[qubes-users] HCL - Lenovo s230u "Twist"
qubes-hcl-report document is attached. Here are my notes: * Required steps to address hardware issues before installation ** Option 1: Immediately replace Broadcom PCIe WIFI chip with Intel Centrino 2230 (as explained below) ** Option 2: Remove Broadcom PCIe WIFI chip during installation *** Qubes launches sys-net on boot (if setup during installation), and initiates the attached WIFI chip, causing an unrecoverable system freeze. *** Disabling the WIFI chip in BIOS may also be a solution. *** Once Qubes is installed, you may remove the WIFI device from sys-net and reinstall the hardware. You can troubleshoot this hardware by creating a sequestered NetVM (eg sys-net-broadcom) and using your ethernet connection in sys-net. * Hardware changes I made ** Swapped out the original PCIe WIFI adapter (a Broadcom chip) which doesn't seem to be compatible - possibly with non-free firmware ** Replaced with an Intel Centrino 2230BNHMW *** Only selected devices are compatible with the Lenovo motherboard whitelist. *** Purchased here https://www.amazon.com/Intel-Centrino-Express-Bluetooth-2230BNHMW/dp/B009DAFJRM. *** "FRU P/N: 04W3765" from the image references the Field Replacement Unit product number from Lenovo documentation. My chip did not arrive with that FRU indicated on the label, but it worked anyway. *** No additional firmware required. *** Downside is this chip does not work on 5Ghz bands. I have not yet tested bluetooth. ** Replaced HDD with SSD * Outstanding security issues ** TPM is present but I have not enabled/tested it yet. * Outstanding non-security issues ** Keyboard *** The keyboard will "freeze" intermittently on a fresh (from power off) boot. If the keyboard freezes during FDE password input, or during user login you must restart the system and try again. Once you are past user login, the Power button fix below will help. ** Touchpad/nipple *** Touchpad/nipple does not work on a fresh boot. ** Touchscreen *** I have not been able to make the touchscreen work yet, but I'm optimistic. It does work on other distributions. * Suggested approach for working around non-security issues ** As soon as possible after first boot, set the power button to activate Standby mode *** Putting the system in Standby will "reset" the frozen keyboard. ** Use an external mouse instead of touchpad/nipple *** This will allow for mouse movement when freshly booted. * Alternative approach for working around non-security issues ** Always reboot your laptop immediately after login on a fresh boot, using the xfce "Log Out" menu *** This will enable the touchpad/nipple and prevent the keyboard from freezing, once Qubes restarts. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/dcf7800a-6328-4d8b-a30b-be7bc9878046%40googlegroups.com. For more options, visit https://groups.google.com/d/optout. Qubes-HCL-LENOVO-3347CTO-20170418-020125.yml Description: Binary data
[qubes-users] Lenovo T460: Troubles with intel graphics and network interfaces
Hello, I have Qubes 3.2 running on a Lenovo T460 and I am encountering 2 problems: 1.) I have a docking station with 2 monitors connected to it. When I put the notebook in the dock and enable the second screen, sometimes everything freezes a few seconds after enabling the second screen. After that I have to reboot the whole device. I found out that when i delete /home/username/.config/xfce4/xfconf/xfce-perchannel-xml/displays.xml, then reboot and then turn on the second and third screen it works sometimes...but I cant really find out why it works or fails from time to time. I found a few tipps regarding configuration of the intel i915, but it seems nothing really works (or maybe I am just too stupid for it) :) 2.) When Qubes goes into sleeping mode I loose my network devices in sys-net. This means that I dont see any Ethernet or wifi card anymore in network-manager. I have to reboot sys-net or the whole machine to see the devices again. The only workaround I can imagine is deactivating hibernation. I would be really happy for any tipps how I can troubleshoot or fix this. Thanks! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAA3BrReMHYLfkvaqMUY-jSdtDK_T-OERduDSZPnhxT4GmXswDg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Big problem?
Doing something wrong? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/42bfa0e7-6533-4a96-bc06-8a378c00a743%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Big problem?
Yes I burned it onto a USB stick. But it is not possible by plugging the USB stick again in, or am I do -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e541ee8f-cc3b-4f87-a4f0-3e0cbbeb67c4%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Windows 7 installation stops
On Friday, April 14, 2017 at 11:28:47 AM UTC-4, pete...@hushmail.com wrote: > Maybe solved. When I restart the HVM to complete the windows tools > installation, the windows disappear when I have to insert the password > although the it is running. Killing it and restarting in terminal says me to > terminate it deleting file in /var/run/qubes/qubesdb.win7.pid, do I disable > the input of password with netplwiz? I believe so. In other words enable autologin, thats what I had to do, in Qubes manual it was suggested. I think its really mandatory in my case as well. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/48276c49-5877-4f10-beae-ee434d29b156%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Screen Rotation
On Monday, April 17, 2017 at 5:28:23 PM UTC-4, babel wrote: > Yeah it won't let me change it. Doesn't even show other options. > Can you change yours or see other options? > > > > > > > > > On Mon, Apr 17, 2017 at 11:08 PM Eva Star wrote: > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > On 04/17/2017 10:40 PM, babel wrote: > > > I've just installed Qubes but cannot figure out how to make a > > > permanent (or at all) rotation of the screen. When I go into the > > > settings in Dom[0], it does not let me change from the default > > > display and there are no options for rotation. > > > > > > Am I not supposed to be changing this in dom0? Or am I missing > > > something? > > > > > > > System Tools -> Display -> Rotation > > https://i.imgur.com/h4VsTLM.png > > > > - -- > > Regards > > -BEGIN PGP SIGNATURE- > > Version: GnuPG v2 > > > > iQIcBAEBCAAGBQJY9S63AAoJEGSin3PC/C0ACtsP/0dt9avWw90Kmq574JiuCBD7 > > bODQicQM/Klv26Z4xRfXCC4F5otmpkLr0BSDWviR+Sa5udYgIKZfvjtHJGbniaSr > > ZmEgclmzoWABgbeJ8qoIORJmbR428mi2erFIQjrvTL1r9g/v7JGLqAJcPI5YasgN > > f4WXNklli3NDxcXjuelPB5s2a8KLA+9BAxoyRsqRjQ7TrsUEr96stSDciRIVYq8r > > Thd+50+Ivmu51N7ZmUQoqZvtezNfVA5x6+YGwhwyukbByTmLcV97ZgcBGIAk9g77 > > eUARJFhGvg8ayT2r6GdVo/iUM8uVIIYg32ZsgS9ybS6q/2KBD9LmPwUyptVeBeAX > > w1Wt16ZFf7LtTlVc9/M6oPJW5RSD0YC2XvpflYx0nU5swYDLsmcDrQ2wYZHefuQF > > pLud4oSwIrs/No9pEXupdqCJDtEKymzrI9ACj4ALnmJRZA3ls9aVXW9mP6svbdct > > 9JwTaFW79TN5B3QbeNWbhWkg+l84EdP+qUXjDR9Wd0wl/65fQKhQ6WCHmHcygIor > > ZvJaNnAe2vspNXkSCr4RJJ2boH8wJlSZ4Va/KY5fVh0ONuw8sOXJVtcOBw4Z2try > > AueRtdlEIS6EE4O0QxJUOewtP1VsCfMZs54DnxQ0b5xE/jk9vdWX2lLR//RVChel > > sLOQE+aNUlywf3VVekGC > > =f25N > > -END PGP SIGNATURE- > > > > -- > > You received this message because you are subscribed to a topic in the Google > Groups "qubes-users" group. > > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/qubes-users/txTIDT0JurA/unsubscribe. > > To unsubscribe from this group and all its topics, send an email to > qubes-users...@googlegroups.com. > > To post to this group, send email to qubes...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-users/3446106b-3963-3ed5-5b9e-6ef59aba0155%40openmailbox.org. > > For more options, visit https://groups.google.com/d/optout. it worked for me. nvidia GT 650 ti. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/49bd1d8e-516b-44fd-b3e8-494bb5885954%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Big problem?
On Monday, April 17, 2017 at 3:39:15 AM UTC-4, rubb...@gmail.com wrote: > I guess my pc is gone... rubb you still haven't fully explained how you got Qubes on your machine in the first place. I mean did you burn a Qubes iso to a usb stick and then boot it on your computer to install qubes? IF so why can't you just boot the same usb stick and install Qubes again? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3d0c3c2e-0f1e-4996-99c3-f40fdde1eaf0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Show thumbnails in appVM
On Monday, April 17, 2017 at 5:24:49 AM UTC-4, evo wrote: > Hey! > > How can i show thumbnails in a "FotoAppVM"? > i can not find it in template settings. > > thanks! Just beware it is a security risk. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/88c4f7d2-2fb0-4e69-b644-5d4bb7011f80%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: debian 9 kernel (needed for wifi driver) but failing to build u2mfn against 4.9.0
On 04/17/2017 03:45 PM, Joonas Lehtonen wrote: > Hi, > > I need debian's kernel because the Qubes kernel does not provide the > needed network driver. > > I'm following the steps here to install the in-VM kernel, instead of the > one provided by dom0: > > https://www.qubes-os.org/doc/managing-vm-kernel/ > > The debian 9 template boots fine with pvgrub but qrexec does not work > because the Qubes kernel module u2mfn fails to build on debian 9's > kernel (4.9.0). > > Has anyone u2mfn running on debian 9's kernel (4.9.0)? > > thanks, > Joonas Update your Debian 9 template; version 3.2.4 of qubes-kernel-vm-support was just pushed out to stable today and that should allow compiling kernels higher than 4.8 to work. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/od3in5%24cj%241%40blaine.gmane.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] qubes manager add start terminal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 04/18/2017 01:13 AM, Unman wrote: > > unman > Thanks for this detailed manual, again, problem was with actions. I will try later to do all of that. I think with your manual almost somebody can do the same now. - -- Regards -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJY9U2KAAoJEGSin3PC/C0ASB4P/2evYbd3CuI9XCzAF5SHuHe3 AdoUMJSW2MSZV1a126ONQWOKAwZ8YcuTLlKw55kk4Zu9jwU8wMJGkGJGPY9skCeA welOhemlh3kZKixKM7ZH0h11J3d+YL54v62dOgrE3BgYkArePvjcfPgWh7lmIuRm 1WDrRE5XQ1vDhw8HkyI3lr5kppwMIVzUB0N4DEwSLwnj9VHMtiz8vAV00sG4Pf3F l0n9Ox5pgpassN23QIyIuOLR9LNCLMmm2oY6ltgarJwOFugqi26IJgR5TJhIYOST SseM9f0InA66lI6i/p2KdzW2WZrZel2Y99f55oxeGVQxj0iHmGd9LXmlVSUkcerN TZzAJ88KKQfPqQt10MML/tGAWwCaM/PRa6Qdxdvg2SdniVWH0EQdeg/aqfIg/AVr pw+2NHZokx/907QB/V92F6yAlUBjW/GoftgSVyLhGaO9GS7vzyO30e/5KIZ6gwlN VfpUJ8UIgHU4mcmopaGbtBZYW+6T5xg4vOALAUwEcIGb1Dt+xysgIGxo9xVz6wva cBeaR7O2iluXQ0Twv7TS4B9PBowKcFzIYc7TqbJl33CVPh42NgLbQCF12DtYbczB sj0RwzbEsdN0uj76Gk575bzQXclWhiVRng5RTwS3QAYCvufXGWvXqwpeOLfo+i89 ZzkFEKGQFkmKEUS4ITJW =ai/A -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/85ba0b7d-7565-9dab-82c4-b773c454966c%40openmailbox.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] qubes manager add start terminal
On Mon, Apr 17, 2017 at 04:39:14PM +0300, Eva Star wrote:
> On 04/17/2017 03:11 AM, Unman wrote:
>
> >I've done some manager hacking myself - some of it now incorporated in
> >release.
> >If you dont want to build a package then you can simply start hacking in
> >/usr/lib64/python2.7/site-packages/qubesmanager.
> >(Back this up first, of course.)
> >
> >Beside the ui elements in ui_mainwindow the slots are in main.py. If
> >you're going to hack these remember to remove the compiled files.
> >I'd recommend using xterm, as it's in all the templates afaik.
> >
>
> Unfortunately main.py contain only functions.
> UI elements located not at qubesmanager dir. They are compiled? How?
> Need to modify this file :
> https://github.com/QubesOS/qubes-manager/blob/master/mainwindow.ui
>
>
>
Eva,
You've actually quoted the part where I tell you where the ui elements
are.
You can make this change directly in dom0 without building a package, by
editing the code in /usr/lib64/python2.7/site-packages/qubesmanager
As I said, main.py contains the slots (functions) and also the signals
that trigger them.
The simplest way to do what you want is to use the "Run command in VM"
structure as a template. You can search "command" and see how that is
implemented, and adapt it for your new purpose.
1. Define the function:
Copy the section defining the slot
(@pyqtSlot(name='on_action_run_command_in_vm_triggered'))
and the static method:
def do_run_command_in_vm(vm, command_to_run, thread_monitor):
You can pretty much just replace "command" with "xterm" throughout the
slot, and simplify because you arent prompting for a command to run:
@pyqtSlot(name='on_action_run_xterm_in_vm_triggered')
def action_run_xterm_in_vm_triggered(self):
vm = self.get_selected_vm()
thread_monitor = ThreadMonitor()
thread = threading.Thread(target=self.do_run_xterm_in_vm, args=(
vm, thread_monitor))
thread.daemon = True
thread.start()
while not thread_monitor.is_finished():
app.processEvents()
time.sleep(0.2)
if not thread_monitor.success:
QMessageBox.warning(None, self.tr("Error while running xterm"),
unicode(self.tr("Exception while running
xterm:{0}")).format(
thread_monitor.error_msg))
@staticmethod
def do_run_xterm_in_vm(vm, thread_monitor):
try:
vm.run('xterm', verbose=False, autostart=True,
notify_function=lambda lvl, msg: trayIcon.showMessage(
msg, msecs=3000))
except Exception as ex:
thread_monitor.set_error_msg(str(ex))
thread_monitor.set_finished()
2. Enable it when a row is selected.
Go to the table_selection_changed(self) function, and add in the new
function:
(again you can copy the action_run_command_in_vm details).
So in the main body of the function add:
self.action_run_xterm_in_vm.setEnabled(
not vm.last_power_state == "Paused" and vm.qid != 0)
and in the else clause:
self.action_run_xterm_in_vm.setEnabled(False)
3. Create the context menu item:
In __init__ section,
add a line below the line that adds the action_run_command_in_vm:
self.context_menu.addAction(self.action_run_xterm_in_vm)
4.
That's almost it:
But you need to add the new action to the Window. Again, you can look at
how action_run_command_in_vm is managed, and adapt it for your new menu
item. At a minimum you'll want entries in the setup and retranslate
functions.
So you'll want to add:
self.action_run_xterm_in_vm = QtGui.QAction(VmManagerWindow)
self.action_run_xterm_in_vm.setObjectName(_fromUtf8("action_run_xterm_in_vm"))
and
self.action_run_xterm_in_vm.setText(_translate("VmManagerWindow", "&Run
xterm in VM", None))
That's pretty much done.
If you want to build a package just edit the files in the manager
directory, and run 'make manager'
The files you want there are qubesmanager/main.py and mainwindow.ui
As I said though, it's much simpler just to hack the source in dom0.
(Again, make sure you have backed up the originals.)
I hope this gives you the general idea - you can add all sorts of
context menus items, (including customizing the action to the VM.)
unman
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/20170417221329.GA14947%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Running Qubes as A HVM under another Type 1 Hypervisor
On Monday, 17 April 2017 22:44:06 UTC+1, Andrew David Wong wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 2017-04-17 12:04, john.case...@ucdconnect.ie wrote: > > Hi all, > > > > Just wondering if this is possible. > > > > Horrific security implications aside, it strikes me as an > > interesting set-up. > > > > According to the Xen wiki [1] you can run Xen as a HVM under Xen, > > but with the limitation that the nested Xen installation cannot > > create a HVM itself. > > > > So would this be possible with Qubes, in conjunction with some > > other hypervisor? > > > > John. > > > > [1] https://wiki.xenproject.org/wiki/Xen_FAQ_Nesting > > > > It's already possible in Qubes 3.2. You can install Qubes as an HVM > inside of Qubes. (PV-only inside the HVM.) What about under another hypervisor, such as unRAID or VMware> > > - -- > Andrew David Wong (Axon) > Community Manager, Qubes OS > https://www.qubes-os.org > -BEGIN PGP SIGNATURE- > > iQIcBAEBCgAGBQJY9TcXAAoJENtN07w5UDAwcN4P/RnapJ11qeZRHH/AfIorKVGK > JjDkW5+NTmGsc2/3qwj04mtsSgxwn87t0fPihrq9ltNAEakzBrC/pMzSxxqM+o9k > IO/J0S99HgpTHHWPUn+RWAyk15f24I0JYLNOpSMxaVnH9nxIgb1pT0iCH+BET79l > 7xxpcigS42QdssBQAOGYwu0JoliCb0kYd46qh7lBhwml85oib5HbCFVUD0Yr6pq2 > 43n4MGowWEPYegN2TJniQOiwwU0ARxHeWvicF82Hq2MEAkcpzyezomfaDMtvtkm6 > PN602ryRraL2tgGt8/Tjw2qOwlY6wWyu1nKL+GN8wr763ItDLjkP/ojn/OXQZxKF > eiZ7Dp8sn2xJABhros9FpQExFsSKXGRvK8l/qKalQcg5efhgwGywMFXglGMVCzaQ > n5GHrQuNidYUIo54l+1T3+h0njYMFQZthGLw+tpzTmwOx6a1RMRUNpYST/ToENOP > S6bhUI6zxBJnY+eSqYeqkl2xAcxt1pEhLS1lpLYiZD263kZgmfKvdqFlZnZqMro+ > 0aF+74dfJjk9ZexQPynOuVUZSHH1VLlyqVSlzQUQZaTCTMDEAba6MOvRc1vdQlZ/ > +XGYRYz2ZmYDWoz82SvZx6BLF7hS9bBtaq1InjKRPNrH0erE/Mb3vnocWU2UGYHl > ioZpyZyKWOYae1c7xA6C > =aM20 > -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/da4ec7f1-e994-4382-a5d4-6d823d0f01af%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Running Qubes as A HVM under another Type 1 Hypervisor
On Monday, April 17, 2017 at 10:44:06 PM UTC+1, Andrew David Wong wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 2017-04-17 12:04, john.case...@ucdconnect.ie wrote: > > Hi all, > > > > Just wondering if this is possible. > > > > Horrific security implications aside, it strikes me as an > > interesting set-up. > > > > According to the Xen wiki [1] you can run Xen as a HVM under Xen, > > but with the limitation that the nested Xen installation cannot > > create a HVM itself. > > > > So would this be possible with Qubes, in conjunction with some > > other hypervisor? > > > > John. > > > > [1] https://wiki.xenproject.org/wiki/Xen_FAQ_Nesting > > > > It's already possible in Qubes 3.2. You can install Qubes as an HVM > inside of Qubes. (PV-only inside the HVM.) What about under another hypervisor, such as unRAID or VMware? > > - -- > Andrew David Wong (Axon) > Community Manager, Qubes OS > https://www.qubes-os.org > -BEGIN PGP SIGNATURE- > > iQIcBAEBCgAGBQJY9TcXAAoJENtN07w5UDAwcN4P/RnapJ11qeZRHH/AfIorKVGK > JjDkW5+NTmGsc2/3qwj04mtsSgxwn87t0fPihrq9ltNAEakzBrC/pMzSxxqM+o9k > IO/J0S99HgpTHHWPUn+RWAyk15f24I0JYLNOpSMxaVnH9nxIgb1pT0iCH+BET79l > 7xxpcigS42QdssBQAOGYwu0JoliCb0kYd46qh7lBhwml85oib5HbCFVUD0Yr6pq2 > 43n4MGowWEPYegN2TJniQOiwwU0ARxHeWvicF82Hq2MEAkcpzyezomfaDMtvtkm6 > PN602ryRraL2tgGt8/Tjw2qOwlY6wWyu1nKL+GN8wr763ItDLjkP/ojn/OXQZxKF > eiZ7Dp8sn2xJABhros9FpQExFsSKXGRvK8l/qKalQcg5efhgwGywMFXglGMVCzaQ > n5GHrQuNidYUIo54l+1T3+h0njYMFQZthGLw+tpzTmwOx6a1RMRUNpYST/ToENOP > S6bhUI6zxBJnY+eSqYeqkl2xAcxt1pEhLS1lpLYiZD263kZgmfKvdqFlZnZqMro+ > 0aF+74dfJjk9ZexQPynOuVUZSHH1VLlyqVSlzQUQZaTCTMDEAba6MOvRc1vdQlZ/ > +XGYRYz2ZmYDWoz82SvZx6BLF7hS9bBtaq1InjKRPNrH0erE/Mb3vnocWU2UGYHl > ioZpyZyKWOYae1c7xA6C > =aM20 > -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1e905a29-f1c8-4e8f-9ac5-862cc36db0a1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] debian 9 kernel (needed for wifi driver) but failing to build u2mfn against 4.9.0
Hi, I need debian's kernel because the Qubes kernel does not provide the needed network driver. I'm following the steps here to install the in-VM kernel, instead of the one provided by dom0: https://www.qubes-os.org/doc/managing-vm-kernel/ The debian 9 template boots fine with pvgrub but qrexec does not work because the Qubes kernel module u2mfn fails to build on debian 9's kernel (4.9.0). Has anyone u2mfn running on debian 9's kernel (4.9.0)? thanks, Joonas >From the log file /var/lib/dkms/u2mfn/3.2.3/build/make.log : DKMS make.log for u2mfn-3.2.3 for kernel 4.9.0-2-amd64 (x86_64) make: Entering directory '/usr/src/linux-headers-4.9.0-2-amd64' LD /var/lib/dkms/u2mfn/3.2.3/build/built-in.o CC [M] /var/lib/dkms/u2mfn/3.2.3/build/u2mfn.o /var/lib/dkms/u2mfn/3.2.3/build/u2mfn.c: In function ?u2mfn_ioctl?: /var/lib/dkms/u2mfn/3.2.3/build/u2mfn.c:80:23: error: passing argument 5 of ?get_user_pages? from incompatible pointer type [-Werror=incompatible-pointer-types] (data, 1, 1, 0, &user_page, 0); ^ In file included from /var/lib/dkms/u2mfn/3.2.3/build/u2mfn.c:26:0: /usr/src/linux-headers-4.9.0-2-common/include/linux/mm.h:1302:6: note: expected ?struct vm_area_struct **? but argument is of type ?struct page **? long get_user_pages(unsigned long start, unsigned long nr_pages, ^~ /var/lib/dkms/u2mfn/3.2.3/build/u2mfn.c:79:9: error: too many arguments to function ?get_user_pages? ret = get_user_pages ^~ In file included from /var/lib/dkms/u2mfn/3.2.3/build/u2mfn.c:26:0: /usr/src/linux-headers-4.9.0-2-common/include/linux/mm.h:1302:6: note: declared here long get_user_pages(unsigned long start, unsigned long nr_pages, ^~ cc1: some warnings being treated as errors /usr/src/linux-headers-4.9.0-2-common/scripts/Makefile.build:304: recipe for target '/var/lib/dkms/u2mfn/3.2.3/build/u2mfn.o' failed make[3]: *** [/var/lib/dkms/u2mfn/3.2.3/build/u2mfn.o] Error 1 /usr/src/linux-headers-4.9.0-2-common/Makefile:1507: recipe for target '_module_/var/lib/dkms/u2mfn/3.2.3/build' failed make[2]: *** [_module_/var/lib/dkms/u2mfn/3.2.3/build] Error 2 Makefile:150: recipe for target 'sub-make' failed make[1]: *** [sub-make] Error 2 Makefile:8: recipe for target 'all' failed make: *** [all] Error 2 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/57e825bb-9d96-bac1-8b0c-e8f00e8a72d3%40openmailbox.org. For more options, visit https://groups.google.com/d/optout. signature.asc Description: OpenPGP digital signature
Re: [qubes-users] Running Qubes as A HVM under another Type 1 Hypervisor
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-04-17 12:04, john.case...@ucdconnect.ie wrote: > Hi all, > > Just wondering if this is possible. > > Horrific security implications aside, it strikes me as an > interesting set-up. > > According to the Xen wiki [1] you can run Xen as a HVM under Xen, > but with the limitation that the nested Xen installation cannot > create a HVM itself. > > So would this be possible with Qubes, in conjunction with some > other hypervisor? > > John. > > [1] https://wiki.xenproject.org/wiki/Xen_FAQ_Nesting > It's already possible in Qubes 3.2. You can install Qubes as an HVM inside of Qubes. (PV-only inside the HVM.) - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJY9TcXAAoJENtN07w5UDAwcN4P/RnapJ11qeZRHH/AfIorKVGK JjDkW5+NTmGsc2/3qwj04mtsSgxwn87t0fPihrq9ltNAEakzBrC/pMzSxxqM+o9k IO/J0S99HgpTHHWPUn+RWAyk15f24I0JYLNOpSMxaVnH9nxIgb1pT0iCH+BET79l 7xxpcigS42QdssBQAOGYwu0JoliCb0kYd46qh7lBhwml85oib5HbCFVUD0Yr6pq2 43n4MGowWEPYegN2TJniQOiwwU0ARxHeWvicF82Hq2MEAkcpzyezomfaDMtvtkm6 PN602ryRraL2tgGt8/Tjw2qOwlY6wWyu1nKL+GN8wr763ItDLjkP/ojn/OXQZxKF eiZ7Dp8sn2xJABhros9FpQExFsSKXGRvK8l/qKalQcg5efhgwGywMFXglGMVCzaQ n5GHrQuNidYUIo54l+1T3+h0njYMFQZthGLw+tpzTmwOx6a1RMRUNpYST/ToENOP S6bhUI6zxBJnY+eSqYeqkl2xAcxt1pEhLS1lpLYiZD263kZgmfKvdqFlZnZqMro+ 0aF+74dfJjk9ZexQPynOuVUZSHH1VLlyqVSlzQUQZaTCTMDEAba6MOvRc1vdQlZ/ +XGYRYz2ZmYDWoz82SvZx6BLF7hS9bBtaq1InjKRPNrH0erE/Mb3vnocWU2UGYHl ioZpyZyKWOYae1c7xA6C =aM20 -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2c0da89c-202f-aed7-2122-f21ff59145ad%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Show thumbnails in appVM
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-04-17 02:24, evo wrote: > Hey! > > How can i show thumbnails in a "FotoAppVM"? i can not find it in > template settings. > > thanks! > If you're using the Nautilus file manager, you'll find the option in the Nautilus settings. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJY9TW7AAoJENtN07w5UDAwt5cP/iFdlCvJNZuZ7rrTS6Rs+ETN sjrNdyy3Gh5DWMNfA5e02A6eGt7jOk5Fwxjuf1eMU/nVM6GBLf5gAKdA38v9eIZO FElsSrHm57NGcsG51w62S8+McIQMnkD4cXKAm2SHkkE26UFuhtp1pxOghzm6S5I5 a3xeZxGEj9QMsO8mpTmt2VpSXe4eGC6hiW0pYcZvzKKfuIMfXcfamVIViI1qba15 jcepCXuwAwB/aEYhkeL7CPGjXB16qDMVIWsfCS9mWkcHGBc9KpDfPdvr3C79AU9C 9nWmlaFTW8Zn3th/o9wZnjvw+rvcj74VEM+wvk/gGusW69tn3CYo3BJBt5blX5xm Ckp+mcRnGR5rvY/MdM+yPHHKo6ZCD3YNYqha3RZP5SpSA5V2h0evCI15Ea4LuQs3 pEEPqk3QUkiOums+zv4oMuXf96eiTrHwB9LhtGlffqhdVLog6iJW5+QY7x/Hpq58 JeZgSu0yZTGJkTxyjYyLEj3+3qIbzuOGIABzrotNHaDV1LMSWKVPahfx759yl1nn bHBSm6LrA1DPhKLPqkp0TceFTnL6kIUJweURGGE+oWZ3B2OCkQOqkYBhpCm9dXvd 8nVWfvUFRH5fXW+qTPyuDPusu8tWy04FhQD2npm7KbEVWDar2ChDc/gvDsOtIfxS xmbwgZtJo+8CShV5j9K8 =RhDf -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2b18e8e8-f388-c710-352e-4d6e7afc4efb%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: HOWTO: Compiling Kernels for dom0
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-04-16 18:21, Reg Tiangha wrote: >> On 2017-04-16 18:10, Marek Marczykowski-Górecki wrote: >>> On Fri, Apr 14, 2017 at 12:21:14PM -0600, Reg Tiangha wrote: Here's my contribution to the project. >>> Thanks! >>> >>> Andrew, maybe it would be good idea to at least link to this >>> thread somewhere in "Building" section of docs? Or copy this >>> instruction there (the part about actual building and >>> customizing), including adjustments here and in subsequent >>> messages? >>> > > Thanks for the comments you two; I'm new to the Git stuff but I'm > trying to learn fast. > > Actually, now that Foppe de Haan found some extra packages to > install to make everything work, I wouldn't mind having a chance > to re-write it and submit it. What's the best way to do that? Fork > some kind of repo, create a new file, and then submit a pull > request? If so, which repo? If not, what's the best/easiest way > to submit a re-written guide to you guys? > https://www.qubes-os.org/doc/doc-guidelines/ Thanks! - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJY9TV9AAoJENtN07w5UDAwQIwP/2XMv0t0n1Zo6ceTQ8HqxS18 AxdaYD2WEHeIv55o1Ywg6+Bq4HbvKM7Ai0QYKjHFLhzVpGFHNlbrJx0BcoznC6w9 khIH4mvaWgF5UXSXs+D6IRMeBkdfQNTL0sLL4FFlQwGnET/hFIbk20QJwZMnwbb8 dnXE8rz4lw3MnelUBAQgC745fpYdqdHw2FjopuprKvUEtDlTmj6Dd9cWuOnbkVWP cgGm5ZpuJyJ9pw+v60z9x299pJexBqZUpMxdNaqSViNk+YCsIj4gsnrRH134Ys9U zmCn4TzjX/lAzc2xxugkietglGM5uYYZoYOANr+JJ7BVB0XpZvXzTtVrWAuqEAvg T6x8hSOBV0J8l38oeg9VANgEuu0ZtPpEc9VPeIVnbhqMGGM/gKhCGLg27n8pLVQI mnEaxkR7qVByUPNItUf0r5olH+ksfd0DSd+5gxlRHjgHYRSI/Cy0Y8dDR+erpvAB eX2kxCG98Bi2KTuGMa6yDAnMTN5IkzYGCrHB7T8zJXyQoWAHkguDweRgTciQcN9R NtJ0EHGxo59dJKuUM+GJcllB+J3Aoy/A4TYkqzI3KHyFSy2IdY4zEDXf9atytnhJ XPre+LYiQCXWLCxO1YscMq2Od/rm+nPZYvZlqBSHnUTYgBgnp6yjgBbW2z7fQXfJ V8o3BpveihcQdWV931nd =6dE/ -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1a4d4a29-858c-c315-0808-f328c03140e1%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Screen Rotation
Yeah it won't let me change it. Doesn't even show other options. Can you change yours or see other options? On Mon, Apr 17, 2017 at 11:08 PM Eva Star wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On 04/17/2017 10:40 PM, babel wrote: > > I've just installed Qubes but cannot figure out how to make a > > permanent (or at all) rotation of the screen. When I go into the > > settings in Dom[0], it does not let me change from the default > > display and there are no options for rotation. > > > > Am I not supposed to be changing this in dom0? Or am I missing > > something? > > > > System Tools -> Display -> Rotation > https://i.imgur.com/h4VsTLM.png > > - -- > Regards > -BEGIN PGP SIGNATURE- > Version: GnuPG v2 > > iQIcBAEBCAAGBQJY9S63AAoJEGSin3PC/C0ACtsP/0dt9avWw90Kmq574JiuCBD7 > bODQicQM/Klv26Z4xRfXCC4F5otmpkLr0BSDWviR+Sa5udYgIKZfvjtHJGbniaSr > ZmEgclmzoWABgbeJ8qoIORJmbR428mi2erFIQjrvTL1r9g/v7JGLqAJcPI5YasgN > f4WXNklli3NDxcXjuelPB5s2a8KLA+9BAxoyRsqRjQ7TrsUEr96stSDciRIVYq8r > Thd+50+Ivmu51N7ZmUQoqZvtezNfVA5x6+YGwhwyukbByTmLcV97ZgcBGIAk9g77 > eUARJFhGvg8ayT2r6GdVo/iUM8uVIIYg32ZsgS9ybS6q/2KBD9LmPwUyptVeBeAX > w1Wt16ZFf7LtTlVc9/M6oPJW5RSD0YC2XvpflYx0nU5swYDLsmcDrQ2wYZHefuQF > pLud4oSwIrs/No9pEXupdqCJDtEKymzrI9ACj4ALnmJRZA3ls9aVXW9mP6svbdct > 9JwTaFW79TN5B3QbeNWbhWkg+l84EdP+qUXjDR9Wd0wl/65fQKhQ6WCHmHcygIor > ZvJaNnAe2vspNXkSCr4RJJ2boH8wJlSZ4Va/KY5fVh0ONuw8sOXJVtcOBw4Z2try > AueRtdlEIS6EE4O0QxJUOewtP1VsCfMZs54DnxQ0b5xE/jk9vdWX2lLR//RVChel > sLOQE+aNUlywf3VVekGC > =f25N > -END PGP SIGNATURE- > > -- > You received this message because you are subscribed to a topic in the > Google Groups "qubes-users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/qubes-users/txTIDT0JurA/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > qubes-users+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-users@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-users/3446106b-3963-3ed5-5b9e-6ef59aba0155%40openmailbox.org > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CA%2B8VJQGwqhDnOf9dvduGJFY7c8z8OwotvZKA28g%2BVV_oQ1fvYA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Secure Handling of Encrypted Drives
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On 2017-04-16 21:45, Jean-Philippe Ouellet wrote:
> On Sun, Apr 16, 2017 at 7:59 PM, Andrew David Wong
> wrote:
>> On 2017-04-12 13:05, Sam Hentschel wrote:
>>> On Wednesday, April 12, 2017 at 3:20:30 PM UTC-4, Chris
>>> Laprise wrote:
On 04/12/2017 02:37 PM, Jean-Philippe Ouellet wrote:
> On Wed, Apr 12, 2017 at 2:07 PM, Sam Hentschel
> wrote:
>> On Wednesday, April 12, 2017 at 4:15:08 AM UTC-4, Unman
>> wrote:
>>> On Tue, Apr 11, 2017 at 11:12:50PM -0400, Sam
>>> Hentschel wrote:
I am trying to figure out a way to securely handle
my encrypted drives without two things: connecting
the USB directly to the Vault (as this is obviously a
bad idea for security), and decrypting the USB in
sys-usb (also obviously a bad idea).
As an example, I have some USB that I keep encrypted
backups of my important documents that I keep with me
in case an emergency happens (which now that I am
using Qubes will probably also be in the Vault). I
have files on there that I need to move to Vault, and
I need to be able to continue to put files onto it
(whether from Vault or from a scan I have done.
>>> on what I did giving DispVMs the sole ability to
print and scan.> Which I know is a whole different
problem; so I want to focus on just the encrypted
storage.
Another example is my backup drives which are all
encrypted, and that I would like to have access to
for the standard reasons. I have been pointed to [1]
a couple days ago by JPO and I believe this is part
of the soution, but not the whole thing.
My two solutions that I have thought through are:
doing PCI patthrough directly to the Vault (which is
the least favorite of my ideas), and creating a
separate VM for encryption that only houses software
for encrypting and decrypting (dm-crypt or
veracrypt). This way the USB will be passed through
to this VM and will never directly touch the Vault
(except through qvm-move-to-vm).
I had a third solution of adding this functionality
to DispVMs, but I can't PCI pass the USB to the
DispVMs when they are running. So that one is out.
Thanks in advance for the help; can't wait to see
what I missed!
[1]
https://github.com/rustybird/qubes-split-dm-crypt
>>>
>>> Hi Sam,
>>>
>>> I'm obviously missing something here.
>>>
>>> One of your two solutions fits completely within the
>>> current Qubes model and matches exactly the
>>> specification you set; that is, qvm-block attach the
>>> encrypted drive to a qube and decrypt it there. Can I
>>> ask what more you are looking for?
>>>
>>> There's no need to do this in a separate decryptionVM
>>> - you can use a disposableVM for the purpose.
>>>
>>> If you don't want to have the decryption software in a
>>> standard template, then put it in a separate template,
>>> build a distinct disposableVM from that template and
>>> use my hack to fire up that disposableVM when you want
>>> to use a decrypted drive.
>>>
>>> unman
>>
>> Unman,
>>
>> I was just making sure I wasn't missing something or
>> there wasn't a better way. Anyways, I can't set this up
>> in a DispVM because you cannot PCI passthrough to a VM
>> while it is running(?)
>
> Your understanding is incorrect on the following details:
>
> 1) you *can* do pci passthrough to a vm while it's
> running. Depending on if the device supports
> function-level-reset or not, you may need to set
> pci_strictreset="False" for the VM in
> /var/lib/qubes/qubes.xml
>
> 2) qvm-block is distinct from and not implemented with pci
> passthrough, it uses xen blk{front,back}. This is an
> entirely different and believed to be less dangerous
> interface to expose than PCI to your actual devices.
>
>
> That said, you might prefer to use a normal unencrypted
> filesystem, only interface with the filesystem in sys-usb,
> and use encrypted files instead.
>
> You could then use qvm-copy-to-vm to move the ciphertext
> from sys-usb into your other vm, {decrypt, manipulate,
> re-encrypt} them there, send back new ciphertext (again
> via qvm-copy-to-vm) to sys-usb, and put them back on the
> flash drive from there.
>
> This isolates your document processing from potential vulns
> in your filesystem manipulation code (such as fuse-exfat
> which appears to be the de-facto standard flash drive
> filesystem these days for maximum interoperability).
Re: [qubes-users] Screen Rotation
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 04/17/2017 10:40 PM, babel wrote: > I've just installed Qubes but cannot figure out how to make a > permanent (or at all) rotation of the screen. When I go into the > settings in Dom[0], it does not let me change from the default > display and there are no options for rotation. > > Am I not supposed to be changing this in dom0? Or am I missing > something? > System Tools -> Display -> Rotation https://i.imgur.com/h4VsTLM.png - -- Regards -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJY9S63AAoJEGSin3PC/C0ACtsP/0dt9avWw90Kmq574JiuCBD7 bODQicQM/Klv26Z4xRfXCC4F5otmpkLr0BSDWviR+Sa5udYgIKZfvjtHJGbniaSr ZmEgclmzoWABgbeJ8qoIORJmbR428mi2erFIQjrvTL1r9g/v7JGLqAJcPI5YasgN f4WXNklli3NDxcXjuelPB5s2a8KLA+9BAxoyRsqRjQ7TrsUEr96stSDciRIVYq8r Thd+50+Ivmu51N7ZmUQoqZvtezNfVA5x6+YGwhwyukbByTmLcV97ZgcBGIAk9g77 eUARJFhGvg8ayT2r6GdVo/iUM8uVIIYg32ZsgS9ybS6q/2KBD9LmPwUyptVeBeAX w1Wt16ZFf7LtTlVc9/M6oPJW5RSD0YC2XvpflYx0nU5swYDLsmcDrQ2wYZHefuQF pLud4oSwIrs/No9pEXupdqCJDtEKymzrI9ACj4ALnmJRZA3ls9aVXW9mP6svbdct 9JwTaFW79TN5B3QbeNWbhWkg+l84EdP+qUXjDR9Wd0wl/65fQKhQ6WCHmHcygIor ZvJaNnAe2vspNXkSCr4RJJ2boH8wJlSZ4Va/KY5fVh0ONuw8sOXJVtcOBw4Z2try AueRtdlEIS6EE4O0QxJUOewtP1VsCfMZs54DnxQ0b5xE/jk9vdWX2lLR//RVChel sLOQE+aNUlywf3VVekGC =f25N -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3446106b-3963-3ed5-5b9e-6ef59aba0155%40openmailbox.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installation on NUC6i7KYK
On Monday, April 17, 2017 at 10:08:21 PM UTC+2, Ely105 wrote: > On Monday, April 17, 2017 at 12:38:26 PM UTC-7, Ely105 wrote: > > I tried searching on this platform and qubes and haven't found anyone yet > > who has posted anything so here goes. I tried to install 3.2 on the Intel > > Skull Canyon Skylake NUC with Iris Pro Gfx. Tried UEFI mode and it seems > > to install fine but when I reboot it says "No bootable.." on startup. If I > > try to install in Legacy Mode it seems unable to start graphical installer > > and goes into a text-only mode. So finally I took a working install from a > > small/regular NUC that has been working fine, and when it boots it seems to > > go into text mode as well. I'm guessing maybe a gfx driver issue, but not > > sure if there is an easy way to update/fix. Any ideas? > > > > Thanks, > > Mark > > Sorry, I didn't make it clear that I moved an SSD from a working NUC to the > NUC6i7KYK and it started bootup but it seemed to fail on loading x11/gui. So > it seems like a gfx driver issue. No, I've got a kaby lake i3 so nuc7i3bnh... Using a m.2 I was running into issues on a new install. Wouldn't start boot-up, so I stuck an ssd with qubes in on it and that would boot up half-way. That's when i went to and did the uefi instructions. I'm still new, so definitely could be a driver issue. And on that note, if you've got a similar bios and ever figure out what the best options for the graphics aperature options are, it would save me a headache. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/853f94b9-1c01-4139-85b7-e9e614ef6c81%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installation on NUC6i7KYK
On Monday, April 17, 2017 at 12:38:26 PM UTC-7, Ely105 wrote: > I tried searching on this platform and qubes and haven't found anyone yet who > has posted anything so here goes. I tried to install 3.2 on the Intel Skull > Canyon Skylake NUC with Iris Pro Gfx. Tried UEFI mode and it seems to > install fine but when I reboot it says "No bootable.." on startup. If I try > to install in Legacy Mode it seems unable to start graphical installer and > goes into a text-only mode. So finally I took a working install from a > small/regular NUC that has been working fine, and when it boots it seems to > go into text mode as well. I'm guessing maybe a gfx driver issue, but not > sure if there is an easy way to update/fix. Any ideas? > > Thanks, > Mark Sorry, I didn't make it clear that I moved an SSD from a working NUC to the NUC6i7KYK and it started bootup but it seemed to fail on loading x11/gui. So it seems like a gfx driver issue. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/32483177-56c5-42b4-83f1-a93a63e228cd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installation on NUC6i7KYK
On Monday, April 17, 2017 at 12:53:36 PM UTC-7, babel wrote: > On Monday, April 17, 2017 at 9:38:26 PM UTC+2, Mark Elston wrote: > > I tried searching on this platform and qubes and haven't found anyone yet > > who has posted anything so here goes. I tried to install 3.2 on the Intel > > Skull Canyon Skylake NUC with Iris Pro Gfx. Tried UEFI mode and it seems > > to install fine but when I reboot it says "No bootable.." on startup. If I > > try to install in Legacy Mode it seems unable to start graphical installer > > and goes into a text-only mode. So finally I took a working install from a > > small/regular NUC that has been working fine, and when it boots it seems to > > go into text mode as well. I'm guessing maybe a gfx driver issue, but not > > sure if there is an easy way to update/fix. Any ideas? > > > > Thanks, > > Mark > > > You are following the guide written at the Qubes website here... > https://www.qubes-os.org/doc/uefi-troubleshooting/ > Which is not very easy to follow.. > > Your problem is either the first or the third (I did not really understand > which mine was either, so I followed both). > > 1) reinstall qubes, and at the end of the install, follow # 4, 5, 11, 12, > etc. on the first "problem". > > 2) On reboot, boot into a live cd of some sort (anything where you can get a > terminal, I used Ubuntu because it's easy on the eyes). You are now trying > to fix the third problem on the "troubleshooting" page. > When I tried to copy the /boot/efi/EFI..., I got an fstab error. Because the > drive isn't mounted. I ran.. > "" > sudo umount /dev/YourQubesDrive > mkdir /tmp/MyDrive > sudo mount -o rw /dev/YourQubesDrive /tmp/MyDrive > """ > where YourQubesDrive is the drive you have just installed qubes on. I used > gparted to make sure that it was the right one, but you can look where you're > installing qubes as you're installing it or there is probably some linux > command to do so. > I got that info from.. > https://askubuntu.com/questions/794468/mount-cant-find-dev-sdb1-in-etc-fstab-or-etc-mtab > > Then you can copy the stuff over from within the folder you made. reboot > after. > cd /tmp/MyDrive Thanks babel. Is your NUC a Skull Canyon NUC? I have it running on regular NUC, but seeing different problems on Skull Canyon. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ce0f8cc3-2329-4d3c-9d55-95eb3fa46fa3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installation on NUC6i7KYK
On Monday, April 17, 2017 at 9:53:36 PM UTC+2, babel wrote: > On Monday, April 17, 2017 at 9:38:26 PM UTC+2, Mark Elston wrote: > > I tried searching on this platform and qubes and haven't found anyone yet > > who has posted anything so here goes. I tried to install 3.2 on the Intel > > Skull Canyon Skylake NUC with Iris Pro Gfx. Tried UEFI mode and it seems > > to install fine but when I reboot it says "No bootable.." on startup. If I > > try to install in Legacy Mode it seems unable to start graphical installer > > and goes into a text-only mode. So finally I took a working install from a > > small/regular NUC that has been working fine, and when it boots it seems to > > go into text mode as well. I'm guessing maybe a gfx driver issue, but not > > sure if there is an easy way to update/fix. Any ideas? > > > > Thanks, > > Mark > > > You are following the guide written at the Qubes website here... > https://www.qubes-os.org/doc/uefi-troubleshooting/ > Which is not very easy to follow.. > > Your problem is either the first or the third (I did not really understand > which mine was either, so I followed both). > > 1) reinstall qubes, and at the end of the install, follow # 4, 5, 11, 12, > etc. on the first "problem". > > 2) On reboot, boot into a live cd of some sort (anything where you can get a > terminal, I used Ubuntu because it's easy on the eyes). You are now trying > to fix the third problem on the "troubleshooting" page. > When I tried to copy the /boot/efi/EFI..., I got an fstab error. Because the > drive isn't mounted. I ran.. > "" > sudo umount /dev/YourQubesDrive > mkdir /tmp/MyDrive > sudo mount -o rw /dev/YourQubesDrive /tmp/MyDrive > """ > where YourQubesDrive is the drive you have just installed qubes on. I used > gparted to make sure that it was the right one, but you can look where you're > installing qubes as you're installing it or there is probably some linux > command to do so. > I got that info from.. > https://askubuntu.com/questions/794468/mount-cant-find-dev-sdb1-in-etc-fstab-or-etc-mtab > > Then you can copy the stuff over from within the folder you made. reboot > after. > cd /tmp/MyDrive And I realized you can just do the second step while you're doing the first one.. Hey, it's a learning process. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b3406ac4-f86c-4dff-9baa-28799448973f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installation on NUC6i7KYK
On Monday, April 17, 2017 at 9:38:26 PM UTC+2, Mark Elston wrote: > I tried searching on this platform and qubes and haven't found anyone yet who > has posted anything so here goes. I tried to install 3.2 on the Intel Skull > Canyon Skylake NUC with Iris Pro Gfx. Tried UEFI mode and it seems to > install fine but when I reboot it says "No bootable.." on startup. If I try > to install in Legacy Mode it seems unable to start graphical installer and > goes into a text-only mode. So finally I took a working install from a > small/regular NUC that has been working fine, and when it boots it seems to > go into text mode as well. I'm guessing maybe a gfx driver issue, but not > sure if there is an easy way to update/fix. Any ideas? > > Thanks, > Mark You are following the guide written at the Qubes website here... https://www.qubes-os.org/doc/uefi-troubleshooting/ Which is not very easy to follow.. Your problem is either the first or the third (I did not really understand which mine was either, so I followed both). 1) reinstall qubes, and at the end of the install, follow # 4, 5, 11, 12, etc. on the first "problem". 2) On reboot, boot into a live cd of some sort (anything where you can get a terminal, I used Ubuntu because it's easy on the eyes). You are now trying to fix the third problem on the "troubleshooting" page. When I tried to copy the /boot/efi/EFI..., I got an fstab error. Because the drive isn't mounted. I ran.. "" sudo umount /dev/YourQubesDrive mkdir /tmp/MyDrive sudo mount -o rw /dev/YourQubesDrive /tmp/MyDrive """ where YourQubesDrive is the drive you have just installed qubes on. I used gparted to make sure that it was the right one, but you can look where you're installing qubes as you're installing it or there is probably some linux command to do so. I got that info from.. https://askubuntu.com/questions/794468/mount-cant-find-dev-sdb1-in-etc-fstab-or-etc-mtab Then you can copy the stuff over from within the folder you made. reboot after. cd /tmp/MyDrive -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/28b88286-0421-463d-bbf8-00b97ebb8c67%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Installation on NUC6i7KYK
On Monday, April 17, 2017 at 9:38:26 PM UTC+2, Mark Elston wrote: > I tried searching on this platform and qubes and haven't found anyone yet who > has posted anything so here goes. I tried to install 3.2 on the Intel Skull > Canyon Skylake NUC with Iris Pro Gfx. Tried UEFI mode and it seems to > install fine but when I reboot it says "No bootable.." on startup. If I try > to install in Legacy Mode it seems unable to start graphical installer and > goes into a text-only mode. So finally I took a working install from a > small/regular NUC that has been working fine, and when it boots it seems to > go into text mode as well. I'm guessing maybe a gfx driver issue, but not > sure if there is an easy way to update/fix. Any ideas? > > Thanks, > Mark I just finished an install on a NUC. Hopefully I can help... one minute I'll write down. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/06d389e3-a189-4263-bda9-43bc285229d5%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Screen Rotation
I've just installed Qubes but cannot figure out how to make a permanent (or at all) rotation of the screen. When I go into the settings in Dom[0], it does not let me change from the default display and there are no options for rotation. Am I not supposed to be changing this in dom0? Or am I missing something? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4e806c8b-288e-4f37-8a3a-c1d545f7592f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Installation on NUC6i7KYK
I tried searching on this platform and qubes and haven't found anyone yet who has posted anything so here goes. I tried to install 3.2 on the Intel Skull Canyon Skylake NUC with Iris Pro Gfx. Tried UEFI mode and it seems to install fine but when I reboot it says "No bootable.." on startup. If I try to install in Legacy Mode it seems unable to start graphical installer and goes into a text-only mode. So finally I took a working install from a small/regular NUC that has been working fine, and when it boots it seems to go into text mode as well. I'm guessing maybe a gfx driver issue, but not sure if there is an easy way to update/fix. Any ideas? Thanks, Mark -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/748fac3f-0ce4-48a6-92fc-4ea0119cab31%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Running Qubes as A HVM under another Type 1 Hypervisor
Hi all, Just wondering if this is possible. Horrific security implications aside, it strikes me as an interesting set-up. According to the Xen wiki [1] you can run Xen as a HVM under Xen, but with the limitation that the nested Xen installation cannot create a HVM itself. So would this be possible with Qubes, in conjunction with some other hypervisor? John. [1] https://wiki.xenproject.org/wiki/Xen_FAQ_Nesting -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/03adc847-8c52-40da-a7a6-b2c84595d62c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] qubes manager add start terminal
On Mon, Apr 17, 2017 at 9:39 AM, Eva Star wrote: > On 04/17/2017 03:11 AM, Unman wrote: > >> I've done some manager hacking myself - some of it now incorporated in >> release. >> If you dont want to build a package then you can simply start hacking in >> /usr/lib64/python2.7/site-packages/qubesmanager. >> (Back this up first, of course.) >> >> Beside the ui elements in ui_mainwindow the slots are in main.py. If >> you're going to hack these remember to remove the compiled files. >> I'd recommend using xterm, as it's in all the templates afaik. >> > > Unfortunately main.py contain only functions. > UI elements located not at qubesmanager dir. They are compiled? How? > Need to modify this file : > https://github.com/QubesOS/qubes-manager/blob/master/mainwindow.ui Yes, they get "compiled" during package build like this [1]. You can either invoke pyuic4 yourself, or just use qubes-builder to build new qubes-manager packages and install them in dom0. I personally find the build pkg & reinstall method easier. [1]: https://github.com/QubesOS/qubes-manager/blob/46b892edb15f5fbc86b6f492ed4ffe61e2b1f491/Makefile#L19-L33 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CABQWM_CC3FjojA8QPnq2X-oM00q5_QVetzjytqLXLxhv3yQ1Ag%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] qubes manager add start terminal
On 04/17/2017 03:11 AM, Unman wrote: I've done some manager hacking myself - some of it now incorporated in release. If you dont want to build a package then you can simply start hacking in /usr/lib64/python2.7/site-packages/qubesmanager. (Back this up first, of course.) Beside the ui elements in ui_mainwindow the slots are in main.py. If you're going to hack these remember to remove the compiled files. I'd recommend using xterm, as it's in all the templates afaik. Unfortunately main.py contain only functions. UI elements located not at qubesmanager dir. They are compiled? How? Need to modify this file : https://github.com/QubesOS/qubes-manager/blob/master/mainwindow.ui -- Regards -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8dc17815-53ff-8e74-c255-1e1bd1d72c5e%40openmailbox.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: qubes manager add start terminal
On 04/17/2017 02:44 AM, Reg Tiangha wrote: I don't know the answer to your question, but the problem with that is that not every TemplateVM has gnome-terminal installed (for example, the Fedora or Debian minimal templates). If you wanted to make something more generic, you'd probably be safer with 'xterm' even though it isn't as convenient to use. That's what gets called whenever you click on 'Update VM' (except in Whonix, where it's Konsole). But if you're just doing it for yourself, you can launch whatever you want. That said, being able to right-click in Qubes Manager and quickly launch any kind of terminal program would be a super useful feature to have. It's a little hack for me. "gnome-terminal" predefined entry will be enough to start with. I'm also see on the function that executed, that it have vm objects and 99% sure that this object hold all prefs of VM. Then it will be not hard to parse settings and add little more statements for this predefined string: Advanced Logic if you want: - default value xterm or empty - if the template name of the AppVM (or templateVM) contain "fedora" then predefined value "gnome-terminal" - if it's HVM then no values - if AppVM name start with "win" then "cmd" or empty. But as already noted: little hack with gnome-terminal will be enough to start. But the problem to find the file whereis right-click menu. As I can understand, source file somehow "compiled" by Qt... I do not know how to recompile them, because I'm new to python and know almost nothing about Qt. -- Regards -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7e16f20a-fd0c-1ee9-7bd5-2d9d6ed93d47%40openmailbox.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: qubes manager add start terminal
On Sun, Apr 16, 2017 at 05:44:12PM -0600, Reg Tiangha wrote: > That said, being able to right-click in Qubes Manager and quickly launch > any kind of terminal program would be a super useful feature to have. absolutly. should also have a customisable default list of terminals to try as well as a prefered terminal per VM. -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20170417131239.GA22274%40layer-acht.org. For more options, visit https://groups.google.com/d/optout. signature.asc Description: Digital signature
[qubes-users] Unable to mount DVD-RAM in VM in read-write mode
Hi, A DVD-RAM /dev/sr0 is connected to the same SATA controller as the system HDDs. It is visible in dom0 as /dev/sr0. I attached it to a vm. Then, I mounted it in VM as /mnt/removable: vm$ mount -o rw /dev/xvdi as /mnt/removable The system replied: mount: /dev/xvdi is write-protected; mounting read-only. Is it expected? Will PV SCSI (https://wiki.xen.org/wiki/Paravirtualized_SCSI) support DVD-RAM in read-write mode if it is connected to the same SATA controller as the system HDDs? Thanks, - David -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/715865312.2109362.1492427511841%40mail.yahoo.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Show thumbnails in appVM
Hey! How can i show thumbnails in a "FotoAppVM"? i can not find it in template settings. thanks! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/132e2018-1da8-e71a-7ccf-9b8d82ff0d6d%40aliaks.de. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Big problem?
I guess my pc is gone... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2c4a7f9f-80c7-4448-b91c-82cdfbb59ad5%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
