Re: [qubes-users] Really slow to install on USB and subsequent Boot

['Modprobe' via qubes-users]

Updating dom0: https://www.qubes-os.org/doc/software-update-dom0/
 Original Message 
On Oct 16, 2018, 10:56 PM, seshu wrote:

> Thanks for the info. Being new to Qubes, I'm not sure how to update dom0? can 
> you point me to any thread or help on how that is to be done?
>
> Thanks!
>
> On Tuesday, October 16, 2018 at 6:42:03 PM UTC-6, awokd wrote:
>> 'Modprobe' via qubes-users wrote on 10/17/18 12:32 AM:
>> > Have you benchmarked the flash drive? Sadly, just because it's USB 3 
>> > doesn't mean it's fast :(
>> >  Original Message 
>> > On Oct 16, 2018, 7:29 PM, seshu wrote:
>> >
>> >> Hi there, I'm a first time Qubes user and I did an install (v4.0) to a 
>> >> USB 3.0 stick last weekend. IT took about 5 hours?! Is that normal? I 
>> >> realized I had VT-d on my i7-6700k diabled in the bios during the install 
>> >> but I fixed that and then tried to boot from the USB and it would take 25 
>> >> minutes to boot up?!
>> >>
>> >> What am I missing? I do have about 6 SATA drives on the desktop, but I 
>> >> have 32gb or RAM and the USB stick is 128gb, and the CPU is i7-6700k so 
>> >> it is a fast cpu.
>> >>
>> >> Appreciate any advice! Thanks in advance.
>>
>> I seem to recall there was a bug in Xen when 4.0 first shipped that
>> caused USB3 devices to run at USB2 speed. Try updating dom0 and your
>> templates and see if that helps. Not sure the bug affected the
>> installer, but maybe 4.0.1 will work better when it comes out.
>
> --
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/f3951a48-8635-46ff-9913-f2248dfeced5%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/p23C_ciueVExmfRixtJ8jzsvSNTamYtrkTGvsSklV5psdiHUu1z4HbsN1dMNz1ZHsmkBVXOhpXxOY2TOcAu7ZHsh-RLqQ4yNEzGZTKHhM6Q%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Really slow to install on USB and subsequent Boot

[seshu vaddey]

  Good point I haven't done that. I've been doing some research and even though my i7-6700k is supposed to support VT-d, and VT-x, with EPT, some tests I ran indicate it may not support. Not sure if that is something that would cause such a poor performance? Sent from my smartphone.From: ModprobeSent: Tuesday, October 16, 2018 18:32To: seshuvad...@gmail.com; qubes-users@googlegroups.comReply To: ModprobeSubject: Re: [qubes-users] Really slow to install on USB and subsequent BootHave you benchmarked the flash drive? Sadly, just because it's USB 3 doesn't mean it's fast :( Original Message On Oct 16, 2018, 7:29 PM, seshu < seshuvad...@gmail.com> wrote:Hi there, I'm a first time Qubes user and I did an install (v4.0) to a USB 3.0 stick last weekend. IT took about 5 hours?! Is that normal? I realized I had VT-d on my i7-6700k diabled in the bios during the install but I fixed that and then tried to boot from the USB and it would take 25 minutes to boot up?! 
What am I missing? I do have about 6 SATA drives on the desktop, but I have 32gb or RAM and the USB stick is 128gb, and the CPU is i7-6700k so it is a fast cpu.
Appreciate any advice! Thanks in advance.
-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ddef2311-7970-4d36-8fa8-78195ae70a0b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.





-- 
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181017025142.5668951.73765.2073%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] using my notebook as xserver to qubes vms

[Sergio Matta]

My excellent Qubes is on my desktop computer, but it lacks some dom0 
functionallity. Is there a easy way or anyway to setup Qubes so I can use my 
notebook with accelerated video card to run the dom0 menu and all my window vms 
as xserver to Qubes?
Thank you!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fa322066-d088-42b2-905c-7fd8f4a75f57%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Really slow to install on USB and subsequent Boot

['awokd' via qubes-users]

'Modprobe' via qubes-users wrote on 10/17/18 12:32 AM:

Have you benchmarked the flash drive? Sadly, just because it's USB 3 doesn't 
mean it's fast :(
 Original Message 
On Oct 16, 2018, 7:29 PM, seshu wrote:


Hi there, I'm a first time Qubes user and I did an install (v4.0) to a USB 3.0 
stick last weekend. IT took about 5 hours?! Is that normal? I realized I had 
VT-d on my i7-6700k diabled in the bios during the install but I fixed that and 
then tried to boot from the USB and it would take 25 minutes to boot up?!

What am I missing? I do have about 6 SATA drives on the desktop, but I have 
32gb or RAM and the USB stick is 128gb, and the CPU is i7-6700k so it is a fast 
cpu.

Appreciate any advice! Thanks in advance.


I seem to recall there was a bug in Xen when 4.0 first shipped that 
caused USB3 devices to run at USB2 speed. Try updating dom0 and your 
templates and see if that helps. Not sure the bug affected the 
installer, but maybe 4.0.1 will work better when it comes out.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1ec0b4ee-fdb4-9215-d185-846181fbbdcd%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Network Manager not showing in system tray

['awokd' via qubes-users]

alexander.ibrahi...@gmail.com wrote on 10/16/18 7:44 PM:

Den tisdag 16 oktober 2018 kl. 21:10:16 UTC+2 skrev alexander...@gmail.com:

Hello,

I am trying to spoof my MAC with networkmanager. I am very new to qubes and I 
am still under the learning process.

I have been stuck at spoofing my MAC all days running into issues and tackling 
them with different solutions from googling. But now I'm stuck with the Network 
Manager.

Acording to the dom0 terminal I have networkmanager 1.0. 12-2. fc23 version. 
But when trying to update it says ''Network-manager is already the newest 
version (1.6.2-3)''.

I am still unable to change any network manager settings, I can't find network 
manager in my system tray and can't find any application on my laptop named 
Network Manager.

I am following this guide without any success: 
https://www.qubes-os.org/doc/anonymizing-your-mac-address/

I've tried googling around alot and it's not an uncommon issue. But the 
forums/guides are not about Qubes OS. Lots of people mention np-applet but 
command can't be found on my Dom0 terminal. It's probably an Ubunto solution 
but not for me.


Well beginner mistake. It was as easy as just right clicking the network icon 
and press edit connections.

Next issue is ''Cloned MAC adress'' is not a dropdown where you can press 
''Random''option. I'll google it and find a solution if not just typing 
''Random'' is enough.



My Cloned MAC address selections look just like the picture in 
https://www.qubes-os.org/doc/anonymizing-your-mac-address/#randomize-a-single-connection 
. Not yours?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7d1ee28f-253c-8796-4463-cf247a0c851d%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Really slow to install on USB and subsequent Boot

['Modprobe' via qubes-users]

Have you benchmarked the flash drive? Sadly, just because it's USB 3 doesn't 
mean it's fast :(
 Original Message 
On Oct 16, 2018, 7:29 PM, seshu wrote:

> Hi there, I'm a first time Qubes user and I did an install (v4.0) to a USB 
> 3.0 stick last weekend. IT took about 5 hours?! Is that normal? I realized I 
> had VT-d on my i7-6700k diabled in the bios during the install but I fixed 
> that and then tried to boot from the USB and it would take 25 minutes to boot 
> up?!
>
> What am I missing? I do have about 6 SATA drives on the desktop, but I have 
> 32gb or RAM and the USB stick is 128gb, and the CPU is i7-6700k so it is a 
> fast cpu.
>
> Appreciate any advice! Thanks in advance.
>
> --
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/ddef2311-7970-4d36-8fa8-78195ae70a0b%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/gLvdHW7BhrYKd6_uvBVIap9NCKsDHjqfMQQg9LgNjFXNvyJTMmIuc3_c-QhcBMbcbfbMSJkmSm5r3TcrsDicyECdImnM0zLVAyPX9XnlsyI%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Really slow to install on USB and subsequent Boot

[seshu]

Hi there, I'm a first time Qubes user and I did an install (v4.0) to a USB 3.0 
stick last weekend. IT took about 5 hours?! Is that normal?  I realized I had 
VT-d on my i7-6700k diabled in the bios during the install but I fixed that and 
then tried to boot from the USB and it would take 25 minutes to boot up?! 

What am I missing? I do have about 6 SATA drives on the desktop, but I have 
32gb or RAM and the USB stick is 128gb, and the CPU is i7-6700k so it is a fast 
cpu.

Appreciate any advice! Thanks in advance.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ddef2311-7970-4d36-8fa8-78195ae70a0b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Stuck on ''Waiting for qubes-session...

['awokd' via qubes-users]

alexander.ibrahi...@gmail.com wrote on 10/16/18 6:19 PM:

Den tisdag 16 oktober 2018 kl. 20:14:17 UTC+2 skrev alexander...@gmail.com:



How do I update my NetworkManager?


I did another ''sudo apt-get install network-manager'' and while reading 
through what it says I can now see that I have the newest version (atleast for 
qubes 3.2)

''Network-manager is already the newest version (1.6.2-3)''

I think it's very strange that it says this since when I ''sudo NetworkManager 
-V'' in my dom0 terminal it says 1. 0. 12-2. fc23 which isn't 1.6.2

I guess this is solved



It sounds like you were looking at the dom0's network manager. Dom0 
never actually uses the network directly, everything goes through 
sys-net by default. See 
https://theinvisiblethings.blogspot.com/2011/09/playing-with-qubes-networking-for-fun.html 
for a bit dated but good overview. The network manager version that 
matters in the one inside sys-net, and that's the one you found was 
version 1.6.2-3. The network icon in the tray comes straight from 
sys-net, so when you make changes there you're actually changing sys-net.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d47a1cab-fed9-441b-f408-23c73ae0175b%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes 4.0 on high(er) end workstations?

[taii...@gmx.com]

On 10/16/2018 12:21 PM, Yethal wrote:
> W dniu wtorek, 16 października 2018 01:22:58 UTC+2 użytkownik tai...@gmx.com 
> napisał:
>> On 10/15/2018 02:09 PM, Yethal wrote:> It also has a PS/2 port
>> (extremely important in Qubes and often overlooked)
>> Misinformation.
>>
>> You instea dwant more than one USB controller on a system so you can
>> have both trusted for keyboard/mice and untrusted for random stuff (all
>> my recs in my other reply have this, the D16/D8's have a second
>> controller via a few onboard usb headers)
>>
>> PS/2 is not secure at all - your keystrokes are outputted on the ground
>> wire.
>>
>> I suggest purchasing a usb keyboard that doesn't have firmware such as
>> the excellent us made unicomp model m mechanical keyboard, to prevent
>> use of a keyboard virus.
>>
>> Definitely agreed with not buying nvidia junk though, they artificially
>> hamper virt with their geforce stuff and they also hate linux drivers
>> and FOSS.
> 
> If I have more than one USB controller and I leave one controller in dom0 and 
> all the other ones in sys-usb that is all fine and dandy except there is 
> still a usb controller in dom0 which kinda defeats the purpose of even having 
> sys-usb unless the keyboard and mouse wires were to be soldered directly to 
> the ports. 
> Also, if an attacker is capable of tapping into the ground wire of your 
> keyboard to listen to the keystrokes then they are more than capable of 
> simply plugging a usb keylogger and/or usb hub and a flashdrive. IMHO a usb 
> controller in dom0 poses much bigger security risk due to reduced attack 
> complexity.
> 

Why would you have one in dom0? the idea is that you make one sys-usb
per controller so for example one trusted for inputs and one not trusted
for random stuff.

Ground wires where I live go far away from where I am sitting as they do
in any large office complex so that is not so good. Any secure facility
has ground wire isolation for that reason.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0795d50b-a829-2fa9-9c9b-ee37369b4986%40gmx.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] White-list for block devices, networks, etc

['awokd' via qubes-users]

Frozentime345 wrote on 10/16/18 5:59 AM:

System: Fedora 27/Debian 9 Templates, R3.2->upgrading to 4.0 soon

I looked through rpc policy but I couldn't find anything like this, is 
there
a way to only allow certain block devices for certain appvms? Doesn't 
even have to be a secure feature just something to prevent user error, 
but it has to work at the qubes level so a

"bad" block device doesn't compromise the appvm.


I believe there will be some type of block device isolation (a 
"sys-block" maybe) coming in Qubes 4.1, so fine grained controls might 
be part of that.


Similarly, is there something in sys-net I can use to white-list? I 
tried the network connections manager but I cant seem to stop it from 
connecting to unknown ethernets, after its known I can set “don't 
automatically connect” though.


This might vary by the distribution you are using for sys-net. Try 
searching for what you are trying to accomplish with the distribution 
name e.g. "Debian", instead of "Qubes". Most should apply the same way, 
just make your changes in sys-net instead.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1f4874ec-ba3e-308c-85c6-41ec3ee8fb63%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] how to switch Background Dom0 Qubes 4.0

['Christophe Vial' via qubes-users]

Not really a good idea to attach or copy anything to Dom0.
The safest way is probably to take a screenshot of the picture you want to use 
as wallpaper since screenshots end in Dom0.

 Original Message 
On Oct 16, 2018, 01:04, Steve Coleman wrote:

> On 10/15/18 6:45 PM, English USA wrote:
>> how can I change the screen background of the official Qubes OS 4.?
>
> Right click on the desktop and from the menu select "Desktop Settings"
>
>> Please help me, I am new to the IT world. maybe someone knows how to
>> copy in Qubes 4 directly to Dom0 or connect the USB stick directly to
>> Dom0? ask for instructions with a detailed explanation. Thank you in
>> advance !;)
>
> To mount a USB stick in dom0, insert the USB stick, and then open up
> nautilus in Dom0 (Menu/System Tools/Files) and look on the left pane for
> your USB stick. If you do not see a label for it there, the stick may be
> formatted in exFat format which may need some extra drivers in dom0 in
> order to read it.
>
> Be very cautious what you allow to attach to or run in dom0.
>
>> --
>> You received this message because you are subscribed to the Google
>> Groups "qubes-users" group.
>> To unsubscribe from this group and stop receiving emails from it, send
>> an email to qubes-users+unsubscr...@googlegroups.com
>> .
>> To post to this group, send email to qubes-users@googlegroups.com
>> .
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/qubes-users/CAGhU_PJA6GtF-fc7v-mT2d6fpejyaNBo677iO%2BLhp8Ekcr_KsQ%40mail.gmail.com
>> .
>> For more options, visit https://groups.google.com/d/optout.
>
> --
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/de880228-1436-14f4-c3f7-2cc6cce6d0a3%40jhuapl.edu.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/m32E8-iN_L9JdmjZcicngRWL0YBJhKqZSQCcmDe65tX_zRZh7Nm2uH7NQD6G6LZMeWgYqpmZKCcLRzzbKUQzIO_fUVTwjh0lx8QMacNbdiE%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Network Manager not showing in system tray

[alexander . ibrahim97]

Den tisdag 16 oktober 2018 kl. 21:10:16 UTC+2 skrev alexander...@gmail.com:
> Hello,
> 
> I am trying to spoof my MAC with networkmanager. I am very new to qubes and I 
> am still under the learning process.
> 
> I have been stuck at spoofing my MAC all days running into issues and 
> tackling them with different solutions from googling. But now I'm stuck with 
> the Network Manager.
> 
> Acording to the dom0 terminal I have networkmanager 1.0. 12-2. fc23 version. 
> But when trying to update it says ''Network-manager is already the newest 
> version (1.6.2-3)''. 
> 
> I am still unable to change any network manager settings, I can't find 
> network manager in my system tray and can't find any application on my laptop 
> named Network Manager. 
> 
> I am following this guide without any success: 
> https://www.qubes-os.org/doc/anonymizing-your-mac-address/
> 
> I've tried googling around alot and it's not an uncommon issue. But the 
> forums/guides are not about Qubes OS. Lots of people mention np-applet but 
> command can't be found on my Dom0 terminal. It's probably an Ubunto solution 
> but not for me.

Well beginner mistake. It was as easy as just right clicking the network icon 
and press edit connections. 

Next issue is ''Cloned MAC adress'' is not a dropdown where you can press 
''Random''option. I'll google it and find a solution if not just typing 
''Random'' is enough.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e8ae7b0c-8dd7-4193-ae30-ee51e80ac094%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Network Manager not showing in system tray

[alexander . ibrahim97]

Hello,

I am trying to spoof my MAC with networkmanager. I am very new to qubes and I 
am still under the learning process.

I have been stuck at spoofing my MAC all days running into issues and tackling 
them with different solutions from googling. But now I'm stuck with the Network 
Manager.

Acording to the dom0 terminal I have networkmanager 1.0. 12-2. fc23 version. 
But when trying to update it says ''Network-manager is already the newest 
version (1.6.2-3)''. 

I am still unable to change any network manager settings, I can't find network 
manager in my system tray and can't find any application on my laptop named 
Network Manager. 

I am following this guide without any success: 
https://www.qubes-os.org/doc/anonymizing-your-mac-address/

I've tried googling around alot and it's not an uncommon issue. But the 
forums/guides are not about Qubes OS. Lots of people mention np-applet but 
command can't be found on my Dom0 terminal. It's probably an Ubunto solution 
but not for me.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/73699319-0c25-4729-b03a-159f8ac929b4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Stuck on ''Waiting for qubes-session...

[alexander . ibrahim97]

Den tisdag 16 oktober 2018 kl. 16:27:19 UTC+2 skrev alexander...@gmail.com:
> Hello,
> 
> I am trying to open a debian 9 gnome terminal with this command...
> 
> qvm-run -a debian-9 gnome-terminal
> 
> But I am getting stuck at...
> 
> waiting for qubes-session
> 
> I have tried rebooting without any success; this command worked just 10 
> minutes ago and now it's stuck at the same stage all the time.
> 
> ---
> 
> While I am making a thread anyways, the real issue I am trying to solve 
> through the gnome terminal is updating my network manager from 1.0 12-2.fc23 
> to the 1.4.2 version 
> (https://www.qubes-os.org/doc/anonymizing-your-mac-address/).
> 
> I am on qubes 3.2 trying to update my Network Manager to a later version. 
> Using this command ''sudo apt-get install --only-upgrade network-manager''. 
> Will this work?

I did a fresh-reinstallation of qubes since I probably messed something up 
trying to update my networkmanager through the deb-9 repository.

I've done all type of updates and upgrades I've found browsing around...

sudo apt-get update
sudo apt-get dist-upgrade
sudo apt-get install --only-upgrade network-manager
sudo apt-get install network-manager

None of these commands has updated my NetworkManager to 1.4.2 or later

How do I update my NetworkManager?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1d8adf13-2c6f-4914-b2cf-9785b181e917%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Stuck on ''Waiting for qubes-session...

[alexander . ibrahim97]

Den tisdag 16 oktober 2018 kl. 20:14:17 UTC+2 skrev alexander...@gmail.com:
> Den tisdag 16 oktober 2018 kl. 16:27:19 UTC+2 skrev alexander...@gmail.com:
> > Hello,
> > 
> > I am trying to open a debian 9 gnome terminal with this command...
> > 
> > qvm-run -a debian-9 gnome-terminal
> > 
> > But I am getting stuck at...
> > 
> > waiting for qubes-session
> > 
> > I have tried rebooting without any success; this command worked just 10 
> > minutes ago and now it's stuck at the same stage all the time.
> > 
> > ---
> > 
> > While I am making a thread anyways, the real issue I am trying to solve 
> > through the gnome terminal is updating my network manager from 1.0 
> > 12-2.fc23 to the 1.4.2 version 
> > (https://www.qubes-os.org/doc/anonymizing-your-mac-address/).
> > 
> > I am on qubes 3.2 trying to update my Network Manager to a later version. 
> > Using this command ''sudo apt-get install --only-upgrade network-manager''. 
> > Will this work?
> 
> I did a fresh-reinstallation of qubes since I probably messed something up 
> trying to update my networkmanager through the deb-9 repository.
> 
> I've done all type of updates and upgrades I've found browsing around...
> 
> sudo apt-get update
> sudo apt-get dist-upgrade
> sudo apt-get install --only-upgrade network-manager
> sudo apt-get install network-manager
> 
> None of these commands has updated my NetworkManager to 1.4.2 or later
> 
> How do I update my NetworkManager?

I did another ''sudo apt-get install network-manager'' and while reading 
through what it says I can now see that I have the newest version (atleast for 
qubes 3.2)

''Network-manager is already the newest version (1.6.2-3)''

I think it's very strange that it says this since when I ''sudo NetworkManager 
-V'' in my dom0 terminal it says 1. 0. 12-2. fc23 which isn't 1.6.2

I guess this is solved

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a0cb6b66-4682-417a-9cb3-28a34511bf27%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] White-list for block devices, networks, etc

[Frozentime345]

System: Fedora 27/Debian 9 Templates, R3.2->upgrading to 4.0 soon

I looked through rpc policy but I couldn't find anything like this, is there
a way to only allow certain block devices for certain appvms? Doesn't 
even have to be a secure feature just something to prevent user error, 
but it has to work at the qubes level so a

"bad" block device doesn't compromise the appvm.

Similarly, is there something in sys-net I can use to white-list? I 
tried the network connections manager but I cant seem to stop it from 
connecting to unknown ethernets, after its known I can set “don't 
automatically connect” though.




--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/22c97b8d-d5ac-f51a-1af5-3f39c621fabb%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] setting vms to use another xserver

[Sergio Matta]

Is there a easy way to set all Qubes X to use a external X server? 
I want to open all vm windows from my Qubes desktop computer on my linux 
accelerated notebook.
Thank you.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f894c6b4-c714-4611-8cc5-aaf9dc9a6908%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes Warrant Canary Overdue

[Alex]

On 10/15/18 5:26 PM, giantessgnos...@gmail.com wrote:
> This might seem like a serious thing to say, but Canary 16 has expired, and 
> I'm getting worried, as I do rely on Qubes.
> 
> What's going on? Is there a comprimise or not?
> 
In some jurisdictions (e.g. USA) The Qubes Project / Invisible Things
Lab may not be allowed to freely answer your second question.

I don't know where they are based off, but may be in some jurisdiction
that may force them to answer with "there is no compromise" in any case.

Anyway this is not the first canary date that TQP/ITL misses. IMHO /
IANAL but either they are very sloppy with setting a calendar alarm on
their smartphones, or "they are not trying not to send" a message... Or
I'm just reading too much into it.

-- 
Alex

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/13b11319-7489-d869-33eb-4a31d3b0e5aa%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

Re: [qubes-users] Re: Qubes 4.0 on high(er) end workstations?

[Yethal]

W dniu wtorek, 16 października 2018 01:22:58 UTC+2 użytkownik tai...@gmx.com 
napisał:
> On 10/15/2018 02:09 PM, Yethal wrote:> It also has a PS/2 port
> (extremely important in Qubes and often overlooked)
> Misinformation.
> 
> You instea dwant more than one USB controller on a system so you can
> have both trusted for keyboard/mice and untrusted for random stuff (all
> my recs in my other reply have this, the D16/D8's have a second
> controller via a few onboard usb headers)
> 
> PS/2 is not secure at all - your keystrokes are outputted on the ground
> wire.
> 
> I suggest purchasing a usb keyboard that doesn't have firmware such as
> the excellent us made unicomp model m mechanical keyboard, to prevent
> use of a keyboard virus.
> 
> Definitely agreed with not buying nvidia junk though, they artificially
> hamper virt with their geforce stuff and they also hate linux drivers
> and FOSS.

If I have more than one USB controller and I leave one controller in dom0 and 
all the other ones in sys-usb that is all fine and dandy except there is still 
a usb controller in dom0 which kinda defeats the purpose of even having sys-usb 
unless the keyboard and mouse wires were to be soldered directly to the ports. 
Also, if an attacker is capable of tapping into the ground wire of your 
keyboard to listen to the keystrokes then they are more than capable of simply 
plugging a usb keylogger and/or usb hub and a flashdrive. IMHO a usb controller 
in dom0 poses much bigger security risk due to reduced attack complexity.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b4304b62-4cee-4d8d-8db9-c391f3fe353c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] how to switch Background Dom0 Qubes 4.0

[qubes123456]

Ok what is wrong herr in my command ? 
$ qvm-run [- -pass-io] Save-Treasure ‘cat /home/user/file.jpg’ > 
‘/home/usersname/order’

Save-Treasure - is my firtual maschine
Usersname - is my user Name
Order = order for the new file in the dom0
File.jpg = file who must go to dom0

I become a zero file with 0 bytes with this command, please help me for improve 
me command. 

thank you in advance ;)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/afd9f4f3-5135-4d55-82ee-995ebacaa920%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] qubes r4 installation no longer boots, apparent corruption. anything I can do to get at the data?

[Foppe de Haan]

On Tuesday, October 16, 2018 at 4:55:47 PM UTC+2, unman wrote:
> On Tue, Oct 16, 2018 at 12:44:45AM -0700, Foppe de Haan wrote:
> > So it appears that something went very wrong during a dom0 update.
> > The emergency mode of the regular boot process does attempt to load, but 
> > hangs or stops before it finishes, so I can't get a shell that way either.
> > Have also tried to 'rescue' the system via a qubes installation medium, but 
> > after entering the correct LUKS passphrase, it says something like 'no 
> > valid linux installation found', and stops.
> > 
> > Anyone have suggestions as to what I might try next, if anything?
> > 
> 
> Depending on how important your data is to you you might want to start
> by cloning the disk. (I'd recommend clonezilla for ease of use.)
> 
> You can check that your data is safe by booting from a live image -
> kali, knoppix etc.
> Then try to mount your Qubes partition - you'll need to use cryptsetup
> luksOpen to decrypt the disk, and you should then be able to mount the
> partition.
> You don't say whether you are using 3.2 or 4.0, and the approach to take
> will depend on that. In 4.0 individual qubes by default use thin pools
> so you will need to identify the qubes you are interested in and check
> in /dev/qubes-dom0 using 'ls -l' which of the device files in /dev
> match.
> You can then mount those devices and copy out the data.
> 
> Once you've secured all your data, you can try for recovery of the
> system. I've had some success in doing this but frankly it's almost
> always better to reinstall, particularly as you don't know *what* went
> wrong.
> If you've got recent backups or don't care about the data, I would just
> skip those steps and reinstall.
> 
> If you need specific advice give a little more detail about how you had
> the system configured and exactly what steps you've taken so far.
> 
> Best of luck
> 
> unman

Thanks, will do (wrt cloning). Last backup was from april, so I'd like to 
recover if possible. r4.0; as to what went wrong, not sure exactly; 
qubes-dom0-update finished properly, but fairly soon afterwards, I experienced 
a hard reboot, likely due to unstable memory settings, which I had been 
tinkering with a bit.
So far all I've tried is to boot and/or repair the system, but I can't get the 
volume to mount, so haven't made any progress yet.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f63a2f06-e98d-4bab-bb9a-b533bff810c3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] qubes r4 installation no longer boots, apparent corruption. anything I can do to get at the data?

[unman]

On Tue, Oct 16, 2018 at 12:44:45AM -0700, Foppe de Haan wrote:
> So it appears that something went very wrong during a dom0 update.
> The emergency mode of the regular boot process does attempt to load, but 
> hangs or stops before it finishes, so I can't get a shell that way either.
> Have also tried to 'rescue' the system via a qubes installation medium, but 
> after entering the correct LUKS passphrase, it says something like 'no valid 
> linux installation found', and stops.
> 
> Anyone have suggestions as to what I might try next, if anything?
> 

Depending on how important your data is to you you might want to start
by cloning the disk. (I'd recommend clonezilla for ease of use.)

You can check that your data is safe by booting from a live image -
kali, knoppix etc.
Then try to mount your Qubes partition - you'll need to use cryptsetup
luksOpen to decrypt the disk, and you should then be able to mount the
partition.
You don't say whether you are using 3.2 or 4.0, and the approach to take
will depend on that. In 4.0 individual qubes by default use thin pools
so you will need to identify the qubes you are interested in and check
in /dev/qubes-dom0 using 'ls -l' which of the device files in /dev
match.
You can then mount those devices and copy out the data.

Once you've secured all your data, you can try for recovery of the
system. I've had some success in doing this but frankly it's almost
always better to reinstall, particularly as you don't know *what* went
wrong.
If you've got recent backups or don't care about the data, I would just
skip those steps and reinstall.

If you need specific advice give a little more detail about how you had
the system configured and exactly what steps you've taken so far.

Best of luck

unman






-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181016145544.3tkxtejhgtgbfthh%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] how to switch Background Dom0 Qubes 4.0

[unman]

On Mon, Oct 15, 2018 at 07:05:54PM -0400, Steve Coleman wrote:
> On 10/15/18 6:45 PM, English USA wrote:
> > how can I change the screen background of the official Qubes OS 4.?
> 
> Right click on the desktop and from the menu select "Desktop Settings"
> 
> > Please help me, I am new to the IT world. maybe someone knows how to
> > copy in Qubes 4 directly to Dom0 or connect the USB stick directly to
> > Dom0? ask for instructions with a detailed explanation. Thank you in
> > advance !;)
> 
> To mount a USB stick in dom0, insert the USB stick, and then open up
> nautilus in Dom0 (Menu/System Tools/Files) and look on the left pane for
> your USB stick. If you do not see a label for it there, the stick may be
> formatted in exFat format which may need some extra drivers in dom0 in order
> to read it.
> 
> Be very cautious what you allow to attach to or run in dom0.

Steve's advice wont work if you are using a usbVM, like sys-usb.
Have a look at www.qubes-os.org/doc/usb/ which will explain how to use a
USB stick in a qube.
It's good practice not to attach USB sticks directly to dom0.
It's also good practice not to copy untrusted files in to dom0. That's
why Qubes make it relatively difficult.
It isn't impossible though: have a look at
www.qubes-os.org/doc/copy-from-dom0/ which tells you how to do this.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181016143243.h6veqz3gqqzapcl5%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Stuck on ''Waiting for qubes-session...

[alexander . ibrahim97]

Hello,

I am trying to open a debian 9 gnome terminal with this command...

qvm-run -a debian-9 gnome-terminal

But I am getting stuck at...

waiting for qubes-session

I have tried rebooting without any success; this command worked just 10 minutes 
ago and now it's stuck at the same stage all the time.

---

While I am making a thread anyways, the real issue I am trying to solve through 
the gnome terminal is updating my network manager from 1.0 12-2.fc23 to the 
1.4.2 version (https://www.qubes-os.org/doc/anonymizing-your-mac-address/).

I am on qubes 3.2 trying to update my Network Manager to a later version. Using 
this command ''sudo apt-get install --only-upgrade network-manager''. Will this 
work?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ebea9036-47da-4668-9e00-8cb56b1dadca%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes 4.0 on high(er) end workstations?

[unman]

On Mon, Oct 15, 2018 at 07:25:12PM -0400, taii...@gmx.com wrote:
> On 10/15/2018 02:09 PM, Yethal wrote:> It also has a PS/2 port
> (extremely important in Qubes and often overlooked)
> Misinformation.
> 
> You instea dwant more than one USB controller on a system so you can
> have both trusted for keyboard/mice and untrusted for random stuff (all
> my recs in my other reply have this, the D16/D8's have a second
> controller via a few onboard usb headers)
> 
> PS/2 is not secure at all - your keystrokes are outputted on the ground
> wire.

You really should be more specific on this issue. SOME PS/2 keyboards
allow keystrokes to be read from ground. It's possible to mitigate this
in various ways or clean signal from the earth wire.

Almost all keyboards are open to side channel attacks. It's possible to
reduce the risk of those attacks in various ways depending on your
risk profile.

You are absolutely right that having multiple USB controllers is a
benefit in Qubes, but for many people, using a PS/2 keyboard will
address the main risk factors accompanying use of USB devices, and
imo shouldn't be so quickly dismissed.

> 
> I suggest purchasing a usb keyboard that doesn't have firmware such as
> the excellent us made unicomp model m mechanical keyboard, to prevent
> use of a keyboard virus.
> 
> Definitely agreed with not buying nvidia junk though, they artificially
> hamper virt with their geforce stuff and they also hate linux drivers
> and FOSS.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181016142058.tj2ehf5pmsrwe3uq%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] i2p setup for Qubes

[qubes-fan]

Hi, I would like to ask you about experiences with the i2p in Qubes 4. What 
setup would you consider as "best" in case I would like to use i2p without 
routing it through Tor first? I read the >Use I2P client inside 
Whonix-Workstation (Preferred)< guide on Whonix website and consider it to be 
the "best option" to for i2p over Tor. I am looking for the secure and reliable 
i2p setup without routing it through Tor.

If you would like to use i2p to its full potential on Qubes, without going to 
clearnet with the i2p VMs, for anonymity with I2Pbotte, chat, eepsite 
browsing...what setup (template used, firewall setting, net VM setting, VMs 
structure used) would you advice for such a usage model?

Thank you

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/LOx9ulb--3-1%40tutanota.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Fedora 28 has no audio on Qubes!

[code9n]

  The pulseaudio issue was fixed in August?  I've been waiting for that since 
the upgrade to fedora 27.  Looked out for it in every fedora update and never 
saw it.  (Now using fedora 28 - still no sound) - All updates completed that I 
know of.

  Do you need to have the Qubes 4 developers repository enabled?  

  Or is there some way to install the fix another way?  Complete re-install of 
the fedora 28 template?

Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7a51e91a-730f-47f5-9431-35446b564df6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] qubes r4 installation no longer boots, apparent corruption. anything I can do to get at the data?

[foppe]

so it appears that something went very wrong during a dom0 update. 
The emergency mode of the regular boot process does attempt to load, but hangs 
or stops before it finishes, so I can't get a shell that way either.
Have also tried to 'rescue' the system via a qubes installation medium, but 
after entering the correct LUKS passphrase, it says something like 'no valid 
linux installation found', and stops.

Anyone have suggestions as to what I might try next, if anything?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1bfa6d2c-c857-4d89-8fba-86550f7eee88%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.