[qubes-users] Issues building archlinux template
I'm having some issues building archlinux template, here's my log: http://pastebin.com/8dpvT45N thanks -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7b7c7325-4798-4552-8d0a-d45ad7091e24%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: HCL Lenovo W540
On Tuesday, March 29, 2016 at 6:27:01 PM UTC-6, piitb...@gmail.com wrote: > Hello, > > as my Qubes OS installation seems to get mature and the most important things > work, I'm happy to contribute to the HCL: > > --- > layout: > 'hcl' > type: > 'notebook' > hvm: > 'yes' > iommu: > 'yes' > tpm: > disabled in BIOS > brand: | > LENOVO > model: | > 20BG001CGE > bios: | > GNET76WW (2.24 ) > cpu: | > Intel(R) Core(TM) i7-4900MQ CPU @ 2.80GHz > cpu-short: | > Core i7-4900MQ > chipset: | > Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor DRAM Controller > [8086:0c04] (rev 06) > chipset-short: | > ??? > gpu: | > Intel Corporation 4th Gen Core Processor Integrated Graphics Controller > [8086:0416] (rev 06) (prog-if 00 [VGA controller]) > NVIDIA Corporation GK106GLM [Quadro K2100M] [10de:11fc] (rev a1) (prog-if > 00 [VGA controller]) > gpu-short: | > NVIDIA Quadro K2100M > network: | > Intel Corporation Ethernet Connection I217-LM (rev 04) > Intel Corporation Wireless 7260 (rev 83) > Sierra Wireless LTE WWAN Card (passed through to to sys-net) > memory: | > 32356 > scsi: | > SAMSUNG MZ7TD512 Rev: 5L0Q - SSD1 = 512 GB > SanDisk SDSSDXPS Rev: 00RL - SSD2 (in optical Bay) 480 GB > > versions: > > - works: > yes > qubes: | > R3.1 > xen: | > 4.6.0 > kernel: | > 4.1.13-9 > remark: | > WWAN is working by passing the USB Controller (PCI-Device 00:1d:0) to > sys-net > Windows 7 HVM is working > Seamless Windows Mode is working > the W540 is a workhorse (4 Cores x 2.8 GHz, 32GB RAM, 2 SSDs) and Qubes > OS runs very smooth. > credit: | > If you own the same device, do not hesitate to contact me, if you need > help getting Qubes OS working. > link: | > n/a Hoping you might be able to help. I have the same W540 as you. I made the bootable usb using rufus and the dd method. It install begins fine but gets stuck at qubes-mgmt-salt-base-topd. I have tried several times. I even left it overnight in case it was just taking a long time. Still can't get past it. Did you do anything special or different to get it running on your machine? Any help would be greatly appreciated. Thank you in advance. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20892412-3c8b-496d-89d7-516aeeb47af4%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Qubes-Cheatsheet user feedback request
Thank you J. Eppler. It is great work and we appreciate all you are doing for the community. Anything that can new comers with understanding how to do some of the basics is always welcome. I am sure it will also be helpful to some of the more experienced just keeping track of some of the things they can do. Regards, Iestyn Best -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/925c11b7-fea0-4f39-b4cc-ceb51a89eb35%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Controlling pulse form the command line
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Jun 15, 2016 at 05:12:33PM -0700, jkitt wrote: > So it appears that pactl or pacmd isn't in qubes Dom0 repository. They are - pulseaudio-utils package. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJXYfY1AAoJENuP0xzK19csQVQH/32LFcpScA/3bZHAu7YQRI97 nPtNXcsDlnfgsa48xQTTuE+bh+ao06iif+hQYhoq+n7r4gmnQFmk0tobPYoHk1Jl 7pXc4J9vEo6R4WeJJXaq9m5ImnKRKEq8wqUB5yQVkdnLTk7sb1u8gUmeud/AnKdt 7W85csvAJXpXhmiQtCJWE7n23ZFBAPzABohDePvuovDWuSK2r+xvIYchNCOrVv1b Yj+lNNkVBOHycxHoSbXqCgT8Ik8pkBNKe0wyRiQwq8eI6kuv7LkJZu2Ib85gLQ41 IVqV74LFpTSUaa+g7BkS6iYem1qgrPvDCeY3muVTEarDQ8NbmxoqYBTbOfeQEoU= =WARD -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160616004332.GM1593%40mail-itl. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Controlling pulse form the command line
So it appears that pactl or pacmd isn't in qubes Dom0 repository. Any suggestions on how I can control Pulse Audio through the command line? Apparently it can be done with amixer: amixer -D pulse sset Master mute However, the device pulse doesn't exist. amixer without arguments displays all the devices - no pulse device. amixer sset Master mute Works - but that, i think, is setting it through Alsa - and once Alsa is muted Pulse Audio remains muted until explicitly unmuted.. which has to be done through pavucontrol. I'm lost. I've never liked sound on Linux.. it makes my brain hurt. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/22f904e1-cc7e-4bf6-b13c-9654d904af39%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Issues with ACPID in Dom0?
Oh thanks! Turns out i wasn't setting the display variable. On Wednesday, 15 June 2016 08:08:28 UTC+1, Marek Marczykowski-Górecki wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On Tue, Jun 14, 2016 at 09:11:41AM -0700, jkitt wrote: > > Are there any specific issues with ACPID in Dom0? > > > > For whatever reason the actions are not being executed. acpi_listen is > > displaying the event fine though. > > > > Is there an alternative? > > It works fine for me. Maybe you've forgotten about some configuration? > This is mine: > > [marmarek@dom0 ~]$ cat /etc/acpi/events/lid-close > event=button/lid LID close > action=/etc/acpi/actions/lid-close.sh > [marmarek@dom0 ~]$ cat /etc/acpi/actions/lid-close.sh > #!/bin/sh > > su -c 'DISPLAY=:0 XAUTHORITY=/var/run/lightdm/marmarek/xauthority > xscreensaver-command -lock' marmarek > > > > - -- > Best Regards, > Marek Marczykowski-Górecki > Invisible Things Lab > A: Because it messes up the order in which people normally read text. > Q: Why is top-posting such a bad thing? > -BEGIN PGP SIGNATURE- > Version: GnuPG v2 > > iQEcBAEBCAAGBQJXYP7jAAoJENuP0xzK19csWREH/R3zZ5JHYZGJetja/cI7/ZNx > HXPKnprjA02tugWOyInxP58DlgwPVtEk+MK2U+NO0mEFO3ISY0hBGDwX7o+QJroL > q9jQp9Yo+JMR/C4YHEiV7eL6WZE4S92Qm2TFQ0pO/zfBdc5QzL4wwjFLJeR/CsO8 > vWUDAZ9Rp5MPoZ8XsQohd15+1Xz5y6iips911bfSFPhHajxTH/FtRdrnukGh0hVj > wzlD7mESfWkZewJCXStpdUQ4sKy3tsAbGndxduaujQRKN/4WHZn9eixggIOd6GW5 > 42cuMfbsiuyUYQGdobjVpj/x/nmfN0VD9AtzJpnamtWz/Dgdi53QmbGpvLlNbX8= > =MUcT > -END PGP SIGNATURE- > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1d8f45a3-389a-41b7-b621-0ca5d80d8d7b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: boot failure after reset
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Jun 15, 2016 at 12:34:56PM -0700, Tony Land wrote: > > Hi , today i work within a system and OS freez for few minutes... i > push reset button. After system starts, i have seen next errors > http://i.imgur.com/SwBiJro.jpg?1 > > Have any ideas how to solve this problem? > > Many thanks for any advises! "Buffer I/O error on device dm-0" looks like some problem with your hard disk. I'd first check for hardware problem, for example broken cable... - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJXYeehAAoJENuP0xzK19csgRQH/2dqcjGl98JdfgLjMr95gpK5 YEPaxJxs4iAnVaM8WqUN/JPaJQ/qFaSq35Iib+/KfeX6MzvpULpySShomZt/+dp0 Tngwpms+ptpiWcBe+89CX5Ab9P9J60JYYyDvsr+nViU+Cs5h1wHrPcJotyDWN35z KGWoWMH1mjoDYA5GWYIzkD4qtS03AvGozOVwafYJR4vvYtrZTHtiw1suJ9vjBPiV H05UViLgEWqsdB/GtKsH1W73jhOtbtjSURHgDzWS3BKiByd1nTNk7YH3b+IzPIoJ ILzsPsrN2/ipgPOB4uJl1hoUhCyGsyPPkSYe6IOnkr4maXFZOuaXDqY390W0yrg= =FYd1 -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160615234120.GK1593%40mail-itl. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Identifying label from within AppVM
On Wednesday, June 15, 2016 at 4:59:12 PM UTC-5, Unman wrote: > On Sun, Jun 12, 2016 at 08:55:05PM -0700, nicklausmcclen...@gmail.com wrote: > > Is there any mechanism to identify what label the AppVM has from with in > > it? I'm looking for a (hopefully) automated way to make other colors match > > the label, i.e. have my terminal prompt and tmux bar be green in green > > AppVMs and red in red AppVMs. > > > > The red labelling is drawn from dom0 currently. I don't think there's a > way of pulling dom0 information from within a qube, so I think you will > be disappointed. > Although I cant see any reason why it wouldn't be possible to write label > information to he qube on boot, and then read that out. Might be worth > playing with this. I can't believe I didn't think of that. I'll try to work something out with qrexec and I'll post the code when I'm done in case anyone would like to use it. Thank you! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b8893a84-2e2a-4391-a00d-848692264df0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] debian 8, rc.local not running
On Sun, Jun 12, 2016 at 06:20:14PM -0700, Drew White wrote: > Unman, > > That code is just what I have int hat NetVM. > As I said, rund fine running from CLI, but not on boot. > Does not make sense when it works fine on Fedora 20, 21 & 23 (normal and > minimal [ if services I use and call are installed ] ) > > Yes, I have taken out specific bits of code that I have that do things that > set up all things that I have, but they are no of consequence as to why the > file isn't executing. > The details there are just the basics for the external VM, many other > options are set in the firewall settings. > Many others are executed from Dom0 when I boot specific machines. > > The original file is a LOT longer. But that's the basic one for the general > NetVM. > > Hope you can help. > Hi Drew Can you try just running the logging command that I suggested? No other systemctl, iptables or anything. Just that one command. Then we can determine if the file is being run or not. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160615215352.GB20001%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] I would like to Install Qubes OS with the smallest footprint
On Mon, Jun 13, 2016 at 12:49:46PM +, 7v5w7go9ub0o wrote: > > > On 06/13/2016 01:15 AM, jonprice...@gmail.com wrote: > > On Monday, June 13, 2016 at 11:10:12 AM UTC+12, Unman wrote: > >> On Sun, Jun 12, 2016 at 03:43:06PM -0700, jonprice...@gmail.com wrote: > >>> Hi guys, I would like to install Qubes OS (\system)in the Smallest Foot > >>> possible while running VMapps and any other functions from a separate > >>> \VMS partition. > >>> > >>> Any advise on how this may work and what I might need to adjust. Also > >>> what is Qubes OS foot print? Recommendations stay you need at least 32Gb > >>> to complete the installation. How much of that is required for \system > >>> (root). > >>> > >>> Thanks > >>> > >>> J > >>> > >> Jon > >> > >> A quick look suggests that the footprint is relatively small - perhaps > >> 3.5 G? > >> And that could be trimmed down further: cut out unneeded locale files, > >> icons, wallpapers, man and doc, for a quick cut. > >> > >> if you do this post an update - it would be an interesting exercise. > >> > >> unman > > Hi Unman, thanks for your reply. > > I guess compared to win7 that is a small footprint. But by my standards it > > is still quite a large footprint especially for a Hypervisor type1. But I > > guess you need all those drivers on installation. If I stripped out all the > > unused files and drives and apps for my particular laptop. I may reduce the > > OS size down to maybe 100mb :) lol. > > (Note...I'm a newbie, so this may be off...) > > ISTM you're conflating various Qubes components - the hypervisor is > already extremely small. > > Dom0 is not very big - I'd guess that the various Dom0's go from medium > (KDE) to small - using different GUIs. > > A real savings could probably be effected by building trimmed-down > templates using only the drivers necessary for your laptop built into > the kernel (not using lots of LKMs), and "minimal" application software. > I'd guess that ArchLinux facilitates building custom kernels. If you're > building custom kernels, you might add GRSEC as well. > > There are also threads here on microkernels. Perhaps you could build a > microkernel Template - again custom built for your hardware. > > > > > > > I'd guess this is the goal of occur > OP was concerned with dom0+xen - specifically says that VMs will be running from a separate partition. The figure I quoted is for a normal install of 3.1 - it would be easy to trim this down. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160615215047.GA20001%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: MacBook Air 2012 and that ol' Broadcom chip
On Wednesday, June 15, 2016 at 4:18:44 AM UTC-4, qubes...@gmail.com wrote: > Congrats on the install. I for one would be really interested in a > step-by-step description of what you did to get it working. Although not > quite the same, I have an old MacBook Pro on which I'd like to install Qubes! > :-) As I'm still trying to go through different things to get a better write up for the post with the HCL (and getting the HCL report to run- it's not outputting files, for some reason), I'll give the Q I'm uncertain if I made things easier or harder on myself by wanting the machine to single boot Qubes, no OS X. My first go at this machine a few weeks ago, I was attempting to dual boot, and was able to get past the installation step, but failed at a point during Qubes setting itself up on first boot, which I was able to overcome in this go around by checking the box that says, "Don't setup anything at all- I got this," * Create USB installer * Create rEFInd USB stick * Use Recovery Partition on Mac to erase drive. Working under the presumption that Qubes didn't support UEFI (which I later found out is not true, although the Apple implementation of UEFI seems to have had a bit of shade thrown at it), I formatted the drive MBR and FAT, one partition. * Attached the rEFInd USB stick, and held down the alt key, and booted from it. It was the only option. * Once the rEFInd booted, I then connected the Qubes installer USB drive to the other USB port. Refreshed. Here came the first round of headaches. rEFInd gives about four choices for booting the Qubes installer, "vmlinuz from ANACONDA", "xen.efi from ANACONDA", "Legacy something something". Apologizes for not having the specific texts, but three of the four would not permit a successful boot into the installer. The one that worked for me was something to the effect of "Legacy fallback whole disk" (the choice was all the way on the right). Initially I had not chosen this one because I had thought it was referring to the hard drive in the computer which had no OS on it at all. This is the one that worked. * Once booted into the installer, I reclaimed all the space on the drive and left everything else at defaults. Started it installing, made myself some tea. * There are guides that explain how to fix up the Broadcom stuff at this point, I ignored all of them and probably caused myself more headaches by doing so. * On first boot Qubues goes through it's setups. The first time through, I left all the defaults, somewhere when it's starting up the networking stuff, it locks up and then refuses to boot up properly from there on out. There is /probably/ a way of fixing this, but I just went back a few steps, erased the drive, reinstalled Qubes. * This time, I went with the advanced option and asked Qubes to not setup anything automatically for me. I did this to avoid it setting up the net-vm, which freaks out with the Broadcom chip in the computer. The biggest problem with this is that it doesn't setup any of the default VMs for you, and that's a /really/ nice thing. * Once into the booted operating system, I followed the "Assigning Devices" page on Qubes's website: https://www.qubes-os.org/doc/assigning-devices/ * I spent a bunch of time on that, until finally, I (as mentioned in previous message) trashed the net-vm which was running from the Debian template and re-created it using the Fedora template and the kernel in there knows how to talk Broadcom. * After all that, time to start making VMs. tl;dr * Booted USB installer from USB rEFInd drive, skipped the automatic setup and used Fedora as the template for my net-vm. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9a45d9d6-061b-4f22-a1cb-cea44c40bdaa%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: boot failure after reset
Hi , today i work within a system and OS freez for few minutes... i push reset button. After system starts, i have seen next errors http://i.imgur.com/SwBiJro.jpg?1 Have any ideas how to solve this problem? Many thanks for any advises! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/685b8cae-68b9-4d9d-a7a0-0a4cf4c5737f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: boot failure after reset
http://screenshot.ru/upload/image/Wb5S -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4358cee9-f98d-40a9-9244-5e51379267e7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Install VPN in anon-whonix
Andrew David Wong: > On 2016-06-09 13:54, Patrick Schleizer wrote: > >> [...] > >> So new documentation would be required for this. A lot stuff could >> be re-used since all of the three above are wiki templates. > >> Anyone interested in this? Up to try this, document this, etc.? > >> Cheers, Patrick > > > Tracking and labeling as "help wanted," in case anyone is ever > interested: > > https://github.com/QubesOS/qubes-issues/issues/2060 > > > This is now documented here: https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_VPN#Separate_VPN-Gateway Recommended order of reading: * 1) https://www.whonix.org/wiki/Tunnels/Introduction * 2) https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_VPN * 3) https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_VPN#Separate_VPN-Gateway Cheers, Patrick -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/57619B93.9010507%40riseup.net. For more options, visit https://groups.google.com/d/optout.
[qubes-users] boot failure after reset
Hi , today i work within a system and OS freez for few minutes... i push reset button. After system starts, i have seen next errors https://www.youtube.com/watch?v=KH5GnonNcms So now i cant get access to my files and i dont know what to do Have any ideas how to solve this problem? Many thanks for any advises! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/19ef2986-929e-480c-8d28-f6c33d182262%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] no bootoption for windows 10
maybe you can help me a little bit more? what encryption would you use for linux/windows? what is your opinion of tails? Thanks for your time -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/dd8bf8b3-4d1d-4770-af3f-e4d0ab0ee5ec%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] no bootoption for windows 10
I only play legal games I bought, but I know what you mean. I dont care in this case. Thats the reason why i wanted to use another OS. Yeah i knew disposable VMs and TOR, i wanted to use them in Qubes. That would be very dumb to check your accounts... Okey thanks, i will try to restore the bootfile from windows with the dvd. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/04274767-9691-4f64-97d7-02245010ffac%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] no bootoption for windows 10
On 06/15/2016 04:52 PM, stefan.goenit...@gmail.com wrote: > Thank you Alex for you answer. > > I love video games and thats because i need Windows... > > I thought i could use Qubes in dual boot for better security and anonymity in > web. > > I have no idea of side channels attacks but i seems to be dangerous. > > Can you help me please to remove grub, so i can start windows again? If that's the case, then a Windows HVM will not help you - the graphic performance is not the best. The problem with video games is that either they are perfectly legal, and typically include DRM technologies that work like viruses/rootkits (and may pose a security risk - sony bmg anyone??), or they are not legal and need cracks/patches to work - and these are typically distributed by crack repositories that like to add malware to the original distributions. Qubes by itself does not give you anonymity: depending on what you are trying to protect from, you may want to use Disposable VMs and/or TOR, and you may have to heavily change your habits - if you use TOR and DispVMs but all you do online is check your facebook/twitter/gmail/9gag/younameit account, well, I have some bad news for you... There's no canned security you can buy off the shelf. As for GRUB, when I used to fix computers years ago, all it took was booting off the windows cd/dvd and using FIXBOOT or FIXMBR from the recovery console. I don't know how it can be done with Windows 10, but others may help, or you could try a web search for updates on those commands. -- Alex -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b76cdccf-96ec-d6a6-2963-b69705808f30%40gmx.com. For more options, visit https://groups.google.com/d/optout. signature.asc Description: OpenPGP digital signature
Re: [qubes-users] no bootoption for windows 10
Thank you Alex for you answer. I love video games and thats because i need Windows... I thought i could use Qubes in dual boot for better security and anonymity in web. I have no idea of side channels attacks but i seems to be dangerous. Can you help me please to remove grub, so i can start windows again? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4d0c0f51-c852-48c9-86a5-e59edd306364%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] no bootoption for windows 10
On 06/15/2016 04:22 PM, stefan.goenit...@gmail.com wrote: > Hi, > > I installed Qubes today. I thought it will add my windows to grub, > but it haven´t. > > I wanted to add windows manually to grub, but i have no access to the > grub files. I am completely new to Qubes and need some help please. > What I'm going to tell is not the answer to your question; it's just an outside-the-box consideration on your goal. As you may know, the main goal of the qubes project is a big forward leap in workstation security, and this is achieved through multiple layers of isolation. One of these layers relies on hardware integrity and side channel attacks (i.e. attacks not done on a live qubes system), hence the general discouragement on dual booting it with anything else. Since you say that you are new to Qubes, I'd guess you jumped in with the wrong approach: just another OS to try. This approach is fine by itself, but the method to successfully try Qubes is not dual booting, but using the live usb distro. TL;DR: if you want to try qubes, don't dual boot it, but use the Live USB instead. If you like Qubes, but want to keep Windows, then you are not sure you like Qubes. In this case, keep a separate computer for windows use and install Qubes on a different computer. If you do really really like qubes, you may want to try a Windows HVM inside of an installation. Don't dual boot it unless you are a solution developer / integrator, or have a really strong motive to defeat its main purpose (security) and just want to play around. -- Alex -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4e088156-d6ba-dc22-c089-10b9a5ab1b07%40gmx.com. For more options, visit https://groups.google.com/d/optout. signature.asc Description: OpenPGP digital signature
[qubes-users] no bootoption for windows 10
Hi, I installed Qubes today. I thought it will add my windows to grub, but it haven´t. I wanted to add windows manually to grub, but i have no access to the grub files. I am completely new to Qubes and need some help please. Thanks, Stefan -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f6a60fbc-4da9-47b9-a89f-ce829eb19a83%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: HCL - Lenovo ThinkPad T460s (20F9CTO1WW)
On Saturday, June 11, 2016 at 5:13:41 PM UTC+2, gabi...@gmail.com wrote: > > On Tuesday, 31 May 2016 20:47:37 UTC+1, patie...@terminalmoronicy.com > wrote: > > On Sunday, May 29, 2016 at 7:34:46 PM UTC-4, Marek Marczykowski-Górecki > wrote:-BEGIN PGP SIGNED MESSAGE- > > > > Hash: SHA256 > > > > > > > > On Thu, May 26, 2016 at 08:25:48PM -0700, patie...@terminalmoronicy.com > wrote: > > > > > I also have a t460s and encountered many of the problems above. I > updated the qubes patches (excluding pvusb) to apply against kernel v4.5.2 > and tossed in an out-of-tree patch for Skylake. Bumping to 4.5.5 didn't > require any further patch-wrangling (except that the Skylake patch had been > merged in the meantime). > > > > > > > > Was that patch backported also to 4.4.11? > > > > > > > > > > > > Yes - I checked and the particular patch that fixed suspend for me is > also in 4.4.11. I am now curious how many of the p-states improvements > have been backported as well... > > > I've been running the result for a few days and everything seems to > be working well. > > > > > > > > > > https://github.com/patientnil/qubes-linux-kernel/tree/devel-4.5 > > > > > > > > > > Notes: > > > > > > > > > > - The pvusb patch looks the trickiest to port, and the associated > tools show that scary experimental warning. I didn't pursue it, it's > sitting there commented out. > > > > > > > > Yes, ignore it. In fact it is already commented out in series.conf file > > > > for some time. > > > > > > > > > - Sound, trackpoint buttons, wifi, suspend all work (though I haven't > tried reenabling TPM yet). > > > > > > > > Camera also works, and enabling the TPM in TPM 1.2 mode does not > interfere with suspend. The system will not suspend/resume properly if the > TPM is set to PTT mode (using my patched 4.5.5 kernel in Qubes 3.1 - I have > not tried a 4.4.11 kernel). > > > > I have not yet played with AEM. > > > > > - I get occasional screen artifacting (horizontal lines) but I am > using the qubes-R3.1 display packages - before a reinstall I had better > luck with updates in the unstable repo. > > > > > > > > Are those artifacts across the whole screen, or only particular windows? > > > > > > > > > > The artifacts go all the way across the screen, without stopping at > window boundaries. They are rare, and seem to be "fixed" when moving > windows around. > > > - While updating the kernel config, I had some sort of snafu, and I > later had to go reenable a bunch of fundamental things like IP_MASQ. The > config should be reexamined (I'm planning to pare it down to just the > things I need). If this was to be merged to the main tree it should be > redone. Presumably there are rules of some sort as to what to include? > > > > > > > > Generally the rule is "enable all drivers are modules". > > > > > > > > > > Good to know - if I update my repo for later 4.5 kernels I will update > the config to respect this policy. > > > [snip] > > > > > > -tom > > > Hi Tom, > I'm kind of stuck here: > I ran the commands that installed the kernel-4.4.10-9 > sudo qubes-dom0-update --enablerepo=qubes-dom0-unstable kernel > sudo qubes-dom0-update --enablerepo=qubes-dom0-unstable kernel-qubes-vm > > And in the Global Settings kernel-4.4.10-9 is selected. > > But Xen cannot continue when starting. I need to Wait for the Xen screen > to prompt and manually and quickly do Tab > Advanced settings > Select the > kernel 4.1.13.9 (old one) > Once the machine is booted, kernel-4.4.10-9 is still selected on Global > settings. > This solved the Wifi issue, but not the sleep issue, and it has the pain > of manually selecting the Old kernel on each boot. > > > If I change the Global Settings to use the 4.1.13.9 (old), the machine > boots with no problems, but I do not have Wifi. > > How can I remove the kernel-4.4.10-9 from booting? > Or need to format it again all together. > > Thanks, > Gabriel > There is a difference between what kernel your dom0 will boot when you start your computer and what kernel your other VMs will boot with when you start them. The yum package *kernel-qubes-vm* package installs/upgrades the kernel your VMs will boot and *kernel* upgrades what kernel your computer/dom0 will boot. The 'Default kernel' under 'Global settings' only affects what kernel the VMs inside Qubes will boot afaik, not the dom0 kernel. You control what kernel dom0 will boot inside */boot/efi/EFI/qubes/xen.cfg*. At the top you can set the default variable to the name of one of the sections after it, you should be able to find your 4.1 kernel there. Change that value, save the file and from now on what kernel is booted should be changed. Beware that any kernel upgrade will probably change the default to the newest one again. /Linus -- You received this message because you are subscribed to the Google Groups "qubes-users" group.
Re: [qubes-users] windows 7 home premium sp1 install issue
On Tuesday, June 14, 2016 at 10:46:44 PM UTC-4, Drew White wrote: > > On Wednesday, 15 June 2016 12:34:58 UTC+10, Andrew David Wong wrote: >> >> Please note that this effectively renders the ISO-containing HDD equal >> in trust to dom0. If malware on the HDD (or in the firmware, etc.) >> manages to execute in dom0, it could have control over the entire >> system (all VMs). >> >> I'm sure that Drew is aware of this and has made a conscious choice to >> trust his ISO-containing HDD, but other people reading this may not >> have considered this. >> > > Hi andrew, > > yes, I have taken many things into consideration. > Well, my ISO containing HDD is also an HDD that has guests on it. > Malware on the HDD? Only if it comes from another guest without my > permitting it. > > So yes you are right, but I'm not using a portable HDD that goes into any > machine. It's a portable HDD that only plugs into Dom0, nothing else. > > It's only ever plugged into my PC here, and my identicle one at the other > office. > So it just haas the guests that I need at both locations, and not have to > send data across the internet from guest > on this machine to guest on that machine and vice versa. > > So that is the security and precautions that I do take. > I'm not sure that the location I mounted the .iso from is related to my problem. I had no issues installing from the ISO, hosted from my personal vm. The problem was post install. I will try running the vm with debug, and possibly play with amount of memory and qrexec_timeout tonight to see if I can find more information. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/666c18d9-27fe-4e3e-b4c3-fbeb1fb4edb8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to properly administer several templates?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2016-06-15 01:56, Franz wrote: > On Tue, Jun 14, 2016 at 10:49 PM, Andrew David Wong >wrote: > > On 2016-06-14 15:20, Albin Otterhäll wrote: I've eight different templates (copies, etc.) and administrate them takes quite a while. How should I streamline this and make it as easily as possible to update and install applications across several templates? > > Personally, I found that the vast majority of time I spent > administering templates was spent on keeping them updated, so I > wrote a bash script to update them and set it to run periodically > as a cron job in dom0. > > >> And what happens when the update process stops for some reason, >> such as for being unable to verify packages or for suggesting >> some manual steps? > Then it'll just fail to update. I log all the output and check it periodically, so if something requires manual interaction, I just do it manually at some later time. Most of the time, no manual interaction is required for standard updating. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJXYRyDAAoJENtN07w5UDAw54IP/RVMCtWrMMBuDTHvrOtZj0UT 12ByZKJ60l3QFvdg1rzrYP2/8d8LEvnMRGASrlJorP9jdnDe34gL5AgyVo6RGOE4 jxdVIVlhGgqQA5jEgWwRUXlw78bTrz2wHRIngu7AA2hlpLYbXz34qZM/KfzfdZcR pSR+ikUmjRubgBrLB3BbPGQGSQ+TCpJb33J/Bw9tWliaZEQQFBMvxqehlAAm7Dhf DyfSwL9CMjWuNxUl2aZszUHtFx8d9vWpFHwDqRPWQrdMYEspeYNaSZ9n3FXetv2+ yWvqoGs8w66CfAnV8Eu1KuGfTObThc/KANKp1XtS4eF52LYBubpt1hjpHrNn2ty1 VoMdXmt0iXRElyrQSJBlqEGhDvym/ryP0T2tGQXgE68U/eIgHCQ/V4W2LCyCUSgl IStlu5rUqL19F79LrLPwR0SIbENetGJhMEIee4mNdJb+/Q2NAD0riNXW/lzfpfac 3toX+FcHyhK96LsQzDzjrcO875ZcFyrMM2eYQRCgpIouANMieltVH/rNmrqu/AGw f22VJsmkomomsG4bFHOhZcUefOE0Uycp5+jApmBZPcz1LFpK/QJlfWH9TRqZfO25 DoTCv1LAPULpYESkSjTWAEYIDXx30QfNFcPAI2sGvBL79dKaBv3GStG0RnLemh/i 179lolujSts2J8Z6kMQz =GSia -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/cc170025-a3f3-0646-f4f0-dbf18488215c%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Freezes at network setup after install & reboot / aka Setting up Networking failure!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2016-06-14 20:48, thepunkg...@gmail.com wrote: > I'm trying to install Qubes on my XPS i5 Desktop with 8Gigs and an > Nvidia Gpu. I get as far as installing, rebooting, and setting up > my username. But every time it freezes at the Network Setup. I took > out the hard drive and put it in another computer, and got past the > network setup and logged in for the first time. But when I put back > the HDD in my XPS Qubes froze at the loading screen. > > The error message I got in my other computer before I got past the > network setup, I guess it just didn't get hung up on it lol. > > > [Dom0] >> > >> > Setting up Networking failure! >> > >> > ['/usr/sbin/service', 'qubes-ntvm', 'start'] failed: >> > Redirecting to /bin/systemctl start qubes -netvm.service >> > Job for qubes-netvm.service failed. See 'systemctl status >> qubes-netvm.service' and 'journalctl -xn' for >> > details. >> > > Is that saying there's a log of the failure in /bin/systemctl or > something? Do y'all think it's a hardware compatibility problem? Or > is it something I can fix by running it on my other computer? > > Let me know if I need to provide more info! > > -Radio- > Sounds like it might be an issue with your network card. Try installing any available drivers for it if you can, and post the exact brand and model here. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJXYRqOAAoJENtN07w5UDAwiJoP/2Ldgscjrvbrz8KaeC5R6Ehx XUFcj26RvJIL6ii/IOCT1OIVjvtCcfx/rxYmZ2qsKAbDipWFQXRPPE4vcuf1O9Jy JCOydzuwFKBXt1jPZ744o5oKUFmHvIJedQ+IJBT/Nf/UCYbSX5DRPHGFlNCifVB5 OZi3tjy9lcxTwO7ssq/HoxebniqU7Rcn91iSl6B2u2qvesxiI7eb1MMYJBAzIYfJ 65JXmHeQ1xziPs4cgytakZ5v701MeGkV0GymMZiAVR4aQUM3JPKsPjPeruCUUSm0 e7Rb6NbSS6tWTP9Jdq4CmL1YRRnEEG+Yr8qKZwaleU//lQex3j3dfm2mWdK4GJlu cjJo/Z5sdB+gX4JVlXDpsp350dARfoZMC9E4HQvUstkx8WZehT9dlqFHTRPeF1ua JMGXOJf9rYqVFL1icLHzNhd6f/57UEEMfRwi2Vu4KEh6KkLY3gpkjEQb95HvvsEh LZNDS3gAMV0WmIkKJrEdYuHuWhI2CQD0UlrWsLAKohFD6G8rEmsXCNuQgTeEKqVq 3SbtZ1tA+sm7/RoYFaAVLercoAZz/T83/kHQ/Q8xkQBI5P7mZQlqODL7him4i08P 6AsImkwDjFRubz/7e6IdUe1dtyRRRdLFiURgAf0h0gHdDIjRiRWyDfenyu9W9rKh 0gqGKj82kL3uj0FdENnI =AcfD -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9daec038-b72a-e814-06d4-32f1f7ee233f%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: MacBook Air 2012 and that ol' Broadcom chip
On Wednesday, 15 June 2016 03:19:47 UTC+7, stephen...@gmail.com wrote: > Scratch all that. I trashed the net-vm that I made (I'm doing them by hand > due to the Broadcom chip freaking things out a bit on the install) and > recreated the net-vm with Fedora instead of Debian. Works like a champ. I'll > hit you all up later with a HCL report and a run down of my time with this > machine and Qubes. Congrats on the install. I for one would be really interested in a step-by-step description of what you did to get it working. Although not quite the same, I have an old MacBook Pro on which I'd like to install Qubes! :-) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/68f1f2ae-ef5e-4f8e-bd68-7a94402af1e9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Updating Dom0, Qubes, grumbles, things that need to be fixed and not need to be fixed.
Hi folks, Please, do not take this whole thing the wrong way. It will seem like it is sounding the way it is not sounding, just because of the way it is put together. It's all things that I find need to be looked into, things that I know need to be fixed, and that I have fixed on my local. Hopefully you will understand where I'm coming from and understand this the way I intend for it to be understood, and not the way you will most likely take it. When will Dom0 be updated to a recent version of something? If this was CentOS for Dom0 then there would not be this update issue where Fedora removes the packages and repositories for their "obsolete" operating systems, and you wouldn't have a useless Dom0 that one couldn't get updates for. This is the problem with Fedora. CentOS is heading the same way slowly after version 7. But at least they have long term updates and stable system that doesn't have invalid repositories after a few months. Please change the way things are done so that they work long term, not short term. Or else have a workaround for things to work properly over a long period of time. Another thing, please get the menu structuring and naming correct, that way we don't have to alter your code to make the menus correct. With Windows HVM Templates and AppVMs wether they are standalone or not, why do you have the menus the way they are? Why not build the tools to build the menu correctly instead of us having to edit EVERY menu item to get it the way it should have been built? Why is the networking so difficult? I have my DNS server set to the parent virtual (proxyvm or netvm) which has the main DNS server as the one that's on the network acting as the DNS server, but the virtuals can't find it, unless I specify it explicitly. Why is it that the Qubes-Windows-Tools almost never work? Why is it that the tools never set up the screens right? Why does it set it up as ONE screen, instead of multiple screens when I use 2+ monitors? (This is the reason you are having the issue and bug that you have with the tools on large displays) When reading https://github.com/QubesOS/qubes-issues/issues/1870 There are some good ideas, and some that aren't really good at all. https://github.com/QubesOS/qubes-issues/issues/1870#issuecomment-223055937 If THAT is what the manager will be like, it has no structure, no layout that is understandable, it is designed to be "*wanky*" and not *functional*. Your current manager needs only altering to work better, and adding onto it. Not a facelift to make it look like crap. The installer doesn't allow for multiple HDDs to be used. It just decides that all HDDs are 1 HDD. If I select the smaller HDD that the O/S is going on, and the drive I want /var/lib/qubes to go on, then it sets them up as one hdd and just wants me to assign space. But that's not what I want. The one that will have the virtuals on it is a mirrored drive, to keep my virtuals protected. I don't want half of the virtual to be on the main drive and the other half to be on a mirrored drive because then if my primary drive dies I won't have the first part of the virtual, only the second. That's pretty useless to me. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/47b8f6c6-a6b9-49f1-b746-cee11779f8d3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.