Re: [qubes-users] How to deal with Yubikey ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Feb 04, 2018 at 03:42:51PM -, 'awokd' via qubes-users wrote: > On Sun, February 4, 2018 7:16 am, ThierryIT wrote: > > > > > I have check it, but when doing a "dnf list installed "qubes-*" on my > > sys-usb, I can see that qubes-usb-proxy is installed: > > qubes-usb-proxy.noarch 1.0.12-1.fc26 @qubes-vm-r3.2-current Shouldn't > > be: 4.0 current instead ? > > Yes, should be 4.0. Did you see the recommendation in > https://www.qubes-os.org/doc/upgrade-to-r4.0/ to not restore your R3.2 > templates to R4.0? Sounds like that might be what happened. Make sure all > your AppVMs are using an R4.0 template. Exactly. But even on R3.2-based template it should work. Try updating qubes-usb-proxy, the newest version is 1.0.15. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlp4/csACgkQ24/THMrX 1yxUQgf/aiPRiNCz9OAKK95Mnw3zElCNgu+dujpbl755sR1FCU1EaCK5ilztRfAt ciyP5FmhMz+ha9tbG4GpEvrYwJxx4dEqUDegWFo3dspX5j9RS7PXR0DyX989UTsk I2HdEj7N3B7oZnc9xqPCHXJV6RzFAnzaGBrAu7JUbcEj9HFsmHnxQLxq23r8AOJG 4In4Q4ralNALy2RxnwhEBNfcMfG32pzOvkXIkeHzPfD+gjSWDzzcczL0u7lA15Z4 VBRrIGy9SDaeIWYismn4j3WHqnhM1RUoaJsOO/8yqVvwaCW1k+ooYAWUc97ANEfJ BGiG1mAwqqUax5Qg4oOPltJiaW8PAA== =KIs/ -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20180206005851.GC12544%40mail-itl. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Sun, February 4, 2018 7:16 am, ThierryIT wrote: > > I have check it, but when doing a "dnf list installed "qubes-*" on my > sys-usb, I can see that qubes-usb-proxy is installed: > qubes-usb-proxy.noarch 1.0.12-1.fc26 @qubes-vm-r3.2-current Shouldn't > be: 4.0 current instead ? Yes, should be 4.0. Did you see the recommendation in https://www.qubes-os.org/doc/upgrade-to-r4.0/ to not restore your R3.2 templates to R4.0? Sounds like that might be what happened. Make sure all your AppVMs are using an R4.0 template. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e86aec81bd463767ec7ba46bf27ade66.squirrel%40tt3j2x4k5ycaa5zt.onion. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Le samedi 3 février 2018 21:56:04 UTC+2, awokd a écrit : > On Sat, February 3, 2018 2:49 pm, ThierryIT wrote: > > > Attached device seems to work as it should be when this is a mass usb > > storage ... Is there any thing special to install on sys-usb or targeting > > VM for Yubikey ? > > Check out https://github.com/QubesOS/qubes-issues/issues/3525. Think you > missed installing qubes-usb-proxy in your sys-usb's template. I had too > actually, on my R4.0 testbed. I have check it, but when doing a "dnf list installed "qubes-*" on my sys-usb, I can see that qubes-usb-proxy is installed: qubes-usb-proxy.noarch 1.0.12-1.fc26 @qubes-vm-r3.2-current Shouldn't be: 4.0 current instead ? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/19725d7b-221d-4f5c-8b04-8f760593869f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Sat, February 3, 2018 2:49 pm, ThierryIT wrote: > Attached device seems to work as it should be when this is a mass usb > storage ... Is there any thing special to install on sys-usb or targeting > VM for Yubikey ? Check out https://github.com/QubesOS/qubes-issues/issues/3525. Think you missed installing qubes-usb-proxy in your sys-usb's template. I had too actually, on my R4.0 testbed. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3f48851accc2ebd470b5db9fd565f966.squirrel%40tt3j2x4k5ycaa5zt.onion. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Le samedi 3 février 2018 16:44:13 UTC+2, ThierryIT a écrit : > Le samedi 3 février 2018 14:33:17 UTC+2, awokd a écrit : > > On Sat, February 3, 2018 7:16 am, ThierryIT wrote: > > > > >> sys-usb:4-1 Logitech_USB_Receiver > > >> sys-usb:4-2 Yubico_Ybikey_4_U2F+CCID > > > > >> > > >> > > >> qvm-usb attach vm_name sys-usb:4.2 qvm-usb: error: backend vm 'sys-usb' > > >> doesn't expose device '4.2' > > > > You need to use "4-2", not "4.2". > > yes but: Device attached failed . blablabla > > > > > >> And it is not possible for me to un-attached the key through this > > >> widget ... > > > > I noticed that too. Might be > > https://github.com/QubesOS/qubes-issues/issues/3215. > > Same for me under 4.0 rc4 Attached device seems to work as it should be when this is a mass usb storage ... Is there any thing special to install on sys-usb or targeting VM for Yubikey ? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2c9545b3-a09c-45af-b0e5-51c7108f6907%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Le samedi 3 février 2018 14:33:17 UTC+2, awokd a écrit : > On Sat, February 3, 2018 7:16 am, ThierryIT wrote: > > >> sys-usb:4-1 Logitech_USB_Receiver > >> sys-usb:4-2 Yubico_Ybikey_4_U2F+CCID > > >> > >> > >> qvm-usb attach vm_name sys-usb:4.2 qvm-usb: error: backend vm 'sys-usb' > >> doesn't expose device '4.2' > > You need to use "4-2", not "4.2". yes but: Device attached failed . blablabla > > >> And it is not possible for me to un-attached the key through this > >> widget ... > > I noticed that too. Might be > https://github.com/QubesOS/qubes-issues/issues/3215. Same for me under 4.0 rc4 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7bcffb54-8b87-44d3-b2d7-b1996db58e7d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Sat, February 3, 2018 7:16 am, ThierryIT wrote: >> sys-usb:4-1 Logitech_USB_Receiver >> sys-usb:4-2 Yubico_Ybikey_4_U2F+CCID >> >> >> qvm-usb attach vm_name sys-usb:4.2 qvm-usb: error: backend vm 'sys-usb' >> doesn't expose device '4.2' You need to use "4-2", not "4.2". >> And it is not possible for me to un-attached the key through this >> widget ... I noticed that too. Might be https://github.com/QubesOS/qubes-issues/issues/3215. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3bb9bd0e484a0f770b785a62d573e016.squirrel%40tt3j2x4k5ycaa5zt.onion. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Le samedi 3 février 2018 07:59:55 UTC+2, ThierryIT a écrit : > Le samedi 3 février 2018 07:45:16 UTC+2, ThierryIT a écrit : > > Le vendredi 2 février 2018 18:24:02 UTC+2, awokd a écrit : > > > On Fri, February 2, 2018 6:03 am, ThierryIT wrote: > > > > > > > > > > > I have installed "qubes-usb-proxy" on my StandaloneVM. > > > > -> qvm-usb l : sys-usb:4-2 Yubico_Yubikey_4_U2F+CCID > > > > > > > > > > > > -> qvm-device usb attach vm-name sys-usb:4-2 : Device attach failed: No > > > > device info received, connection failed, check backend side for details > > > > -> > > > > same things > > > > > > How did you create sys-usb? Have you installed qubes-input-proxy-sender in > > > it? > > > > I have followed the Qubes instructions for Qubes 4: > > https://www.qubes-os.org/doc/usb/ > > > > Yes, sys-usb (Debian 9 template) do have the "qubes-input-proxy-sender" > > installed. > > > > When reading the doc for Qubes 4 and when using the yellow widgets on the > > top right of the desktop, I can see that my Yubikey4 is attached to the > > right VM (eject symbol) but if using, from dom0 console "qvm-usb", I do not > > see that my key is attached to the VM ... > > > > Do I have to re-do my sys-usb with a fedora template ? > > > > Thx > > Something seems to be wrong with the widgets. > After having inserted the key, and using the widget, I can attach the key to > the VM and I am able to see the key attached to the vm because I can see the > "eject symbol" close to the vm. > > When using the dom0 console, and using "qvm-usb" I can see my key: > > sys-usb:4-1 Logitech_USB_Receiver > sys-usb:4-2 Yubico_Ybikey_4_U2F+CCID > > As you can see, I do not see any attached device ... > > The result of this command is: > > qvm-usb attach vm_name sys-usb:4.2 > qvm-usb: error: backend vm 'sys-usb' doesn't expose device '4.2' > > This start to be a problem, because I cannot fully use my laptop if this > function is not working. > > Thx anyway for your big support. > > > > And it is not possible for me to un-attached the key through this widget ... Same problem with a new sys-usb but this time done with Fedora 26 template. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/66dba328-a2ad-4c0f-8996-53f50d02aa4a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Le samedi 3 février 2018 07:45:16 UTC+2, ThierryIT a écrit : > Le vendredi 2 février 2018 18:24:02 UTC+2, awokd a écrit : > > On Fri, February 2, 2018 6:03 am, ThierryIT wrote: > > > > > > > > I have installed "qubes-usb-proxy" on my StandaloneVM. > > > -> qvm-usb l : sys-usb:4-2 Yubico_Yubikey_4_U2F+CCID > > > > > > > > > -> qvm-device usb attach vm-name sys-usb:4-2 : Device attach failed: No > > > device info received, connection failed, check backend side for details -> > > > same things > > > > How did you create sys-usb? Have you installed qubes-input-proxy-sender in > > it? > > I have followed the Qubes instructions for Qubes 4: > https://www.qubes-os.org/doc/usb/ > > Yes, sys-usb (Debian 9 template) do have the "qubes-input-proxy-sender" > installed. > > When reading the doc for Qubes 4 and when using the yellow widgets on the top > right of the desktop, I can see that my Yubikey4 is attached to the right VM > (eject symbol) but if using, from dom0 console "qvm-usb", I do not see that > my key is attached to the VM ... > > Do I have to re-do my sys-usb with a fedora template ? > > Thx Something seems to be wrong with the widgets. After having inserted the key, and using the widget, I can attach the key to the VM and I am able to see the key attached to the vm because I can see the "eject symbol" close to the vm. When using the dom0 console, and using "qvm-usb" I can see my key: sys-usb:4-1 Logitech_USB_Receiver sys-usb:4-2 Yubico_Ybikey_4_U2F+CCID As you can see, I do not see any attached device ... The result of this command is: qvm-usb attach vm_name sys-usb:4.2 qvm-usb: error: backend vm 'sys-usb' doesn't expose device '4.2' This start to be a problem, because I cannot fully use my laptop if this function is not working. Thx anyway for your big support. And it is not possible for me to un-attached the key through this widget ... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8c016872-d5b1-494d-8ea1-b908f9f8b5e6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Le vendredi 2 février 2018 18:24:02 UTC+2, awokd a écrit : > On Fri, February 2, 2018 6:03 am, ThierryIT wrote: > > > > > I have installed "qubes-usb-proxy" on my StandaloneVM. > > -> qvm-usb l : sys-usb:4-2 Yubico_Yubikey_4_U2F+CCID > > > > > > -> qvm-device usb attach vm-name sys-usb:4-2 : Device attach failed: No > > device info received, connection failed, check backend side for details -> > > same things > > How did you create sys-usb? Have you installed qubes-input-proxy-sender in > it? I have followed the Qubes instructions for Qubes 4: https://www.qubes-os.org/doc/usb/ Yes, sys-usb (Debian 9 template) do have the "qubes-input-proxy-sender" installed. When reading the doc for Qubes 4 and when using the yellow widgets on the top right of the desktop, I can see that my Yubikey4 is attached to the right VM (eject symbol) but if using, from dom0 console "qvm-usb", I do not see that my key is attached to the VM ... Do I have to re-do my sys-usb with a fedora template ? Thx -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2172948e-640a-43fd-88bd-37cec3da1b2a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Friday, 2 February 2018 01:03:14 UTC-5, ThierryIT wrote: > Le jeudi 1 février 2018 18:01:21 UTC+2, awokd a écrit : > > On Thu, February 1, 2018 3:46 pm, ThierryIT wrote: > > > What am I doing wrong ? > > > > > > > > > I have a Yubikey4 U2F + CCID. > > > Not detected with "qvm-block" > > > Detected as sys-usb:4-2 by dom0 (qvm-usb). > > > > > > > > > I have tried: > > > > > > > > > - qvm-device usb attach vm_name sys-usb:4-2 (device attached failed) > > > - qvm-device block attach vm_name sys-usb:4-2 (backend vm 'sys-usb' > > > doesn't expose device 4-2) > > > > Another poster said these aren't block devices, so don't try to use those > > commands on it. > > > > "qvm-device usb attach vm_name sys-usb:4-2" should work. What does > > "qvm-usb attach vm_name sys-usb:4-2" do? > > > > If it's the same error, did you install qubes-usb-proxy in your templates? > > See https://www.qubes-os.org/doc/usb/. > > I have installed "qubes-usb-proxy" on my StandaloneVM. > -> qvm-usb l : sys-usb:4-2 Yubico_Yubikey_4_U2F+CCID > > -> qvm-device usb attach vm-name sys-usb:4-2 : Device attach failed: No > device info received, connection failed, check backend side for details > -> same things You are using qvm-usb command to list... but are using "qvm-device" to attach? I don't think that is a valid command in Qubes 3.2. Do you mean qvm-pci? You should be using qvm-usb to both list, and attach/detach usb devices. Run qvm-usb -h... follow the manual. usage: qvm-usb -a [options] : -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2392b43e-4964-4322-944c-9ff6771098b3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Fri, February 2, 2018 6:03 am, ThierryIT wrote: > > I have installed "qubes-usb-proxy" on my StandaloneVM. > -> qvm-usb l : sys-usb:4-2 Yubico_Yubikey_4_U2F+CCID > > > -> qvm-device usb attach vm-name sys-usb:4-2 : Device attach failed: No > device info received, connection failed, check backend side for details -> > same things How did you create sys-usb? Have you installed qubes-input-proxy-sender in it? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c44ec4660c7ec36039088ec5550addec.squirrel%40tt3j2x4k5ycaa5zt.onion. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Le jeudi 1 février 2018 18:01:21 UTC+2, awokd a écrit : > On Thu, February 1, 2018 3:46 pm, ThierryIT wrote: > > What am I doing wrong ? > > > > > > I have a Yubikey4 U2F + CCID. > > Not detected with "qvm-block" > > Detected as sys-usb:4-2 by dom0 (qvm-usb). > > > > > > I have tried: > > > > > > - qvm-device usb attach vm_name sys-usb:4-2 (device attached failed) > > - qvm-device block attach vm_name sys-usb:4-2 (backend vm 'sys-usb' > > doesn't expose device 4-2) > > Another poster said these aren't block devices, so don't try to use those > commands on it. > > "qvm-device usb attach vm_name sys-usb:4-2" should work. What does > "qvm-usb attach vm_name sys-usb:4-2" do? > > If it's the same error, did you install qubes-usb-proxy in your templates? > See https://www.qubes-os.org/doc/usb/. I have installed "qubes-usb-proxy" on my StandaloneVM. -> qvm-usb l : sys-usb:4-2 Yubico_Yubikey_4_U2F+CCID -> qvm-device usb attach vm-name sys-usb:4-2 : Device attach failed: No device info received, connection failed, check backend side for details -> same things -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c68b7b91-d055-4baf-9a0f-0c86f98c5163%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Thu, February 1, 2018 3:46 pm, ThierryIT wrote: > What am I doing wrong ? > > > I have a Yubikey4 U2F + CCID. > Not detected with "qvm-block" > Detected as sys-usb:4-2 by dom0 (qvm-usb). > > > I have tried: > > > - qvm-device usb attach vm_name sys-usb:4-2 (device attached failed) > - qvm-device block attach vm_name sys-usb:4-2 (backend vm 'sys-usb' > doesn't expose device 4-2) Another poster said these aren't block devices, so don't try to use those commands on it. "qvm-device usb attach vm_name sys-usb:4-2" should work. What does "qvm-usb attach vm_name sys-usb:4-2" do? If it's the same error, did you install qubes-usb-proxy in your templates? See https://www.qubes-os.org/doc/usb/. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c1c03258b0d8c328fff7a3550edb84fe.squirrel%40tt3j2x4k5ycaa5zt.onion. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
What am I doing wrong ? I have a Yubikey4 U2F + CCID. Not detected with "qvm-block" Detected as sys-usb:4-2 by dom0 (qvm-usb). I have tried: - qvm-device usb attach vm_name sys-usb:4-2 (device attached failed) - qvm-device block attach vm_name sys-usb:4-2 (backend vm 'sys-usb' doesn't expose device 4-2) ... Lost I am :) Le jeudi 1 février 2018 13:28:59 UTC+2, awokd a écrit : > On Thu, February 1, 2018 8:58 am, ThierryIT wrote: > > If I did understood well, when using Qubes 4.0r3, there is no sys-usb ... > > If you chose not to set one up on install there wouldn't be, but usually > you should unless using a usb keyboard maybe. You can still add one now; > check the docs. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a3023cda-4c12-4c74-9e2b-88c55e7d6bad%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Thu, February 1, 2018 8:58 am, ThierryIT wrote: > If I did understood well, when using Qubes 4.0r3, there is no sys-usb ... If you chose not to set one up on install there wouldn't be, but usually you should unless using a usb keyboard maybe. You can still add one now; check the docs. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e1faa309e2e2704c82fbabcacb489fad.squirrel%40tt3j2x4k5ycaa5zt.onion. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
If I did understood well, when using Qubes 4.0r3, there is no sys-usb ... Le jeudi 1 février 2018 02:31:50 UTC+2, joev...@gmail.com a écrit : > qvm-usb command shows you how to attach USB devices to VMs. There is no GUI > method like there is for block devices. > > Remember, Yubikey is not a storage/block device. It is a USB that acts more > like a HID keyboard. > > Mine works on 3.2 just fine using sys-usb, then attaching to whatever VM > needs it. > > On Wednesday, 31 January 2018 09:14:36 UTC-5, ThierryIT wrote: > > How did you attached it ? I am trying without success ... I can attached it > > from dom0 using: qvm-block a vm_name dom0:sdd > > Is it correct under Qubes4.0r3 ? > > > > > > Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit : > > > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > > > > Hello, > > > > > > > > I have today to deal with two problems: > > > > > > > > 1) I am using Yubikey to be authentified on some web site like Github > > > > ... > > > > 2) I am using Yubikey to stock my PGP keys and to use them with mainly > > > > my emails (Thinderbird+Enigmail) > > > > > > > > What to do under Qubes to make this possible ? > > > > I have already sys-usb running. > > > > > > On Qubes 4.0rc3, I just attach it to the vm as required, and use it. > > > No configuratino is required. > > > > > > Kushal > > > -- > > > Staff, Freedom of the Press Foundation > > > CPython Core Developer > > > Director, Python Software Foundation > > > https://kushaldas.in -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/6e3c705d-361d-495f-8f3c-5b2785dc10b3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
qvm-usb command shows you how to attach USB devices to VMs. There is no GUI method like there is for block devices. Remember, Yubikey is not a storage/block device. It is a USB that acts more like a HID keyboard. Mine works on 3.2 just fine using sys-usb, then attaching to whatever VM needs it. On Wednesday, 31 January 2018 09:14:36 UTC-5, ThierryIT wrote: > How did you attached it ? I am trying without success ... I can attached it > from dom0 using: qvm-block a vm_name dom0:sdd > Is it correct under Qubes4.0r3 ? > > > Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit : > > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > > > Hello, > > > > > > I have today to deal with two problems: > > > > > > 1) I am using Yubikey to be authentified on some web site like Github ... > > > 2) I am using Yubikey to stock my PGP keys and to use them with mainly my > > > emails (Thinderbird+Enigmail) > > > > > > What to do under Qubes to make this possible ? > > > I have already sys-usb running. > > > > On Qubes 4.0rc3, I just attach it to the vm as required, and use it. > > No configuratino is required. > > > > Kushal > > -- > > Staff, Freedom of the Press Foundation > > CPython Core Developer > > Director, Python Software Foundation > > https://kushaldas.in -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/008377f5-41d4-4460-ae36-2accec859729%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
How did you attached it ? I am trying without success ... I can attached it from dom0 using: qvm-block a vm_name dom0:sdd Is it correct under Qubes4.0r3 ? Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit : > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > > Hello, > > > > I have today to deal with two problems: > > > > 1) I am using Yubikey to be authentified on some web site like Github ... > > 2) I am using Yubikey to stock my PGP keys and to use them with mainly my > > emails (Thinderbird+Enigmail) > > > > What to do under Qubes to make this possible ? > > I have already sys-usb running. > > On Qubes 4.0rc3, I just attach it to the vm as required, and use it. > No configuratino is required. > > Kushal > -- > Staff, Freedom of the Press Foundation > CPython Core Developer > Director, Python Software Foundation > https://kushaldas.in -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4f642009-c092-4a59-963f-1b9d8728b52f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Wednesday, January 24, 2018 at 3:58:25 PM UTC+1, ThierryIT wrote: > Hi, > > If using sys-usb, I am not able to use the cli: qvm-usb > How to mount it ? > I can see on my sys-usb VM that the system see my key. > > Thx > > Le mardi 23 janvier 2018 14:42:18 UTC+2, Matty South a écrit : > > On Tuesday, January 23, 2018 at 2:11:33 AM UTC-6, ThierryIT wrote: > > > I am on R3.2 and I would like to avoid upgrading to 4.0 :) > > > > > > Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit : > > > > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > > > > > Hello, > > > > > > > > > > I have today to deal with two problems: > > > > > > > > > > 1) I am using Yubikey to be authentified on some web site like Github > > > > > ... > > > > > 2) I am using Yubikey to stock my PGP keys and to use them with > > > > > mainly my emails (Thinderbird+Enigmail) > > > > > > > > > > What to do under Qubes to make this possible ? > > > > > I have already sys-usb running. > > > > > > > > On Qubes 4.0rc3, I just attach it to the vm as required, and use it. > > > > No configuratino is required. > > > > > > > > Kushal > > > > -- > > > > Staff, Freedom of the Press Foundation > > > > CPython Core Developer > > > > Director, Python Software Foundation > > > > https://kushaldas.in > > > > I can confirm Kushal's experience. Two things I wanted to point out: > > 1) install yubikey software in the target vm template: > > sudo dnf install yubioath-desktop [for Fedora template] > > > > 2) I attach it to the desired VM in dom0 terminal using > > qvm-usb -a ... > > > > Then you can double-checke that everything is working here: > > https://demo.yubico.com/ > > > > Hope that helps some folks out! Did you install the Qubes USB Proxy? You need that to use qvm-usb. Some relevant background knowledge might be due first. For starts, sys-usb in and on itself adds no features, no functionality, it's specifically and purely a self-defense mechanism to protect dom0, nothing more, nothing less. It does however move all your USB to sys-usb, giving you a means to use USB the same way, as if it was used in dom0. The USB Proxy, however, does add some functionality, and it can be installed in whichever VM you keep your USB Controllers. Be it sys-usb or your wibbly-wobbly-timey-wimey VM, in other words, it doesn't matter where, as long as it is kept safely away from dom0. If you use USB keyboard or USB mouse, however, you need to be careful you don't lock yourself out of your system, especially if sys-usb has automatic start on boot. If USB is the only input you have for keyboard/mouse, then be careful of what you do, or at least make a backup of your system first, just in case you make a mistake. https://www.qubes-os.org/doc/usb/ Go here, you don't need the full guide. Just scroll (or cftl+f to search) for the headline containing "Qubes-USB-Proxy", it's quite a bit down the page near the bottom. Once you installed the Qubes Proxy package, you can go the the next headline, which shows you how to use it. Keep in mind, you need to type this in every time you need to switch it to another VM, or if you stop/start your VM and need it again. This is however far, far easier in Qubes 4, which has a widget that allows for this with 3 small quick clicks of your mouse. So this becomes much easier in Qubes 4, and it's likely not too far from final release now. You could however make it easy in Qubes 3.2. if you use the same few VM's for the USB. For example you can write a small simple script, and then simply keybind the script with "qvm-run sys-usb bash 'path-to-your-'qvm-usb'-script". You execute qvm-run in dom0, and you execute qvm-usb in your sys-usb (or whichever VM yo use). To keybind, go to Qubes menu ---> System Tools --> Keyboard settings --> Shortcuts tab --> Click "Add", and type in the qvm-run command. For example you can pass your Yubi-key to VM-A with Ctrl+Shift+Alt+A or your VM-C with Ctrl+Shift+Alt+K. Whatever you can imagine or desire, the Ctrl+Shift+Alt is nice because it's easy to just hold all 3 keys down without worring about which one to holddown, while also not causing many keybind conflicts. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/dec695a9-5931-408c-84e4-ba13f9549f46%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Hi, If using sys-usb, I am not able to use the cli: qvm-usb How to mount it ? I can see on my sys-usb VM that the system see my key. Thx Le mardi 23 janvier 2018 14:42:18 UTC+2, Matty South a écrit : > On Tuesday, January 23, 2018 at 2:11:33 AM UTC-6, ThierryIT wrote: > > I am on R3.2 and I would like to avoid upgrading to 4.0 :) > > > > Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit : > > > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > > > > Hello, > > > > > > > > I have today to deal with two problems: > > > > > > > > 1) I am using Yubikey to be authentified on some web site like Github > > > > ... > > > > 2) I am using Yubikey to stock my PGP keys and to use them with mainly > > > > my emails (Thinderbird+Enigmail) > > > > > > > > What to do under Qubes to make this possible ? > > > > I have already sys-usb running. > > > > > > On Qubes 4.0rc3, I just attach it to the vm as required, and use it. > > > No configuratino is required. > > > > > > Kushal > > > -- > > > Staff, Freedom of the Press Foundation > > > CPython Core Developer > > > Director, Python Software Foundation > > > https://kushaldas.in > > I can confirm Kushal's experience. Two things I wanted to point out: > 1) install yubikey software in the target vm template: > sudo dnf install yubioath-desktop [for Fedora template] > > 2) I attach it to the desired VM in dom0 terminal using > qvm-usb -a ... > > Then you can double-checke that everything is working here: > https://demo.yubico.com/ > > Hope that helps some folks out! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4970a84c-0846-4a18-87fc-476abb1a1684%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
Interesting ... The software has to be installed in the sys-usb template, for me fedora 26 ? Le mardi 23 janvier 2018 14:42:18 UTC+2, Matty South a écrit : > On Tuesday, January 23, 2018 at 2:11:33 AM UTC-6, ThierryIT wrote: > > I am on R3.2 and I would like to avoid upgrading to 4.0 :) > > > > Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit : > > > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > > > > Hello, > > > > > > > > I have today to deal with two problems: > > > > > > > > 1) I am using Yubikey to be authentified on some web site like Github > > > > ... > > > > 2) I am using Yubikey to stock my PGP keys and to use them with mainly > > > > my emails (Thinderbird+Enigmail) > > > > > > > > What to do under Qubes to make this possible ? > > > > I have already sys-usb running. > > > > > > On Qubes 4.0rc3, I just attach it to the vm as required, and use it. > > > No configuratino is required. > > > > > > Kushal > > > -- > > > Staff, Freedom of the Press Foundation > > > CPython Core Developer > > > Director, Python Software Foundation > > > https://kushaldas.in > > I can confirm Kushal's experience. Two things I wanted to point out: > 1) install yubikey software in the target vm template: > sudo dnf install yubioath-desktop [for Fedora template] > > 2) I attach it to the desired VM in dom0 terminal using > qvm-usb -a ... > > Then you can double-checke that everything is working here: > https://demo.yubico.com/ > > Hope that helps some folks out! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/96ce28fa-4013-4db4-8a9a-fdacefdbf438%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Tuesday, January 23, 2018 at 2:11:33 AM UTC-6, ThierryIT wrote: > I am on R3.2 and I would like to avoid upgrading to 4.0 :) > > Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit : > > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > > > Hello, > > > > > > I have today to deal with two problems: > > > > > > 1) I am using Yubikey to be authentified on some web site like Github ... > > > 2) I am using Yubikey to stock my PGP keys and to use them with mainly my > > > emails (Thinderbird+Enigmail) > > > > > > What to do under Qubes to make this possible ? > > > I have already sys-usb running. > > > > On Qubes 4.0rc3, I just attach it to the vm as required, and use it. > > No configuratino is required. > > > > Kushal > > -- > > Staff, Freedom of the Press Foundation > > CPython Core Developer > > Director, Python Software Foundation > > https://kushaldas.in I can confirm Kushal's experience. Two things I wanted to point out: 1) install yubikey software in the target vm template: sudo dnf install yubioath-desktop [for Fedora template] 2) I attach it to the desired VM in dom0 terminal using qvm-usb -a ... Then you can double-checke that everything is working here: https://demo.yubico.com/ Hope that helps some folks out! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2431a4fb-497d-4dea-b05e-2ea4d19afca3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
I am on R3.2 and I would like to avoid upgrading to 4.0 :) Le mardi 23 janvier 2018 09:51:17 UTC+2, Kushal Das a écrit : > On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > > Hello, > > > > I have today to deal with two problems: > > > > 1) I am using Yubikey to be authentified on some web site like Github ... > > 2) I am using Yubikey to stock my PGP keys and to use them with mainly my > > emails (Thinderbird+Enigmail) > > > > What to do under Qubes to make this possible ? > > I have already sys-usb running. > > On Qubes 4.0rc3, I just attach it to the vm as required, and use it. > No configuratino is required. > > Kushal > -- > Staff, Freedom of the Press Foundation > CPython Core Developer > Director, Python Software Foundation > https://kushaldas.in -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0dd411e2-34ba-4fec-9ce4-65a5b92103d2%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to deal with Yubikey ?
On Tue, Jan 23, 2018 at 12:17 PM, ThierryIT wrote: > Hello, > > I have today to deal with two problems: > > 1) I am using Yubikey to be authentified on some web site like Github ... > 2) I am using Yubikey to stock my PGP keys and to use them with mainly my > emails (Thinderbird+Enigmail) > > What to do under Qubes to make this possible ? > I have already sys-usb running. On Qubes 4.0rc3, I just attach it to the vm as required, and use it. No configuratino is required. Kushal -- Staff, Freedom of the Press Foundation CPython Core Developer Director, Python Software Foundation https://kushaldas.in -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAAzeMbzxJ%2B_c-gGf-cXgzXQB41qnKfQOV5b88CyEF8GYAVRYCA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] How to deal with Yubikey ?
Hello, I have today to deal with two problems: 1) I am using Yubikey to be authentified on some web site like Github ... 2) I am using Yubikey to stock my PGP keys and to use them with mainly my emails (Thinderbird+Enigmail) What to do under Qubes to make this possible ? I have already sys-usb running. Thx -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b46f0959-5bd4-46ce-8ef7-8e290d99c69b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
