[qubes-users] Cant get it to install
I'm trying to install from a USB that I setup with rufus, I verified the ISO too. If I boot into the USB in uefi mode, I get some output at the top left of the screen then the screen goes blank. I did a successful install on a completely blank ssd by booting the usb in legacy mode. everything went fine but I there was no boot option for it. Also, I ended up with no xen.efi file, xen.cfg was empty, and I couldnt use efibootmgr, "efi variables not supported" is the error I would get. The only extra parameters I used were "nouveau.modeset=0 rd.driver.blacklist=nouveau video=vesa:off". The laptop I am using is a Dell G7 15 What can I do here? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/cfc27bc7-b0d1-480f-9037-db95f1bc69fc%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Which parts of qubes-builder are guaranteed to work/supported?
On Wednesday, January 2, 2019 at 10:35:37 PM UTC+1, Frédéric Pierret (fepitre) wrote: > Le mercredi 2 janvier 2019 21:49:22 UTC+1, Achim Patzner a écrit : > > Hi! > > > > > > Is it worth creating issues if certain parts of the Builder tools do not > > work (e. g. template-local-centos7 or template-local-fc29+xfce) which would > > be creating things not in the Qubes distribution? > > > > > > > > > > Achim > > What do you mean by 'parts'? The build of CentOS 7 and Fedora 29 with XFCE > flavor works well. I did a build last week for both of them. Can you be more > precise please? > > Frédéric OT, but could you briefly clarify the benefit of running the xfce flavor over the generic f29 template? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/12123786-7672-48ed-aab6-7e443df5ac76%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Using Untangle as Qubes firewall
On Tue, Jan 22, 2019 at 11:32:22AM -0800, scoobyscra...@gmail.com wrote: > Hello, > > I am new to Qubes running on 4.0. I would like to test the Untangle firewall > and have it run in place of sys-firewall and still use the default sys-net. > > I created the Untangle firewall as a HVM VM but it only shows one interface. > How do I add the virtual interface? What else am I missing? > > TIA > You should be able to set the HVM as netvm for another qube and the vif will be set. Try it. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190123012015.ytwolkprdlbfvhnr%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] diff files across appvms
On Tue, Jan 22, 2019 at 01:23:54PM -0800, john.e.ma...@gmail.com wrote: > Is it possible to compare (diff) files across appvms. Or (and), is it > possible to pass arguments to an appvm through a dom0 terminal. > > Basically, I want to check if a Keepassxc file in my vault is different than > a Keepassxc file in my appvm. > > Thanks for any ideas. > > John > You can do this using qvm-run-vm or by using qvm-run in dom0. Look at the policy file in /etc/qubes-rpc/policy/qubes.VMShell and the warning. If all you want to do is see if the files differ, then you can just generate hashes: from vault - qvm-run-vm appvm 'md5sum db.kdbx' Compare that with local hash. I dont think you can diff the files themselves. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190123011845.fd7q6dikueppbpno%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] diff files across appvms
Is it possible to compare (diff) files across appvms. Or (and), is it possible to pass arguments to an appvm through a dom0 terminal. Basically, I want to check if a Keepassxc file in my vault is different than a Keepassxc file in my appvm. Thanks for any ideas. John -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/50094190-5e76-443d-be47-a1b06865eba0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] sys-net & sys-firewall fail to start, new install
On Saturday, January 19, 2019 at 6:37:47 AM UTC-5, Mike Keehan wrote: > > Ah, what a shame. It does seem as if your iommu is a problem. > > Without any other ideas, the only thing I can suggest is that you try > the latest Qubes 3.2 just to allow you to try out Qubes. It doesn't > require the vt-d stuff, so might work on your box. > > The other thing you can do is try googling for iommu and your cpu > together to see if others have had problems (not necessarily in > Qubes, just in general use). > > Mike. Well, just to put this out there, it seems as if my CPU doesn't support SLAT and maybe that's why (I thought from intel's page it did). Installing the latest 3 stable and I don't get any errors about IOMMU like I did with 4, but just like with 4 I do have to disable vt-d in bios in order to boot to the installer. Unfortunately as soon as I turn vt-d back on, the system goes thru post, I see qubes start to boot and then after a minute (about when I think I'd see the disk password prompt) I get a message from my monitor that the input timing is wrong, which I've never seen on several other operating systems! Wierldy, I was able to reproduce this behavior by turning off vt-d, booting up fully and then was able to update without issues unlike in 4. Rebooted twice without issues, then turned vt-d back on and got the exact same behavior. So I guess I just try out using 3.2 without vt-d. I'll take a look around the users' group, but I don't see any real details on the qubes site for what the key differences are between 3 & 4 are, can anyone point me to something that will tell me how worth it (secure) that it is to use 3.2 instead of replacing hardware to run 4? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5f726c70-f3cb-4473-8b2f-77fbb7f4e3fd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Using Untangle as Qubes firewall
Hello, I am new to Qubes running on 4.0. I would like to test the Untangle firewall and have it run in place of sys-firewall and still use the default sys-net. I created the Untangle firewall as a HVM VM but it only shows one interface. How do I add the virtual interface? What else am I missing? TIA -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/69212633-9ebd-469d-96e7-e5b3f4be9e34%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] 4.0.1 persistent external LVM block device attach
[Resending without HTML - prev spam blocked?] Struck a problem bringing up a workstation on 4.0.1. I have a bunch of external (to qubes) disk devices with LVM partitions and set up the persistent device attachments needed to different appVMs and all was working as expected until I rebooted the whole system. It seems that for external SSD devices that come up quickly, all is well, they come up first, however old rotating disks in raid array take a while to come up and it seems the mapper ends up running in a race condition with the boot up of the qubes resulting in the external disk dm names landing anywhere through the hundred or so dm.. device names - different each time (with different start on boot config?). The result is that the appVMs with the persistent attaches fail to start because the block device is somewhere else (VM start fails non existent device or inaccessible device). What is the correct method to handle this? qvm-block does not accept a UUID (not documented and gives an error: not exposed) I suspect that should be added as an issue. Thanks, Eric -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b60d1b31-2d5e-d0ee-e97b-cb3a5479c310%40asar.biz. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] hard disk locked after trial run
- Do you want to replace Qubes, or install another OS alongside it?:Only Qubes - What you need to do depends on how much space you allocated to Qubes in the first place: The full disk - Also different depending on whether 3.2 or 4.0, and which OS you have in mind: I used Qubes 4 and wanted to install Debian 9 afterwards - I used a Windows 7b Install CD to remove the Qubes partition - Thank you very much. On Tue, Jan 22, 2019 at 2:12 PM unman wrote: > On Tue, Jan 22, 2019 at 11:08:19AM +0100, Dieter Zakel wrote: > > [image: IMG_3494.jpeg] > > > > On Tue, Jan 22, 2019 at 12:44 AM unman > wrote: > > > > > On Mon, Jan 21, 2019 at 09:03:40AM -0800, Dieter Zakel wrote: > > > > I have installed the Qubes-OS on my laptop as a trial run and now I > am > > > unable to install another OS. > > > > Because dom0 is locked... > > > > When trying to install linux the partitioning process freezes... > > > > Has someone any idea how to remove this security feature? > > > > Thank you very much! > > > > > > > > > > Do you want to replace Qubes, or install another OS alongside it? What > > > you need to do depends on how much space you allocated to Qubes in the > > > first place. > > > Also different depending on whether 3.2 or 4.0, and which OS you have > in > > > mind. > > > > > > If you have encryted drive and want to shrink partition to make space > > > for new OS this can be done, but is somewhat involved. > > > If you just want to remove Qubes and your new installer cant handle it, > > > boot from a live linux USB, and use gparted to remove the Qubes > > > partition. > > > > > Hello Dieter > Can you answer those questions? > Also, the images are no use to me. Can you tell me what they show? > > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-users+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-users@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-users/20190122131223.bgdfiehyvs6e3tg7%40thirdeyesecurity.org > . > For more options, visit https://groups.google.com/d/optout. > -- --- Kind regards Dieter Zakel -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CANJnfx%2BH6X0e4%2BiviYOLnuZDu%3DAyhCuYeNxs4Xqb9TWD2%3DwHAg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] vault color (black?) & window decorations
On Tuesday, January 22, 2019 at 10:53:30 AM UTC-5, chuc...@gmail.com wrote: > On Monday, October 15, 2018 at 8:07:38 AM UTC-5, awokd wrote: > > bre...ail.com: > > > Hi folks, > > > > > > Regarding the default R4 color scheme... > > > > > > ...does anyone else find that the default color for vault (black?) makes > > > it nearly impossible to see the window titles and/or windows controls > > > (close, maximize, minimize)? > > > > > > Why does that color scheme set the window title (and controls) to dark > > > text/controls on a dark background? > > > > > Have noticed it but it hasn't bothered me enough yet to change it! I > > think there's an issue somewhere out there mentioning it. > > Is it possible to user-modify (or, more specifically, add to) the existing > available window colors? I'm adding some additional "zones" and have been > trying to figure it out. My workaround was setting all my templates to use the black backgrounds with impossible to read window titles and shifting other VMs to more reasonable colors. Brendan -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0727a986-7f46-4b3f-9d87-e796c3908e08%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] vault color (black?) & window decorations
On Monday, October 15, 2018 at 8:07:38 AM UTC-5, awokd wrote: > brendan.h...@gmail.com: > > Hi folks, > > > > Regarding the default R4 color scheme... > > > > ...does anyone else find that the default color for vault (black?) makes it > > nearly impossible to see the window titles and/or windows controls (close, > > maximize, minimize)? > > > > Why does that color scheme set the window title (and controls) to dark > > text/controls on a dark background? > > > Have noticed it but it hasn't bothered me enough yet to change it! I > think there's an issue somewhere out there mentioning it. Is it possible to user-modify (or, more specifically, add to) the existing available window colors? I'm adding some additional "zones" and have been trying to figure it out. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5196d7d8-6b95-4aa1-b7a9-22530ce95f24%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Firefox Account SyncVM
On Monday, January 21, 2019 at 11:57:26 AM UTC-6, R A F wrote: > I understand your point here but what if I simply do not want to sync my > bookmarks, history etc with the cloud. What if I do not want to share those > bookmarks between AppVMs. But what if I need to sync this offline inside > AppVM that I use in specific domain? The problem here is that in many cases > users are forgetting to backup their goodies and not everyone want to sync > all this with cloud account. I'm not expert in that area and trying to find > out if anyone know it this type of sync is even possible. > > Thanks Guys. > Raf You could set up a local file server of your own, such as “ownCloud” https://owncloud.org/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ed148422-4a70-4236-b464-6974e5e74005%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Firefox Account SyncVM
On Monday, January 21, 2019 at 11:57:26 AM UTC-6, R A F wrote: > I understand your point here but what if I simply do not want to sync my > bookmarks, history etc with the cloud. What if I do not want to share those > bookmarks between AppVMs. But what if I need to sync this offline inside > AppVM that I use in specific domain? The problem here is that in many cases > users are forgetting to backup their goodies and not everyone want to sync > all this with cloud account. I'm not expert in that area and trying to find > out if anyone know it this type of sync is even possible. > > Thanks Guys. > Raf If you are using Firefox synchronization, then you can selectively enable/disable sync., in each qube. So disable (or do not enable it in the first place) in all of your domains EXCEPT the one and only one you want to use it in for "backup". Oh, and ONLY set Firefox to synchronize bookmarks (no history, passwords, etc.). Particularly if you are treating that domain as untrusted, I do not see what the problem is. Or am I missing the point of your wanting to synchronize bookmarks in that one domain? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a6117a63-1e24-44aa-91ac-6d4afc4c654c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] hard disk locked after trial run
On Tue, Jan 22, 2019 at 11:08:19AM +0100, Dieter Zakel wrote: > [image: IMG_3494.jpeg] > > On Tue, Jan 22, 2019 at 12:44 AM unman wrote: > > > On Mon, Jan 21, 2019 at 09:03:40AM -0800, Dieter Zakel wrote: > > > I have installed the Qubes-OS on my laptop as a trial run and now I am > > unable to install another OS. > > > Because dom0 is locked... > > > When trying to install linux the partitioning process freezes... > > > Has someone any idea how to remove this security feature? > > > Thank you very much! > > > > > > > Do you want to replace Qubes, or install another OS alongside it? What > > you need to do depends on how much space you allocated to Qubes in the > > first place. > > Also different depending on whether 3.2 or 4.0, and which OS you have in > > mind. > > > > If you have encryted drive and want to shrink partition to make space > > for new OS this can be done, but is somewhat involved. > > If you just want to remove Qubes and your new installer cant handle it, > > boot from a live linux USB, and use gparted to remove the Qubes > > partition. > > Hello Dieter Can you answer those questions? Also, the images are no use to me. Can you tell me what they show? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190122131223.bgdfiehyvs6e3tg7%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
