[qubes-users] HCL - Lenovo Thinkpad X240

2019-01-17 Thread 'Paul Cormack' via qubes-users
No issues yet after a week of use.

/Paul

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/IqKrvA6bEQcFe6TjLQsfztLXbrfOt-fzjAsqiPn_hWigzQsyojwkyqrldzDKD0bqJp1q1dzAdwRhh3ih1KpWGMoipePbzlUYppHPIo4QokQ%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-LENOVO-20AMS02515-20190116-203517.yml
Description: application/yaml


[qubes-users] Firefox Account SyncVM

2019-01-17 Thread R A F
Hi Everyone,

I'm trying to find a way to sync firefox bookmarks but I do not want to use 
firefox account. So my question to all of you is:
Does anyone knows if there is a possible way to create local account that will 
be hosted on standalone VM so I could connect all Firefox Apps to connect to 
that source ans sync bookmarks, plugins, etc. The whole point here is to keep 
all bookmarks in safe place that same way some people keep their passwords keys 
etc.
Maybe if there is no such a solution someone could start new project? I would 
do that myself, but currently do not have advanced coding skills :-(

Thanks for all replays 
BR
Raf

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/631d93aa-1518-4f9a-a856-a6aeae7d1018%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes issue #3980 exists in Debian 9 template but not in Whonix 14

2019-01-17 Thread Sven Semmler
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi Patrick & qubes-users,

the issue described in...

- -> https://github.com/QubesOS/qubes-issues/issues/3980

... exists with debian-9 templates but not with fedora or whonix-based
templates (which to my knowledge are debian based).

Any idea why? I am assuming either a package or some configuration is
needed in the debian-9 template. The error message says "Shell not
running or DBus service not available"

/Sven
-BEGIN PGP SIGNATURE-
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=JIqB
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c0d34823-7208-fb38-37bf-deb3a7e644b8%40SvenSemmler.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Thank You & How to "Give Back"?

2019-01-17 Thread John Goold
On Thursday, January 17, 2019 at 1:58:16 AM UTC-6, Ivan Mitev wrote:
> Hey John,
> 
> On 1/16/19 8:20 PM, John Goold wrote:
> > I want to say thank you to those members of Qubes Users who have had the 
> > patience to answer my questions and solve my problems getting Qubes up and 
> > running. I have been particularly pleased that this is a forum where there 
> > are few, if any, unhelpful responses to questions and few 
> > questions/requests for help where the asker has not tried to find the 
> > answer in this forum or in the documentation.
> 
> Thank you. As a long time user of Qubes OS I don't see how I could do
> without it so I'm happy to help the community here. Kind of "giving
> back" as you say. I'm sure it applies to the other users who helped you
> as well.
> 
> > While I have a computer background, my entire career was spend in the 
> > software/research environment, I do not have a background in PC/Linux 
> > internals (though decades ago I did acquire some Unix sys-admin knowledge). 
> > That means I came to Qubes without the the in-depth security knowledge that 
> > the more knowledgeable of you have — my knowledge is more superficial.
> > 
> > Having provided that background, I was trying to think of a way of "giving 
> > back" to this community.
> > 
> > Would a "Setting up a Semi-Secure Personal Computing Environment Using 
> > Qubes" document be a useful addition (albeit, with a more succinct title!)?
> > 
> > It would be aimed at computer users who want a more secure environment, but 
> > are willing to live with some security exposures (ones that hopefully have 
> > an exceedingly low probability of being exploited against an "average Joe") 
> > — for example, using a USB mouse and keyboard. Clearly one needs to have 
> > some degree of computer literacy to tackle switching to Qubes, but I think 
> > a step-by-step migration guide might be useful and fewer people might give 
> > up.
> > 
> > In it, I could briefly describe the "Hardware Issues" which are already 
> > well documented (hence "briefly" as they applied to me) and then get into 
> > the issues of choosing which qubes to set up, the issues of dealing with a 
> > desktop computer that only has USB mouse/keyboard capability, various 
> > user-interface issues and, perhaps more importantly, migrating data from 
> > another OS (in my case Linux Mint) to the Qubes environment.
> 
> In my opinion such document may be helpful as a blog post - but the
> problem would be visibility (only through search engines). Maybe a
> better way would be to improve the official qubes docs where you found
> things to be lacking details/clarity [1]. Some people find it easy to
> deal with the official docs, others don't. In the latter case you could
> float ideas/pull requests in the unofficial "qubes community" project
> [2] and folks there (including myself) would help you format them for
> submission to the official docs.
> 
> Writing docs can be time consuming though, so in any case spending a bit
> of time helping other people on the ML is already a nice way of "giving
> back" !
> 
> 
> [1] https://www.qubes-os.org/doc/doc-guidelines/#how-to-contribute
> [2] https://qubes-community.github.io/

Having written many technical documents over my career, I understand the 
time-consuming nature of the task. This is especially true if one cannot just 
write and publish a document, but needs to have it reviewed (and re-reviewed…).

I am willing to make that commitment. First let me do some more reading (and 
finish setting up my Qubes installation — still some odds and ends to do). Then 
I will get back to you (or via the Qubes Community link you kindly provided).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/376b3e92-c461-4975-842a-9e53ac8d9cf1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] sys-net & sys-firewall fail to start, new install

2019-01-17 Thread scott . lewis . engineer
Hello, I apologize in advance if this has already been addressed but searching 
for "sys-net" & "libxl" give many confusing results, I don't see any that match 
both not working, and I'm completely new to Qubes.
My problem is that after 2 different installs of the same version, 4.01, I keep 
getting the same problems: When I get into Qubes I cannot update dom0, and 
sys-net & sys-firewall both fail to start even though my NIC is correctly 
listed in devices for -net.

Basic info:
Dell Optiplex 780, bios= A15 as recommended in HCL.
Qubes 4.01, sigs checked good.
Install 1 done by USB, created in windows, had same issues as described below.
Re-installed by DVD thinking I'd muffed something (think I read on reddit that 
USB installs made from windows had issues) and the behavior is exactly the same.

Behavior observed:
(anything in [xxx] is me telling you the variation, as I get this for 2 VM's, 2 
error codes, etc.)
* Dom0 starts and runs, but -net & -firewall will not.
* When I attempt to manually start either, I get this error message:
"ERROR: Start failed: internal error: libxenlight failed to create new domain 
'sys-net' [or sys-firewall], see /var/log/libvirt/libxl/libxl-driver.log for 
details".

When I less the log, I get these errors dozens of time with timestamps ranging 
from date of install to today: 
1: "[date:time]: libxl: libxl_create.c:610:libxl_domain_make:domain creation 
fail: Operation not supported"
2: "[date:time]: libxl: libxl_create.c:982:initiate_domain_create:cannot make 
domain: -3"
Those errors and nothing else.

I've tried to update dom0 by command as found in docs, as well as through GUI 
without success. I found a page elsewhere that described temporarily putting 
NIC in firewall or another VM to see if it worked, but I must be doing it wrong 
as I always get loopback errors when trying to save.
It always tells me failed, regardless. No wonder if network isn't working.

Under sys-net, I see the correct name and model of my NIC, but I can't seem to 
figure out how to see if the NIC is operational since sys-net isn't working 
(new to qubes sorry!), however I verified my router is not showing an IP 
assigned, though link LED is on.

If anyone can help me try to figure this out, I'd really appreciate it. I'm 
still a bit green on linux but I learn fast, I recently gave up on Windows (I 
hate 10 so much I could scream) so I'm trying to dive in with qubes (deep end 
of the pool I think) as it best suits my needs with the VM implementation.

I'd post the log itself, but I can't seem to figure out how to make USB copy 
work yet since I've been beating my head on the networking issue.

Thanks, and sorry in advance if this duplicated another thread.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/824bf0e0-d47b-47ff-8f01-cf9dd92febd5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Firefox Account SyncVM

2019-01-17 Thread unman
On Thu, Jan 17, 2019 at 10:20:31AM -0800, R A F wrote:
> Hi Everyone,
> 
> I'm trying to find a way to sync firefox bookmarks but I do not want to use 
> firefox account. So my question to all of you is:
> Does anyone knows if there is a possible way to create local account that 
> will be hosted on standalone VM so I could connect all Firefox Apps to 
> connect to that source ans sync bookmarks, plugins, etc. The whole point here 
> is to keep all bookmarks in safe place that same way some people keep their 
> passwords keys etc.
> Maybe if there is no such a solution someone could start new project? I would 
> do that myself, but currently do not have advanced coding skills :-(
> 
> Thanks for all replays 
> BR
> Raf
> 

Search the archives of this list for discussions on this topic: Firefox
Bookmarks should get you relevant posts, and links to some sample
scripts.
The biggest danger is that your bookmarks will carry identifying
information between qubes, breaking the isolation model. If you plan for
this and are aware of the risks then you can adopt anything between
storing/syncing whole profiles between one "storage" qube and other
qubes, and copy/pasting bookmarks from storage qube in to other firefox
qubes as needed.



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190118013837.keqgry63jatpvd5s%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.