Re: [qubes-users] Re: HCL - Lenovo ThinkPad T460s (20F9CTO1WW)

2016-05-29 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Thu, May 26, 2016 at 08:25:48PM -0700, patientz...@terminalmoronicy.com 
wrote:
> I also have a t460s and encountered many of the problems above.  I updated 
> the qubes patches (excluding pvusb) to apply against kernel v4.5.2 and tossed 
> in an out-of-tree patch for Skylake.  Bumping to 4.5.5 didn't require any 
> further patch-wrangling (except that the Skylake patch had been merged in the 
> meantime).

Was that patch backported also to 4.4.11?

> I've been running the result for a few days and everything seems to be 
> working well.
> 
> https://github.com/patientnil/qubes-linux-kernel/tree/devel-4.5
> 
> Notes:
> 
> - The pvusb patch looks the trickiest to port, and the associated tools show 
> that scary experimental warning. I didn't pursue it, it's sitting there 
> commented out.

Yes, ignore it. In fact it is already commented out in series.conf file
for some time.

> - Sound, trackpoint buttons, wifi, suspend all work (though I haven't tried 
> reenabling TPM yet).  
> 
> - I get occasional screen artifacting (horizontal lines) but I am using the 
> qubes-R3.1 display packages - before a reinstall I had better luck with 
> updates in the unstable repo.

Are those artifacts across the whole screen, or only particular windows?

> - While updating the kernel config, I had some sort of snafu, and I later had 
> to go reenable a bunch of fundamental things like IP_MASQ.  The config should 
> be reexamined (I'm planning to pare it down to just the things I need).  If 
> this was to be merged to the main tree it should be redone.  Presumably there 
> are rules of some sort as to what to include?

Generally the rule is "enable all drivers are modules".

> - I'm not sending a pull request since Marek mentioned the preference for 
> longterm kernels - but perhaps the updated can be useful anyway if the next 
> target is similar enough to 4.5?  
> 
> - If there's interest I could post RPMs and could possibly update this 
> occasionally to keep up with 4.5 (which seems to be the sweet spot for 
> Skylake right now)
> 
> -tom
> 


- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXS3yPAAoJENuP0xzK19cs388H/jpa1S1hCKYp965Srdij+1OC
dPNBWL6jRr7zWlel38vyCaAbhB1/TN8C7NCkthz6B423hsN2+GE1PD/lK3bQe+ia
Xif7tzWQwNAhc7KOi8DNyftWUPdc4NZ1AhcT8+Cav5abACJhkzwS6uYI9RNDWiSG
o6+CP5K6aNAuOpruLjKbJImT/qr7pKu8R9Ry4uPeJTCC+tbhLANgwRODTEWzJPEa
jDZlJfUivjXDGKNumwoA2pdSghGX9aJJN3x+bfjxKatJs1NAmDOHUTastlAqIzUF
a1CMqI2jZflK4WTQ1A2oEXzel+dT+a0hmrjcOQIlOijrYdmEp2pDmveCF8DK/xg=
=96Y/
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160529233439.GC2191%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: HP EliteBook 8460p not cooperating update.

2016-05-29 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Tue, May 24, 2016 at 06:00:51PM -0700, Gaiko wrote:
> On Saturday, May 21, 2016 at 11:47:33 AM UTC+11, Gaiko wrote:
> > Hi I responded to the HP EliteBook 8460p results/report 
> > (https://groups.google.com/forum/#!msg/qubes-users/xVMe56e4BXQ/lJVUTqC1a2oJ)
> >  about issues I was having with trying to install 3.1 on my 8460p. After 
> > setting the bios (68scf ver F61; 2015/06/11) to all defaults, then turning 
> > on only virtualization and making sure UEFI was off (and this time the 
> > qubes boot disk showed up during legacy booting) I came to a "regular" 
> > error screen instead of the "four penguins" (which somehow brings to mind 
> > the four horsemen, though perhaps that is just them dashing my hopes of an 
> > easy installation).
> > 
> > Anyway, since I got a command prompt this time I was able to copy the 
> > rdsosreport which I am hoping will help shed some light on what the problem 
> > is.
> > 
> > I admittedly wasn't able to make much sense of it, I did notice things like:
> > HEST is not enabled!
> > Warning: Processor Platform Limit not supported. (this really doesn't look 
> > good)
> > and of course
> > Warning: Could not boot.
> > Warning: /dev/root does not exist
> > 
> > I thought that ggroups had an attachment option but as it doesn't I will 
> > provide a temp link (https://tresor.it/s#wDR0xyEIGKgW-juT_V5CyA) and c/p 
> > the info below (apologies if this is bad etiquette):
> > 
> > 
> > + cat /lib/dracut/dracut-037-13.git20150518.fc20
> > dracut-037-13.git20150518.fc20
> > + cat /proc/cmdline
> > inst.stage2=hd:LABEL=QUBES\x20R3_1\x20 i915.preliminary_hw_support=1 quiet 
> > rhgb

I see spurious space (\x20) in LABEL entry - remove the one at the end
of label (pres TAB during boot menu to edit the entry). 

(...)

> > ID_FS_LABEL=QUBES_R3_1
> > ID_FS_LABEL_ENC=QUBES\x20R3_1
> > ID_FS_UUID=8605-C73C
> > ID_FS_UUID_ENC=8605-C73C
> > ID_FS_TYPE=vfat
> > ID_FS_PARTUUID=08f8d95c-01

Here indeed label is "QUBES\x20R3_1", not "QUBES\x20R3_1\x20".

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXS3x+AAoJENuP0xzK19csE6UH/2ElCX2RT70KvIF3ZlpRPaLw
bwT1KHEIgjeZEatSrWhMFj/jIXdEB6mgiwpRgJ4UaC3nyBzFIn3nK4hZder91IXg
3W1Dho/2qzQoZQ6nbgVGYpMjzMQONQ+omUDsBlmyep51zZ/09IVIO/VwWL/vChA+
upJnMSIi2iTVLytWHVW0BqFUY/vWjP8HFogTsbrJiMDCtDIkrm9IRL93drvLUu6w
QekWFGI0GI8/ZoIwqNPG/XQQST1ozHRf5usAQHyjJXi7vcjP4T9mGFt/dQxbr3iH
m9iz7MeY5JhbEgWOMDkU5LhJexfik85uaQgfbyZFl23IUgzcM6uztIKzWoUYDmA=
=jdpB
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160529233422.GA2191%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Some thoughts about improvements in backup ui

2016-05-29 Thread Arqwer
R3.0
1. After I open backup dialog, qubes manager fades out. It is 
uncomfortable: I might want to use it. For example, I selected which VMs 
i'm going to backup, and realized, that my external drive is not connected 
now. I want to use qubes manager to attach external drive, but it is 
unavailable. Or I want to shut down some VMs, or start VM to send backup 
there.

2. Backup process does not block me from turning on VM that is now in 
backup process. That makes no sense. If VM should be turned off during 
backup, I should not be able to turn it on. At least without  --force 
flags. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/42aefe58-331c-498c-964f-dbc4d0d183b9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Installing additional firmware

2016-05-29 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-05-29 06:14, Achim Patzner wrote:
> Am 29.05.2016 um 03:31 schrieb Andrew David Wong:
>> On 2016-05-28 11:38, Achim Patzner wrote:
>>> Hi!
>> 
>>> Is it only me or are there some more people who seriously hate
>>>  having to add firmware for virtual machines?
>> 
>> I'm not sure I understand.
> 
> My mistake. I wanted to write _modules_ and constantly wrote 
> "firmware". "You should not post at 3 in the morning after 27
> hours of work", I guess.
> 
>> Is this some kind of special procedure required by your 
>> particular needs?
> 
> Yes. For some reasons I'm running around with a collection of USB 
> WLAN devices and I have to install the appropriate drivers (and 
> firmware) for them whenever I update the kernel. I wouldn't really 
> mind it so much if they were really exotic hardware but most of 
> them are Ralink and Realtek based "IT-groceries" found at every 
> corner. This is annoying me quite a bit.
> 
> 
> Achim
> 

Ah, I see. Is the Fedora template upgrade procedure applicable? Maybe
it would be easier to make room by bind mounting a temp directory over
/usr/lib/modules as described here:

https://www.qubes-os.org/doc/fedora-template-upgrade-21/

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=NwnS
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b07dfd31-d571-7477-acba-c499bec975a4%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] a few mundane usability questions

2016-05-29 Thread trevor . watson . at . home
On Sunday, 29 May 2016 20:37:52 UTC+8, Andrew David Wong  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2016-05-29 05:34, trevor.watson.at.h...@gmail.com wrote:
> > On Wednesday, 5 June 2013 07:23:47 UTC+8, Marek
> > Marczykowski-Górecki  wrote:
> > 
> >> You should be able to install rpmfusion repositories in standard
> >> way (in template of course).
> >> 
> > 
> > Sorry, how do you do that?
> > 
> > I've googled and tried the instructions from rpmfusion without
> > success.
> > 
> 
> Try this (in your Fedora template of choice):
> 
> $ sudo dnf config-manager --set-enabled rpmfusion-free rpmfusion-nonfree
> $ sudo dnf upgrade --refresh
> 
Thanks Andrew, that worked, the instructions on the rpmfusion site have you 
adding the repos using urls which doesn't work

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b2c53e02-342d-4728-89fd-3ac9d12d0464%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Is it possible to turn a Template HVM into an HVM?

2016-05-29 Thread Chris Laprise



On 05/29/2016 10:31 AM, Achim Patzner wrote:

Hi!


I guess the subject said it already: If someone created a (Windows
7-based) Template HVM based on the assumption it would be a good idea to
do this to derive a number of HVMs from it but had to agree that it was
not one of his brightest ideas, is it possible to turn this Template HVM
into a standalone HVM?



Achim



You could create a new standalone hvm using the template as a source (in 
the dialog, click standalone first, then hvm, then select the template). 
If you're on btrfs, Qubes will create a reflink from the original disk 
images, so it will be instant and take no extra space.


If not on btrfs, then it will duplicate all the data from the template 
images. To avoid this, you can create a regular hvm (click hvm in the 
dialog and standalone should grey-out) then manually move the root.img 
and private.img files from the template to the new hvm.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/574B3D64.7070005%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Installing additional firmware

2016-05-29 Thread Achim Patzner
Am 29.05.2016 um 03:31 schrieb Andrew David Wong:
> On 2016-05-28 11:38, Achim Patzner wrote:
> > Hi!
>
> > Is it only me or are there some more people who seriously hate
> > having to add firmware for virtual machines?
>
> I'm not sure I understand.

My mistake. I wanted to write _modules_ and constantly wrote "firmware".
"You should not post at 3 in the morning after 27 hours of work", I guess.

> Is this some kind of special procedure required by your particular needs?

Yes. For some reasons I'm running around with a collection of USB WLAN
devices and I have to install the appropriate drivers (and firmware) for
them whenever I update the kernel. I wouldn't really mind it so much if
they were really exotic hardware but most of them are Ralink and Realtek
based "IT-groceries" found at every corner. This is annoying me quite a bit.


Achim

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/de33ac98-d0ec-bbd3-0f76-7ac1b8a5d7d7%40noses.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] a few mundane usability questions

2016-05-29 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-05-29 05:34, trevor.watson.at.h...@gmail.com wrote:
> On Wednesday, 5 June 2013 07:23:47 UTC+8, Marek
> Marczykowski-Górecki  wrote:
> 
>> You should be able to install rpmfusion repositories in standard
>> way (in template of course).
>> 
> 
> Sorry, how do you do that?
> 
> I've googled and tried the instructions from rpmfusion without
> success.
> 

Try this (in your Fedora template of choice):

$ sudo dnf config-manager --set-enabled rpmfusion-free rpmfusion-nonfree
$ sudo dnf upgrade --refresh

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=SCn9
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/492d494f-78a0-ce8f-ce7e-dbbaca2cb243%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Web proxy in AppVM

2016-05-29 Thread JPL
I want to set up a web proxy in a Debian-based AppVM but I don't want to do 
it in the template VM as last time I tried that I screwed lots of things up 
and it was never the same again.

I don't mind if it's not persistent because I am just experimenting. 
Lacking the usual Gnome systems tool I don't how how to do it. I have a URL 
of a PAC file http://xyz.pac on the proxy server I want to use.  

Can someone tell me how to do this please?

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8b69d1cb-29d4-4dd8-a272-c068eb1814c5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Schenker Workstations as Notebooks / QubesOS?

2016-05-29 Thread 31093847109243781094378091437810943780194378
Hello,

today some nice configurations with strong GPU power will be available on the 
market like:

https://www.mysn.de/schenker-mobile-workstations/schenker-w706

But how can I boot QubesOS one time with the full GPU support and another time 
in the secure mode without GPUs?

So I could adapt the performance and security like I need it in the different 
situations?

Kind Regards

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ce76db2a-44e3-4bdf-abd5-5e08d1e1b4d3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.