot
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180226235845.GA2172%40mutt.
For more options, visit https://groups.google.com/d/optout.


Re: AW: Re: [qubes-users] Installing Chrome

2018-02-26 Thread Yuraeitha
On Monday, February 26, 2018 at 5:56:21 PM UTC+1, awokd wrote:
> On Mon, February 26, 2018 4:48 pm, '[799]' via qubes-users wrote:
> > Hello,
> >
> >
> > I haven't fully understand what the first post was about, but if it is
> > about how to install chrome... Don't look further, it's all covered:
> >
> > https://www.qubes-os.org/doc/multimedia/
> >
> >
> > The last point covers the complete installation, including setting up the
> > directories and downloading & verifying the public signing keys.
> 
> Thanks @praschdorff and reviewers for putting that document together!

It is by no means a complete guide as you make it sound though, it's relying 
overly much on closed code, and Chromium is no good here to look into Google 
Chrome. I wouldn't call it the "go to" guide to get everything working. 

Also as far as my opinion goes, Google Chromes one and only strong point is the 
support of Silverlight content, which is not a technical strength, but 
monopolize of pure power on a free market in a democracy. It just downright 
sucks.

Firefox will play everything around, as long as the content delivery isn't 
scamming their customers by using platform monopolized Silverlight. Just 
because Google got a piece of the Silverlight working in their closed code 
version (which funnily enough is not included in the open source Chromium 
version), just smells a thousand miles away of these companies scr*wing over 
Linux & Linux users, on purpose. Microsoft's hate towards Linux seems as strong 
as ever, despite their so called claims for otherwise.

If possible, we really shouldn't support scumbag companies doing something as 
manipulative like this, which is on a level only a real psychopathic sick 
person would pull off.

The fact that Firefox isn't even mentioned in that "between the lines 
self-proclaimed all solution page guide", makes me a bit sad and disappointed 
in Qubes. I hope this is a mistake.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b2c6ed6c-1a3a-4d78-9073-7a23789f6839%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: firewall/proxy VM not working with Qubes 4.0-rc4

2018-02-26 Thread 'awokd' via qubes-users
On Mon, February 26, 2018 11:17 pm, Thorsten Schierer wrote:

>
> So it seems like as soon as I create a new VM with "provides network"
> checked, it can not use the network connection of sys-net. Any other VM
> that does not provide network ifself can use sys-net directly and works
> fine. I think there is a problem with some kind of proxy setup in
> sys-firewall or something. Is there some documentation which steps are done
> regarding networking during the startup of sys-firewall, so I can try to
> do those steps manually one by one to see where the problem appears?

Can you also try doing this against the template you're using for your
sys-firewall?

qvm-features fedora-26-minimal qubes-firewall 1


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0a08a11ecc3783cf75db5fad6a476aee.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Building Centos template conflict error?

2018-02-26 Thread Tim W
Great that was failing basically on all non standard templates i.e. not fedora, 
debain, or whonix.   They would all fail but it seems each had issues ubuntu, 
centos, arch.  Seems they are each getting fixed for 3.2 and getting updated 
for 4.0 now.  I was just testing to ensure things were still working for 
building as I know many prefer to build their own iso and templates vs binary.  
I am one.  Figured if docs had to be updated I would do that but it seems at 
most just a tweak or two in docs is all thats needed.

Thanks again for you and Marek getting it working

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a3b5e411-0c29-446c-93a5-d11f587ac1a8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Will there be a gentoo template in the plans?

2018-02-26 Thread Tim W
If you get it working I am happy 5o write up a hpw to doc for qubes doc.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6c089d3a-2cc6-45f6-8a9c-6e9ede65f658%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Will there be a gentoo template in the plans?

2018-02-26 Thread Tim W
I worked on this way back qubes 3.0 but never got it finished a bit of a bear 
compared to others given the nature of build vs install.  I greatly precer 
gentoo over arch but ended up usimg the later.  Still much happier if gentoo 
got working.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a283fb4a-10ad-4654-bc2f-abc166eac780%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: firewall/proxy VM not working with Qubes 4.0-rc4

2018-02-26 Thread Thorsten Schierer
 Ok, I set up 2 new VMs (sys-net and sys-firewall) in case something went
wrong during the setup, but the result was the same as before.
Not sure how to enable the clocksync service in sys-net (fedora-26
template) but the date/time settings are correct, so I assume it already is
syncing correctly.

But I did some more research and this is what I found out so far is:

sys-net itself has a working internet connection (I can do "ping
www.google.com" in a terminal and everything is fine).
Also other VMs that use sys-net directly as netVM can access the internet
(i.e. ping a server etc.).
The only exception is sys-firewall, in which a ping just fails due to no
connection.

When sys-firewall starts up, a new vif is created inside sys-net (which was
expected), but there is no route created.
When I tried to create a new route it said "Network is down". So it did
"ifconfig vif8.0 up" and afterwards added a new route with:
"sudo ip route add 10.137.0.15 dev vif8.0 metric 32752"

"route -v" displays:
10.137.0.15   0.0.0.0   255.255.255.255   UH   32752   0   0   vif8.0

So at this point the ifconfig and route entries look exactly like on my
other machine which is working fine out of the box.
Unfortunately sys-firewall still does not have a working internet
connection ("ping www.google.com" results in "Name or service not known"
due to no DNS connectivity).

So it seems like as soon as I create a new VM with "provides network"
checked, it can not use the network connection of sys-net. Any other VM
that does not provide network ifself can use sys-net directly and works
fine.
I think there is a problem with some kind of proxy setup in sys-firewall or
something.
Is there some documentation which steps are done regarding networking
during the startup of sys-firewall, so I can try to do those steps manually
one by one to see where the problem appears?


2018-02-26 22:38 GMT+01:00 Alex Dubois :

> On Monday, 26 February 2018 03:48:29 UTC, thorsten...@gmail.com  wrote:
> > I installed Qubes 4.0-rc4 and have a problem with my internet connection.
> > sys-net itself has a working internet connection but sys-firewall does
> not. No need to mention that every other VM that uses sys-firewall as netVM
> does also have no working internet connection.
> >
> > If I switch the default netVM from sys-firewall to sys-net (for
> testing), dom0 can use it to update etc. Also any other VM gets internet
> connection with sys-net as Networking VM.
> >
> > An update of dom0 from testing-repository did not fix the problem.
> > Also switching the sys-firewall template from fedora-26 to debian-9 does
> not help.
> >
> > I found a similar problem here:
> > https://github.com/QubesOS/qubes-issues/issues/2141
> >
> > So I checked the network interfaces and they are like this:
> >
> > sys-net:
> > lo
> > enp0s0
> > vif2.0
> >
> > sys-firewall:
> > eth0
> > lo
> >
> > Not sure, but I guess the vif interface is missing in sys-firewall?
> > How do I fix this problem?
>
> vif interface will appear when a VM connects to it.
>
> Could you clarify the term no internet.
>
> I had a lot of problems solved once sys-net had the service clocksync
> enabled (as it should).
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "qubes-users" group.
> To unsubscribe from this topic, visit https://groups.google.com/d/
> topic/qubes-users/oN204nGh63I/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-users/46a6952f-6fd5-4aec-93ca-994937a24c5e%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAMtrDxQXO%3DHUyiimHZFx96meYT0oTJ-VxLq3DsbcquosRh7eFg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS Stable Release 3.2. (Cant up-date template to fedora-26 or fedora-27)

2018-02-26 Thread Tim W
Inhave gotten errors such as those building qubes iso and templates.  I now 
break up the components and bud them in small in order groups so I can start 
where it fails vs running the whole script build.

I would try again and as was said restart the nework vm chain or full 
powercycle the machine.  It really sucks when that happens on a six hour custom 
qubes iso build and you bogger it and have to start over.  Live and learn I 
guess lol

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/90acf871-d748-48f1-aac3-e1d797413a3e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Can't install Qubes, Rebooting after loading initrd.img

2018-02-26 Thread 'awokd' via qubes-users
On Mon, February 26, 2018 11:01 pm, patelma...@gmail.com wrote:

>
> After following the links, I see that yes I had already visited those,
> however they do lead to other important links to be sure, so thank you.
> The ones you sent me explain how to install through the terminal, I
> believe, whereas I was hoping to simply transfer the file from my stick
> over to the computer and then simply hit install. Is the only option that
> I use the terminal, do you know?

If you're doing it from another Linux machine, then the terminal is the
quickest/most reliable way to do it. You can't just copy the install file
over like you were doing.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dcb3aa1e02074a6bbe21156edea6cd50.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Can't install Qubes, Rebooting after loading initrd.img

2018-02-26 Thread patelmax27
On Monday, February 26, 2018 at 10:54:00 PM UTC, awokd wrote:
> On Mon, February 26, 2018 10:30 pm,  wrote:
> 
> > The new TPM chips are pretty cool too, will see where that goes. How do
> > you like yours? Did you do it all yourself or get it as is? Was it hard
> > to get to its current state where you feel like you are literally in
> > complete control of everything? Pretty sure Purism is the same but I
> > could be wrong about something. I'm just getting into all this really.
> 
> Mine doesn't have a TPM which is kind of mixed, would be nice to have the
> option at least. The G505s's are a little newer than those other Lenovos
> so a bit faster too, but they also require a couple more blobs to run. It
> was definitely a Do It Yourself thing. Mine took about 3 months before I
> could run Qubes 4 on it but I had to figure out how to get the BIOS
> updated first (it involved patching Coreboot, and I had never hardware
> flashed before!)
> 
> The nice thing about this older laptop is there is no ME or AMD's PSP in
> it. Purism/some Dells/System76 all sell systems with a partially (but not
> completely) disabled ME. Unfortunately, it's the best you can do these
> days if you want new x86 hardware.
> 
> Anyways, just email the list again if you run into problems on the
> install, but could you please start a new thread and subject if you do?
> Makes it easier to follow!

Sorry yes I'll start a new thread in the future, sorry it's just I responded 
while you were responding so I didn't see that you had left your message. I 
thought it had been published so I was busy doing other stuff and when I came 
back I saw that it had detected my email and wasn't actually published, which 
explain the time discrepancy. Thanks, will start a new thread of course. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e8d955ea-b5b9-4723-82ab-de1093992e45%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes 4.0 rc4 / Qubes backup doesn't find the directory

2018-02-26 Thread Tim W
On the last part you are saying even picking root of the removable it still 
fails same error?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3e1987e8-a9dd-4e31-a311-33baa1bfae35%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Can't install Qubes, Rebooting after loading initrd.img

2018-02-26 Thread patelmax27
On Monday, February 26, 2018 at 3:08:22 PM UTC, awokd wrote:
> On Mon, February 26, 2018 2:47 pm, wrote:
> 
> > Uman, I saw that you help or sometimes have some time and are willing to
> > help folks with issues setting up Qubes (4.0) on their machines. As it
> > happens I have a purism 13. I've downloaded the latest Qubes and have put
> > it on a stick and tried multiple times to get the Qubes installation to
> > run but nothing on the purism seems able to read or run Qubes
> > automatically.
> 
> Hope you don't mind me butting in, Unman.
> 
> patelmax27, you might need to upgrade your BIOS first- see
> https://puri.sm/posts/qubes4-fully-working-on-librem-laptops.
> 
> Next, have you seen https://www.qubes-os.org/doc/installation-guide/ ?
> 
> First of all, make sure to back up ALL DATA on your system. Installing
> another OS will by default erase everything on your hard drive.
> 
> You then need to write the installer to your USB drive following the
> procedure in that document, then boot your laptop from the USB drive and
> follow the prompts.
> 
> (Personally, I prefer a corebooted Lenovo G505s over other laptops from an
> owner rights perspective.)


After following the links, I see that yes I had already visited those, however 
they do lead to other important links to be sure, so thank you. The ones you 
sent me explain how to install through the terminal, I believe, whereas I was 
hoping to simply transfer the file from my stick over to the computer and then 
simply hit install. Is the only option that I use the terminal, do you know? 

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d606aa16-15aa-4391-972e-227dbc0619ea%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: off topic - invite codes to 'riseup'

2018-02-26 Thread crypto7200
i need only one code please generous people

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fb8e2ac3-d366-447d-8a32-f6d015207837%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Can't install Qubes, Rebooting after loading initrd.img

2018-02-26 Thread 'awokd' via qubes-users
On Mon, February 26, 2018 10:30 pm, patelma...@gmail.com wrote:

> The new TPM chips are pretty cool too, will see where that goes. How do
> you like yours? Did you do it all yourself or get it as is? Was it hard
> to get to its current state where you feel like you are literally in
> complete control of everything? Pretty sure Purism is the same but I
> could be wrong about something. I'm just getting into all this really.

Mine doesn't have a TPM which is kind of mixed, would be nice to have the
option at least. The G505s's are a little newer than those other Lenovos
so a bit faster too, but they also require a couple more blobs to run. It
was definitely a Do It Yourself thing. Mine took about 3 months before I
could run Qubes 4 on it but I had to figure out how to get the BIOS
updated first (it involved patching Coreboot, and I had never hardware
flashed before!)

The nice thing about this older laptop is there is no ME or AMD's PSP in
it. Purism/some Dells/System76 all sell systems with a partially (but not
completely) disabled ME. Unfortunately, it's the best you can do these
days if you want new x86 hardware.

Anyways, just email the list again if you run into problems on the
install, but could you please start a new thread and subject if you do?
Makes it easier to follow!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0f3199dba9cf4e82f75a6f86400bcbb2.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes 4.0 without IOMMU/VT-d/AMD-Vi or Interrupt Remapping

2018-02-26 Thread taii...@gmx.com

Sorry wrong link at the bottom, here is the right one.
https://www.coreboot.org/Board_freedom_levels

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b4236c7e-50f7-4d5b-5679-89a25518f72a%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes 4.0 without IOMMU/VT-d/AMD-Vi or Interrupt Remapping

2018-02-26 Thread taii...@gmx.com

On 02/26/2018 03:47 AM, Zbigniew Łukasiak wrote:


On Tue, Feb 6, 2018 at 2:01 PM, Utility Panel
 wrote:


Meanwhile, the machines I'm currently replacing are both server workstations 
with 96 gigs of EEC RAM. I'm looking to upgrade to something comparable, and 
I'm pretty certain at this point that I'll start building with either the 
KCMA-D8 or KGPE-D16. I've got one year after the release of 4.0 to make the 
transition, so I've got time to collect all the bits before 3.2 reaches 
end-of-life.


Did you consider Dell workstations? I am also looking for some
high-end workstation and I was considering HP Z8 - thanks for the
warning!
I would go with a D8 or D16 as they have libre firmware available for 
both the board and the BMC, they are owner controlled as there is no 
hardware code signing enforcement or ME/PSP and thus are a much better 
choice for security.


Another excellent choice is the OpenPOWER9 libre firmware/hardware TALOS 
2, while xen doesn't support POWER so you wouldn't be able to use qubes 
it is a significantly faster and more secure choice than x86_64 even vs 
the non ME/PSP stuff like the D8/D16.


It supports IOMMU-GFX so you can attach a video card to a VM, installing 
some video cards and having a secure KVM switch would result in a high 
level of security.

So maybe Dell T7820? The plus is that you can request them with Linux
- so at least some of the compatibility problems go away.
Not exactly, they will probably require proprietary firmware modules and 
or drivers which will stop working once they are out of support.

I am not so eager to build something - as you can get into the same
compatibility issues with any part be it mother board, video etc.
The KGPE-D16 and KCMA-D8 work well with qubes and they support all the 
4.0 features (obviously besides intel's dynamic measured launch features 
but that is a gimmick, you receive better security by signing your 
kernels/initramfs and using a grub that supports the signing as your 
coreboot/libreboot payload while disabling internal firmware flash)


I recommend an AMD video card as nvidia adds bugs to their drivers and 
does many other things to make virtualization and linux more difficult.

and then the issue just gets more complex (and also the recommended
KGPE-D16 looks old).
While the board is old it supports CPU's which are good enough to play 
new video games at max settings with a decent video card (it and the D8 
also supports Crossfire XDMA for dual graphics) I recommend either the 
6328 (equiv FX-8320) or the 6386SE (equiv dual FX-8300) or with the 
KCMA-D8 the 4386
For the KGPE-D16 if you are on a budget the 6282SE is a decent 16 core 
deal for around $100 on fleabay.


Newer x86-64 stuff is not and will never will be owner controlled and it 
has either Intel ME or AMD PSP which is why for real security either you 
need to get POWER (such as the libre firmware/hardware TALOS 2) or 
settle for older x86-64 stuff.


A KGPE-D16 with dual 16 core opterons and 128GB RAM will be just as fast 
as an equivalently priced brand new non-free dell.


MSRP:
KGPE-D16 $415
KCMA-D8 $315

Used opterons:
(buying a new cpu is pointless)
6386 - $200
6328 - $100
4386 - $80

I highly recommend obtaining a KGPE-D16 while you still can as they no 
longer make them and supplies will soon run out, they are the last and 
best owner controlled x86-64 devices if you still need to run x86-64 
applications (otherwise a TALOS 2 is a much faster and better choice 
with a higher freedom level)


https://www.coreboot.org/board_freedom_index

6282SE - $100 (not as fast, but affordable 16 cores)

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d79bf739-9936-f740-b9f0-00ca54e1caf3%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Can't install Qubes, Rebooting after loading initrd.img

2018-02-26 Thread patelmax27
Thank you very much, @awokd, I appreciate the links and the help! My machine is 
totally new. Nothing has been installed on it, whatsoever. I'm just trying to 
get the Qubes on there and to go from there. I'll indeed follow your advice. 

I wanted to go with a Lenova from 2008 or prior, a freedom fighting association 
out of the UK puts them together and sells them and claims that they are pretty 
much the freest thing you can get. But with how slow they likely are I thought 
I'd rather get something a little more modern. The new TPM chips are pretty 
cool too, will see where that goes. How do you like yours? Did you do it all 
yourself or get it as is? Was it hard to get to its current state where you 
feel like you are literally in complete control of everything? Pretty sure 
Purism is the same but I could be wrong about something. I'm just getting into 
all this really. 

Thanks again for your insight :) 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9a7973ac-3f0d-4cea-bba0-2c4643698c4e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: firewall/proxy VM not working with Qubes 4.0-rc4

2018-02-26 Thread Alex Dubois
On Monday, 26 February 2018 03:48:29 UTC, thorsten...@gmail.com  wrote:
> I installed Qubes 4.0-rc4 and have a problem with my internet connection.
> sys-net itself has a working internet connection but sys-firewall does not. 
> No need to mention that every other VM that uses sys-firewall as netVM does 
> also have no working internet connection.
> 
> If I switch the default netVM from sys-firewall to sys-net (for testing), 
> dom0 can use it to update etc. Also any other VM gets internet connection 
> with sys-net as Networking VM.
> 
> An update of dom0 from testing-repository did not fix the problem.
> Also switching the sys-firewall template from fedora-26 to debian-9 does not 
> help.
> 
> I found a similar problem here:
> https://github.com/QubesOS/qubes-issues/issues/2141
> 
> So I checked the network interfaces and they are like this:
> 
> sys-net:
> lo
> enp0s0
> vif2.0
> 
> sys-firewall:
> eth0
> lo
> 
> Not sure, but I guess the vif interface is missing in sys-firewall?
> How do I fix this problem?

vif interface will appear when a VM connects to it.

Could you clarify the term no internet.

I had a lot of problems solved once sys-net had the service clocksync enabled 
(as it should).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/46a6952f-6fd5-4aec-93ca-994937a24c5e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes 4.0 rc4 / Qubes backup doesn't find the directory

2018-02-26 Thread ThierryIT
Hi,

I would like to backup few of my VMs.
I have mount my external usb (not using sys-usb) HDD.
>From the console where my HDD is attached/mounted, I have access through 
>/mnt/removable to all my previous (3.2) backup files.
I have created, in /mnt/removable, a new folder.
When running the Qubes backup, and choosing the newly created folder, I have 
this error:

Selected directory do not exists or not a directory

I have created others folders, I have change permissions ... Same problem.
Today all my folders are:

- drwxrwxr-x 3 user:user AppVM_bck

Same pb if root:root

??

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/315ff267-a6ae-42c1-81a5-e2110788ab57%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: POWER9

2018-02-26 Thread David Hobach



On 02/26/2018 04:29 PM, 'awokd' via qubes-users wrote:

On Sun, February 25, 2018 11:33 pm, taii...@gmx.com wrote:



Yeah unfortunately Xen doesn't support POWER and they have rebuffed
advances from IBM and Raptor offering assistance to support it.


Is there a link somewhere to this? I've been searching but not finding it.
I don't see why Xen wouldn't want to increase their user base.


Found 
https://discussions.citrix.com/topic/358571-installation-of-citrix-xenserver-on-ibm-power-server/


Also http://hcl.xenserver.org doesn't mention any POWER server.
Most people seem to use x86 so the POWER arch is unfortunately not that 
well supported.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/985884fd-ed73-0287-9351-b0e20d031203%40hackingthe.net.
For more options, visit https://groups.google.com/d/optout.


smime.p7s
Description: S/MIME Cryptographic Signature


Re: AW: Re: [qubes-users] Installing Chrome

2018-02-26 Thread 'awokd' via qubes-users
On Mon, February 26, 2018 4:48 pm, '[799]' via qubes-users wrote:
> Hello,
>
>
> I haven't fully understand what the first post was about, but if it is
> about how to install chrome... Don't look further, it's all covered:
>
> https://www.qubes-os.org/doc/multimedia/
>
>
> The last point covers the complete installation, including setting up the
> directories and downloading & verifying the public signing keys.

Thanks @praschdorff and reviewers for putting that document together!


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dc76f47bbf2d5afbf98a7cdc84153406.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


AW: Re: [qubes-users] Installing Chrome

2018-02-26 Thread '[799]' via qubes-users
Hello,

I haven't fully understand what the first post was about, but if it is about 
how to install chrome... Don't look further, it's all covered:

https://www.qubes-os.org/doc/multimedia/

The last point covers the complete installation, including setting up the 
directories and downloading & verifying the public signing keys.

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/D9mHmrcplr0_Bral6NvPTRIzM9bptq1zayO5xOzMaPBYvXGMTY-fNnSyxPnME85FSQpTcJCpgDXI6pjzXy6bh86AflWLAN7KKtdQ61Ye-8E%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: POWER9

2018-02-26 Thread 'awokd' via qubes-users
On Sun, February 25, 2018 11:33 pm, taii...@gmx.com wrote:


> Yeah unfortunately Xen doesn't support POWER and they have rebuffed
> advances from IBM and Raptor offering assistance to support it.

Is there a link somewhere to this? I've been searching but not finding it.
I don't see why Xen wouldn't want to increase their user base.

Getting Xen running on power would be the most direct route to getting
Qubes running on it. The other option would be KVM, but that's going to be
Hard because Qubes depends on features that don't exist yet in KVM.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1a6b6526a72c8d34e9162efb71ab0315.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Can't install Qubes, Rebooting after loading initrd.img

2018-02-26 Thread 'awokd' via qubes-users
On Mon, February 26, 2018 2:47 pm, patelma...@gmail.com wrote:

> Uman, I saw that you help or sometimes have some time and are willing to
> help folks with issues setting up Qubes (4.0) on their machines. As it
> happens I have a purism 13. I've downloaded the latest Qubes and have put
> it on a stick and tried multiple times to get the Qubes installation to
> run but nothing on the purism seems able to read or run Qubes
> automatically.

Hope you don't mind me butting in, Unman.

patelmax27, you might need to upgrade your BIOS first- see
https://puri.sm/posts/qubes4-fully-working-on-librem-laptops.

Next, have you seen https://www.qubes-os.org/doc/installation-guide/ ?

First of all, make sure to back up ALL DATA on your system. Installing
another OS will by default erase everything on your hard drive.

You then need to write the installer to your USB drive following the
procedure in that document, then boot your laptop from the USB drive and
follow the prompts.

(Personally, I prefer a corebooted Lenovo G505s over other laptops from an
owner rights perspective.)


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7575ed9f30d0285a6901dad199d8637e.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Can't install Qubes, Rebooting after loading initrd.img

2018-02-26 Thread patelmax27
On Friday, February 23, 2018 at 1:27:43 PM UTC, Unman wrote:
> On Fri, Feb 23, 2018 at 05:19:53AM -0800, Daniil .Travnikov wrote:
> > пятница, 23 февраля 2018 г., 15:30:16 UTC+3 пользователь Unman написал:
> > 
> > Thanks for your help!
> > 
> > > Use qvm-block -a to attach the usb disk to a qube.
> > > Open a terminal in that qube.
> > > The disk should have appeared as /dev/xvdi, with partitions as xvdi1
> > > xvdi2 etc. If your EFI partition is the first on the disk:
> > > Just use 'sudo mount /dev/xvdi1 /mnt' to mount the EFI partition. 
> > > Then you can edit the files under /mnt
> > 
> > Is it possible to edit this files only in another qubes? Can I do this in 
> > Dom0?
> > 
> Of course, if your disk is attached to dom0 rather than to a sys-usb
> then you can edit directly in dom0. (I just assumed it wouldnt be.)

Uman, I saw that you help or sometimes have some time and are willing to help 
folks with issues setting up Qubes (4.0) on their machines. As it happens I 
have a purism 13. I've downloaded the latest Qubes and have put it on a stick 
and tried multiple times to get the Qubes installation to run but nothing on 
the purism seems able to read or run Qubes automatically. 

I have put the Qubes in the documents folder and when I try to run anything in 
the boot folder of the Qubes the error messages that is returned is that the 
file cannot be located. Maybe I should put it in program files or something, 
but the problem is the OS is not windows so there is no such folder I can find. 
I'd use the terminal but if even one single command doesn't do the trick I am 
totally at a loss as to what to do, I really know nothing about how to run 
terminal. 

I have looked around on Qubes and Purism and neither seems to have any 
dedicated area for installing Qubes. There is someone on Purism's forum who 
explained how to mount the appropriate Qubes files but that was all through the 
terminal and was for Qubes 3 last year. 

I've also tried installing from the stick itself and that also doesn't work. 
The options I have are pretty simple it would seem. I can click on the Qubes 
icon in the stick and open it with task manager, which shows me the contents. 
If I follow that route, it's just guess and check but nothing works. I can go 
to the boot folder and try getting one of the application files to run, but 
none of them work. If I don't use file manager but try to run the application 
(Qubes the file or any of its internal files) the laptop can't locate it. If I 
try to mount any of said files, they merely show as open in the upper part of 
the screen but nothing happens. 

Clearly you can see that I have no idea what I am doing, so if you do have the 
time, please be patient with me if I don't speak and know any computer 
languages. I'm just starting out really. 

Thank you
Max

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d3a115fe-4be1-41a1-80de-0f4fc17d455a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Intel SGX and Spectre

2018-02-26 Thread 'awokd' via qubes-users
On Sun, February 25, 2018 9:57 pm, taii...@gmx.com wrote:
> SGX is a DRM anti-feature mechanism that prevents people from inspecting
> what runs on their own computer and it enables malware that is immune to
> antivirus programs because it runs in an ME enclave.
>
> https://software.intel.com/en-us/sgx/details
>
>
> "Hardening DRM for enhanced high definition, 4K ultra high definition
> (UHD) content protection"

That's the part I found amusing. They sold their closed-source,
proprietary code running on ME as a "secure" enclave, but there was
conjecture on this very list two years ago that it was not and it was
proven with the Spectre exploit.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cf46f22c78a20e69573f78a63c68ce88.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] win/linux

2018-02-26 Thread 'awokd' via qubes-users
On Mon, February 26, 2018 3:37 am, Mr SpOn wrote:
> hi guys, i successfully installed/run windows on a standalone vm but im
> having problems booting oracle linux. The installation had no problems
> but when its time to reboot it doesnt start from the hd. i can reboot
> from the cdrom again but not from hd.
>
> what im missing here??

You created a new HVM and installed oracle linux to it? Not familiar with
that distribution but sounds like it didn't write grub. Boot from the
oracle linux CD again and look for a rescue mode, and search their docs on
how to manually install grub to the virtual hard drive.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/14a916d109995ed76a64d28c043368a9.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] firewall/proxy VM not working with Qubes 4.0-rc4

2018-02-26 Thread 'awokd' via qubes-users
On Mon, February 26, 2018 3:48 am, thorsten.schie...@gmail.com wrote:
> I installed Qubes 4.0-rc4 and have a problem with my internet connection.
>  sys-net itself has a working internet connection but sys-firewall does
> not. No need to mention that every other VM that uses sys-firewall as
> netVM does also have no working internet connection.
>
> If I switch the default netVM from sys-firewall to sys-net (for testing),
> dom0 can use it to update etc. Also any other VM gets internet connection
> with sys-net as Networking VM.
>
> An update of dom0 from testing-repository did not fix the problem.
> Also switching the sys-firewall template from fedora-26 to debian-9 does
> not help.
>
> I found a similar problem here:
> https://github.com/QubesOS/qubes-issues/issues/2141
>
>
> So I checked the network interfaces and they are like this:
>
>
> sys-net:
> lo enp0s0 vif2.0
>
> sys-firewall:
> eth0 lo
>
> Not sure, but I guess the vif interface is missing in sys-firewall?
> How do I fix this problem?

Did the installer run into problems when it was doing the first template
deployment? Did you run it a second time by mistake, possibly?

Try to delete (or rename) your existing sys-firewall, then create a new
AppVM named sys-firewall with the "provides network" box checked.

Then, double-check that your test AppVM is pointing to your new
sys-firewall with qvm-prefs (look for netvm setting), and start it up and
test.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2c1fe661e1251a0b88146b9cc63429b1.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes 4.0 without IOMMU/VT-d/AMD-Vi or Interrupt Remapping

2018-02-26 Thread Zbigniew Łukasiak
On Mon, Feb 26, 2018 at 6:53 AM, Utility Panel
 wrote:
...
> So, I've decided to build with the KGPE-D16. Thus far, I've got the 
> motherboard and two 6386SE CPUs with air coolers. I buy the other components 
> when the pricing is favorable.
>
> Later, when I've got the machine built, I'll figure out how to flash the 
> BIOS. I know it isn't difficult, and I think I've got some good instructions 
> bookmarked. I just haven't done that before, so it will be a learning 
> experience.
>
> Like you, I am a tad concerned about how old the KGPE-D16 is, but it and the 
> 6386SE are both a bit spiffier than the kit in my Z800s, and I was planning 
> on riding them into obsolescence. So, my "new" build should have a bit more 
> life in it than the Z800s, it will support Qubes 4.0, and I will gain the 
> privacy and security benefits from using coreboot.

Apparently there are some problems with the 63xx series Opterons and
coreboot: https://www.coreboot.org/Board:asus/kgpe-d16#CPUs_recommended_by_users

I was also thinking about using a PCIe drive - but it looks like that
would not work on KGPE-D16 (or maybe require another adapter +
complications).

Z.


-- 
Zbigniew Lukasiak
https://medium.com/@zby
http://brudnopis.blogspot.com/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAGL_UUvDmdOZn-YbOiTgJ_aKL%3Dvbd54TThN6fj5K-%3Dwq1bsttg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS Stable Release 3.2. (Cant up-date template to fedora-26 or fedora-27)

2018-02-26 Thread Yuraeitha
On Monday, February 26, 2018 at 11:23:57 AM UTC+1, The Hermit wrote:
> Hey,
> 
> I've installed Qubes OS and I'm having trouble installing the fedora-26 and 
> fedora-27 template. I've tried minimal and the full 1.5 G I believe. The 
> template is downloading but I'm getting an error when it attempts to install. 
> the temple. 
> 
> "Failed to synchronize cache for repo 'qubes-dom0-cached' -disabling
> 
> I've installed the 3.2 Release stable from qubes-OS web-site.
> 
> Any one able too help.
> 
> 
> Thanks.

btw you can also try restart sys-net and sys-firewall. I've recently had 
similar yet slightly different cache issues in regard to GPG checks. Restarting 
sys-net/sys-firewall always fixed it for me. 

I suggest you try that first since it's a quick confirmation if it works or not.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/498df030-ea77-4bf2-b355-f40402345f3d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS Stable Release 3.2. (Cant up-date template to fedora-26 or fedora-27)

2018-02-26 Thread Yuraeitha
On Monday, February 26, 2018 at 11:23:57 AM UTC+1, The Hermit wrote:
> Hey,
> 
> I've installed Qubes OS and I'm having trouble installing the fedora-26 and 
> fedora-27 template. I've tried minimal and the full 1.5 G I believe. The 
> template is downloading but I'm getting an error when it attempts to install. 
> the temple. 
> 
> "Failed to synchronize cache for repo 'qubes-dom0-cached' -disabling
> 
> I've installed the 3.2 Release stable from qubes-OS web-site.
> 
> Any one able too help.
> 
> 
> Thanks.

To my understanding, it could be server issues, DNS issues, cache issues, or 
wrong repository issues. I'm no expert though, but it's the gist I get of the 
issue.

What did you type in the dom0 terminal? Something like this?

sudo qubes-dom0-update qubes-template-fedora-26 
sudo qubes-dom0-update qubes-tempalte-fedora-26-minimal

I don't think the fedora-27 is officially ready on Qubes yet? But I have not 
checked recently either.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/219a47e9-1216-40ce-80c6-4d72197179ba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes 4.0 without IOMMU/VT-d/AMD-Vi or Interrupt Remapping

2018-02-26 Thread Utility Panel
On Monday, February 26, 2018 at 3:47:07 AM UTC-5, Zbigniew Łukasiak wrote:
> On Tue, Feb 6, 2018 at 2:01 PM, Utility Panel
>  wrote:
> 
> > Meanwhile, the machines I'm currently replacing are both server 
> > workstations with 96 gigs of EEC RAM. I'm looking to upgrade to something 
> > comparable, and I'm pretty certain at this point that I'll start building 
> > with either the KCMA-D8 or KGPE-D16. I've got one year after the release of 
> > 4.0 to make the transition, so I've got time to collect all the bits before 
> > 3.2 reaches end-of-life.
> >
> 
> Did you consider Dell workstations? I am also looking for some
> high-end workstation and I was considering HP Z8 - thanks for the
> warning!
> So maybe Dell T7820? The plus is that you can request them with Linux
> - so at least some of the compatibility problems go away.
> 
> I am not so eager to build something - as you can get into the same
> compatibility issues with any part be it mother board, video etc. -
> and then the issue just gets more complex (and also the recommended
> KGPE-D16 looks old).
> 
> 
> -- 
> Zbigniew Lukasiak
> https://medium.com/@zby
> http://brudnopis.blogspot.com/

I did consider Dell server workstations, but I was buying used on that big 
auction site, and the Z800s were available at my price point. At the time, I 
thought I was saving myself the trouble of tracking down all the minute details 
pertaining to compatibility, but no such luck. 

Now, it actually seems easier to find data sheets on individual components 
(motherboards, CPUs, GPUs, and the like) than on the total builds offered by 
Dell, HP, Lenovo, and the like. The problem with the large assemblers is that 
their supply chains vary enough from run to run that the fine details about 
individual components are often not readily available, at least not on the used 
market. Sellers typically don't know how (or don't want) to give me the 
identifying information on their machines before purchasing, so all I could do 
is cross my fingers and roll the dice, which I'd rather avoid as much as 
possible from now on. But all of this may only apply to the used market. I 
can't speak to buying new, as I've only done it once or twice, decades ago.

Meanwhile, my interest in hardware has been rekindled, now that I better 
understand some of the privacy and security implications, and I've been 
inspired by the open-source hardware community to learn more by doing.

So, I've decided to build with the KGPE-D16. Thus far, I've got the motherboard 
and two 6386SE CPUs with air coolers. I buy the other components when the 
pricing is favorable.

Later, when I've got the machine built, I'll figure out how to flash the BIOS. 
I know it isn't difficult, and I think I've got some good instructions 
bookmarked. I just haven't done that before, so it will be a learning 
experience.

Like you, I am a tad concerned about how old the KGPE-D16 is, but it and the 
6386SE are both a bit spiffier than the kit in my Z800s, and I was planning on 
riding them into obsolescence. So, my "new" build should have a bit more life 
in it than the Z800s, it will support Qubes 4.0, and I will gain the privacy 
and security benefits from using coreboot.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9d818590-5664-4636-977e-9dc96e58d119%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Installing Chrome

2018-02-26 Thread Yuraeitha
On Monday, February 26, 2018 at 11:42:59 AM UTC+1, Rory Geoghegan wrote:
> Hey there, I know this is a really old post but I'm hoping you still see it  
> Could you show us a copy of the new file with the new baseurl?
> 
> I'm having the exact same problem. 
> 
> Thanks

The different methods you can find on Googles website, over here 
https://www.google.com/linuxrepositories/

I'm not familiar with the Google repositories. Seemingly it doesn't have any 
official repository for "just Chrome" but instead a full Linux package with all 
other Linux Google apps included within. Maybe you can fetch Chrome that way. 
Otherwise you can get the GUI installer, which will configure the repositories 
automatically as well.

As for your core issue, I suspect you're referring heavily to codecs for 
brwoser choice here? Choices between Chromium/Google-Chrome/Firefox?

Chromium is a difficult choice unless you know how to compile it from scratch 
to include the build-in codecs. Whereas google has already done it with Google 
Chrome for you. 

To my knowledge, both Chromium and Google Chrome rely on build-in codecs, while 
Firefox relies on upstream packages which can be installed from the terminal. 
You can easily make Firefox play anything, except, Firefox is tricky to use 
when you encounter Microsofts Silverlight or other DRM content. Though Firefox 
will chew Netflix just fine, in my experience there is no issues here. Firefox 
is mostly an issue if you run into Silverlight (or in other words websites that 
uses garbage, *cough*).

Google Chrome can play everything Firefox can play, and then also Silverlight 
content. But you sacrifice privacy, the code isn't open despite it being based 
on Chromium. Google could have altered the release version closed code in 
whatever way they desire, even if its based on open code.

Essentially what I do is I play everything in Firefox, and then I use Google 
Chrome for whenever I encounter Silverlight, and sometimes if having DRM issues 
although it's mostly only Silverlight being an issue.

I recommend using Fedora, even though Debian works better out of the box, 
Fedora is quickly fixed with working codecs. Here's how.

1) Clone the default fedora-26 template, so you don't introduce new packages, 
and in particular other repositories and non-free packages, into your mission 
critical clean fedora-26 template. I.e. run in dom0: qvm-clone fedora-26 
fedora-26-apps

2) Enable RPMFusion in your new cloned fedora template. Run in fedora terminal.
sudo dnf config-manager --set-enabled rpmfusion-free rpmfusion-nonfree
sudo dnf upgrade --refresh

3) Now you can install HTML5 (Which DRM can be run on too) and VLC/other codecs 
etc. 
sudo dnf install FFmpeg  <--- that's your HTML5 codec.
sudo dnf install vlc

4) Now you can run HTML5 and HTML5 DRM protected content) directly in Firefox. 
To verify if it works, visit www.youtube.com/html5 which will tell you if it 
works or not.

Then you can put Google Chrome in same or different template, depending on how 
critical you feel about the untrusted Google code.

You may not feel the need to use Firefox, in which case a lot of what I said is 
pointless anyway, since Google Chrome can chew most things. Just be aware that 
Chromium isn't "easy" to get to work for the parts it can't chew, although it 
does support more formats out of the box, it does not easily support all 
formats that Google Chrome does out of the box, and it doeens't support the 
same as you can easily archive on Firefox with a few commands.

Essentially all 3 choices has downsides in either privacy or 
codecs/protected-content availability, none of them is perfect. Personally I 
just ditch Chromium altogether, and use Firefox for most things, and if I 
encounter a video I can't pkay, then I just quickly open Google Chrome for the 
few rare occasions I need to do that, i.e. when I encounter some useless 
website using MS Silverlight.

I'm not a professional, I'm a learner. Since I'm a bit in a hurry I wrote a bit 
straight forward/quickly/tired, my bad if I wrote any errors. Though the fedora 
approach has never failed me, except when encountering protected content, 
although DRM protected content works "okay" fine in the recent year or so, for 
the most part, i.e. Netflix never seem to fail.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a8fe4af1-204f-4a5d-ae3b-332faf662089%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Installing Chrome

2018-02-26 Thread rory3sky
Hey there, I know this is a really old post but I'm hoping you still see it  
Could you show us a copy of the new file with the new baseurl?

I'm having the exact same problem. 

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6154b681-1589-4fe0-85c9-790afbc171e0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes OS Stable Release 3.2. (Cant up-date template to fedora-26 or fedora-27)

2018-02-26 Thread spud12001986
Hey,

I've installed Qubes OS and I'm having trouble installing the fedora-26 and 
fedora-27 template. I've tried minimal and the full 1.5 G I believe. The 
template is downloading but I'm getting an error when it attempts to install. 
the temple. 

"Failed to synchronize cache for repo 'qubes-dom0-cached' -disabling

I've installed the 3.2 Release stable from qubes-OS web-site.

Any one able too help.


Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c366ac32-269d-4550-bd02-9357273e8340%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] HCL - ASRock H61iCafe, Core i7 3770 - Qubes 4.0-rc4

2018-02-26 Thread John Reese
Hello everyone,
I've successfully installed Qubes 4.0-rc4 on mentioned configuration in EFI 
mode. In general, system works fine, though there are some non-critical 
problems. In total, I've been playing with system for about 3 days so far.
I'm using kernel 4.14.13 and it runs ok. Though after update to kernel 4.14.18 
system won't boot. I don't actually know why (everything I see is a black 
screen), but I have a conjecture that it may be related to generation of 
initramfs. Anyways, I reverted back to 4.14.13.
Qube manager in a fresh install was quite unusable as it won't stop or reboot 
or kill any VM without an error message (something about conversion to float in 
a Python script). After update from qubes-dom0-current-testing repository 
problem has gone away, though any VM state change (or settings change such as 
label color) requires manual refreshing qubes list.
Video (also fullscreen after necessary changes in guid.conf), audio and 
networking run ok. Creating VM for VPN also took no pain.

General system configuration:
Motherboard: ASRock h61iCafe
CPU: Intel Core i7 3770
RAM: 8Gb
SSD: Plextor PX128-S2 128Gb
-- 
Sincerely,
John Reese

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/696984232.202268.1519639256350%40ichabod.co-bxl.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-ASRock-H61iCafe-20180226-134857.cpio.gz
Description: File Attachment: Qubes-HCL-ASRock-H61iCafe-20180226-134857.cpio.gz
---
layout:
  'hcl'
type:
  'desktop'
hvm:
  'yes'
iommu:
  'yes'
slat:
  ''
tpm:
  'unknown'
remap:
  'yes'
brand: |
  ASRock
model: |
  H61iCafe
bios: |
  P1.90
cpu: |
  Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
cpu-short: |
  FIXME
chipset: |
  Intel Corporation Xeon E3-1200 v2/3rd Gen Core processor DRAM Controller 
[8086:0150] (rev 09)
chipset-short: |
  FIXME
gpu: |
  Advanced Micro Devices, Inc. [AMD/ATI] Baffin [Radeon RX 460/560D / Pro 
450/455/460/560] [1002:67ef] (rev e5) (prog-if 00 [VGA controller])
gpu-short: |
  FIXME
network: |
  Qualcomm Atheros AR8151 v2.0 Gigabit Ethernet (rev c0)
memory: |
  8155
scsi: |
  SAMSUNG HD103SJ  Rev: 00E5
  DVD RW AD-5260S  Rev: 1.00
  ST2000DM001-1CH1 Rev: CC24
  PLEXTOR PX-128S2 Rev: 1.01
usb: |
  3
versions:

- works:
'FIXME:yes|no|partial'
  qubes: |
R4.0
  xen: |
4.8.3
  kernel: |
4.14.13-3
  remark: |
FIXME
  credit: |
FIXAUTHOR
  link: |
FIXLINK

---



Re: [qubes-users] Re: Qubes 4.0 without IOMMU/VT-d/AMD-Vi or Interrupt Remapping

2018-02-26 Thread Zbigniew Łukasiak
On Tue, Feb 6, 2018 at 2:01 PM, Utility Panel
 wrote:

> Meanwhile, the machines I'm currently replacing are both server workstations 
> with 96 gigs of EEC RAM. I'm looking to upgrade to something comparable, and 
> I'm pretty certain at this point that I'll start building with either the 
> KCMA-D8 or KGPE-D16. I've got one year after the release of 4.0 to make the 
> transition, so I've got time to collect all the bits before 3.2 reaches 
> end-of-life.
>

Did you consider Dell workstations? I am also looking for some
high-end workstation and I was considering HP Z8 - thanks for the
warning!
So maybe Dell T7820? The plus is that you can request them with Linux
- so at least some of the compatibility problems go away.

I am not so eager to build something - as you can get into the same
compatibility issues with any part be it mother board, video etc. -
and then the issue just gets more complex (and also the recommended
KGPE-D16 looks old).


-- 
Zbigniew Lukasiak
https://medium.com/@zby
http://brudnopis.blogspot.com/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAGL_UUu-1NwYrmzBJ%3Dx5KDTRowaM3ioPckxZUAu%3DqCiGWubuUQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.