Re: [qubes-users] Re: No vpn-handler-openvpn in service tab

[Philip Pians]

On Tuesday, July 2, 2019 at 4:36:22 AM UTC, Chris Laprise wrote:
> On 7/1/19 11:18 PM, Philip Pians wrote:
> > On Tuesday, July 2, 2019 at 3:13:56 AM UTC, Philip Pians wrote:
> >> Using instructions to create VPN appvm (with provides network), no service 
> >> called vpn-handler-openvpn, or any other with VPN in name under service 
> >> tab, nor do any of the other VMs. Tried adding “network connections” from 
> >> applications tab, and can select to import a VPN configuration then can’t 
> >> proceed to do anything once file is selected because everything is greyed 
> >> out.
> >> I’ve looked and looked for help setting up VPN but info seems to be 
> >> identical and not address this problem. Please help, if I can’t get past 
> >> first step...
> > 
> > Edit: Here is instructions I followed:
> > https://github.com/tasket/Qubes-vpn-support
> > https://www.qubes-os.org/doc/vpn/
> 
> You should only follow one of these, not both. I assume you meant the 
> first one...
> 
> The way to add a new service here is to just type it on the line and 
> click the plus sign.
> 
> -- 
> 
> Chris Laprise, tas...@posteo.net
> https://github.com/tasket
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

Yes, quite a few threads link to the first one and seems more useful than the 
out of date second one. I’m a little embarrassed, thought I need to select from 
the drop-down menu… 
Now at second step, there’s no such file or directory called vpn in /rw/config… 
can I just make this directory? Or is it supposed to exist with files in it?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cc9e8b2f-9e67-4520-8d41-a05ac48c9e9e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Dns-over-TLS in sys-vpn. Is it possible? How?

[Sphere]

With my experience of using DNSCrypt I actually think that Qubes' has some 
unique way of handling DNS queries given how the nameservers automatically put 
into /etc/resolv.conf are on a different subnet.

I actually think there must be some sort of bind or unbound being ran in there 
that resolves all the DNS queries for you by using sys-net or your netvm as a 
proxy.

In order to make a sys-dns qube or to turn any other qube into a sys-dns qube 
you must ensure that it is listening on port 53 UDP for any DNS queries.

This command alone given by Chris should be enough.
iptables -I INPUT -p udp --dport 53 -j ACCEPT

Afterwards you should change your /etc/resolv.conf to the IP address of your 
sys-dns qube. The IP address can be found out using Qubes Manager and try to 
ping that ip address first to verify if it is reachable by your AppVM in the 
first place.

If your sys-dns qube is not your sys-net or netvm then you should ensure that 
TCP port 853 outbound is allowed through if your firewall rules do not 
explicitly allow all outbound (all outbound is allowed by default for each qube)

(In dom0 terminal)
qvm-firewall [sys-firewall or/and sys-dns] add action=accept proto=tcp 
dstports=853 --before 0

If this doesn't solve it then it may be best to provide us with some logs of 
your stubby

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/24d42a1d-b5cc-4d92-9aed-a5f209b1195a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: No vpn-handler-openvpn in service tab

[Chris Laprise]

On 7/1/19 11:18 PM, Philip Pians wrote:

On Tuesday, July 2, 2019 at 3:13:56 AM UTC, Philip Pians wrote:

Using instructions to create VPN appvm (with provides network), no service 
called vpn-handler-openvpn, or any other with VPN in name under service tab, 
nor do any of the other VMs. Tried adding “network connections” from 
applications tab, and can select to import a VPN configuration then can’t 
proceed to do anything once file is selected because everything is greyed out.
I’ve looked and looked for help setting up VPN but info seems to be identical 
and not address this problem. Please help, if I can’t get past first step...


Edit: Here is instructions I followed:
https://github.com/tasket/Qubes-vpn-support
https://www.qubes-os.org/doc/vpn/


You should only follow one of these, not both. I assume you meant the 
first one...


The way to add a new service here is to just type it on the line and 
click the plus sign.


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c486c5fc-28a6-8db1-20a0-672498eb5e69%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: No vpn-handler-openvpn in service tab

[Philip Pians]

On Tuesday, July 2, 2019 at 3:13:56 AM UTC, Philip Pians wrote:
> Using instructions to create VPN appvm (with provides network), no service 
> called vpn-handler-openvpn, or any other with VPN in name under service tab, 
> nor do any of the other VMs. Tried adding “network connections” from 
> applications tab, and can select to import a VPN configuration then can’t 
> proceed to do anything once file is selected because everything is greyed out.
> I’ve looked and looked for help setting up VPN but info seems to be identical 
> and not address this problem. Please help, if I can’t get past first step...

Edit: Here is instructions I followed:
https://github.com/tasket/Qubes-vpn-support
https://www.qubes-os.org/doc/vpn/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/84b059a5-4e27-451b-8200-280e18170909%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] No vpn-handler-openvpn in service tab

[Philip Pians]

Using instructions to create VPN appvm (with provides network), no service 
called vpn-handler-openvpn, or any other with VPN in name under service tab, 
nor do any of the other VMs. Tried adding “network connections” from 
applications tab, and can select to import a VPN configuration then can’t 
proceed to do anything once file is selected because everything is greyed out.
I’ve looked and looked for help setting up VPN but info seems to be identical 
and not address this problem. Please help, if I can’t get past first step...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fd084e05-ebeb-491d-9900-747d837860ce%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Whonix 15 has been released

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Dear Qubes Community,

The Whonix Project [1] announced the release of Whonix 15 today. [2]
Project lead Patrick Schleizer [3] wrote:

> After approximately one year of development, the Whonix Project is 
> proud to announce the release of Whonix 15.
> 
> Whonix 15 is based on the Debian buster (Debian 10) distribution. 
> This means users have access to many new software packages in
> concert with existing packages, such as a modern branch of GNuPG,
> and more.

For a list of major new features and further details, please see the
official announcement. [2]

Please note that, according to the Whonix Support Schedule [4], Whonix
14 will reach end-of-life (EOL) in one month.
Therefore, all current Whonix users are urged to upgrade from Whonix
14 to Whonix 15 [5] within the next month.


[1] https://www.whonix.org/
[2] https://forums.whonix.org/t/whonix-15-has-been-released/7616
[3] https://www.qubes-os.org/team/#patrick-schleizer
[4] https://www.whonix.org/wiki/About#Support_Schedule
[5] https://www.whonix.org/wiki/Upgrading_Whonix_14_to_Whonix_15

This announcement is also available on the Qubes website:
https://www.qubes-os.org/news/2019/07/01/whonix-15-has-been-released/

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-
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=DXvV
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c22a623f-8354-f570-9c94-553377b1a1f4%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] HCL - Dell G7 7577

['vjudge one' via qubes-users]

All works great on Dell G7

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/821033233.42841.1562034377885%40ichabod.co-bxl.
For more options, visit https://groups.google.com/d/optout.
---
layout:
  'hcl'
type:
  'notebook
docking station'
hvm:
  'yes'
iommu:
  'yes'
slat:
  'yes'
tpm:
  'unknown'
remap:
  'yes'
brand: |
  Dell Inc.
model: |
  G7 7588
bios: |
  1.3.0
cpu: |
  Intel(R) Core(TM) i7-8750H CPU @ 2.20GHz
cpu-short: |
  FIXME
chipset: |
  Intel Corporation Device [8086:3ec4] (rev 07)
chipset-short: |
  FIXME
gpu: |
  Intel Corporation Device [8086:3e9b] (prog-if 00 [VGA controller])
  NVIDIA Corporation GP106M [GeForce GTX 1060 Mobile 3GB] [10de:1c20] (rev a1) 
(prog-if 00 [VGA controller])
gpu-short: |
  FIXME
network: |
  Intel Corporation Device a370 (rev 10)
  Qualcomm Atheros Killer E2400 Gigabit Ethernet Controller (rev 10)
memory: |
  16084
scsi: |
  ST1000LM035-1RK1 Rev: SDM2
usb: |
  1
versions:

- works:
'FIXME:yes|no|partial'
  qubes: |
R4.0
  xen: |
4.8.4
  kernel: |
4.19.43-1
  remark: |
FIXME
  credit: |
FIXAUTHOR
  link: |
FIXLINK

---



vjudge_one_pub.asc
Description: File Attachment: vjudge_one_pub.asc


vjudge_one_pub.asc
Description: File Attachment: vjudge_one_pub.asc

Re: [qubes-users] Re: Fujitsu T937: Fails to boot live USB; Qubes 4.0.1

['awokd' via qubes-users]

0...@tuta.io:

Jul 1, 2019, 6:15 PM by qubes-users@googlegroups.com:


0...@tuta.io:


This is the post I was referencing: 
https://groups.google.com/d/msg/qubes-users/X2AGqAJZ8Go/k5pruzBjBQAJ 


Thanks!

Jun 30, 2019, 1:28 AM by 0...@tuta.io:


After changing the "Secure boot" setting to DISABLED, the live image appears to 
attempt startup. I see multiple lines of text scroll down the screen, no errors to be 
seen. They move quickly, but they appear the same as I've seen on my successful live 
boots in Virtualbox (on this same machine). After the text completes (in less than two 
seconds), the screen again changes to a 'bright black,' a step above no signal.



Yes, Secure boot needs to be Disabled. If you have an nvidia video card and you can't 
disable it in UEFI config, you need to add "nouveau.modeset=0" to your boot 
options per the ISO image procedure in 
https://www.qubes-os.org/doc/uefi-troubleshooting/#change-installer-kernel-parameters-in-uefi.

--



Thank you for your response. I do not have an nvidia GPU in this laptop- it's 
integrated into the Intel CPU.

You could also try 
https://www.qubes-os.org/doc/uefi-troubleshooting/#installation-freezes-before-getting-to-anaconda-qubes-40, 
followed by the one after it. I would have expected that to be mentioned 
in your referenced post, though.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cdd07cb0-e917-7ce0-0ddc-0f82da448805%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Fujitsu T937: Fails to boot live USB; Qubes 4.0.1

[0xor]

Jul 1, 2019, 6:15 PM by qubes-users@googlegroups.com:

> 0...@tuta.io:
>
>> This is the post I was referencing: 
>> https://groups.google.com/d/msg/qubes-users/X2AGqAJZ8Go/k5pruzBjBQAJ 
>> 
>>
>> Thanks!
>>
>> Jun 30, 2019, 1:28 AM by 0...@tuta.io:
>>
>>> After changing the "Secure boot" setting to DISABLED, the live image 
>>> appears to attempt startup. I see multiple lines of text scroll down the 
>>> screen, no errors to be seen. They move quickly, but they appear the same 
>>> as I've seen on my successful live boots in Virtualbox (on this same 
>>> machine). After the text completes (in less than two seconds), the screen 
>>> again changes to a 'bright black,' a step above no signal.
>>>
>
> Yes, Secure boot needs to be Disabled. If you have an nvidia video card and 
> you can't disable it in UEFI config, you need to add "nouveau.modeset=0" to 
> your boot options per the ISO image procedure in 
> https://www.qubes-os.org/doc/uefi-troubleshooting/#change-installer-kernel-parameters-in-uefi.
>
> -- 
>

Thank you for your response. I do not have an nvidia GPU in this laptop- it's 
integrated into the Intel CPU.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/Lik8rnz--3-1%40tuta.io.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Disabling qubes-netvm

['awokd' via qubes-users]

Matthias Brumm:

Am Sonntag, 30. Juni 2019 11:15:52 UTC+2 schrieb Matthias Brumm:

I try to get QubesOS running on a MacBook Pro. I am referring to this 
https://www.qubes-os.org/doc/macbook-troubleshooting/#macbook-pro-retina-15-inch-mid-2015-macbookpro-115
 number 7.


I was able to start the rescue system with this: 
https://www.qubes-os.org/doc/uefi-troubleshooting/#accessing-installer-rescue-mode-on-uefi

But there is a tmux session with some panes. How to use the rescue system? How 
to mount the partition with Qubes OS on it?

Matthias

The Qubes installer is a modified version of Fedora's, so often the same 
procedures/documentation will apply. Check out 
https://docs.fedoraproject.org/en-US/Fedora/13/html/Installation_Guide/s1-rescuemode-boot.html. 
I can't verify, because UEFI is too broken on my systems.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1f1f615f-6a43-4588-4aea-a193bf06d5f4%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] New with Qubes

['awokd' via qubes-users]

27casanov...@gmail.com:

Hi, if some one uses Tor with whonix gateway on a publicnetwork and all the 
trafic on that Network was supervised. What would that users activity look like?


Any traffic from VMs connected to Whonix gateway/sys-whonix would only 
appear as Tor traffic. Best way to make sure is to set up your own 
packet capture off the wire.



I also get a mesage saying that "kernel module failed loading" (I might have 
misspelled that). What is that?


Cosmetic error. Ignore.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/26632456-723b-7f8a-7aae-b4b9f83007c9%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] How do I install programs in Windows 7 Qube?

['awokd' via qubes-users]

oak2...@gmail.com:

Installer programs I believe need to be run from the windows os, so not sure 
how to copy it to the desktop of the os to run it.



If you have the windows tools properly installed, you should be able to 
copy to it from a different VM with qvm-copy.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/97566907-25db-1e84-615a-5b9407322282%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes os resolution issue

['awokd' via qubes-users]

oak2...@gmail.com:


If you want to enable full screen mode for select VMs, you can do that by 
creating the following entry in the /etc/qubes/guid.conf file in Dom0:

Can anyone tell me how to do this?  Thanks.


Qubes menu>Terminal Emulator> "sudo nano /etc/qubes/guid.conf"?

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1b475dea-0f22-98dc-f718-4a51db78c43a%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] sys-net does not start applications

['awokd' via qubes-users]

techpu...@tutanota.com:

On startup, sys-net, sys-firewall, sys-usb, and sys-whonix start.

I want to be able to connect to the internet (I haven't been able to yet).  So 
I change the applications to add Settings in sys-net qube preferences.  The 
sys-net preferences are the only thing I can access.

However I cannot start any applications in sys-net.  No terminal.  I tried also in dom0 
terminal by running this : "qvm-run -v sys-net gnome-terminal".

I can run applications just fine in other qubes.  I have not found this 
behavior anywhere else during my internet search so I am unsure how to approach 
this problem.


Another detail is that I have had issues running sys-net to start with.  I had 
to remove a few devices in the sys-net preferences so it would start.


You need at least one network capable device in there. Try onboard 
ethernet if possible, that is usually problem free. Once sys-net starts 
up normally, there should be an icon in the top right to configure 
networking.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b4249be9-b830-c8c3-29f9-1beadee7df41%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Fujitsu T937: Fails to boot live USB; Qubes 4.0.1

['awokd' via qubes-users]

0...@tuta.io:

This is the post I was referencing: 
https://groups.google.com/d/msg/qubes-users/X2AGqAJZ8Go/k5pruzBjBQAJ 


Thanks!

Jun 30, 2019, 1:28 AM by 0...@tuta.io:




After changing the "Secure boot" setting to DISABLED, the live image appears to 
attempt startup. I see multiple lines of text scroll down the screen, no errors to be 
seen. They move quickly, but they appear the same as I've seen on my successful live 
boots in Virtualbox (on this same machine). After the text completes (in less than two 
seconds), the screen again changes to a 'bright black,' a step above no signal.


Yes, Secure boot needs to be Disabled. If you have an nvidia video card 
and you can't disable it in UEFI config, you need to add 
"nouveau.modeset=0" to your boot options per the ISO image procedure in 
https://www.qubes-os.org/doc/uefi-troubleshooting/#change-installer-kernel-parameters-in-uefi.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0bb5be57-dff1-23d1-99f7-60e5bda2af77%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Dns-over-TLS in sys-vpn. Is it possible? How?

[Chris Laprise]

On 7/1/19 3:40 PM, 'qubeslover' via qubes-users wrote:

Hello,

I tried but without results.

1. dnf install getdns-stubby in fedora-30-firewall (template).

2. servicectl enable stubby in fedora-30-firewall.

3. Shutdown fedora-30-firewall.

4. Restart sys-firewall

4. Sudo nano /etc/resolv.conf and change nameserver in 127.0.0.1 and ::1

5. Run /usr/lib/qubes/qubes-setup-dnat-to-ns as root.

I can ping the outside world and sys-firewall can resolve hostnames. However, 
the qubes behind it can't.


Hmmm. I hate to keep tossing suggestions at you without having tried DoT 
myself (though I hope to make time for it in the next couple weeks).


But... if 127.0.0.1/localhost is the dnat target, then the INPUT chain 
comes into the picture. By default, Qubes configures INPUT to reject any 
new requests (packets that don't satisfy 'related' or 'established' 
conditions). As a quick workaround, you could try allowing DNS packets 
in sys-firewall:


iptables -I INPUT -p udp --dport 53 -j ACCEPT
iptables -I INPUT -p tcp --dport 53 -j ACCEPT



For sure, I am messing up somewhere. It is a sin: I would like to have a 
sys-dns qube running DoT or DoH.

Thanks a lot for your attention, interest and help. Again, very much 
appreciated.



--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/58595ece-a717-4315-eabd-12ba5dee76fa%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Dns-over-TLS in sys-vpn. Is it possible? How?

['qubeslover' via qubes-users]

‐‐‐ Original Message ‐‐‐
On Sunday, June 30, 2019 11:20 PM, 'qubeslover' via qubes-users 
 wrote:

> ‐‐‐ Original Message ‐‐‐
> On Sunday, June 30, 2019 10:36 PM, Chris Laprise tas...@posteo.net wrote:
>
> > On 6/30/19 4:10 PM, Chris Laprise wrote:
> >
> > > > > A shortcut you can take to setting up iptables for DNS is to populate
> > > > > /etc/resolv.conf and then run '/usr/lib/qubes/qubes-setup-dnat-to-ns'.
> > > > > This should configure the nat/PR-QBS chain with the DNS addresses you
> > > > > set.
> > >
> > > So check that your DoT setup is updating /etc/resolv.conf, then run
> > > '/usr/lib/qubes/qubes-setup-dnat-to-ns'.
>
> Thanks for you suggestion. Apparently, it does not work in sys-net.
>
> Stubby is up, working and connected to its default DoT providers (as lsof -i 
> asserts):
>
> COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
> stubby 534 stubby 3u IPv4 17946 0t0 UDP localhost:domain
> stubby 534 stubby 4u IPv4 17947 0t0 TCP localhost:domain (LISTEN)
> stubby 534 stubby 5u IPv6 17948 0t0 UDP localhost:domain
> stubby 534 stubby 6u IPv6 17949 0t0 TCP localhost:domain (LISTEN)
> stubby 534 stubby 7u IPv4 35444 0t0 TCP 
> sys-net:46006->145.100.185.16:domain-s (ESTABLISHED)
> stubby 534 stubby 8u IPv4 35447 0t0 TCP sys-net:45550->getdnsapi.net:domain-s 
> (ESTABLISHED)
> NetworkMa 564 root 17u IPv4 31022 0t0 UDP sys-net:bootpc
> systemd-r 647 systemd-resolve 11u IPv4 19350 0t0 UDP *:hostmon
> systemd-r 647 systemd-resolve 12u IPv4 19351 0t0 TCP *:hostmon (LISTEN)
> systemd-r 647 systemd-resolve 13u IPv6 19353 0t0 UDP *:hostmon
> systemd-r 647 systemd-resolve 14u IPv6 19354 0t0 TCP *:hostmon (LISTEN)
> systemd-r 647 systemd-resolve 16u IPv4 19358 0t0 UDP 127.0.0.53:domain
> systemd-r 647 systemd-resolve 17u IPv4 19359 0t0 TCP 127.0.0.53:domain 
> (LISTEN)
> tinyproxy 1547 tinyproxy 4u IPv4 32068 0t0 TCP *:us-cli (LISTEN)
> tinyproxy 1547 tinyproxy 5u IPv6 32069 0t0 TCP *:us-cli (LISTEN)
> tinyproxy 1548 tinyproxy 4u IPv4 32068 0t0 TCP *:us-cli (LISTEN)
> tinyproxy 1548 tinyproxy 5u IPv6 32069 0t0 TCP *:us-cli (LISTEN)
> tinyproxy 1549 tinyproxy 4u IPv4 32068 0t0 TCP *:us-cli (LISTEN)
>
> Also, nano claims that everything is right in /etc/resolv.conf
>
> Generated by NetworkManager
>
> 
>
> nameserver 127.0.0.1
> nameserver ::1
>
> As root, I run /usr/lib/qubes/qubes-setup-dnat-to-ns . Everything looks fine.
>
> I can ping the outside world but sys-net does not receive any request from my 
> qubes :-(
>
> > Additional thought: The sys-net VM may not be the best place to secure
> > any data, DNS included. Putting DoT in sys-firewall or similar proxyVM
> > (and using qubes-setup-dnat-to-ns there) would be a better choice and
> > has a fair chance of working.
>
> OK, will try tomorrow with sys-firewall and see what happens.
>

Hello,

I tried but without results.

1. dnf install getdns-stubby in fedora-30-firewall (template).

2. servicectl enable stubby in fedora-30-firewall.

3. Shutdown fedora-30-firewall.

4. Restart sys-firewall

4. Sudo nano /etc/resolv.conf and change nameserver in 127.0.0.1 and ::1

5. Run /usr/lib/qubes/qubes-setup-dnat-to-ns as root.

I can ping the outside world and sys-firewall can resolve hostnames. However, 
the qubes behind it can't.

For sure, I am messing up somewhere. It is a sin: I would like to have a 
sys-dns qube running DoT or DoH.

Thanks a lot for your attention, interest and help. Again, very much 
appreciated.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bP-yHOHB2lzMcPmqC9oiymt22tnm2EAechJ9Q9dXylzEGbWhD4Ik8CqGkdOj6iHVggbzCX46wjR1j-u217UC9ZnudW-kmWRn6VtNa1jXptQ%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] New with Qubes

[27casanova27]

Hi, if some one uses Tor with whonix gateway on a publicnetwork and all the 
trafic on that Network was supervised. What would that users activity look like?


I also get a mesage saying that "kernel module failed loading" (I might have 
misspelled that). What is that? 

Thanks and best regardes

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c2f4dd43-58ec-431c-b59e-3ef038deb6ff%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes integration for xmonad

[nestorock75]

El lunes, 1 de julio de 2019, 16:08:19 (UTC+2), nesto...@gmail.com  escribió:
> El domingo, 1 de noviembre de 2015, 14:47:00 (UTC+1), Alex  escribió:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA256
> > 
> > On 11/01/2015 01:59 PM, Daniel Schoepe wrote:
> > > On Sat, 31 Oct 2015 21:31 +0100, Alex wrote:
> > > 
> > > Here are some screenshots. It basically looks the same as a normal 
> > > xmonad installation with the addition of the colored window
> > > decorations. I don't use the spiral layout, but it should be
> > > sufficient get an idea of how it will look anyway. [...]
> > Thank you very much, I like your results a lot - I will be trying
> > xmonad as soon as I have a little spare time...
> > 
> > - -- 
> > Alex
> > -BEGIN PGP SIGNATURE-
> > Version: GnuPG v2
> > 
> > iQIcBAEBCAAGBQJWNhfRAAoJENNOJZnNP8uDOX8QAJIarNCaxRa9GulRN/d7D+HA
> > lgg5WEaa6XUm0ygX9kYrpwS+Iq8Fb83xTMR0TRaAEc6luky1qeG+CprHf22qLjNY
> > lf2VBR7uU6pq5xKdGPUVBG97hflHmm54JE76rFXY2BmXgXgTvY9iWLICO5Wcrcwh
> > C3Cb8z7u/aDTE3PlC5VSiz/1QcN0UZE4q6sM7iIz5VGtOzjSJU7CT774qnDmo4ga
> > mkf0JkHPwEJnSmjV5OxV13/iG4G4pNsXrZd+Pl92E2ELT8nvJIFmuMVTLTG+NMXG
> > fr/yDXbJ2FdgPhepovTETiQIgxz4oVZyEHe5nTeCdCGRldKpkmVPeSjzRWCSeFux
> > Md4DK8Tc+dLXTx7QMBDlaV8ymEBLBJjA+XQQzaNNRVPQp3QFaEUknPmdhyIzU8ud
> > S0ueLvz9kyVds6Tm0SjGlfgnTlGXW6TnuHfUZkDOuZLDxRknojpULCABzSZqA5+y
> > f56n68RZNXumzW5g8G/xcalO2RxNCsNflrpyFToMkseLSmT8md7Brl4u8TS5vA0O
> > OLLBegp8O07pWC/LbjIigbMzaoS6zQDHkJ/+SBTancTKoPiY+sJbqEXzD+QDBhKm
> > wJ8GPfLVxpDLvCn8luZnen7bmIBjTS+aBx5eOmEDQwlrrXUO9nFGhlTWmHp1SwPX
> > 3kcVWHg1wbKfTjc32xbg
> > =jElg
> > -END PGP SIGNATURE-
> 
> Hi Daniel, I am trying to build your xmonad version but I have problems with 
> some unbuildable library, but I don't know how I would look for that library.
> 
> Could you help me with this?
> Thanks.
> 
> Resolving dependencies...
> Configuring xmonad-0.12...
> Failed to install xmonad-0.12
> Build log ( 
> /home/user/.cabal/logs/ghc-8.2.2/xmonad-0.12-FUpDXVryp86B9yS3zn4k4c.log ):
> cabal: Entering directory '.'
> Configuring xmonad-0.12...
> Error: Dependency on unbuildable library from xmonad
> cabal: Leaving directory '.'
> cabal: Error: some packages failed to install:
> xmonad-0.12-FUpDXVryp86B9yS3zn4k4c failed during the configure step. The
> exception was:
> ExitFailure 1

Ok, I have changed X11 library maximum version in xmonad.cabal and it's worked.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/86bf2c2f-83b8-42d0-81c8-ed26fbbe0108%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] How do I install programs in Windows 7 Qube?

[oak2572]

Installer programs I believe need to be run from the windows os, so not sure 
how to copy it to the desktop of the os to run it.

Also, can't enter fullscreen in win7, it stays small even when I click 
"fullscreen" in dropdown.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/eadc77e7-59f6-414e-8c97-c97af383f2aa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes integration for xmonad

[nestorock75]

El domingo, 1 de noviembre de 2015, 14:47:00 (UTC+1), Alex  escribió:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> On 11/01/2015 01:59 PM, Daniel Schoepe wrote:
> > On Sat, 31 Oct 2015 21:31 +0100, Alex wrote:
> > 
> > Here are some screenshots. It basically looks the same as a normal 
> > xmonad installation with the addition of the colored window
> > decorations. I don't use the spiral layout, but it should be
> > sufficient get an idea of how it will look anyway. [...]
> Thank you very much, I like your results a lot - I will be trying
> xmonad as soon as I have a little spare time...
> 
> - -- 
> Alex
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
> 
> iQIcBAEBCAAGBQJWNhfRAAoJENNOJZnNP8uDOX8QAJIarNCaxRa9GulRN/d7D+HA
> lgg5WEaa6XUm0ygX9kYrpwS+Iq8Fb83xTMR0TRaAEc6luky1qeG+CprHf22qLjNY
> lf2VBR7uU6pq5xKdGPUVBG97hflHmm54JE76rFXY2BmXgXgTvY9iWLICO5Wcrcwh
> C3Cb8z7u/aDTE3PlC5VSiz/1QcN0UZE4q6sM7iIz5VGtOzjSJU7CT774qnDmo4ga
> mkf0JkHPwEJnSmjV5OxV13/iG4G4pNsXrZd+Pl92E2ELT8nvJIFmuMVTLTG+NMXG
> fr/yDXbJ2FdgPhepovTETiQIgxz4oVZyEHe5nTeCdCGRldKpkmVPeSjzRWCSeFux
> Md4DK8Tc+dLXTx7QMBDlaV8ymEBLBJjA+XQQzaNNRVPQp3QFaEUknPmdhyIzU8ud
> S0ueLvz9kyVds6Tm0SjGlfgnTlGXW6TnuHfUZkDOuZLDxRknojpULCABzSZqA5+y
> f56n68RZNXumzW5g8G/xcalO2RxNCsNflrpyFToMkseLSmT8md7Brl4u8TS5vA0O
> OLLBegp8O07pWC/LbjIigbMzaoS6zQDHkJ/+SBTancTKoPiY+sJbqEXzD+QDBhKm
> wJ8GPfLVxpDLvCn8luZnen7bmIBjTS+aBx5eOmEDQwlrrXUO9nFGhlTWmHp1SwPX
> 3kcVWHg1wbKfTjc32xbg
> =jElg
> -END PGP SIGNATURE-

Hi Daniel, I am trying to build your xmonad version but I have problems with 
some unbuildable library, but I don't know how I would look for that library.

Could you help me with this?
Thanks.

Resolving dependencies...
Configuring xmonad-0.12...
Failed to install xmonad-0.12
Build log ( 
/home/user/.cabal/logs/ghc-8.2.2/xmonad-0.12-FUpDXVryp86B9yS3zn4k4c.log ):
cabal: Entering directory '.'
Configuring xmonad-0.12...
Error: Dependency on unbuildable library from xmonad
cabal: Leaving directory '.'
cabal: Error: some packages failed to install:
xmonad-0.12-FUpDXVryp86B9yS3zn4k4c failed during the configure step. The
exception was:
ExitFailure 1

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/51f59ccb-8514-4c40-b7a2-b4b202a8e5fc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Donating to qubes

[rob . cohen]

On Friday, November 2, 2018 at 7:24:30 PM UTC-4, pieter lems wrote:
> Hello again everyone. I'm sorry for posting for the second time today but i 
> have a question related to qubes donations. I know it's possible to donate by 
> using ur credit card and by using bitcoin. The question is as follows: Are 
> there any other options available for donating such as paypal or IDeal (for 
> people from Holland)? If not is it possible to create those options for 
> people that either dont use a credit card or are not familliar with bitcoins?
> Thanks again in advance.

You can pay monthly donations via credit/debit here:

https://opencollective.com/qubes-os

They used to support Bitcoin via Stripe, but that no longer works.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/90e88ed4-6066-4bf1-81a0-e7c7dcf6c896%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Donating to qubes

[Lorenzo Lamas]

On Wednesday, November 7, 2018 at 5:28:00 PM UTC+1, Achim Patzner wrote:
> Am Samstag, den 03.11.2018, 00:24 +0100 schrieb pieter lems:
> Are there any other options available for donating such as paypal
> 
> 
> Just tried it; Open Collective is taking credit cards and Paypal. So go there 
> and donate.
> 
> 
> 
> 
> Achim

Paypal only works for one-time donations, not monthly ones.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a4ea4f3c-20be-4e87-bd8b-76c9bab36e29%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Disabling qubes-netvm

[Matthias Brumm]

Am Sonntag, 30. Juni 2019 11:15:52 UTC+2 schrieb Matthias Brumm:
> I try to get QubesOS running on a MacBook Pro. I am referring to this 
> https://www.qubes-os.org/doc/macbook-troubleshooting/#macbook-pro-retina-15-inch-mid-2015-macbookpro-115
>  number 7. 

I was able to start the rescue system with this: 
https://www.qubes-os.org/doc/uefi-troubleshooting/#accessing-installer-rescue-mode-on-uefi

But there is a tmux session with some panes. How to use the rescue system? How 
to mount the partition with Qubes OS on it?

Matthias

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/41a0a0c0-5e70-4020-94ce-b5e96959fa4f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Update: HCL - LENOVO Thinkpad P51 (20hjs0bx00) for R4.0

[Steve Phillips]

Thanks Michael, that's encouraging.  So you just tried a few Xen/kernel
combos till you found the right one?  Which combo worked?

Thanks again!

--Steve


On Mon, Jul 1, 2019 at 2:09 AM Michael Andersson  wrote:

> Hi,
>
> I have been using qubes + thinkpad p51 over an year now and no big
> problems. Only thing that caused problems was black screen after suspend
> but that was solved with correct XEN/kernel combination.
>
> My p51 is with xeon processor and double gpu
>
>
> Lähetetty Jolla Sailfish -älypuhelimestani.
>   Alkuperäinen viesti
> Lähettäjä: elimist...@gmail.com
> Lähetetty: maanantaina 1. heinäkuuta 2019 10.46
> Päättymisaika: qubes-users
> Aihe: [qubes-users] Re: Update: HCL - LENOVO Thinkpad P51 (20hjs0bx00) for
> R4.0
>
> Hi Sven,
>
> I am almost certainly about to buy
> https://smile.amazon.com/gp/product/B075TH6GBT/ , a ThinkPad P51 with an
> i7-7820HQ -- just like your machine above.
>
> Should be very similarly compatible with Qubes 4.0, I hope.
>
> Are you happy with how your laptop has turned out re: Qubes 4
> compatibility?
>
> Thanks!
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/ab958b70-d0db-438c-928c-2a69d3d2063b%40googlegroups.com
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CANSQPTin9B7yJPLsSh%2B4-o4rq0Z%2BQ7Ogg7tO2HOi1FvLrTkmug%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

VS: [qubes-users] Re: Update: HCL - LENOVO Thinkpad P51 (20hjs0bx00) for R4.0

[Michael Andersson]

Hi,

I have been using qubes + thinkpad p51 over an year now and no big problems. 
Only thing that caused problems was black screen after suspend but that was 
solved with correct XEN/kernel combination.

My p51 is with xeon processor and double gpu


Lähetetty Jolla Sailfish -älypuhelimestani.
  Alkuperäinen viesti  
Lähettäjä: elimist...@gmail.com
Lähetetty: maanantaina 1. heinäkuuta 2019 10.46
Päättymisaika: qubes-users
Aihe: [qubes-users] Re: Update: HCL - LENOVO Thinkpad P51 (20hjs0bx00) for R4.0

Hi Sven,

I am almost certainly about to buy 
https://smile.amazon.com/gp/product/B075TH6GBT/ , a ThinkPad P51 with an 
i7-7820HQ -- just like your machine above.

Should be very similarly compatible with Qubes 4.0, I hope.

Are you happy with how your laptop has turned out re: Qubes 4 compatibility?

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ab958b70-d0db-438c-928c-2a69d3d2063b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190701090931.4669521.2883.10533%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Update: HCL - LENOVO Thinkpad P51 (20hjs0bx00) for R4.0

[elimisteve]

Hi Sven,

I am almost certainly about to buy 
https://smile.amazon.com/gp/product/B075TH6GBT/ , a ThinkPad P51 with an 
i7-7820HQ -- just like your machine above.

Should be very similarly compatible with Qubes 4.0, I hope.

Are you happy with how your laptop has turned out re: Qubes 4 compatibility?

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ab958b70-d0db-438c-928c-2a69d3d2063b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.