[qubes-users] Re: Thinkpad T460

2016-12-03 Thread Jan Betlach
On Saturday, December 3, 2016 at 8:41:49 PM UTC+1, Bernd Lorenzen wrote:
> Hello,
> 
> my Question is how i set the charge thresholds for my Lenovo Thinkpad T460.
> 
> I have installed the following packages tlp, tlp-rdw,tp-smapi-dkms and 
> acpi-call-dkms in both fedora aind debian template. Afterwards i changed 
> the thresholds in the config file /etc/default/tlp in both templates and 
> in dom0. But it doesn`t work. Do you know a workaround for this. I hope 
> did not forget some useful information for you.
> 
> Kind regards
> 
> 
> Bernd Lorenzen


Has the service been started?
# systemctl status tlp

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/66729a6a-2e8f-4ceb-be9a-9ba56cde5bda%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Proper way of implementing unlock with keyfile instead of passphrase

2016-09-17 Thread Jan Betlach
On Thursday, September 15, 2016 at 7:38:03 PM UTC+2, 0mn1...@gmail.com wrote:
> Good evening.
> 
> I'm hoping someone can give me a hand here. What I am trying to do is setup 
> my Qubes install so that "/" is unlocked with a keyfile and not a passphrase. 
> Preferably an encrypted keyfile that can be decrypted using keyscript in 
> /etc/crypttab. 
> 
> Adding a keyfile using cryptsetup and then adding an entry in /etc/crypttab 
> doesn't seem to work and I do not think forcing dracut to omit "systemd" is a 
> good idea, from my limited know-how.
> 
> Another solution I found is to copy the keyfile to initramfs but if it isn't 
> encrypted, another bad idea. I have not yet found a way to get keyscript to 
> work in order to encrypt the keyfile copied to initramfs.
> 
> Any information and help on this matter is greatly appreciated.

I am not sure if I can help with Qubes (Fedora), however on Arch I just create 
4096 bit key and add the keyfile to LUKS (cryptsetup luksAddKey /dev/sdx 
/crypted_keyfile.bin). I also make sure that nobody except Grub can read the 
file (chmod 000 / crypted_keyfile.bin). 
Then I add the crypted_keyfile for the LUKS partition to initramfs (adding 
FILES="/crypted_keyfile.bin" to mkinitcpio.conf and generate initramfs).
Obviously the crypted_keyfile can be located on separate USB flash...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0e5b8323-ec08-446d-b06c-6b628db037fc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] 4.0 ETA?

2016-09-12 Thread Jan Betlach

I am about to reinstall my Qubes. Does it make sense to wait for 4.0 release 
(obviously depends on its ETA) or should I install current 3.2 and upgrade to 
4.0 later. The question is how difficult it is to upgrade if possible at all.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d0f65c1f-f3cb-4ffe-9afb-d133d13cc96b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: OpenBSD Xen PHVM

2016-09-06 Thread Jan Betlach
On Tuesday, September 6, 2016 at 9:38:59 AM UTC+2, Jan Betlach wrote:
> Looks like Open BSD implemented Xen PHVM drivers in 6.0. How exactly does it 
> help to run OpenBSD guest in Qubes?

There are more details in the paper here: 
https://www.openbsd.org/papers/asiabsdcon2016-xen-paper.pdf.

Wouldn't it be great to build a pf based firewall in Qubes?  :-)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5080a7b6-fd86-4b26-a043-3c553596115e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Windows update

2016-08-29 Thread Jan Betlach
On Monday, August 29, 2016 at 12:55:54 PM UTC-4, Andrew David Wong wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2016-08-29 07:49, Foppe de Haan wrote:
> > On Monday, August 29, 2016 at 4:31:37 PM UTC+2, Jan Betlach wrote:
> >> I have installed standalone HVM with Windows 7 Pro. The 
> >> installation went smooth along with the windows tools from 
> >> testing repo. I do have however a problem - the windows update 
> >> initiated from within the VM is not working. It is "Checking for
> >>  updates" for hours and never ends. Networking (internet) inside
> >>  the VM works without problems. Any ideas?
> > 
> > I had the same experience. WSUS provides a (suboptimal) solution. 
> > Not a clue what causes it, though.
> > 
> 
> That's just how Windows Update works (blame Microsoft):
> 
> https://superuser.com/questions/951960/windows-7-sp1-windows-update-
> stuck-checking-for-updates
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> -BEGIN PGP SIGNATURE-
> 
> iQIcBAEBCgAGBQJXxGkKAAoJENtN07w5UDAwtH4P/1HMgqg5jjB2SVOBIYHJJCA+
> m5ZkYEf1Kv9vZhdhAdfvlT7bvDZEQJfmZ6Eyg02KMAqRaPB0Kb1Lj0KI/rj3u+30
> 4jdKnTPv1GhHbChcOCS7DAiRw1X/ap3Lx1GJaYX+FrXuHreewivJLYLfJgBIxHF5
> FoaY7VmiQfRxiqcy1uHm8vZcs0miT1rzcCJ7wdAvNG9J8mnvGNRb1W4gE39lnZcM
> 4uhqVCEstwm5vhIyoYL/PjBALxaXfTcutyC9mVC0QvGHA6flKTKvgxGEvzLH3nSX
> HZDC7dhiptrgBcAbaxpVcQ1ahZ35rQDI7e0doB+NRuq5QlamSkRkRp50wRyK76WZ
> 3zbV763YYfHVCA3SnCkux/jYvy6KltWa5AxNVJX18REUdQFS7Xyq5QF7wmv18xVw
> YJVj+KEEP+N3ogAeQYwH+ukembW3TmTc2xtl9qmqc70eSoS40LtlM4n5TrrAunbt
> +KjTriT1pHgSQOkvLJ8Dnw4C5+/50SnsdKf7CmJDN1iG9OvsljULBHaosvcsb76K
> Y3qQBiT0Qmok0zBeQOyJaBUfr5mtq7YnDHyeBZBeke/QgGqyPfTx92PXM/vu/7qn
> DzslZHWhlO1r5Eo7PZllQX5mfB0Mr7zuaEkwJnR3wBetotzNssw8W/wMski5nZ0I
> K0RU7jpVjWhRR0fDLyCw
> =wOjR
> -END PGP SIGNATURE-

Thank you Andrew, looks like the first fix helped. Downloading updates now.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fa6063a8-c393-4e0a-a878-4e0844895ddf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] sys-firewall

2016-08-29 Thread Jan Betlach
I've created minimal Fedora 23 template for sys-net, sys-usb and sys-firewall. 
Obvious benefit is RAM usage. Works perfectly so far.
During that process I've thougt whether it is a good idea to use Fedora 23 as a 
template for sys-firewall. Would not be possible and better to use something 
like MirageOS or ven pfSense for firewall in Qubes?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9f9b870e-5ff9-4c5c-b2f1-dd7808043068%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Windows update

2016-08-29 Thread Jan Betlach

I have installed standalone HVM with Windows 7 Pro. The installation went 
smooth along with the windows tools from testing repo.
I do have however a problem - the windows update initiated from within the VM 
is not working. It is "Checking for updates" for hours and never ends. 
Networking (internet) inside the VM works without problems.
Any ideas?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0eef3161-192b-4e67-a821-e889188ae717%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.