AW: [qubes-users] 4.0-rc2 install error

2017-11-08 Thread '[799]' via qubes-users
 Original-Nachricht 
An 9. Nov. 2017, 01:07, just_testing schrieb:

I'm fairly new to Linux, but I managed to get 3.2 to run and like it. But, I 
get this message during a 4.0-rc2 install with the same hardware: [Dom0] error 
["/usr/bin/qvm-start", "sys-firewall"] failed: stdout:"" stderr: "Start 
failed:internal error:libxenlight failed to create new domain "sys-firewall" ".

Lenovo T410 with intel centrino 6300 wireless card. So any hope? Maybe fixed in 
the official 4.0 release? Something I can try? Incompatible hardware?

ANSWER:
I run into the same problem with my Lenovo X230 and invested several hours 
reinstalling and trying different Grub settings (IOMMU) on boot.
Nothing made it work, thereof I suggest waiting until the final Release of 
Qubes 4 comes out and don't invest any time here.
If you are new to Qubes be assured that Qubes 3.2 is perfectly fine to be used 
for daily production use until Q4 has been released as stable version.

In my case I am unsure if running Coreboot adds additional complexity and 
thereof will try to reinstall Qubes 4 after I've reflashed the original BIOS.

What would be great is a list of devices which are known to be able to run 
Qubes 4.

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/afXZ_abe9OSLBH5iloYMNQ8Qr5FtnkIrsAPi6jPUn6FG-_3Jbn4Lcs_6Ra8lIidsBa6cmDP7_c3JMQaZqykQUq4aPpkLRdtNtv8SR0WYeFw%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Cannot Attach ISO to Windows 7 VM

2017-11-08 Thread Person
I’ll probably only reinstall the hypervisor as a last resort, since I believe 
there is a different solution. I don’t exactly understand the solution though.

The steps are these:
Create a new Windows HVM with qvm-create --hvm --label green win7
Start it with an install ISO as described in the documentation
The VM will be stuck at the glowing logo: kill it with qubes VM manager
Copy the configuration file: cp /var/lib/qubes/appvms/win7/win7.conf /tmp
Edit the file, substituting the video driver from 'xen' to 'cirrus':
Start the VM using the modified config file: qvm-start win7 
--custom-config=/tmp/win7.conf
Install windows note Windows will reboot a few times: make sure to start the VM 
with the --custom-config argument every time
When windows is successfully installed, disable driver signing with bcedit (see 
install docs)
Start the VM, but use the Qubes Tools option: qvm-start win7 
--install-windows-tools
The VM will get stuck at the glowing logo: kill it with Qubes VM manager
Copy the config file: cp /var/lib/qubes/appvms/win7/win7.conf /tmp

My problem is with the configuration files. I tried it, and the file is 
completely blank (or I did something wrong). Besides that, I don’t understand 
how exactly to change the drivers. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f63fb02c-7f93-4ae6-8d21-135f63c8ed47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] build usb-vm and net-vm using openbsd?

2017-11-08 Thread Jean-Philippe Ouellet
On Wed, Nov 8, 2017 at 3:37 PM, ludwig jaffe  wrote:
> Hi, I saw that the linux kernel has some flaws 
> (http://www.openwall.com/lists/oss-security/2017/11/06/8) in the usb stack, 
> so I am
> thinking about security against common errors, I would suggest to use
> OpenBSD as USB-VM. Maybe, as Net-VM one could use open-bsd.
> But how to integrate open-bsd with qubes and the virtual network inside qubes?
>
> Has anyone tried such?

Yes, I looked into this some time last year and plan to return to work
on it one day. I was an OpenBSD person before I came to Qubes.

Several things need to happen first before any meaningful Qubes
integration can be done though. First would be a vchan driver.

Don't expect anything soon... unless perhaps you're willing to fund such work?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABQWM_D%3DW_mCxAY4Wp_rUt352hSwpMXKiAwEkP72BoEVC0n_iw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Connected to wifi but no ping

2017-11-08 Thread Quewbie_Newbie
Hello, 

I'm despaired about ever re-opening a web page again on this system ! I must 
have changed something by mistake in the settings and screwed up my network 
configuration. 

I think I have re-etablished the global settings alright :

UpdateVM = Firewall
ClockVM = Sys-net
Default net = Firewall

Can't ping on sys-net even though my wifi connection established succesfully...

Firmware on the template Fedora a/o sys-net aren't (and can't) be installed. 

Did the basic troubleshooting methods to reload automatically the wifi 
drivers...

Also saw the possibility of permissive PCI but I have the feeling this is not 
the thing to do in my situation (wifi was working find after several reboots) 
and I honestly think I must have changed some basic setting by mistake or 
something...

Template for sys-net is Fedora23 and my machine is a Lenovox220.

Any help welcome !

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ce8f5268-43a0-45db-829f-c14ef3cda230%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Question to Mirage OS firewall users

2017-11-08 Thread Jean-Philippe Ouellet
On Wed, Nov 8, 2017 at 3:09 PM,   wrote:
> On Thursday, April 13, 2017 at 1:33:53 PM UTC+1, Thomas Leonard wrote:
>> On Thursday, April 13, 2017 at 11:08:11 AM UTC+1, Foppe de Haan wrote:
>> > On Thursday, April 13, 2017 at 10:00:20 AM UTC+2, Thomas Leonard wrote:
>> > > On Wednesday, April 12, 2017 at 10:32:11 PM UTC+1, Foppe de Haan wrote:
>> > > > Any clue why Windows 7 won't boot when I have MirageOS selected as the 
>> > > > firewall?
>> > >
>> > > I've never tried it. Do the mirage-firewall logs show anything 
>> > > interesting when you try to boot Windows?
>> >
>> > No, but I do have this log (guest-windows-dm). First log doesn't boot 
>> > (MirageOS), 2nd does (sys-firewall). Is that of any use?
>>
>> Oh, that's more useful than I was expecting! Looks like the Windows boot 
>> process starts by running MiniOS! It's hanging at
>>
>> close network: backend at /local/domain/4/backend/vif/79/0
>>
>> I guess it asked the firewall to close the network, and never got a reply 
>> (because the firewall doesn't have any code to do that).
>
> OK, I finally got some time to look into this. I think this patch should fix 
> it (works for Linux HVM anyway):
>
> https://github.com/mirage/mirage-net-xen/pull/67
>
> I also made a patch that seems to let the firewall work with disposable VMs:
>
> https://github.com/mirage/mirage-net-xen/pull/68

Sweet :)

> Both are based on guesswork though - is the Xen netback protocol documented 
> somewhere?

In xen src:
http://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=xen/include/public/io/netif.h;hb=refs/heads/master

netfront / netback in linux:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/net/xen-netfront.c
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/net/xen-netback

And a somewhat outdated but much more approachable introduction in
section 9.2 (starting p.169) of "The Definitive Guide to the Xen
Hypervisor" book in case you have access to it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABQWM_D1wwcdtbj-MdGCahV1E6fzCJYMqmbqyR3AJKoqXcxBYQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Is there a way to use secure boot with qubes?

2017-11-08 Thread Guerlan
On Thursday, November 9, 2017 at 2:06:28 AM UTC-2, tai...@gmx.com wrote:
> On 11/08/2017 03:52 PM, Guerlan wrote:
> 
> > My computer complains about bad signature when I try to install qubes. Is 
> > there a way to install it without disabling secure boot? Does qubes support 
> > secure boot? Is there a way to install qubes keys on the BIOS? Why did it 
> > reject the keys?
> >
> If you can't turn off "secure" boot then return your computer and buy 
> one for real (as of now it is simply a lease if you can't install 
> whatever OS and bootloader you want).
> Owner controllability is very important, I suggest a lenovo g505s with 
> coreboot (this laptop has open source init unlike many others and it has 
> no ME/PSP or hardware code signing enforcement)

I can turn it off, its a simple BIOS switch, but I wanted to know if it's 
possible to install with secure boot, so I don't need to trust my pen drive for 
example. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b0ee29fe-afad-40f9-9e3f-edbbcd9b9a74%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Is there a way to use secure boot with qubes?

2017-11-08 Thread taii...@gmx.com

On 11/08/2017 03:52 PM, Guerlan wrote:


My computer complains about bad signature when I try to install qubes. Is there 
a way to install it without disabling secure boot? Does qubes support secure 
boot? Is there a way to install qubes keys on the BIOS? Why did it reject the 
keys?

If you can't turn off "secure" boot then return your computer and buy 
one for real (as of now it is simply a lease if you can't install 
whatever OS and bootloader you want).
Owner controllability is very important, I suggest a lenovo g505s with 
coreboot (this laptop has open source init unlike many others and it has 
no ME/PSP or hardware code signing enforcement)


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b6808cc0-83cc-44b2-4190-39883b510e9e%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Anti Evil Maid (AEM) - possible to use text and picture at the same time?

2017-11-08 Thread Patrick Schleizer
Got secret.txt as well as secret.png - now it's only showing the image
at plymouth but no text. Looks like both cannot be combined?

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5d828548-19b1-7422-6c52-2775038e444b%40whonix.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] 4.0-rc2 install error

2017-11-08 Thread just_testing
I'm fairly new to Linux, but I managed to get 3.2 to run and like it. But, I 
get this message during a 4.0-rc2 install with the same hardware:

[Dom0] error
["/usr/bin/qvm-start", "sys-firewall"] failed:
stdout:""
stderr: "Start failed:internal error:libxenlight failed to create new domain 
"sys-firewall"
"

Obviously not much works when the networking doesn't work...It does finish the 
install though. Lenovo T410 with intel centrino 6300 wireless card.

So any hope? Maybe fixed in the official 4.0 release? Something I can try? 
Incompatible hardware? I do like the look of 4.0 a lot better than 3.2 - I just 
hope I can run it

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/58da67d1-d62e-4acc-94fe-f7cf7a3345e9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: qubes 3.2 flaw with wifi stoping to work after power safe mode (laptop lid closed)

2017-11-08 Thread Andrew Morgan
On 11/08/2017 12:42 PM, ludwig jaffe wrote:
> Hi, I bought a new cheap laptop, Lenovo 110 that uses an SOC with i3.
> The wifi is
> 00:01.0 Network controller: Realtek Semiconductor Co., Ltd. RTL8821AE 
> 802.11ac PCIe Wireless Network Adapter
> 
> After a while of using wifi, it just stops to work and sometimes reconnecting 
> the wifi works sometimes one need to reboot the net-vm and sometimes this 
> also does not help and one needs to reboot the whole machine in order to get 
> wifi working again.
> I saw such flaws once with kali but never investigated too much on it.
> 
> Any ideas on this problem?
> 
> 

Would it be similar to this issue?
https://groups.google.com/d/msg/qubes-users/LkP-6ORGwME/AQLyuqvnCAAJ

Andrew Morgan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/otvvkf%243ro%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature


[qubes-users] Re: About Qubes 4

2017-11-08 Thread Jon Solworth
On Wednesday, November 8, 2017 at 11:14:23 AM UTC-5, fer...@openmailbox.org 
wrote:
> Hi,
> In Qubes website you said that is best to use Qubes 3.2 for daily use.
> This is just because there are probably data loss due to bug? Or is for 
> security reason?
> 
> Since I always backup and mostly I surf the web I just don't care about data 
> loss.
> But I like to have more secure due to better virtualization. 
> So, I'm asking.. This advice is related also to security or only production 
> data?
> 
> For a security point of view is safe to use Qubes 4?
> 
> Thanks you a lot.

Qubes 4rc2 works pretty well, but its not quite there yet (hence the rc3 
schedule).  I wouldn't expect data loss to be a low probability event.

If it is not ready for general use, than I would not want to rely on its 
security.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5c420d74-d03c-464a-ad34-ba697bdf3594%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Anti Evil Maid (AEM) - SRK password strength? Sane to use same password as for full disk encryption?

2017-11-08 Thread ludwig jaffe
On Wednesday, November 8, 2017 at 2:30:38 PM UTC-5, Patrick Schleizer wrote:
> How strong should the SRK password strength be? Should it be as strong
> as a password for full disk encryption?
> 
> Is it sane to use same password as SRK password as well as for full disk
> encryption?
> 
> Cheers,
> Patrick

Another analog thing: one can exchange your laptop into a similar model and 
place it into your room and you type your password into "your" computer, but 
this one captures it and reports it to $agencies.
So paint your laptop with glitter paint and make a photo in a secure 
environment. So faking the random distribution of the particles is impossible, 
so one can just compare the pictures to be sure to have your machine.
Just to be sure, and it looks cool :-)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a256f60d-d27b-4d4d-ba6c-4ef7ccceb35a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Is there a way to use secure boot with qubes?

2017-11-08 Thread Guerlan
My computer complains about bad signature when I try to install qubes. Is there 
a way to install it without disabling secure boot? Does qubes support secure 
boot? Is there a way to install qubes keys on the BIOS? Why did it reject the 
keys?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e7b1a882-02d4-4b2c-ac9a-2907577497ba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Is there a way to use secure boot with qubes?

2017-11-08 Thread Guerlan
On Wednesday, November 8, 2017 at 6:52:14 PM UTC-2, Guerlan wrote:
> My computer complains about bad signature when I try to install qubes. Is 
> there a way to install it without disabling secure boot? Does qubes support 
> secure boot? Is there a way to install qubes keys on the BIOS? Why did it 
> reject the keys?

its a razer blade stealth 2016 or 2017 model

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dcc9a87a-eee0-4663-b598-d15aa48150fe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Anti Evil Maid (AEM) - SRK password strength? Sane to use same password as for full disk encryption?

2017-11-08 Thread ludwig jaffe
On Wednesday, November 8, 2017 at 2:30:38 PM UTC-5, Patrick Schleizer wrote:
> How strong should the SRK password strength be? Should it be as strong
> as a password for full disk encryption?
> 
> Is it sane to use same password as SRK password as well as for full disk
> encryption?
> 
> Cheers,
> Patrick

Think about the attack surface. Evil maid needs to come into your room and has 
about 2 hours to attack your machine.
The disk encryption needs to be much stronger. You take a flight to a country 
with some "security needs" and your laptop is shipped 2 days after your landing 
to your hotel.
The $agencies copied your harddisk and modified your bios (ME, UEFI) and you 
shop for a new laptop of the same series, pay cash and migrate your harddisk to 
the new machine.
So the $agencies are sad as they can not capture your key strokes but they can 
work years with your harddisk image.
The evil maid has not so much time, also she can not prepare much.
So if you have problems, maybe, you can decrease the security of SRK password,
but be sure to have enough entropy in a password.

Cheers.
As all have nothing to hide, we will not need to buy a new laptop on holidays 
:-)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5661490d-8fe7-43b4-a7e7-d399b717357d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] qubes 3.2 flaw with wifi stoping to work after power safe mode (laptop lid closed)

2017-11-08 Thread ludwig jaffe
Hi, I bought a new cheap laptop, Lenovo 110 that uses an SOC with i3.
The wifi is
00:01.0 Network controller: Realtek Semiconductor Co., Ltd. RTL8821AE 802.11ac 
PCIe Wireless Network Adapter

After a while of using wifi, it just stops to work and sometimes reconnecting 
the wifi works sometimes one need to reboot the net-vm and sometimes this also 
does not help and one needs to reboot the whole machine in order to get wifi 
working again.
I saw such flaws once with kali but never investigated too much on it.

Any ideas on this problem?


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/06e73458-f1f8-43e0-9a3e-9e094af20580%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] build usb-vm and net-vm using openbsd?

2017-11-08 Thread ludwig jaffe
Hi, I saw that the linux kernel has some flaws 
(http://www.openwall.com/lists/oss-security/2017/11/06/8) in the usb stack, so 
I am
thinking about security against common errors, I would suggest to use
OpenBSD as USB-VM. Maybe, as Net-VM one could use open-bsd.
But how to integrate open-bsd with qubes and the virtual network inside qubes?

Has anyone tried such?

Cheers

Ludwig

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f3a9d418-1c96-4976-a4f7-9576c669a8f1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Question to Mirage OS firewall users

2017-11-08 Thread talex5hangout
On Thursday, April 13, 2017 at 1:33:53 PM UTC+1, Thomas Leonard wrote:
> On Thursday, April 13, 2017 at 11:08:11 AM UTC+1, Foppe de Haan wrote:
> > On Thursday, April 13, 2017 at 10:00:20 AM UTC+2, Thomas Leonard wrote:
> > > On Wednesday, April 12, 2017 at 10:32:11 PM UTC+1, Foppe de Haan wrote:
> > > > Any clue why Windows 7 won't boot when I have MirageOS selected as the 
> > > > firewall?
> > > 
> > > I've never tried it. Do the mirage-firewall logs show anything 
> > > interesting when you try to boot Windows?
> > 
> > No, but I do have this log (guest-windows-dm). First log doesn't boot 
> > (MirageOS), 2nd does (sys-firewall). Is that of any use?
> 
> Oh, that's more useful than I was expecting! Looks like the Windows boot 
> process starts by running MiniOS! It's hanging at
> 
> close network: backend at /local/domain/4/backend/vif/79/0
> 
> I guess it asked the firewall to close the network, and never got a reply 
> (because the firewall doesn't have any code to do that).

OK, I finally got some time to look into this. I think this patch should fix it 
(works for Linux HVM anyway):

https://github.com/mirage/mirage-net-xen/pull/67

I also made a patch that seems to let the firewall work with disposable VMs:

https://github.com/mirage/mirage-net-xen/pull/68

Both are based on guesswork though - is the Xen netback protocol documented 
somewhere?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/953016bb-3f21-4c57-a401-32ada189da32%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] reboot and shutdown qubes 4 rc2

2017-11-08 Thread Roy Bernat
On Wednesday, 8 November 2017 14:39:22 UTC-5, Chris Laprise  wrote:
> On 11/08/2017 12:54 PM, Roy Bernat wrote:
> > Hi all
> >
> > until now i am not able to have shutdown or reboot without press the 
> > physical.
> >
> > some one has some idea ?   seems that it is stuck on
> >
> > failed to read reboot  parameter : no such file or directory .
> >
> > on shutdown it stuck on watchdog .
> >
> > any idea ?
> >
> > Roy
> 
> I think its a common problem. What I use is this:
> 
> qvm-shutdown --all --wait --timeout=20
> sudo poweroff -f
> 
> -- 
> 
> Chris Laprise, tas...@posteo.net
> https://github.com/tasket
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

HI Thanks for your answer.

what about reboot ? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9b6fd09b-3955-4342-9930-f8aa91de4943%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] reboot and shutdown qubes 4 rc2

2017-11-08 Thread Chris Laprise

On 11/08/2017 12:54 PM, Roy Bernat wrote:

Hi all

until now i am not able to have shutdown or reboot without press the physical.

some one has some idea ?   seems that it is stuck on

failed to read reboot  parameter : no such file or directory .

on shutdown it stuck on watchdog .

any idea ?

Roy


I think its a common problem. What I use is this:

qvm-shutdown --all --wait --timeout=20
sudo poweroff -f

--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/439b2086-efe8-5caa-0ae8-f318e2d72639%40posteo.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Anti Evil Maid (AEM) - SRK password strength? Sane to use same password as for full disk encryption?

2017-11-08 Thread Patrick Schleizer
How strong should the SRK password strength be? Should it be as strong
as a password for full disk encryption?

Is it sane to use same password as SRK password as well as for full disk
encryption?

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/452590b6-339c-b1ae-233b-3260972665d4%40whonix.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] reboot and shutdown qubes 4 rc2

2017-11-08 Thread Roy Bernat
Hi all 

until now i am not able to have shutdown or reboot without press the physical.

some one has some idea ?   seems that it is stuck on 

failed to read reboot  parameter : no such file or directory . 

on shutdown it stuck on watchdog . 

any idea ? 

Roy  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f966dd2a-a66d-437b-90da-b428988b4fc5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Touchscreen not working on Qubes 3.2

2017-11-08 Thread Adrian Rocha
Same issue with Dell precision M3800. This was working in previous versions of 
Qubes, 3.1 I think.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/03654db4-88c5-4b6b-bdd8-37b5505cbe0c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] About Qubes 4

2017-11-08 Thread ferj03
Hi,
In Qubes website you said that is best to use Qubes 3.2 for daily use.
This is just because there are probably data loss due to bug? Or is for 
security reason?

Since I always backup and mostly I surf the web I just don't care about data 
loss.
But I like to have more secure due to better virtualization. 
So, I'm asking.. This advice is related also to security or only production 
data?

For a security point of view is safe to use Qubes 4?

Thanks you a lot.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20171108161419.882544E0025%40mta-1.openmailbox.og.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Latitude E6430 built-in wifi interface constantly becomes unavailable (was: HCL - Dell Latitude E6430)

2017-11-08 Thread Santiago R.R.
El 08/11/17 a las 16:44, Santiago R.R. escribió:
> Hi,
> 
> I was forgetting to send the HCL for my Dell Latitude. I have been using
> Qubes 3.2 since last March, and everything works great so far. I still
> need to test the cdrom drive and bluetooth though.

I have been some troubles with the built-in wifi interfaces. From time
to time, the interfaces becomes unavailable for sys-net, and I haven't
found any proper solution to recover networking. An Atheros USB "dongle"
wifi interfaces works fine.

dmesg output attached, in case it could be useful.

Cheers,

Santiago

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20171108160346.jslbmwi52trm2ff3%40localhost.localdomain.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Cannot Attach ISO to Windows 7 VM

2017-11-08 Thread blacklight
this should help you with your windows issue.

https://github.com/QubesOS/qubes-issues/issues/2488

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ae38f9c7-5a4e-4088-b0b9-9f98cfedfd9f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.