Re: [qubes-users] Re: Battery Life Qubes 3.2 rc2

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-08-01 18:36, Peter M wrote:
> On Sunday, July 31, 2016 at 6:29:27 PM UTC-6, Peter M wrote:
>> Is anyone else noticing very significant increases in battery life with
>> 3.2 as opposed to 3.1?
>> 
>> On 3.1 I was lucky to get 1h 30 min while with 3.2 I am easily getting 3 
>> hours. I have an Nvidia Quadro graphics card so I am guessing some 
>> improvement in the nouveau driver is helping.
>> 
>> Anyone else want to share their battery life experiences?
> 
> 
> Ok I can confirm a very significant improvement in power usage.
> 
> In 3.1 with minimal activity (nothing but basic VM open) the usage is
> about 24W. Opening a few VM's (personal, work, etc) brings that up to about
> 28.5W.
> 
> IN 3.2 with minimal activity (nothing but basic VM open) the usage is
> about 13.1W. Opening a few VM's (personal, work, etc) brings that up to
> about 16.3W.
> 
> There is also an improvement in temperature. My laptop ran pretty warm in
> 3.1 while in 3.2 it runs cool. Going to dig into it more.
> 
> My setup is Nvidia Quadro M2000M Intel Xeon M1505 16Gb Ram
> 
> Given this is new hardware my guess is significant driver updates is the 
> cause.
> 

Very nice! :)

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=YJhj
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/63da9f93-ba40-208f-0925-ba3e4b7f6399%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Battery Life Qubes 3.2 rc2

[Peter M]

On Sunday, July 31, 2016 at 6:29:27 PM UTC-6, Peter M wrote:
> Is anyone else noticing very significant increases in battery life with 3.2 
> as opposed to 3.1?
> 
> On 3.1 I was lucky to get 1h 30 min while with 3.2 I am easily getting 3 
> hours. 
> I have an Nvidia Quadro graphics card so I am guessing some improvement in 
> the nouveau driver is helping.
> 
> Anyone else want to share their battery life experiences?


Ok I can confirm a very significant improvement in power usage.

In 3.1 with minimal activity (nothing but basic VM open) the usage is about 
24W. Opening a few VM's (personal, work, etc) brings that up to about 28.5W.

IN 3.2 with minimal activity (nothing but basic VM open) the usage is about 
13.1W. Opening a few VM's (personal, work, etc) brings that up to about 16.3W.

There is also an improvement in temperature. My laptop ran pretty warm in 3.1 
while in 3.2 it runs cool. Going to dig into it more. 

My setup is 
Nvidia Quadro M2000M
Intel Xeon M1505
16Gb Ram

Given this is new hardware my guess is significant driver updates is the cause.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/66e3fe2d-9cc9-40ef-927a-c462b4292eef%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Different version usr/src and kernel - Installink module aziokdb

[Facundo Curti]

El 31/7/2016 9:35 p. m., "Facundo Curti"  escribió:
>
> Hi there. I'm trying to install a kernel module for my keyboard. But I'm
having troubles when I have to install it...
>
> I have a diferent version on /usr/src that the kernel.
>
> ls /usr/src/kernels:
> 4.4.14-11.pvops.qubes.x86_64
>
> ls /boot:
> xen-4.6.1.gz
> symvers-4.4.12-9.pvops.qubes.x86_64.gz
> initramfs-4.4.12-9.pvops.qubes.x86_64.img
> vmlinuz-4.4.14-9.pvops.qubes.x86_64
>
> ls -l /lib/modules/4.4.12-9.pvops.qubes.x86_64/
> build -> /usr/src/kernels/4.4.12-9.pvops.qubes.x86_64
>
> When I try to compile aziokdb module:
>
> make:
> error /lib/modules/4.4.12-9.pvops.qubes.x86_64/build does not exist
>
>
> I didn't put the entire output because it is from dom0 and I cant
copy-paste as easy than with another vm. I made it manually.
>
> Some idea how can I fix this? :/ I'ts possible to reinstall kernel
without compiling it manually? It would solve it? :P
>
> Thx
>
> --
> You received this message because you are subscribed to a topic in the
Google Groups "qubes-users" group.
> To unsubscribe from this topic, visit
https://groups.google.com/d/topic/qubes-users/4i8kwTBUBt8/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/76a07c1d-6b60-43e6-9f0c-8eae18469688%40googlegroups.com
.
> For more options, visit https://groups.google.com/d/optout.

Someone? :S

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABxff5-wj-k6T1ihZ6iWptXAST70f1M8Bx9e3cS-YGebA04jAg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] i3 windows manager copying and pasting

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-08-01 16:26, fmu...@gmail.com wrote:
> Hi,
> 
> I've installed i3 and like it. I'm using it with the i3-settings-qubes. 
> However crtl-shift-c crtl-shift-v doesn't work. Anyone know if I have to
> add a keybinding? Something else?
> 
> Thanks, Francisco
> 

I've never used i3, but if you want to reassign those key bindings, they can
be reassigned in /etc/qubes/guid.conf (in dom0).

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJXn+KgAAoJENtN07w5UDAw+vAQAKLPjYSX8qnHpBC4BO/MBDxo
e+CDBy7I8alJKnZuYcPuexeoz1rGJNQOgIrLDTbPz72umoF00QwRkIdlRCNp6VIt
uQZwou+7ToVA+6+mftJPNf4Zv+gNngu+8n/yrsA6DCgDzrQSUpij52vfg9He82zf
Jb9H3IX2sMJ4uyOykTJEeeTTbHYTAeH34Lyq7gcp5YLTg6zo+b3/JqPRJR8EcZR/
gZyUOxNbQjCEBbtnScZjauiOQQK4ozKj+Ma3gnMpnadysSQxeMqnRCxqGtdsckXT
Rmr1EUih8PchvUyqMx/hnMKTdgYZ9UrUSutdg1XvF1khcEK7zus8A58Gog+f1CFl
Ig2Z0d9TeoyVgLGKfeFqNQge6KX5jjFYHXPGNTFoVGGzKo5WL+O5X4Gnq32oNP1I
nLlo4RjKREa2L7bl3ITYf5BGvCpUMtIQFQraBL/B30YYogRch2Z55X1ixClitTcy
d3Wu5RdXRkY52lM6RuKTdxDOpPpMQzAFMCyxNHAFL9ciiKK/G/SHd71h7UGCBJ9o
R7ZpXhWgLEZ1Cx5D4mrsBxwFH910rwC29S/sN8RX+JqCIzGwtmBXmc5shrIWT4hp
kR38AE/SUQ4XM4tsdGS9rfskjkeJIGPBi9qY8FCOY+VokuoU9ubevrynsF22KM0u
2q5DKoIy3fB42pl4JJGX
=5vrY
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/564ce4d9-e030-eb37-df5d-056420543325%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Unmounting USB Devices at VM shutdown

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-08-01 12:40, tom...@gmail.com wrote:
>> One other thing, the gui in qubes seems to always develop 'artifacts' on
>> the screen, such as horizontal lines of 'static'.
> I never got this issue.
> 

That one is tracked here:

https://github.com/QubesOS/qubes-issues/issues/1028

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=/4Hh
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2d811622-ddb6-2a50-81d4-cea901119569%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Battery Life Qubes 3.2 rc2

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-08-01 09:38, Peter M wrote:
> On Monday, August 1, 2016 at 4:05:51 AM UTC-6, Andrew David Wong wrote: On 
> 2016-07-31 17:29, Peter M wrote:
 Is anyone else noticing very significant increases in battery life 
 with 3.2 as opposed to 3.1?
 
 On 3.1 I was lucky to get 1h 30 min while with 3.2 I am easily
 getting 3 hours. I have an Nvidia Quadro graphics card so I am
 guessing some improvement in the nouveau driver is helping.
 
 Anyone else want to share their battery life experiences?
 
> 
> Sounds like good news. I've found powertop very handy for monitoring power
>  usage. Perhaps you could use it to see how many watts you're pulling
> before and after?
> 
> 
> 
> Good idea. I am assuming that I need to install PowerTop in dom0. What is
> the safest way to do this?
> 

You can install it in the usual way:

$ sudo qubes-dom0-update powertop

Note, of course, that the usual warnings apply about installing and running
programs in dom0. IMHO, installing and running powertop from the Fedora repo
is a minimal, acceptable risk, but of course it's up to you.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=XPWv
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dcd2f5f4-3884-54f0-f7b3-8f6b402d66fd%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Unable to get right X display for kali on HVM

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-08-01 06:58, NewbieG wrote:
> Hello list,
> 
> I'm running Qubes OS 3.1 and I'm trying to have a Kali VM (2016.1).
> 
> I've tried both methods suggested in:
> 
> https://www.qubes-os.org/doc/pentesting/kali/
> 
> First one, works ok if you run kali from DVD without installing it. If I
> try to install it, login window flickers and once logged on, the desktop
> shows up 'misplaced' (see attach).
> 
> Second one, as someone already pointed out in the list, introduces
> conflicts between X packages from kali and X packages from the debian-9
> template.
> 
> Any help would be most appreciated.
> 
> Thanks!
> 

Thanks for the report. I've added your comments to the issue we have for
tracking Kali documentation:

https://github.com/QubesOS/qubes-issues/issues/1981

Jeremias (CCed) wrote most of the existing Kali documentation, so he might
have some ideas.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=AyqV
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b58b0d39-eb3c-dae1-c61c-01af478a19e6%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] i3 windows manager copying and pasting

[fmuniz]

Hi,

I've installed i3 and like it. I'm using it with the i3-settings-qubes. However 
crtl-shift-c crtl-shift-v doesn't work. Anyone know if I have to add a 
keybinding? Something else?

Thanks,
Francisco

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be99cea8-2ab0-4c7f-98f0-4f7e6adbc4ba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: What do you think about the idea of a FileVM?

[fmuniz]

On Monday, 1 August 2016 18:46:44 UTC-4, Andrew "Arthur" Summers  wrote:
> Does Xen have a native import/export format? I'm WAY more familiar with 
> VMware offerings (which handle loads of formats), but if there's a way to add 
> OVA import to Qubes down the road, I'd be in love. Heck, if there's an add-on 
> or a command to run from Dom0 that I could use now, I'm down.
> 
> 
> On Mon, Aug 1, 2016 at 5:43 PM  wrote:
> On Friday, 29 July 2016 20:12:45 UTC-4, arthur@gmail.com  wrote:
> 
> > I agree with the idea of having an option for a storage VM, but my 
> > agreement goes a little deeper (and forks a bit). I know that the primary 
> > goal of Qubes is security, but there are a lot of different use cases for 
> > it. I use it because I like the compartmentalization provided by VMs. 
> > Security is almost a secondary for me - I wanted a bare-metal client 
> > hypervisor. Since XenClient no longer exists and no other offerings are 
> > well maintained, I landed on Qubes. For my purposes, sharing storage would 
> > be great, but baking it in DOES defeat the primary goals of the project.
> 
> >
> 
> > Personally, I'm a huge fan of Turnkey Linux (http://turnkeylinux.org), and 
> > I use their stuff regularly to stand up infrastructure components or for 
> > testing. They have a fileserver VM, and it's pretty beautiful. Actually, 
> > all of their stuff is pretty beautiful. However, unless I missed something, 
> > I don't see an easy way to import an OVA/VMDK into Qubes. If that existed, 
> > I'd be happier than a dog with eight legs (yes, I said that). This would 
> > solve a lot of use cases, simplify the creation of third party HVMs, and 
> > still maintain the goals of the project.
> 
> >
> 
> > Thoughts?
> 
> 
> 
> I don't know about OVAs, but I imported a Virtualbox VM. If you search for 
> virtualbox you'll find the post with the procedure. Maybe this link will 
> work: https://groups.google.com/forum/#!topic/qubes-users/YQyRSoRQWCU

I haven't tested this. But it seems you just untar the OVA and then convert the 
disk with
qemu-img -S 4k -f vmdk -O raw image.vdi image.raw

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/18f26322-790f-4c40-86b5-1be4a736aa15%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: What do you think about the idea of a FileVM?

[Andrew "Arthur" Summers]

Does Xen have a native import/export format? I'm WAY more familiar with
VMware offerings (which handle loads of formats), but if there's a way to
add OVA import to Qubes down the road, I'd be in love. Heck, if there's an
add-on or a command to run from Dom0 that I could use now, I'm down.

On Mon, Aug 1, 2016 at 5:43 PM  wrote:

> On Friday, 29 July 2016 20:12:45 UTC-4, arthur@gmail.com  wrote:
> > I agree with the idea of having an option for a storage VM, but my
> agreement goes a little deeper (and forks a bit). I know that the primary
> goal of Qubes is security, but there are a lot of different use cases for
> it. I use it because I like the compartmentalization provided by VMs.
> Security is almost a secondary for me - I wanted a bare-metal client
> hypervisor. Since XenClient no longer exists and no other offerings are
> well maintained, I landed on Qubes. For my purposes, sharing storage would
> be great, but baking it in DOES defeat the primary goals of the project.
> >
> > Personally, I'm a huge fan of Turnkey Linux (http://turnkeylinux.org),
> and I use their stuff regularly to stand up infrastructure components or
> for testing. They have a fileserver VM, and it's pretty beautiful.
> Actually, all of their stuff is pretty beautiful. However, unless I missed
> something, I don't see an easy way to import an OVA/VMDK into Qubes. If
> that existed, I'd be happier than a dog with eight legs (yes, I said that).
> This would solve a lot of use cases, simplify the creation of third party
> HVMs, and still maintain the goals of the project.
> >
> > Thoughts?
>
> I don't know about OVAs, but I imported a Virtualbox VM. If you search for
> virtualbox you'll find the post with the procedure. Maybe this link will
> work: https://groups.google.com/forum/#!topic/qubes-users/YQyRSoRQWCU

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAP0YRgatC5VHtfRGH78psOQ5mN%2B%3DtA%3D-j7KshqKmn7Je5hT4Wg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: What do you think about the idea of a FileVM?

[fmuniz]

On Friday, 29 July 2016 20:12:45 UTC-4, arthur@gmail.com  wrote:
> I agree with the idea of having an option for a storage VM, but my agreement 
> goes a little deeper (and forks a bit). I know that the primary goal of Qubes 
> is security, but there are a lot of different use cases for it. I use it 
> because I like the compartmentalization provided by VMs. Security is almost a 
> secondary for me - I wanted a bare-metal client hypervisor. Since XenClient 
> no longer exists and no other offerings are well maintained, I landed on 
> Qubes. For my purposes, sharing storage would be great, but baking it in DOES 
> defeat the primary goals of the project.
> 
> Personally, I'm a huge fan of Turnkey Linux (http://turnkeylinux.org), and I 
> use their stuff regularly to stand up infrastructure components or for 
> testing. They have a fileserver VM, and it's pretty beautiful. Actually, all 
> of their stuff is pretty beautiful. However, unless I missed something, I 
> don't see an easy way to import an OVA/VMDK into Qubes. If that existed, I'd 
> be happier than a dog with eight legs (yes, I said that). This would solve a 
> lot of use cases, simplify the creation of third party HVMs, and still 
> maintain the goals of the project.
> 
> Thoughts?

I don't know about OVAs, but I imported a Virtualbox VM. If you search for 
virtualbox you'll find the post with the procedure. Maybe this link will work: 
https://groups.google.com/forum/#!topic/qubes-users/YQyRSoRQWCU

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/da3f9a9b-e101-4b81-8459-891812d07b53%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Unmounting USB Devices at VM shutdown

[tomhet]

> If we shutdown a VM that has a USB storage device attached, the VM still 
> indicates the device being attached to the VM. But when you restart the VM, 
> the device is not accessible and can no longer be disconnected.

As far as I remember this should fix it: "sudo udevadm trigger --action=change"
If not - here's entire guide for your case: https://www.qubes-os.org/doc/usb/

 
> I've just had to reboot the entire system every time I forget to unmount 
> drives before shutting down a VM.
Here's a tread that discusses auto attach/detach/mount/umount on VM startup and 
shutdown (although not usb-specific): 
https://groups.google.com/forum/#!msg/qubes-users/RogG5rXG_Pw/9UWUTzl-QgAJ


> One other thing, the gui in qubes seems to always develop 'artifacts' on the 
> screen, such as horizontal lines of 'static'. 
I never got this issue.

regards,
  Tom

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8c991c28-527b-4d81-badd-a7400f3004a8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes VM Manager crashes on USB un-plug, "Houston, we have a problem"

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Aug 01, 2016 at 11:13:46AM -0700, neilhard...@gmail.com wrote:
> Qubes VM Manager crashes on USB un-plug, "Houston, we have a problem"
> 
> I plug in a USB, then attack it as a block device to a VM.
> 
> Then I remove the USB device without first unmounting from within the VM
> 
> And then USB no longer works at all, and if I try to detach the block device, 
> the VM manager crashes and we get "Houston, we have a problem" error message.
> 
> Sure, I can go into the VM in the first place, unmount it, and then detach 
> the block device.
> 
> But sometimes I forget to do that
> 
> Other than restarting the entire OS... what can I do.?
> 
> It's really annoying having to restart the OS whenever I screw up and 
> accidentally remove it without unmounting first.

Take a look here:
https://www.qubes-os.org/doc/usb/#what-if-i-removed-the-device-before-detaching-it-from-the-vm


- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXn6VVAAoJENuP0xzK19csfAcH/1riuQJxN0NcbP9n2BLfgdrY
26NbNTMQ+Ec+AKFr8f+HPJuQbdr9rwBepaE3hCZUzNPt0JxbOpib/a5oz0ulWEID
wCLKjUHyB76LACBNrxyD39LyndUR0/8Xqo5JrGn/GTRwnph7S/JaEwYvh03uNfEs
HbFdhn+sJvk2jHGLFvkNqHdZwh5nN6iKNHOiWggDyXpux09ZK01JFXQm9NOD7zP1
nCxsu8x1+I0+XgRTlTyzeNY5z3laS+uIidTKtWClsU0L1befX0ZZMXMSKWWkkZ/d
V4aL1V9EwSaJ0BH1q+hXCC/KVw2ScFLXh+CYS9T59nAcOY1AXUBVj3z+C3Szprs=
=U0tR
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160801193859.GX32095%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] MicroSD assigned to dom0 and not to sys-usb

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Aug 01, 2016 at 07:35:26PM +, 468ezc+5r0fnwy87qeag via qubes-users 
wrote:
> Hi,
> 
> My MicroSD while attached is assigned to dom0 and not sys-usb as is supposed. 
> Notwithstanding, USB devices are still assigned to sys-usb.
> 
> Is this the intended behavior? Doesn't this increases, in the same manner as 
> usb devices does, the surface attack in dom0?

Your (micro)SD card reader is probably not a USB device, but PCI device.
Yes, it's better to assign it to some VM - sys-usb is ok. You can do
this in VM settings - "Devices" tab.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXn6TmAAoJENuP0xzK19cs6qQH/34EqTBrFg014Ckk4WJ9IOnI
b3e4XE5fAPmrsJrQMjaz2UEkKnxc6lFXM2lNAZKQUKOmRAjLrwrOCkuO4D76djCl
wZsHWSwlidTfQaPE0VLvBKpwFDq6n+VcISFCn8ClTCUI8cABpVWXCixo0QYSxrXv
/1L92zGJm8rBkjlNExgGvHnV5sKJm4oF9rSoV6ILGu/NF/Bgk3TgN0xNxPdWmuv/
ssncQZZRuRv7q8uudNgqemfdqPMp+4JnQ1befOokHCf/0K9fGtMw/kpr/lfqV5c1
f6cSl88VxN1sn/DDOeRjH1MD0+l4EIes39VFRNMuaKS0Fwa3IZP+G2iOpVEpDWU=
=gi9W
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160801193709.GW32095%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] MicroSD assigned to dom0 and not to sys-usb

[468ezc+5r0fnwy87qeag via qubes-users]

Hi,

My MicroSD while attached is assigned to dom0 and not sys-usb as is supposed. 
Notwithstanding, USB devices are still assigned to sys-usb.

Is this the intended behavior? Doesn't this increases, in the same manner as 
usb devices does, the surface attack in dom0?






Sent using GuerrillaMail.com
Block or report abuse: 
https://www.guerrillamail.com/abuse/?a=UFR2AB5NVqcQmh2U93EQdRjCStifx8dDiadNcQ%3D%3D



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/379e08a30e41c12e6557c1fb544e22a7833%40guerrillamail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: SUCCESS: GPU passthrough on Qubes 3.1 (Xen 4.6.1) / Radeon 6950 / Win 7 & Win 8.1 (TUTORIAL + HCL)

[tomhet]

Hi Marcus,

I'm bit confused with this
> Edit /etc/default/grub and add following options (change the pci address if 
> needed)

Which version of Qubes is this? Aint 3.1 EFI-only?
And EFI version of kernel args are to be passed via /boot/efi/EFI/qubes 
(kernel=)?

regards,
  Tom

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/65d87e1b-218a-4cd3-b354-aa85f29d70a1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: usb 3.0

[raahelps]

On Saturday, July 30, 2016 at 6:23:22 AM UTC-4, Nicola Schwendener wrote:
> Hello all,
> sorry if I bother you but I haven't understood if USB 3.0 (I've a lot of 
> external disks with usb 3.0) is supported or not. I want to migrate from my 
> actual windows 8.1 OS to Qubes (I've to do a Windows HVW for some 
> applications) but, the USB 3.0 should work correctly. 
> could you please help me?
> best regards
> Nick

Yes it works fine on my system and also with passthrough block devices.   Only 
issue I had was with usb 3.0 speeds enabled,   the motherboard routes all ports 
into only a single usb controller.  So I use a pci adapter for my kb,  and 
use the qubes mouse proxy in the usbvm.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c95d84ef-4f7c-4fc9-bb81-b2dfbf63f806%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Upgrading from Qubes 3.1 to 3.2 fail

[raahelps]

On Sunday, July 31, 2016 at 7:53:30 AM UTC-4, donoban wrote:
> Hi,
> 
> I tried to do the experimental process for upgrading to Qubes 3.2. I 
> followed the steps from https://www.qubes-os.org/doc/upgrade-to-r3.2/
> 
> 
> All went fine until I rebooted the system (step 7). After rebooting I 
> had a lot of packages for update on dom0 (more than 1000), and when I 
> tried to update them it failed because some dependency problems (I 
> remember some perl packages but maybe there were more packages with 
> problems).
> 
> I didn't extract logs because I needed the computer working ASAP so I 
> installed it from scratch and restored my backup but I have another 
> computer on 3.1 which I would like to upgrade to 3.2 and I could try to 
> do the process again and extract useful information.
> 
> I had all my VM's with Debian template, I had indeed fedora template 
> removed, maybe this could affect to the upgrade process.
> 
> Some comments after fresh install 3.2:
> 
> - Debian and Whonix-GW seems up to date after install, while fedora-23 
> and Whonix-WS needed updates. I don't know why...
> 
> - I have sys-usb working fine but only with Fedora template, could I 
> migrate it to Debian?
> 
> Well, it looks very nice. Thanks for your work guys.
> 
> Regards.

I had the same exact issue with the experimental upgrade.  I also ended up just 
doing a fresh install.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/42824151-32ff-4e43-94c4-7774b4720e59%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Battery Life Qubes 3.2 rc2

[Peter M]

On Monday, August 1, 2016 at 4:05:51 AM UTC-6, Andrew David Wong wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2016-07-31 17:29, Peter M wrote:
> > Is anyone else noticing very significant increases in battery life with
> > 3.2 as opposed to 3.1?
> > 
> > On 3.1 I was lucky to get 1h 30 min while with 3.2 I am easily getting 3 
> > hours. I have an Nvidia Quadro graphics card so I am guessing some 
> > improvement in the nouveau driver is helping.
> > 
> > Anyone else want to share their battery life experiences?
> > 
> 
> Sounds like good news. I've found powertop very handy for monitoring power
> usage. Perhaps you could use it to see how many watts you're pulling before
> and after?
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> -BEGIN PGP SIGNATURE-
> 
> iQIcBAEBCgAGBQJXnx75AAoJENtN07w5UDAw5igQAMEWZYnYBQoDK17fpIk+RVTH
> 3aR3cRkNEAl6JEGESEnOGkS6T7n/dI6s4ZKJ+cY83gCw5PAYo3KMVDqmx7PO8XgH
> HXMyu/1mVnZ89/bC7g6nashJHzxYcVBkCwANy464vHnhFvMFMVALbz/395i7B/bu
> eB/Xc4tIDBeY0exztObQoemtm5qZ5r6CKNRjV8Ot6tB/pDOWsqx66OzdfHEzNasr
> 80BolgHVKNbSCNZZFmBnU/aK9J+i9a2knEbQxDVZY8qzis8xo3ZLY7R4jlzSBKJ2
> 8uK0im8QMAJLqwVQk+WERi7tbHoll5Uj83D4n6U5ywgYKq0UPv4D2+QiyIKRfY7S
> cKz8CVEAvx1ZMlLtVjX+Pql5pzL0vv8ZEp8r03XtiKll+9oygdzYupUbJngM/8VU
> eeMrJMloTYj15UUy0ff2HQDXe00VrXkIzajg6nLMqTSP5ZIE++T/5Z56TqTuZYEp
> Y4qNXLvvfSyPO4LT67htvkFRhSpl57fJLx/Q7Skkmovs96WVpk7H5pX3LIY6iCG8
> oSFaL7oO0vHvEavgiOMzu3+UxYSuv9Z0zgyuhqNStDemxuzz8QyItWDRb9pApQbY
> E9EggcD1qVZQoDiz1XdybfqQssNGaUdJmHkcv1pEEkM30mGm4nzyMdDJ/FyvPtF5
> 6xuGuspyyaD79SuZ/9wR
> =Dp1Z
> -END PGP SIGNATURE-


Good idea.
I am assuming that I need to install PowerTop in dom0. What is the safest way 
to do this?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e1f415cc-108a-4ad3-b985-40ae043fcaba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Install kde/plasma desktop in qubes 3.2rc2

[Adrian Rocha]

El lunes, 1 de agosto de 2016, 4:08:35 (UTC-6), Andrew David Wong escribió:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2016-07-31 17:53, Adrian Rocha wrote:
> > El domingo, 31 de julio de 2016, 17:53:01 (UTC-6), Marek 
> > Marczykowski-Górecki escribió: On Sun, Jul 31, 2016 at 04:40:16PM -0700, 
> > Andrew David Wong wrote:
>  On 2016-07-31 15:38, Adrian Rocha wrote:
> > Hello all,
> > 
> > I installed 3.2rc2 from scratch and I can't choose the kde/plasma 
> > desktop not even as an optional software.
>  
>  This was announced with the release of R3.2-rc2:
>  
>  "Beginning with this release, we’ve officially switched from KDE to 
>  Xfce4, which is now the new default desktop environment in dom0."
> > 
> >> I remember this announcement, but, why don't maintain it in the ISO as 
> >> alternative?
> > 
> 
> Joanna explains the reasons for that here:
> 
> https://github.com/QubesOS/qubes-issues/issues/2119

It's a pitty. I'm not agree, It's just my point of view becouse Xfce lacks many 
of the funcionality of KDE, and I don't consider these bugs as critical in 
KDE/Plasma 5. But it's just my opinion.

About the instalation from the repo, it was fine, I just have had to change the 
window theme as Marek described here:

https://groups.google.com/forum/#!msg/qubes-users/Y_v1wcl05iM/choRg3TfCgAJ

Thanks

> 
>  
>  https://www.qubes-os.org/news/2016/07/28/ 
>  qubes-OS-3-2-rc2-has-been-released/
> > 
>  How can I install this desktop in this new release?
> > 
>  
>  Even though KDE was removed from the ISO, you should still be able
>  to install it from the repos. We don't have documentation for this
>  yet, but if the command matches Xfce, it should be:
>  
>  $ sudo qubes-dom0-update @kde-desktop-qubes
> > 
> >> Perfect, I'm installing.
> > 
> >> Many thanks
> > 
> > 
> > Yes, exactly.
> > 
> > 
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> -BEGIN PGP SIGNATURE-
> 
> iQIcBAEBCgAGBQJXnx+bAAoJENtN07w5UDAwHIYP/1lz32ePxk/o8Puz8cOvMrrO
> 6cnXfTCUy1EtCmfmzYOdAAC9vOFt3FAumtVHT+J84j89bu2WV9bWdQQ8+9sYSLV1
> 46Ctk7ES1/zS5azTKAmqv48W3w1j8GHzThDangDlvQMmGiO4i2HXVWaNvyD8BhFE
> Tff27nY0d0ymmNVHqK5k7fNAR26in2xws1O63Gqcc5X4x4TbVs3VadqAlzMezU1M
> G3r3Iwv4cwPCng9yiFghba8pUKr/kGR+iw4QJKOJZ9ul7ZNyNWMA1494KUCbVNxN
> 1D50pqxVivHZCSba/V68zXWx8DgBRfuDx+pVnb9Z4yGI/OP+qs80R3oxFPXDCSyf
> VgKRY4HDiNbXIxgxZbhcyNsnAj5IYOsKdbQUX6G3wSc/YBSVMMUGLont0ZscyFVE
> 5IrmZVRH/gftA5QolQde+qq8rO1ckG+Z1fCL21n8aJmqaSyPTckVxTSkgYTwXCu9
> 19Ba2wC9bgJ6/S3D6NymmN54/jmjuD6MTGJQVC5dbwKvh94mVycQXR4m0Xq8Ntxd
> SHkxw+QvvpLKwB1ZLZJuXj/lwD/G/aunJ9KS1xmERH6kX7/4dPpfKNWEe/UzEl+q
> NC6Om1K2NCrV4kzHOSiCBi3tqAgHV/PCEJI/I6cYqDabOj6VqVFfh9V6WyncJ1ut
> psheeJLPkGaps7qVvzU1
> =IdcO
> -END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8509965c-8cc9-4ed9-b69f-a3baf0b750c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] AEM with Linux 4.4 causes hard reboot (cont... Trying to resolve issue)

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Aug 01, 2016 at 10:05:24AM +0200, donoban wrote:
> 
> 
> On 07/31/2016 11:45 PM, Andrew David Wong wrote:
> > On 2016-07-31 13:45, Andrew David Wong wrote:
> >> On 2016-07-31 13:42, Andrew David Wong wrote:
> >>> On 2016-07-31 13:38, Marek Marczykowski-Górecki wrote:
>  On Sun, Jul 31, 2016 at 01:30:42PM -0700, Andrew David Wong
>  wrote:
> > On 2016-07-31 10:41, donoban wrote:
> >> Nice, this should be added to: 
> >> https://www.qubes-os.org/doc/usb/#tocAnchor-1-1-4
> >> 
> >> With some warning: "Caution! Enabling usb-vm with LUKS
> >> encryption and a USB keyboard could stop you from booting
> >> your system"
> >> 
> >> :)
> >> 
> > 
> > If a USB keyboard is detected, the installer does not allow
> > the option of creating a USB qube, so it should not be
> > possible for a user to accidentally get him- or herself
> > into this predicament.
> 
> Yes, but if some user is reading USB Qubes doc, it's very likely he
> will try to do a sys-usb himself.
> 
> 
> I have some problems related to sys-usb. I did the installation of
> Qubes 3.2 on my parents house with a Logitech keyboard. When I
> returned to my house, after two or three tries before discovering this
> thread, my Microsoft keyboard didn't work.
> 
> Fortunately, I have another Logitech keyboard here (also USB) and I
> could boot my system. I guess the problem was the initramfs, it was
> generated with the logitech keyboard connected so It doesn't load
> modules for Microsoft.
> 
> This could cause hilarious scenarios, you go with your cool ultra
> secure computer to show a friend how nice is Qubes and you end being
> unable to boot your computer. I think initramfs should include most
> keyboard drivers as possible...

If you like to modify hardware, it's good idea to disable host-only mode
in /etc/dracut.conf. This will include most of the drivers.

Otherwise, I think it's actually a feature to have as little as possible
drivers in initramfs, as sys-usb nor sys-net are running yet.

> After recreating the initramfs I could unlock my hard disk, but when I
> went to the login screen, the keyboard didn't work! And the mouse
> didn't work too! Well, I have a Dell monitor with USB ports. I have
> both keyboard and mouse connected directly to the monitor. I
> disconnected the keyboard from the monitor and connected it directly
> to the computer and I could login into my xfce session. Few seconds
> after login, the mouse started to work, I disconnected the keyboard
> from the computer and reconnected to the monitor and it worked fine.
> What could be happening? Is sys-usb supposed to wait for do something
> after login?

It may be that the input proxy tried to start too early - which would be
a bug in service dependencies. Check logs with `journalctl` in sys-usb,
search for lines related to udev and/or input-proxy.

Anyway, in such a case, simply reconnecting the device (even to the same
port) should fix the issue.

> Last problem (maybe should be posted in a new thread):
> 
> the main motivation for testing Qubes 3.2 for me was the USB
> passtrough because it would nice for me to connect a WiFi dongle or a
> Android smartphone with tethering.  After install it (on my parent's
> house), I tested the WiFi dongle. It was attached fine, but on the
> dest VM it complained about unexpected errors and suggested a cable
> problem.

USB passthrough is quite tricky and unfortunately some devices may not
work. We just use USBIP driver, which according to our tests behaves the
best from available options.
You may have better luck asking on linux-...@vger.kernel.org, for help
with USBIP driver. Include lsusb -v output for that device. If you
decide so, please cc me.

> With the Android tethering it worked fine.
> 
> But now, when I try to attach it to a VM it says:
> "ERROR: Device attach failed: Invalid speed recieved"

I guess that "Invalid speed received" is actually nothing received at
all. It's probably some problem at sys-usb side, check logs there,
including ~user/.xsession-errors.

> It also says when doing any qvm-usb command:
> "Invalid 3-7 device desc in VM 'sys-usb'"
>
> It's my Microsoft keyboard, but I think the error doesn't has relation
> with the other error.

That's interesting. Can you post output of:

qubesdb-multiread /qubes-usb-devices/3-7

in sys-usb?

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXn1ptAAoJENuP0xzK19csq1QH/juiYrAkbZUFacMw0A9wWg+d
pVUlJB65zGVHb7G7lbqp1iRggi1whESTp3Fbj4sP1XsQAXITkS1sd0Tgq2n73gXJ
Y/f2fFIZTEVkuqt6y2da1BCLC6U6sJcTLyose4FbgmN4da6jDnbVrOEeRpBXn3X8
Ha+dnULGUBd66aVrgJn0/IEsd4mnqykE/LstpnZsp0JeD9FtRKvRTqv8VyV92Gkw
dy+TJnW7M6c52NP3P09KGlTiX8oiCkF9B9pF6AnG77G42VDEkY68VYRBRgypu+nA

Re: [qubes-users] No sound with VoIP

[Desobediente]

It shall be noted that the OP is trying to get audio to work via PCI
passthrough.

Have you tried leaving the audio devices in dom0 (not assigning any to the
VM), then right clicking on the AppVM on Qubes Manager and hitting the
magic "microphone" button?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAF0bz4Q2M%2BChTBz7sZ1x4qoLHVbUo%2BLgERKHH6V%2BRtRMgw00aw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Install kde/plasma desktop in qubes 3.2rc2

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-07-31 17:53, Adrian Rocha wrote:
> El domingo, 31 de julio de 2016, 17:53:01 (UTC-6), Marek 
> Marczykowski-Górecki escribió: On Sun, Jul 31, 2016 at 04:40:16PM -0700, 
> Andrew David Wong wrote:
 On 2016-07-31 15:38, Adrian Rocha wrote:
> Hello all,
> 
> I installed 3.2rc2 from scratch and I can't choose the kde/plasma 
> desktop not even as an optional software.
 
 This was announced with the release of R3.2-rc2:
 
 "Beginning with this release, we’ve officially switched from KDE to 
 Xfce4, which is now the new default desktop environment in dom0."
> 
>> I remember this announcement, but, why don't maintain it in the ISO as 
>> alternative?
> 

Joanna explains the reasons for that here:

https://github.com/QubesOS/qubes-issues/issues/2119

 
 https://www.qubes-os.org/news/2016/07/28/ 
 qubes-OS-3-2-rc2-has-been-released/
> 
 How can I install this desktop in this new release?
> 
 
 Even though KDE was removed from the ISO, you should still be able
 to install it from the repos. We don't have documentation for this
 yet, but if the command matches Xfce, it should be:
 
 $ sudo qubes-dom0-update @kde-desktop-qubes
> 
>> Perfect, I'm installing.
> 
>> Many thanks
> 
> 
> Yes, exactly.
> 
> 

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJXnx+bAAoJENtN07w5UDAwHIYP/1lz32ePxk/o8Puz8cOvMrrO
6cnXfTCUy1EtCmfmzYOdAAC9vOFt3FAumtVHT+J84j89bu2WV9bWdQQ8+9sYSLV1
46Ctk7ES1/zS5azTKAmqv48W3w1j8GHzThDangDlvQMmGiO4i2HXVWaNvyD8BhFE
Tff27nY0d0ymmNVHqK5k7fNAR26in2xws1O63Gqcc5X4x4TbVs3VadqAlzMezU1M
G3r3Iwv4cwPCng9yiFghba8pUKr/kGR+iw4QJKOJZ9ul7ZNyNWMA1494KUCbVNxN
1D50pqxVivHZCSba/V68zXWx8DgBRfuDx+pVnb9Z4yGI/OP+qs80R3oxFPXDCSyf
VgKRY4HDiNbXIxgxZbhcyNsnAj5IYOsKdbQUX6G3wSc/YBSVMMUGLont0ZscyFVE
5IrmZVRH/gftA5QolQde+qq8rO1ckG+Z1fCL21n8aJmqaSyPTckVxTSkgYTwXCu9
19Ba2wC9bgJ6/S3D6NymmN54/jmjuD6MTGJQVC5dbwKvh94mVycQXR4m0Xq8Ntxd
SHkxw+QvvpLKwB1ZLZJuXj/lwD/G/aunJ9KS1xmERH6kX7/4dPpfKNWEe/UzEl+q
NC6Om1K2NCrV4kzHOSiCBi3tqAgHV/PCEJI/I6cYqDabOj6VqVFfh9V6WyncJ1ut
psheeJLPkGaps7qVvzU1
=IdcO
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/88dc737f-c581-e4f3-c2e7-a0054848894a%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Battery Life Qubes 3.2 rc2

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-07-31 17:29, Peter M wrote:
> Is anyone else noticing very significant increases in battery life with
> 3.2 as opposed to 3.1?
> 
> On 3.1 I was lucky to get 1h 30 min while with 3.2 I am easily getting 3 
> hours. I have an Nvidia Quadro graphics card so I am guessing some 
> improvement in the nouveau driver is helping.
> 
> Anyone else want to share their battery life experiences?
> 

Sounds like good news. I've found powertop very handy for monitoring power
usage. Perhaps you could use it to see how many watts you're pulling before
and after?

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=Dp1Z
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b1df8288-f82d-e084-ce7f-6a144fc3e9e8%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Yellow dot / guid crash in appvms

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sun, Jul 31, 2016 at 09:19:05PM -0400, Chris Laprise wrote:
> On 07/31/2016 04:32 PM, Marek Marczykowski-Górecki wrote:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA256
> > 
> > On Sun, Jul 31, 2016 at 04:19:50PM -0400, Chris Laprise wrote:
> > > ErrorHandler: BadWindow (invalid Window parameter)
> > >   Major opcode: 10 (X_UnmapWindow)
> > >   ResourceID:   0xe7
> > >   Failed serial number:  179
> > >   Current serial number: 179
> > > 
> > > The above error sometimes results when I start a debian 8 appvm (I'm not
> > > currently using fedora appvms so I don't know if the problem exists there
> > > too). My app window will not appear until I run some other command in the 
> > > vm
> > > (at which point the vm status dot turns green).
> > > 
> > > 
> > > I'll determine whether this error can be reproduced.
> > Looks like this issue:
> > https://github.com/QubesOS/qubes-issues/issues/2085
> > 
> > You're using KDE, aren't you? ;)
> > 
> > - --
> 
> In dom0, yes. I do also happen to have kde installed in the template
> (completely forgot about that), but I do get this error when starting gtk
> apps.

It is related to KDE5 in dom0. I'm not sure details, but it looks like
it destroy windows of other applications instead of asking the
application to destroy its own window. I've observed it for tray icon
windows (yes, those icons are separate windows in terms of X11
protocol), but it may happen for other windows too.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXnxanAAoJENuP0xzK19csw0QH/1b8jmuWG4tirQu6NMH9PiB5
blLo2G3pVE8/sQnidlS053iUapK8X0Qt28mczLl566bq32GOjXv++dQMxYBGI789
8JSBK1q/uoDsjph9Ho/uTqZA/N782yNa45kNUfhELMj6lm/STUEunVc4lPy2It8h
Al6haq/EgFrtqWpjRpFJG7ehvVqja2EjU/yqq3IaMVfgoqzChUmoxXqyCVr2/5Ks
i9Ht+32jHs2KaB4mMr+8F6YoCWeGpPpC6+lQ4j1hUm2VsQYx3k5zL4lUDbrjT17E
30NhiPUF2ydtweebeipr+oMpViaKVjSxHLf3hq+cU/JSru6t/1aF2eErQwNWJqM=
=7eF/
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160801093014.GO32095%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Configuring OpenDNS in Qubes

[marc]

> If I understand correctly, permanently changing /etc/resolv.conf in the
> ProxyVM to show:
> 
>  nameserver 208.67.222.222
>  nameserver 208.67.220.220
> 
> should achieve that in a standalone ProxyVM.

Thanks for your answer. I thought that changing /etc/resolv.conf by hand was 
not recommended because some other programs can overwrite it. Anyway, I tried 
it and changes in /etc/resolv.conf in my standalone ProxyVM are lost once I 
reboot...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8bc745c0-2b86-4066-a18b-57ef56f2d058%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Unable to set coherent dma mask: disabling DMA

[donoban]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi

I noticed this messages on Qubes 3.2, I don't know if they also
appeared on Qubes 3.1.

parport_pc.956: Unable to set coherent dma mask: disabling DMA
parport_pc.888: Unable to set coherent dma mask: disabling DMA
parport_pc.632: Unable to set coherent dma mask: disabling DMA


Any idea?

Regards.
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBCAAGBQJXnw2AAAoJEBQTENjj7QilquAQAKjLDOeiPoCDmbv4waFZ2kUZ
gjclOXNaKndcIOL8g9972kkiCh8Iien+5NQ65kpL40MoH6L62R8XU9mUlheCDiqi
VUGGEB7ecMctv6nZtQ/yUKnYSb/9BFyZYIMlot086kOU83nIPa7yN+QPKqBgIrN8
k4iM4vblroIXpXX68xX3oCxf+x8tAxPv3PluygAJ9WOqqGhYLM5kEO86yyAwktxI
dTQG6vznysEvhTVD7jWp2u0k72HOBaVqxkBmOL1HFpNBPRnqCtFh/3zZFQUUE/2y
7B3JgS3tNQ5ZBT0T76YGbjVx//J5TUoG4+jr6orKnz7xMpihiIR+WvLYwndQZUqK
h6TC+8MSDL7GNKwWu8Fvo7xNspZsdwO4Fbu0kBE/VybN6nPlN0E4hWxI1vcCbeK3
UuRBugmKg17YTUFQCmEYRknOSvGo4vimSQJMK0GPznQbfnWz6K/2Y4vQyXuXREPv
+hwibQGj90aQjPuXar8PV1aks7kHi5+JM+6KbCOfEajnOk5ZaREUh1y25UB9WaZD
MA+jMArYsIFSr7Ym9qbypX3GRbodPGlu9GKHw221e0PYE2ztm0zCRtwozVXo+otQ
pNb+dBKWMqbRjdfXbzWJ2WosHXd8tQOkuOFTvxk68zEJBwYBAixOexRbFJEXNJmR
QEsDllgBFjYO/MEtQnEe
=R4hR
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1aedab58-7e47-85de-10b3-6ec0d312bfa6%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] AEM with Linux 4.4 causes hard reboot (cont... Trying to resolve issue)

[donoban]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256



On 07/31/2016 11:45 PM, Andrew David Wong wrote:
> On 2016-07-31 13:45, Andrew David Wong wrote:
>> On 2016-07-31 13:42, Andrew David Wong wrote:
>>> On 2016-07-31 13:38, Marek Marczykowski-Górecki wrote:
 On Sun, Jul 31, 2016 at 01:30:42PM -0700, Andrew David Wong
 wrote:
> On 2016-07-31 10:41, donoban wrote:
>> Nice, this should be added to: 
>> https://www.qubes-os.org/doc/usb/#tocAnchor-1-1-4
>> 
>> With some warning: "Caution! Enabling usb-vm with LUKS
>> encryption and a USB keyboard could stop you from booting
>> your system"
>> 
>> :)
>> 
> 
> If a USB keyboard is detected, the installer does not allow
> the option of creating a USB qube, so it should not be
> possible for a user to accidentally get him- or herself
> into this predicament.

Yes, but if some user is reading USB Qubes doc, it's very likely he
will try to do a sys-usb himself.


I have some problems related to sys-usb. I did the installation of
Qubes 3.2 on my parents house with a Logitech keyboard. When I
returned to my house, after two or three tries before discovering this
thread, my Microsoft keyboard didn't work.

Fortunately, I have another Logitech keyboard here (also USB) and I
could boot my system. I guess the problem was the initramfs, it was
generated with the logitech keyboard connected so It doesn't load
modules for Microsoft.

This could cause hilarious scenarios, you go with your cool ultra
secure computer to show a friend how nice is Qubes and you end being
unable to boot your computer. I think initramfs should include most
keyboard drivers as possible...

After recreating the initramfs I could unlock my hard disk, but when I
went to the login screen, the keyboard didn't work! And the mouse
didn't work too! Well, I have a Dell monitor with USB ports. I have
both keyboard and mouse connected directly to the monitor. I
disconnected the keyboard from the monitor and connected it directly
to the computer and I could login into my xfce session. Few seconds
after login, the mouse started to work, I disconnected the keyboard
from the computer and reconnected to the monitor and it worked fine.
What could be happening? Is sys-usb supposed to wait for do something
after login?

Last problem (maybe should be posted in a new thread):

the main motivation for testing Qubes 3.2 for me was the USB
passtrough because it would nice for me to connect a WiFi dongle or a
Android smartphone with tethering.  After install it (on my parent's
house), I tested the WiFi dongle. It was attached fine, but on the
dest VM it complained about unexpected errors and suggested a cable
problem. With the Android tethering it worked fine.

But now, when I try to attach it to a VM it says:
"ERROR: Device attach failed: Invalid speed recieved"

It also says when doing any qvm-usb command:
"Invalid 3-7 device desc in VM 'sys-usb'"

It's my Microsoft keyboard, but I think the error doesn't has relation
with the other error.


Any help is appreciated in advance, regards :)
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=HFfY
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6a980a47-2ca7-23f8-90cf-7d257359f4b3%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: AppVMs using ProxyVM having DNS problems some days

[David Hobach]

On 07/31/2016 10:05 AM, Markus Kilås wrote:

On 02/28/2016 04:13 PM, Markus Kilås wrote:

Hi,

I am experiencing an issue with DNS queries in my AppVMs in R3.0.

Sometimes after booting up, the AppVMS that are connected to
sys-firewall are unable to do DNS lookups:
user@untrusted ~]$ dig qubes-os.org
; <<>> DiG 9.10.3-P3-RedHat-9.10.3-10.P3.fc23 <<>> qubes-os.org
;; global options: +cmd
;; connection timed out; no servers could be reached

The same command works in sys-firewall and netvm and any AppVM connected
directly to the netvm but not when going through sys-firewall. There are
no firewall rules added in the Qubes VM Manager and changing to allow
all network traffic for 5 minutes makes no difference.

Besides DNS lookups not working, the networking is working:
[user@untrusted ~]$ ping 104.25.119.5
PING 104.25.119.5 (104.25.119.5) 56(84) bytes of data.
64 bytes from 104.25.119.5: icmp_seq=1 ttl=56 time=31.4 ms

If I manually change the nameserver to the same as in sys-firewall the
resolving works also in the AppVM:

With IP from /etc/resolve.conf (sys-firewall):
[user@untrusted ~]$ dig @10.137.2.1 qubes-os.org
; <<>> DiG 9.10.3-P3-RedHat-9.10.3-10.P3.fc23 <<>> @10.137.2.1 qubes-os.org
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

Instead with the netvm IP:
[user@untrusted ~]$ dig @10.137.5.1 qubes-os.org
; <<>> DiG 9.10.3-P3-RedHat-9.10.3-10.P3.fc23 <<>> @10.137.5.1 qubes-os.org
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5804
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;qubes-os.org.  IN  A

;; ANSWER SECTION:
qubes-os.org.   127 IN  A   104.25.119.5
qubes-os.org.   127 IN  A   104.25.118.5

;; Query time: 11 msec
;; SERVER: 10.137.5.1#53(10.137.5.1)
;; WHEN: Sun Feb 28 16:03:09 CET 2016
;; MSG SIZE  rcvd: 73


Any idea what is going on here?



Very similar issues here...


I think I solved this now.

After re-installing with V3.2-rc2 and restoring my VMs (including my old
netvm) I still had this problem from time to time.

So what I did was to start use the new sys-net VM as NetVM instead of my
restored old netvm (I manually copied over the network manager config,
private keys, certificates etc from the old VM to not have to
reconfigure that).

Since then, so far I have not seen the issue again.


I had renamed the sys-firewall VM back to its old "firewallvm" name 
using Qubes manager after a fresh 3.1rc2 install (otherwise restoring my 
backup wouldn't have worked: "could not find referenced firewallvm" 
...). Maybe the sys-firewall name is hardcoded somewhere? I guess I'll 
test renaming it back again soon...


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/36d8e448-03db-6959-e656-06e33a48b14a%40nurfuerspam.de.
For more options, visit https://groups.google.com/d/optout.


smime.p7s
Description: S/MIME Cryptographic Signature