[qubes-users] Celeron N3350 and VT-d
Kudos to the QubesOS team for the effort and cool idea that is Qubes. I'm new Qubes and a few days ago decided to give it a try. After dd'ing the R4 checksum-checked iso and turning off "secure boot" on target device, I got a printk flood of GPE errors. After being unable to stop/mask them with the acpi_mask_gpe or similar boot option (was not even sure what to use), I edited BOOTX64.cfg to use [qubes] (but modified to still no be quiet) instead of [qubes-verbose]. It booted but always failed to mount /dev/root or /dev/mapper/live-rw. Internet search results had me trying many things to no avail. Finally, I found out my USB stick is a fake (thanks f3write/read). I tried from another (this time good) stick and got the same error. I suspected it had to do with the UEFI-only boot mode of target machine only? using GPT, and therefore deleted all partitions on good stick and created a GPT table with gdisk; then I dd'd, and then it finally booted to the installer. (Perhaps UEFI boot mode stage 2 freaks out if partition 1 is not GPT labelled, even though stage 1 boots fine.) Now, for the actual question. :) The installer reports missing IOMMU/VT-d/AMD-Vi, however the machine's motherboard is an Intel Celeron N3350 which, according to https://ark.intel.com/products/95598/Intel-Celeron-Processor-N3350-2M-Cache-up-to-2-4-GHz-, should have VT-d (unless it needs a specific kind of VT-d?). I am not sure about IOMMU, perhaps it is missing. Does the error message list those as alternatives of the same thing? Or is it that I may have VT-d but not IOMMU, and the error just lists them all if just one has not been detected? Cheers -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/d3ebe02a-29ec-468e-b22a-231cb47f1018%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Compiling NVIDIA for Optimus Support
So I recently got qubes to work using modprobe.blacklist=nouveau . In Chromium (not firefox), I notice a bit of a frame issue with youtube videos, which I find irritating. Actually I'm pretty sure it's chrome in general, I seem to notice it scrolling, too. Hoping to fix this, and maybe just improve my graphics in general, I set about trying to compile the NVIDIA drivers again. Since I know it will fail, I made a nvidia-compile box with my fedora-28 template, but you should have the same results in a fedora-26. Namely: https://pastebin.com/xDBRjDfY After a long, long time on Google, I managed to relate that to this: https://gist.github.com/ivan/2ab781098efced0dc725f33c60cf That in turn leads me here: https://github.com/QubesOS/qubes-issues/issues/3835 Though I'm not sure how relevant that is, since it leads me down a rabbit hole of links... Some of them suggest solutions. I'm apparently missing something, because the solution marmarek posts involving installing gcc-c++ and some things doesn't flesh out for me- "your gcc installation does not support plugins." All this seems, to me, like it ties back to the kernel. Recompiling the kernel is fine and all (reluctantly), but if I somehow get all this setup so I can compile the damned kernel module, will it even work with my original kernel? I'm pretty sure I come back to this issue no matter what, and I'm not sure where to go with it, or how to move forward with troubleshooting. Any help/advice/explanation would be appreciated. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f10a87b5-c55f-492e-b7f7-9ec9037fda30%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Changing USB Controllers
Hello, I have qubes (r4.0) installed on a USB. I have 3 USB Controllers on my laptop. When I am running qubes and try attaching a USB device, it always uses the same USB Controller(the usb qubes is installed/dom0) regardless of the USB port I am using. Is there a way to switch this? I wanted to try and create a USB qube just for untrusted usb devices. I know I cant use the one dom0 is on but I have two more controllers I would like to utilize if possible for this. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b6bede4f-32d3-4c8d-8ed3-8b15a5bd499d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] I still want anti virus with Qubes OS. but which one is compatible?
one7tw...@gmail.com wrote on 10/7/18 9:50 PM: What are those files for: 1) private-cow.img 2) private-cow.img.old Your understanding of the other files looks right. Not sure about those last two either- can you rollback changes to an AppVM? If I want to scan my AppVMs it should be enough to scan the private.* images, correct? (Assuming that I scan the template separatly). That would cover all components of your AppVMs! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c4c88bd2-13c6-38d1-7b35-69d23639991e%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] I still want anti virus with Qubes OS. but which one is compatible?
Hello, On Thursday, 4 October 2018 20:30:37 UTC+2, airele...@tutanota.com wrote: > An implementation of a similar idea across several VMs is: > [...] > VM3: DisposableVM based on the above, which is offline, that does the actual > scanning. To scan a VM, use qvm-block to attach a VM's private volume to > the disposable VM.[1] Can you give me a hint how I can mount a private disk of an existing AppVM (APPVM1) to another AppVM (APPVM2) If I look into /var/lib/qubes/appvms/APPVM1 I see the following files: pricate-cow.img private-cow.img.old private.img root-cow.img volatile.img I have looked at the Qubes documentation... https://www.qubes-os.org/doc/template-implementation/ ... but haven't fully understand what each files is doing. root.img -> real template filesystem (from template = read only) root-cow.img -> differences between the device as seen by AppVM and the current root.img (as far as I understand those "differences" only exist when the AppVM is running, as no changes are stored after the AppVm has been shutdown private.img -> persistent storage (mounted in /rw) used for /home, /usr/local volatile.img: -> temporary storage, which is discarded after an AppVM restart What are those files for: 1) private-cow.img 2) private-cow.img.old If I want to scan my AppVMs it should be enough to scan the private.* images, correct? (Assuming that I scan the template separatly). - Piit -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c45f1b83-9ccf-443b-a52b-e21aba442763%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Qube Manager dbus event handling
This is fantastic, thank you for sharing this Chris. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/319f7b1a-49d1-49db-ab44-8f47568302e1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] DispVM starts and halts
On Sun, Oct 07, 2018 at 09:20:00AM +0300, Ivan Mitev wrote: > > > On 10/7/18 7:44 AM, Todd Lasman wrote: > >On 10/6/18 9:29 PM, Ivan Mitev wrote: > >> > >> > >>On 10/7/18 5:54 AM, Todd Lasman wrote: > >>>Help me troubleshoot this: > >>> > >>>When I launch a terminal from the menu using the fedora-28-dvm template, > >>>I get a message that disp407 is starting, disp407 has started, and > >>>disp407 has halted. No terminal comes up. > >>> > >>>However, if I launch the browser (Firefox), it works fine. > >>> > >>>If I run from dom0: > >>>$ qvm-run --dispvm=fedora-28-dvm --service qubes.StartApp+gnome-terminal > >>> > >>>I get exactly the same starting/started/halted sequence, and no error is > >>>reported. > >> > >>That's because gnome-terminal calls gnome-terminal-server and then > >>exits so the dispVM exits. See: > >> > >>https://github.com/QubesOS/qubes-issues/issues/2581#issuecomment-272664009 > >> > >> > >Thank you! This makes sense. I've taken the easier approach and just > >started using xterm, as the link suggests. > You may want to customize xterm to look like gnome-terminal (see the links > in a former ML post): > > https://groups.google.com/d/msg/qubes-users/rhp_jCrIO28/AcCk_G-CAwAJ > > Hope this helps ! > ivan > > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-users+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-users@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-users/cb2ef3a6-a298-3133-08e1-dc3b44e84f68%40maa.bz. > For more options, visit https://groups.google.com/d/optout. -- Even better - thanks again! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181007185610.GA968%40d1stkfactory. For more options, visit https://groups.google.com/d/optout. signature.asc Description: Digital signature
Re: [qubes-users] Problems with split PGP (QUBES_GPG_DOMAIN) in 4.0 + fedora 28
Zbigniew Łukasiak: > 1. QUBES_GPG_DOMAIN env variable somehow gets cleared between the > shell and the Enigmail process. I set it in the shell before starting > thunderbird: > > user@personal:~$ export QUBES_GPG_DOMAIN=work-gpg > user@personal:~$ echo $QUBES_GPG_DOMAIN > work-gpg > user@personal:~$ thunderbird & > > But when I look at the Enigmail debug console I get this error: > > enigmail> /usr/bin/qubes-gpg-client-wrapper --charset utf-8 > --display-charset utf-8 --no-auto-check-trustdb --batch --no-tty > --no-verbose --status-fd 2 --fixed-list-mode --with-colons > --list-config > ERROR: Destination domain not defined! Set it with QUBES_GPG_DOMAIN > env variable. > > > 2. Enigmail somehow refuses to accept > /usr/bin/qubes-gpg-client-wrapper as correct setting even if it > apparently uses it (see above). I keep getting this erro message: > > Enigmail: Error in accessing Enigmail service In order to use > Enigmail, GnuPG is required. If you did not install GnuPG yet, the > easiest way to do this is using the "Setup Wizard" button below. > > And then when I set it up in the wizard I keep getting: > > "The file you specified is not a GnuPG executable. Please specify a > different file." > > Thunderbird data: > Name Thunderbird > Version 60.0 > Build ID 20180829122858 > Update History > User Agent Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 > Thunderbird/60.0 > OS Linux 4.14.67-1.pvops.qubes.x86_64 > > > Not sure why Enigmail is not recognizing the env var, but you could put your gpg domain into the file /rw/config/gpg-split-domain as a workaround. I use this method without any issues on r4.0. Not sure about your second issue as I've personally never that problem. -- qubenix PGP: 96096E4CA0870F1C5BAF7DD909D159E1241F9C54 OTR: qube...@chat.freenode.net OTR: DFD1DA35 D74E775B 3E3DADB1 226282EE FB711765 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e69bc191-6a91-6d35-e52e-a2e6580735a6%40riseup.net. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Problems with split PGP (QUBES_GPG_DOMAIN) in 4.0 + fedora 28
1. QUBES_GPG_DOMAIN env variable somehow gets cleared between the shell and the Enigmail process. I set it in the shell before starting thunderbird: user@personal:~$ export QUBES_GPG_DOMAIN=work-gpg user@personal:~$ echo $QUBES_GPG_DOMAIN work-gpg user@personal:~$ thunderbird & But when I look at the Enigmail debug console I get this error: enigmail> /usr/bin/qubes-gpg-client-wrapper --charset utf-8 --display-charset utf-8 --no-auto-check-trustdb --batch --no-tty --no-verbose --status-fd 2 --fixed-list-mode --with-colons --list-config ERROR: Destination domain not defined! Set it with QUBES_GPG_DOMAIN env variable. 2. Enigmail somehow refuses to accept /usr/bin/qubes-gpg-client-wrapper as correct setting even if it apparently uses it (see above). I keep getting this erro message: Enigmail: Error in accessing Enigmail service In order to use Enigmail, GnuPG is required. If you did not install GnuPG yet, the easiest way to do this is using the "Setup Wizard" button below. And then when I set it up in the wizard I keep getting: "The file you specified is not a GnuPG executable. Please specify a different file." Thunderbird data: Name Thunderbird Version 60.0 Build ID 20180829122858 Update History User Agent Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.0 OS Linux 4.14.67-1.pvops.qubes.x86_64 -- Zbigniew Lukasiak https://medium.com/@zby http://brudnopis.blogspot.com/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAGL_UUtAouD-ZYzUbNOh6QvGGQwXWp-JH0iURsVwK6%3DpoW%3Duig%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Download probleme
Black Beard wrote on 10/3/18 8:34 PM: Hey guys, this community here help me alot, so i hope someome can help me. I tried to . Download some files today, with the Domain:work, untrusted, personal and also vault. After 100%, the Browser freezed and i always must kill them with the Dom0 Terminal promp. A error Message pops up and says something, that the script hangs up. I followed many tutorials about that message, but without success. With the outher Domains, i had the same probleme. What's the exact error message? Also, check and test your network connection from a terminal inside sys-net. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ce059209-1d8f-774b-82db-5e9439f485f5%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Post installation - VMs are not starting
raf...@gmail.com wrote on 10/3/18 10:05 PM:
tirsdag den 2. oktober 2018 kl. 23.23.39 UTC+2 skrev raf...@gmail.com:
New Qubes user! First install today.
"Qubes-R4.0-x86_64.iso" (DD image) is installed.
Downloaded today (2nd October 2018)
During the install during options for TemplateVMs, Sys-usb, etc. following
error appeared:
--
[Dom 0] Error
['/usr/bin/qubes-prefs','default-kernel','4.14.18-1'] failed:
stdout:""
stderr: "Traceback (most recent call last):
File "/usr/bin/qubes-prefs", line 5, in
sys.exit(main())
File "/usr/lib/python3.5/site-packages/qubesadmin/tools/qubes_prefs.py", line
42, in main
return qubesadmin.tools.qvm_prefs.process_actions(parser, args, target)
File "/usr/lib/python3.5/site-packafes/qybesadmin/tools/qvm_prefs.py", line
116, in process_actions
setattr(target, args.property, args.value)
File "/usr/lib/python3.5/site-packages/qubesadmin/base.py", line 283, in
__setattr__
str(value).encode('utf-8'))
File "/usr/lib/python3.5/site-packages/qubesadmin/app.py" line 466, in
qubesd_call
client_socket.connect(qubesadmin.config.QUBSED.SOCKET)
FileNotFoundError: [Errno 2] No such file or directory
When I press OK, I can finish the setup and boot in Qubes OS. BUT there is no
sys-net, sys-usb or any TemplateVMs.
I then used the command "sudo journalctl" in terminal
Results (red text):
(1)
"tpm tpm0: A TPM error (6) occurred attempting to read pcr value"
### in white (TPM is disabled/deactivated (0x6))
(2)
"TDB: tdb_open_ex: could not open file /var/lib/xenstored/tdb: No such file or
directory"
"Checking store ..."
"Checking store complete."
(3)
"Failed to start Qubes OS daemon."
--2 hours later--
(4)
Some ACPI errors
(5)
Failed to find module 'uinput'
I have been searching GitHub and Reddit. This could be similar.
#3028 https://github.com/QubesOS/qubes-issues/issues/3028#issuecomment-322330133
If it is the same problem, why do I get it when I haven't used R3.2? remains
from a previous owner? And what do I need to do to fix it?
Extra info:
I have a Lenovo PC, but I used Legacy Boot.
Anyone who have an idea that might help me?
Did you get it working? Might try a full re-install with your wifi card
temporarily disabled.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/d8e9d22c-e00e-7d03-8542-8a0b2441842c%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] The log entries in sys-net are filled with a bunch of messages
GDRUB wrote on 10/3/18 4:54 PM: Hi, I created a new sys-net (sys-net2) as network VM to use a wireless USB adapter. The sys-net2 dmesg logs (guest-sys-net2.log) are filled with a bunch of messages (4878 lines) like the following: ---%<-- First lines ---%<-- [0.00] Linux version 4.14.57-2.pvops.qubes.x86_64 (user@build-fedora4) (gcc version 6.4.1 20170727 (Red Hat 6.4.1-1) (GCC)) #1 SMP Tue Aug 14 14:43:33 UTC 2018 [0.00] Command line: root=/dev/mapper/dmroot ro nomodeset console=hvc0 rd_NO_PLYMOUTH rd.plymouth.enable=0 plymouth.enable=0 nopat [0.00] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [...] [ 11.129065] usb 2-1: new high-speed USB device number 2 using vhci_hcd [ 11.246132] usb 2-1: SetAddress Request (2) to port 0 [ 11.286211] usb 2-1: New USB device found, idVendor=13b1, idProduct=002f [ 11.286284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 11.286369] usb 2-1: Product: Linksys AE1000 [ 11.286429] usb 2-1: Manufacturer: Linksys [ 12.303201] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 13.191197] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 14.079202] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 14.967200] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 14.967389] ieee80211 phy0: rt2x00usb_vendor_request: Error - Vendor Request 0x07 failed for offset 0x1000 with error -19 [ 14.967496] ieee80211 phy0: rt2800_probe_rt: Error - Invalid RT chipset 0x, rev detected [ 14.967594] ieee80211 phy0: rt2x00lib_probe_dev: Error - Failed to allocate device [ 14.967788] usbcore: registered new interface driver rt2800usb [ 14.968575] usb 2-1: USB disconnect, device number 2 [...] Additionally and deliberately focus is made on my wireless USB adapter. In contrast, my main sys-net with internal Ethernet port does not display anything. Any help and advice would be greatly appreciated. Best regards. GD Rub In the fact that I am not the only one : https://github.com/QubesOS/qubes-issues/issues/3778 but no solution found ... :-( No solution, but you could try the workaround of assigning an entire USB controller if you have one to spare. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3160401b-e2c5-77bc-6096-7b56f25d3181%40danwin1210.me. For more options, visit https://groups.google.com/d/optout.
