[qubes-users] Help with hardware

2019-04-27 Thread 'mathab' via qubes-users
Hello,
I would like to install qubes os but I am having trouble with hardware. My 
current desktop setup is:
ryzen 5 2600
gtx 970
TUF B450M-PLUS GAMING
8GB RAM
but it seems like i have trouble with these technologies: HAP/SLAT/EPT/RVI
What changes would I need to make for it to work?
Also I am considering buying a laptop is there any laptop that is under 300 
euro (can be used) that will run this os?
Where I live there is a lot of used thinkpads.

Thanks for reading this and I hope you will help me out.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/H6P43J6xUrGTQmDz4Tmm-wZPedJlaQkpS_9u9Cz6Y9677uM1gkxjmCucqMhyYg7GtYAJZOOmKHvrcP8KW5oiN9Wkyhe7N6LBXEIMMDhL7KE%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Help with hardware

2019-04-27 Thread Stuart Perkins
Many thinkpad models are on the compatible list.  I use a T520 which has been 
further secured by coreboot.

disclaimer:...  I'm still running 3.2 as I have not had the opportunity to 
upgrade.  My USB ports on this motherboard are not working, and I want to get a 
fully functional one setup before I install 4...



On Sat, 27 Apr 2019 09:08:35 +
"'mathab' via qubes-users"  wrote:

>Hello,
>I would like to install qubes os but I am having trouble with hardware. My 
>current desktop setup is:
>ryzen 5 2600
>gtx 970
>TUF B450M-PLUS GAMING
>8GB RAM
>but it seems like i have trouble with these technologies: HAP/SLAT/EPT/RVI
>What changes would I need to make for it to work?
>Also I am considering buying a laptop is there any laptop that is under 300 
>euro (can be used) that will run this os?
>Where I live there is a lot of used thinkpads.
>
>Thanks for reading this and I hope you will help me out.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190427061139.37de1434%40gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

2019-04-27 Thread alex . jones . 4416
On Thursday, April 25, 2019 at 10:20:32 PM UTC, Daniil Travnikov wrote:
> I am stuck on this process already twice.
> 
> When I put the command
> 
> Download sources:
> repo sync --no-tags --no-clone-bundle --force-sync -j$( nproc --all )
> 
> 
> and when it show this:
> 
> 
> From git://git.osdn.net/gitroot/android-x86/platform/frameworks/av
>  * [new branch]  nougat-x86 -> x86/nougat-x86
> Fetching project platform/external/android-clat
> remote: Counting objects: 1, done
> remote: Finding sources: 100% (793/793)   
> remote: Total 793 (delta 244), reused 793 (delta 244)
> Receiving objects: 100% (793/793), 517.38 KiB | 0 bytes/s, done.
> Resolving deltas: 100% (244/244), done.
> From https://android.googlesource.com/platform/external/android-clat
>  * [new tag] android-7.1.2_r36 -> android-7.1.2_r36
> 
> 
> I got nothing, I mean it's look like freeze.

Did you try to remove downloaded repo and sync it again from scratch? The 
OpenGAPPS repo changed, see below, maybe it's somehow related.

I'd recommend to build Android 8 release, the mouse works fine there. Also the 
Settings bug is fixed if you use userdebug build variant instead of eng.
The guide in the same as in first post except:

Android 8 will take 211GB to build. I've build it with 32GB RAM without swap, 
maybe it'll work with less RAM.

repo init -u git://git.osdn.net/gitroot/android-x86/manifest -b oreo-x86 -m 
android-x86-8.1-r1.xml
instead of 
repo init -u git://git.osdn.net/gitroot/android-x86/manifest -b 
android-x86-7.1-r2

https://github.com/opengapps/;  />
https://gitlab.nezorfla.me/opengapps/;  />




instead of
https://github.com/opengapps/;  />





lunch android_x86_64-userdebug
instead of
lunch android_x86_64-eng

/usr/bin/make -C kernel O=$OUT/obj/kernel ARCH=x86_64 menuconfig
instead of
make -C kernel O=$OUT/obj/kernel ARCH=x86_64 menuconfig

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/abcd98d7-6317-483d-ad6f-b58dbe1ef79c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] GPU vs NIC: firmware security

2019-04-27 Thread taii...@gmx.com
On 04/15/2019 12:28 AM, demioben...@gmail.com wrote:
> My laptop (Lenovo P51) works fantastically with QubesOS.
>
> It has two GPUs: Intel integrated graphics and a discrete NVIDIA card.  For 
> gaming, I am interested in pass-through of one (NOT both) to a VM.

Impossible.

Optimus works via muxing the dGPU signal through the iGPU which results
in you being able to the same muxing with an eGPU if you have one set up
and only an iGPU etc.

>
> I believe that the integrated graphics controls the internal monitor, and 
> that all external monitors are connected to the dedicated graphics card.  Can 
> someone confirm this, and can this be changed?
>
> I will not give another VM control of my primary display, for obvious 
> reasons.  I also consider the VM that I would like to give GPU access to to 
> be highly untrustworthy and potentially compromised, since it will be running 
> untrustworthy games.  My current plan is to give the gaming VM access to one 
> monitor, while I use the other monitor for normal operation of QubesOS.
>
> My main questions are:
>
> * How feasible are firmware attacks on the graphics card,

Very Expert level, it is not easy to do and still have it be a graphics
card.

You probably don't have anything that valuable to steal or hack.

I have only heard of hacked nics, serial cards etc more simple stuff not
gpus.

Messing around with the option rom is alot easier though but you can set
the VMM to not pass that memory region so afaik it can't be flashed.

> if I choose the NVIDIA card?  I trust that the IOMMU will keep me safe from a 
> compromised card.

Not on a system with black boxes and proprietary firmware, for DRM
reasons the iGPU and dGPU are tightly linked to the ME - and the ME is
not subject to IOMMU controls.

All new x86 stuff is not owner controlled thus ones libre-IOMMU options
are limited to some older x86 stuff in the narrow window between IOMMU
becoming available and AMD closing up their firmware or OpenPOWER (like
blackbird/talos) etc although there aren't many POWER games right now
unfortunately so it is a workstation/server platform.

>but only if the compromise does not persist across reboots.  In the  > case of 
>the integrated graphics, the GPU has no persistent storage, but I am nervous 
>about >possible compromise of the internal display, which would be fatal. For 
>the > dedicated graphics, I am worried that the graphics card’s firmware could 
>be overwritten.  >Is this possible without PCI configuration space access?
>
> Finally, can NVIDIA cards work with PCI pass-through?

Yeah but its way more difficult and finicky than with AMD.

Laptop gaming sucks anyway just pick up a KCMA-D8, Opteron 4386
(microcode update req otherwise 4284), 32GB RAM and a RX590 8GB then
install coreboot-libre and play games at max settings.

This is a very affordable libre firmware gaming setup that can play
games in a VM at max at 1080p with smooth FPS as long as they can use
all 8 cores which almost everything new can, ironically new stuff like
GTA5 runs better than old stuff and it uses all 8 cores at max.

Since you would have more PCI-e slots to spare you can also pop in
another single slot GPU for your primary desktop since the onboard sucks.

The D8 has dual onboard usb controllers and can be obtained for $50-100
on fleabay used, the 4386 is the best C32 CPU and is $50-100 as well.

You also need an at least 3U (pref 4U) tower cooler for it let me know
if you can't find one and I can help (some Socket F coolers are compatible)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7e3b6655-164b-e49b-ffd3-82d2c563616b%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Yubikey attached to an AppVM - possible?

2019-04-27 Thread j . granyt
Did you figure out how to do it in the end?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b269bddf-b8c8-4094-8865-1741c337d074%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Fully Working Android VM for Qubes available? (2019)

2019-04-27 Thread alex . jones . 4416
On Wednesday, April 24, 2019 at 3:33:54 AM UTC, benz magdalena wrote:
> Android-x86 8.1 got released recently,
> 
> the lagging mouse issues have been fixed but the main problem is the 
>   Android-x86 8.1 iso
> can not be installed cause it fails to detect the qubes virtual disks 
> 
> is there any 'easy' way to fix this error without compiling 
> 160GB of data to change the config...
> 
> any fully working iso available for download for qubes?
> 
> 
> how to solve this issue the easiest?
> 
> 
> thanks

It works fine for me, see "Android-x86 7.1-r2 with GAPPS installation guide" 
topic.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c60b59b2-87cf-4f01-8089-9866e29a8cd8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] How do I keep installed app working

2019-04-27 Thread 'Island Anchor' via qubes-users
Hi I installed app in Qubes and followed process

sudo apt-get install git build-essential ... etc

finally got to make then I was able to successfully launch the app in my 
folders. When I close the VM or shut-down upon reload I cannot run the app.

However, if I start to run the sudo commands again, I noticed I can actually 
start the old install in the folder.

Am I missing some further command or something to keep the app sticking? Thanks 
for any insight or assistance.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/310386667.1254035.1556387656701%40mail.yahoo.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: How risky is GPU pass-through?

2019-04-27 Thread taii...@gmx.com
On 04/09/2019 08:53 AM, unman wrote:
> On Mon, Apr 08, 2019 at 02:32:04PM -0400, taii...@gmx.com wrote:
>> On 02/25/2019 04:02 PM, John Mitchell wrote:
>>> If I may ask what OS do you use for the host?
>>>
>>
>> Devuan, it is debian without systemd.
>>
>> I compile most of the related packages though like libvirtd, qemu etc
>> cause the ones from the distro are way too outdated to support what I
need.
>>
>> You should get a new non-gmail email btw.
>>
>
> Do you run Qubes?
Of course.

> On what hardware?
>
* Lenovo X220 with coreboot
* KCMA-D8 with Opteron 4284 cpu and coreboot-libre.

I have a bunch of computers so much that I need a server rack soon :D

On 04/10/2019 03:13 PM, jrsmi...@gmail.com wrote:
> To be concrete and transparent, the mobo with PS/2 is a Gigabyte X299
>Designare ex with four USB controllers and a header for a hardware TPM,
>which I’ve populated. >The other mobo is an ASUS X299 Prime Deluxe II
>with no PS/2, five USB controllers and only supports a firmware TPM.
>Both are fantastic boards,

They are propriatary with ME and no libre firmware so I wouldn't put
them in the great board area.

> but one is going back. If isolating USB kb and mouse to one controller
>that dom0 has exclusive access to is actually more secure than native
>PS/2 then I would lean  > toward keeping the ASUS and do without TPM.
>

TPM's are proprietary black boxes and to my consideration pointless it
would be better to do your own code signing deal with coreboot and grub
signing your owner kernels and having a write-locked flash chip load
grub which loads your signed kernels only, you would then lock the
computer case with a high security lock.

I also suggest using keyboard and pointing device without re-writable
firmware, to my knowledge only the (usa made!) Unicomp keyboards fit
that bill and they have ones with pointing devices both a trackball and
a laptop style trackpoint.

Anyone who thinks that chinese made and usa made electronics are equal
on a security footing is naive, china gets caught implanting backdoors
in hardware all the time whereas to my knowledge with US made hardware
that has never happened and here you can say no without getting put in
prison.

RaptorCS/RaptorEngineering was doing some cool work with an open foss us
made security product like a TPM called FlexVER if anyone is interested
in an alternative, no idea when it will be released though and it will
probably only work on the OpenPOWER stuff.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c7962b1c-f32d-19ae-df81-705866c68973%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Help with hardware

2019-04-27 Thread taii...@gmx.com
On 04/27/2019 05:08 AM, 'mathab' via qubes-users wrote:
> Also I am considering buying a laptop is there any laptop that is under 300 
> euro (can be used) that will run this os?
> Where I live there is a lot of used thinkpads.

I would get a g505s or a T430 (and install a T420 keyboard if you hate
the island/chiclet style kb)

Both can run coreboot but the g505s has no me/psp and is owner
controlled whereas the T430 has ME. (note: coreboot doesn't always mean
freedom/open source firmware)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f6be7b20-ac29-9d48-895a-3515c1417314%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Fully Working Android VM for Qubes available? (2019)

2019-04-27 Thread alex . jones . 4416
On Wednesday, April 24, 2019 at 3:33:54 AM UTC, benz magdalena wrote:
> Android-x86 8.1 got released recently,
> 
> the lagging mouse issues have been fixed but the main problem is the 
>   Android-x86 8.1 iso
> can not be installed cause it fails to detect the qubes virtual disks 
> 
> is there any 'easy' way to fix this error without compiling 
> 160GB of data to change the config...
> 
> any fully working iso available for download for qubes?
> 
> 
> how to solve this issue the easiest?
> 
> 
> thanks

You need to fix not only installer scripts, but you need to rebuild kernel as 
well. I think it's possible to rebuild only kernel and fix the installer files 
and then repack the iso.

I've uploaded the working Android 8.1 iso, but I don't recommend to use it for 
security reasons and it's better to build the iso yourself:
https://drive.google.com/open?id=1Y4P77mlPPlXBzYrJ5yHJ7XM6gLVsQQm0

md5sum android_x86_64-oreo-nogapps.iso 
b3af7a84820dd9fb32dd40c68f285993  android_x86_64-oreo-nogapps.iso

sha1sum android_x86_64-oreo-nogapps.iso 
16e9bcf0da44929b223fc2ab1df97de0df26d9fb  android_x86_64-oreo-nogapps.iso
sha256sum

sha256sum android_x86_64-oreo-nogapps.iso 
b7d9aa5f9c401202ea24b63e95bb0f38d1f981381a719257c1a2f526e0cf636f  
android_x86_64-oreo-nogapps.iso

sha512sum android_x86_64-oreo-nogapps.iso 
16f2666a20499f31472fc933a670c47070e0db14686b605b69254d054dcc63893b564e5a35e84e1daf7b7fd80f955a2834956a1bb029e93563b7d8c44787666b
  android_x86_64-oreo-nogapps.iso

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d1ef17a0-9f29-4237-9947-f84845985178%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

2019-04-27 Thread alex . jones . 4416
On Saturday, April 27, 2019 at 9:35:19 PM UTC, alex.j...@gmail.com wrote:
> On Thursday, April 25, 2019 at 10:20:32 PM UTC, Daniil Travnikov wrote:
> > I am stuck on this process already twice.
> > 
> > When I put the command
> > 
> > Download sources:
> > repo sync --no-tags --no-clone-bundle --force-sync -j$( nproc --all )
> > 
> > 
> > and when it show this:
> > 
> > 
> > From git://git.osdn.net/gitroot/android-x86/platform/frameworks/av
> >  * [new branch]  nougat-x86 -> x86/nougat-x86
> > Fetching project platform/external/android-clat
> > remote: Counting objects: 1, done
> > remote: Finding sources: 100% (793/793)   
> > remote: Total 793 (delta 244), reused 793 (delta 244)
> > Receiving objects: 100% (793/793), 517.38 KiB | 0 bytes/s, done.
> > Resolving deltas: 100% (244/244), done.
> > From https://android.googlesource.com/platform/external/android-clat
> >  * [new tag] android-7.1.2_r36 -> android-7.1.2_r36
> > 
> > 
> > I got nothing, I mean it's look like freeze.
> 
> Did you try to remove downloaded repo and sync it again from scratch? The 
> OpenGAPPS repo changed, see below, maybe it's somehow related.
> 
> I'd recommend to build Android 8 release, the mouse works fine there. Also 
> the Settings bug is fixed if you use userdebug build variant instead of eng.
> The guide in the same as in first post except:
> 
> Android 8 will take 211GB to build. I've build it with 32GB RAM without swap, 
> maybe it'll work with less RAM.
> 
> repo init -u git://git.osdn.net/gitroot/android-x86/manifest -b oreo-x86 -m 
> android-x86-8.1-r1.xml
> instead of 
> repo init -u git://git.osdn.net/gitroot/android-x86/manifest -b 
> android-x86-7.1-r2
> 
> https://github.com/opengapps/;  />
> https://gitlab.nezorfla.me/opengapps/;  />
>  remote="opengapps" />
>  revision="master" remote="nezor" />
>  revision="master" remote="nezor" />
>  revision="master" remote="nezor" />
> instead of
> https://github.com/opengapps/;  />
>  remote="opengapps" />
>  revision="master" remote="opengapps" />
>  revision="master" remote="opengapps" />
>  revision="master" remote="opengapps" />
> 
> lunch android_x86_64-userdebug
> instead of
> lunch android_x86_64-eng
> 
> /usr/bin/make -C kernel O=$OUT/obj/kernel ARCH=x86_64 menuconfig
> instead of
> make -C kernel O=$OUT/obj/kernel ARCH=x86_64 menuconfig

I've uploaded the working Android 8.1 iso for those who need it for a test, but 
I don't recommend to use it for security reasons and it's better to build the 
iso yourself:
https://drive.google.com/open?id=1Y4P77mlPPlXBzYrJ5yHJ7XM6gLVsQQm0

md5sum android_x86_64-oreo-nogapps.iso 
b3af7a84820dd9fb32dd40c68f285993  android_x86_64-oreo-nogapps.iso

sha1sum android_x86_64-oreo-nogapps.iso 
16e9bcf0da44929b223fc2ab1df97de0df26d9fb  android_x86_64-oreo-nogapps.iso
sha256sum

sha256sum android_x86_64-oreo-nogapps.iso 
b7d9aa5f9c401202ea24b63e95bb0f38d1f981381a719257c1a2f526e0cf636f  
android_x86_64-oreo-nogapps.iso

sha512sum android_x86_64-oreo-nogapps.iso 
16f2666a20499f31472fc933a670c47070e0db14686b605b69254d054dcc63893b564e5a35e84e1daf7b7fd80f955a2834956a1bb029e93563b7d8c44787666b
  android_x86_64-oreo-nogapps.iso

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ed61584c-1a11-48af-baed-8ed77e13082f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Yubikey attached to an AppVM - possible?

2019-04-27 Thread Jon deps

On 4/27/19 8:44 PM, j.granyt-re5jqeeqqe8avxtiumw...@public.gmane.org wrote:

Did you figure out how to do it in the end?



I ended up finally re-discovering a new trick for OTP eg  LP webpage 2FA 
using debian-9 minimal as the template


https://www.qubes-os.org/doc/multifactor-authentication/

pretty slick,  now I can leave my  android off,  and not use SMS for 2FA


for U2F logins : there is also a write up in the docs,  but its way over 
my head  prolly circles back to  Qubes doesn't want  HID-keyboard 
emulation to have access via USB


for the few sites for U2F I use, I just use Chromium ,  if you Yubikey 
has both IIRC you have disable one or other of the functions anyway


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a80b620a-8736-d43b-1e53-cc8c69fc8109%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Fedora-29 update does not work

2019-04-27 Thread Claudio Chinicz

On 26/04/2019 7:36, Jon deps wrote:

On 4/24/19 12:58 PM, Claudio Chinicz wrote:

On 18/03/2019 12:10, Claudio Chinicz wrote:

Hi All,

I'm getting notification that I need to update Fedora-29 (Qubes 
4.0.1), I do it but it keeps asking to update.


On Qubes manager all VMs based on Fedora-29 template show they need 
to restart because I've updated Fedora-29, although it keeps asking 
to update.


I've even updated it manaully (opened terminal and issued sudo dnf 
update/upgrade) and it seems updated, but still Qubes thinks it needs 
to update.


Any insights?

Thanks,

Claudio Chinicz



Hi again,

After a long time, the issue returned and for almost I see the update 
icon on the upper right corner indicating I need to update Fedora 29 
template.


When I try to update, I get an error saying "Failed to synchronize 
cache for repo \ 'fedora-modular\'\n . Comment: System is already 
up-to-date\n".


When I try to update using command line I get this error message:

sudo dnf update

Error: Failed to synchronize cache for repo 'fedora-modular'

Anyone else has been having this same problem? any ideas how to clear it?

Thanks in advance,

Claudio




what does dom0
$qubes-prefs   say  for  updateVM  ?


did you happen to recently change anything?  I suppose you are aware 
that the Qubes Manager  sometimes  won't get rid of the  little green 
arrow even though your  up to date  ?    If your saying that  you closed 
your Fedora-29 template and then closed all your AppVM Qubes and 
restarted them and still see   the  recycle green circle on them,  I've 
never heard of that problem before .



have you ever done

$sudo dnf upgrade    vs  update




Hi,

I've just tried and it successfully updated both Debian 9 and Fedora 29 
through the qubes updater.


Answering your question:

1. updatevm is through sys-firewall
2. yes, I'd tried both sudo dnf update / upgrade with on fedora and 
debian command lines


Thank you,

Claudio

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/qa3c3l%24407d%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: New Install is Missing sys-USB, How to recover

2019-04-27 Thread Ray Joseph

jrsm,

Thank you, that was a lot of info.  This took me to here:
https://www.qubes-os.org/doc/usb-qubes/

>From which as root, I executed:
qubesctl state.sls qvm.sys-usb

4 succeeded and 1 failed.

In sequence:
ID:  hide-usb-from-dom0-legacy
Function: file.append
Name: /etc/default/grub
...  This one succeeded

ID:  grub2-mkconfig -o /boot/grub2/grub.cfg
Function:  cmd.run
Result:  True
Comment:  State was not run because none of the onchanges reqs changed
Changes:  
... This one succeeded

ID: sys-net-usb
Function: qvm.prefs
Name: sys-net
Result: False
Comment:  The following requisition were not found:
  require:
  sls:  qvm.sys-net
Changes:  
...  This one failed

Then there were two other successes for:
ID:  qubes-input-proxy
ID:  sys-usb-input-proxy

That was the complete emission.  I guess the failure signal was the 'Result:  
False" and all the text was in red.

I have checked the terms in the emission but was not able to find anything that 
looked relevant.  

It is not clear why sys-net was addressed in the usb process.  But I do recall 
that a usb controller was installed in the sys-net but no wifi.  While I have 
read some about the possibility of using sys-net for usb functions, I don't 
recall any reference to the installation doing that.

Any suggestions?



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/99ab8587-2135-4822-8dbc-4910d236fad5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How do I keep installed app working

2019-04-27 Thread jsnow

'Island Anchor' via qubes-users:

Hi I installed app in Qubes and followed process

sudo apt-get install git build-essential ... etc

finally got to make then I was able to successfully launch the app in my 
folders. When I close the VM or shut-down upon reload I cannot run the app.

However, if I start to run the sudo commands again, I noticed I can actually 
start the old install in the folder.

Am I missing some further command or something to keep the app sticking? Thanks 
for any insight or assistance.


Hi,

Are you installing in the template or the appvm? Generally software 
installed in appvms won't persist after reboot (unless installed in 
home), so you generally need to install software in the template.


--
Jackie

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/25227aba-fd86-1879-ff6f-ec71aea30fe0%40bitmessage.ch.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: E' DAVVERO DA ARRESTARE SUBITO IL PEDOFILO ED ASSASSINO DANIELE MINOTTI!

2019-04-27 Thread 'Roberto Gorini Osm Network-Srl Milano-Lugano' via qubes-users
E' DAVVERO DA ARRESTARE SUBITO IL PEDOFILO ED ASSASSINO DANIELE MINOTTI 
(CRIMINALISSIMO AVV DI RAPALLO E GENOVA.. RAPALLO..OVE ORGANIZZA TRAME 
ASSASSINE ED OMICIDI NAZISTI E MAFIOSI, INSIEME "AL RAPALLESE" DI RESIDENZA, 
PEZZO DI MERDA, HITLERIANO, RAZZISTA, KU KLUK KLANISTA, RICICLA SOLDI MAFIOSI, 
SEMPRE PIU' PEDERASTA ANCHE LUI: PIERSILVIO BERLUSCONI)! E' DA FERMARE STRA 
SUBITO: L ' AVVOCATO SATANISTA, NAZISTA, ^SATA-N-AZISTA^, PEDOFILO ED OMICIDA 
DANIELE MINOTTI DI GENOVA, RAPALLO! CRIMINALE OMICIDA, TERRRORISTA DI 
ESTREMISSIMA DESTRA, AGENTE SEGRETO IN COPERTO DI TIPO SWASTIKATO E KILLER!
https://grokbase.com/t/python/python-list/148jckyh1w/avvocato-pedofilomosessuale-ed-assassino-daniele-minotti-facebook-oltre-che-nazi-megalava-euro-mafiosi-e-come-detto-mandante-di-omicidi-o-suicidate-stalker-di-eroe-civile-michele-nista-su-ordine-di-tiranno-fasciocamorrista-silvio-berlusconi

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ba1080fd-1d06-49b9-b0c7-494975aaaefc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] E' DAVVERO DA ARRESTARE SUBITO IL PEDOFILO ED ASSASSINO DANIELE MINOTTI!

2019-04-27 Thread 'Roberto Gorini Osm Network-Srl Milano-Lugano' via qubes-users
E' DAVVERO DA ARRESTARE SUBITO IL PEDOFILO ED ASSASSINO DANIELE MINOTTI!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/33f9bcce-5d3d-44c6-8923-fd8abd036060%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.