Re: [qubes-users] Qubes OS Live

2016-12-26 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

*Please* do not make duplicate threads.

Copying my response to your duplicate thread here:

On 2016-12-25 17:09, Niely Boyken wrote:
> Hi
> 
> This page [https://www.qubes-os.org/doc/live-usb/] says that Qubes 
> OS Live is still in Beta-version.
> 

The Live USB version is based on an older version of Qubes, and it is
not currently being maintained or developed.

> I'm wondering if this is than safe to use. Will I have the same 
> security-benefits if I use the Live-version than when I use the 
> normal version?
> 

It would be safer to use a more recent, supported version like 3.1 or
3.2.

> If no, would it be possible to install it on an USB and not on the 
> default harddrive?
> 

Yes, it's possible to install any version of Qubes on a removable USB
drive while preserving the data on your default hard drive.

> And when does it quit the beta?

Since the Live USB version is no longer under development, I'm afraid
we have no ETA for this.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=F9UI
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/65aac3b1-ba75-cbd3-ea51-db05353b3626%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Xscreensaver bug at dom0

2016-12-26 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-12-26 04:54, legawri...@gmail.com wrote:
> Hello! I have very annoying bug with xscreensaver, it flashes the 
> screen... It is difficult to me to describe this, but I will do my 
> best)
> 
> This looks like xscreensaver is turning on and locking the screen, 
> but it's not, I have only image of it, moving the mouse to any 
> element make this element visible, or element becomes visible if
> it has any kind of animation (like Processor monitor or Clock at
> the panel). It is weird, because this happens even if screensaver
> is off in dom0 parameters.
> 
> How to fix this?
> 
> Screenshot of this - https://postimg.org/image/hne16nmvt/
> 

Thanks for your report. This is a known issue:

https://github.com/QubesOS/qubes-issues/issues/2399

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=YjA6
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d4b54865-8e35-e1ed-c175-8910b7faf2b8%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How to Backup Qubes Using New USB Hard Drive

2016-12-26 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-12-25 20:08, mojosam wrote:
> How to Backup Qubes Using New USB Hard Drive
> 
> I'd like to backup my VMs to an external USB hard drive.  I have a 
> couple of questions not answered by these pages:
> 
>  and 
> 
> 
> The drive is a new Seagate 1.5TB hard drive.  It's a tiny thing
> that gets its power off of the USB bus.  Apparently Seagate has
> already installed their backup program, which runs in both Mac and
> Windows.
> 
> If I'm going to use this drive, I assume that I want to delete
> that program and any other crapware that Seagate might have put on
> there. Also, I don't know which disk format they're using.  I doubt
> it's something that Qubes or Linux would find ideal.
> 
> To start, where do I want to attach the drive?  Qubes has 
> automatically attached it to Dom0, but I doubt that I want to
> format it from there.

I strongly recommend using a USB qube, if you can:

https://www.qubes-os.org/doc/usb/#creating-and-using-a-usb-qube

If you have no choice, then connecting the drive directly to dom0 may
be OK, as long as you fully trust it and never connect it to anything
else. (If the drive is malicious, then it may have already compromised
dom0.)

> Does one of the other VMs already have something like gparted 
> installed, or will I need to download that?
> 

The standard tools will be available in a VM based on the default
Fedora template. However, if you prefer additional tools, you should
be able to easily find and install them from the Fedora repos.

> What file format should I use?
> 

You mean filesystem? It depends on your needs. If you just want
something that's well-supported on Qubes and Linux in general, I
suggest Ext3.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=Q4ZE
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ec09a462-6d4c-0738-0eb5-937f229f81df%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Unable to change timezone?

2016-12-26 Thread Jodie
On Monday, December 26, 2016 at 2:53:56 PM UTC-10, Andrew David Wong wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2016-12-26 01:59, Jodie wrote:
> > On Sunday, December 25, 2016 at 4:17:17 PM UTC-10, Jodie wrote:
> >> On Sunday, December 25, 2016 at 4:32:16 AM UTC-10,
> >> john.david.r.smith wrote:
>  I have already tried that, and it fails with "Failed to set
>  time zone: Unit systemd-timedated.service is masked".
>  
> >>> 
> >>> I just tried it and it works for me (it even updates the time
> >>> instantly).
> >>> 
> >>> did you change stuff in dom0?
> >> 
> >> No, I didn't. But that gives me a few avenues to explore.
> >> Thanks!
> > 
> > Okay, so this is a workaround. What I ended up doing was symlinking
> > (manually) /usr/share/zoneinfo/myrelevanttimezone to
> > /etc/localtime.
> > 
> > After that, because it still bothered me that it didn't work for me
> > as it did other people. I unmasked the systemd-timedated.service
> > with the command:
> > 
> > systemctl unmask systemd-timedated.service
> > 
> > Now, it works as John described. I'm not sure why it was masked,
> > though. Perhaps fodder for a future enquiry.
> > 
> > Although I am glad that I have the right time zone now. :^)
> > 
> 
> I think there's still some underlying confusion here. Are you trying
> to change your timezone system-wide (i.e., for your entire Qubes
> system), or just for a subset of your domUs?
> 
> If it's the former, then this change needs to be made in dom0.
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> -BEGIN PGP SIGNATURE-
> 
> iQIcBAEBCgAGBQJYYbuVAAoJENtN07w5UDAwOU4P/jaQIx+m0XG9zVWTrJgYMIOi
> dKIQkUoOorUYqZRjvRLzizohfAcbcRnSYunfA7YPthzh6mCHYVwgamRcqa6yXlqN
> kVCkzCiP1NeAFUBkcS3KrzFy7H9mK1KUibC0cOtlCoV8UkQeRwhIX4oLElPkWCCb
> tvEUwIVPUnlRg6wOn8aXKQXnDWE+ST7CwSvMUPF12e07Cl5gFUcJuoehjum4GJeM
> HIfIqH7sxeXR8C+AzwrUJJubUPjrGO69By6kNxL99wKYVYhvFFgzABP56GIWGx6S
> 1Eo+GTZdanwqrCN1gZ7VY4/HGJnQP5n8aB2xxzoNcY/bg1AxX4LFstKTcGKrHyTL
> 9HeA3J4hqk1Lde+KcSTo1jHSHrj0ANJwplcGyfRXnROw7XJScMSX6y6JFM1Wx3nW
> nTaHmcei+Oib4E/LRaqvhTC5vcvKTg19AjmOoxVdKv07qZ8GsTf/IAyWCJt+cO4W
> HB9etBd1LVEfhhgW++hz1YUP+Vlaye18k3YHxUrYcW9xtGAnkt7Gx1D8pKnehHMl
> ZYNuNkodAGGdCyaCRYziz4t7Bfh96LJRY4jZ0OsbipHGoFMDsSpkCWXEKt46KUTf
> Sfkp7dLf4pM8js0sP0Ur/7rLZWN4zbiDPMWz2JpLJ17sF3Rs2b8fPCkWeLHJY/jA
> zRjrPILzbZGnhH1iFCKu
> =E1Do
> -END PGP SIGNATURE-

System wide. I was doing all of this in dom0. I fixed it yesterday (so nice to 
have the right time)!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a3c05f43-328b-4a51-a278-c2417090db26%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Unable to change timezone?

2016-12-26 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-12-26 01:59, Jodie wrote:
> On Sunday, December 25, 2016 at 4:17:17 PM UTC-10, Jodie wrote:
>> On Sunday, December 25, 2016 at 4:32:16 AM UTC-10,
>> john.david.r.smith wrote:
 I have already tried that, and it fails with "Failed to set
 time zone: Unit systemd-timedated.service is masked".
 
>>> 
>>> I just tried it and it works for me (it even updates the time
>>> instantly).
>>> 
>>> did you change stuff in dom0?
>> 
>> No, I didn't. But that gives me a few avenues to explore.
>> Thanks!
> 
> Okay, so this is a workaround. What I ended up doing was symlinking
> (manually) /usr/share/zoneinfo/myrelevanttimezone to
> /etc/localtime.
> 
> After that, because it still bothered me that it didn't work for me
> as it did other people. I unmasked the systemd-timedated.service
> with the command:
> 
> systemctl unmask systemd-timedated.service
> 
> Now, it works as John described. I'm not sure why it was masked,
> though. Perhaps fodder for a future enquiry.
> 
> Although I am glad that I have the right time zone now. :^)
> 

I think there's still some underlying confusion here. Are you trying
to change your timezone system-wide (i.e., for your entire Qubes
system), or just for a subset of your domUs?

If it's the former, then this change needs to be made in dom0.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=E1Do
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/199b0a88-839a-a936-5020-aac7c2df3f64%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Template updates: "cannot execute qrexec-deamon" for sys-net - Documentation improvement/addition (or just link update?)

2016-12-26 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-12-25 13:28, @LeeteqXV (Twitter) wrote:
> For the record; my shift from Fedora-23 to Fedora-24 went
> painlessly/successfully, thanks to the existing, good documentation.
> 
> Only thing I had to figure out logically (by experience, luckily, or I
> would have started wasting time unnecessarily) was that I should try to
> reboot when sys-* failed to start afterwards, which then worked, and all
> was fine.
> 
> *Suggested documentation addition:**
> *
> 
> So I think the main docs page should have a top-level link both in the
> "Upgrade guides" section to "updating template association for
> sys-net/sys-firewall" and also from the existing Fedora 23-to-24 doc
> page, especially for some time now that Fedora-23 is EoL/End-of-Life. As
> this is not specific to any particular version number, it should be easy
> to find regardless of which upgrade one is performing, therefore I think
> it should have its own page and be linked from the Upgrades section.
> 
> In particular, it should be easy to spot the information about the need
> to reboot the computer immediately after changing the template
> association for sys-firewall and sys-net, as that is not entirely
> obvious for everyone.
> 
> The existing page does not mention sys-firewall/sys-net , neither does
> it link to any other page that deals with that:
> 
> https://www.qubes-os.org/doc/template/fedora/upgrade-23-to-24/
> 
> And, if someone is coming to those pages AFTER having bravely tried to
> update the system without searching (sufficiently?) through all the docs
> (...), they just might be searching for this error message: "cannot
> execute qrexec-deamon", which also should offer a hit to this suggested
> new page among the top search results...
> 
> (I seached briefly myself, but did not find a page describing this
> template switch for sys-net/sys-firewall .)
> 
> In case there is such a page that I did not find, here is some info that
> it 'should' include:
> 
> 
> *Doc text suggestion:*
> 
> Disable both sys-firewall and sys-net so that only dom0 is running, then
> change the template association to the new template in each one's VM
> settings. Restart the computer.
> 
> PS. If you do not restart the computer right afterwards, but instead try
> to start either one of them, you may get this error:
> 
> "Error starting VM 'sys-firewall'" / "Error starting VM 'sys-net'":
> "cannot execute qrexec-deamon"
> 
> (This may also be the error you get if running the commands 'qvm-start
> sys-firewall' / 'qvm-start sys-net' in this scenario)
> 
> 
> 
> Happy xmas everyone :-)
> 
> @LeeteqXV
> 

Are you certain that this isn't just a bug (perhaps an uncommon one)? If
it's a bug and not intended design, we should file a bug report rather
than (just) documenting the workaround. I don't recall having to reboot
the host machine after changing the TemplateVM on which sys-net and/or
sys-firewall is based, even as part of upgrading a TemplateVM from
Fedora 23 to Fedora 24. The qrexec error is a common error message,
often caused by a lack of memory, but for other reasons, too.

In particular, it sounds a lot like this issue (which we can potentially
reopen):

https://github.com/QubesOS/qubes-issues/issues/1724

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=ATQT
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6b3271a3-54d8-607d-caad-8f4632578b62%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes OS Live?

2016-12-26 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-12-25 17:09, Niely Boyken wrote:
> Hi
> 
> This page [https://www.qubes-os.org/doc/live-usb/] says that Qubes 
> OS Live is still in Beta-version.
> 

The Live USB version is based on an older version of Qubes, and it is
not currently being maintained or developed.

> I'm wondering if this is than safe to use. Will I have the same 
> security-benefits if I use the Live-version than when I use the 
> normal version?
> 

It would be safer to use a more recent, supported version like 3.1 or
3.2.

> If no, would it be possible to install it on an USB and not on the 
> default harddrive?
> 

Yes, it's possible to install any version of Qubes on a removable USB
drive while preserving the data on your default hard drive.

> And when does it quit the beta?

Since the Live USB version is no longer under development, I'm afraid
we have no ETA for this.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=6h/m
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7307a3e7-a85b-b391-071a-7cfdfb46c98f%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] New Lenovo laptops: X1 (4th Gen), T460/p, and T560

2016-12-26 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Dec 26, 2016 at 08:29:55PM +0100, 'Olivier Médoc' via qubes-users wrote:
> Maybe, Qubes installer bootloader could support both stable and unstable
> kernels, in order to support new hardware ?

I'd wait for the next longterm support kernel, then maybe release
updated installation disk with it.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYYaPoAAoJENuP0xzK19csvZMH/R16udTk/sYcGotx1OK+GOHt
y1mmDYBkTHJ3Moapd/AAoBuSlZolz9FuYst5XwPx5paWgVj9vFeuvfd+ZmHozUin
xnwD47XAh56AEycdbm4BK54NtOPZ9xohK018R/29s/RhAvZsWiMCu4a1k6FXbP4X
iArEfOGraZmJ95MF23VM2jnaPORaNXkMhUhydDYsS44lku4SefddpxCsIIbK6H7R
YXCibjXF8BgZmyZFK0IZUxJjpeNpKorD2uDd1j5hIM3zAnKUUZHRIQ4OiWUBIL7y
WPNYMRRnssnb3gycCw3bWXQD91pQjyX8YpOmRylhRKbVHUv3nPSCvxpPzH2zJJA=
=Jw8Z
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161226231240.GA1159%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes OS Live

2016-12-26 Thread taii...@gmx.com

On 12/26/2016 07:32 AM, niely.b0y...@gmail.com wrote:


Hi

This page [https://www.qubes-os.org/doc/live-usb/] says that Qubes OS Live is 
still in Beta-version.

I'm wondering if this is than safe to use. Will I have the same 
security-benefits if I use the Live-version than when I use the normal version?

If no,
would it be possible to install it on an USB and not on the default harddrive?

And when does it quit the beta?
I think a Live-option would be a good thing this OS needs.

Thanks!


A live operating system will always have outdated packages thus it is bad from 
a security perspective.

You can install it on a usb flash drive but it is not recommended due to 
performance and longevity issues if you do this you will use up your drives 
lifetime max writes in a matter of weeks.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2f40ddc0-1e04-b5d2-20a2-4b36d0b87892%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] New Lenovo laptops: X1 (4th Gen), T460/p, and T560

2016-12-26 Thread taii...@gmx.com
Lenovo is a shitty company if you care about security, they have stuck 
irremovable rootkits their BIOS 4 separate times and they are partially 
owned by the PRC government.
Not to mention how they've ruined the thinkpad line and made it just 
another consumer level laptop.


I wouldn't buy from them.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1adaa488-ef5c-6375-1746-35f6a434e80f%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: HCL - Lenovo Thinkpad T460p

2016-12-26 Thread stigsm
Suspend works fine, resume does not work at all.

Updating from kernel 4.4.x to kernel 4.8.12 from the unstable repository 
reduced idle power usage from ~15 W to 8 W.

Tuning the power usage further with values recommended by powertop reduces 
power usage to 6.8 W.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ca577bf0-1a2e-43ac-9d80-21bcaa0cb437%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] help updating dom0 - no network - stuck with lots of pending updates

2016-12-26 Thread jasonwalshismyname

> Check what netvm is set for those VMs. I guess currently you have two of
> them: sys-net and (just restored) sys-net1. Choose which one you want to
> use and remove the other.
> 

Thanks a lot Marek and Andrew for your help and patience. I now have access to 
all my AppVMs.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6632a035-af30-4785-833f-72ea42bc8e2c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] HCL - Lenovo Thinkpad T460p

2016-12-26 Thread Stig Sandbeck Mathisen

Hello,

I've successfully installed Qubes OS 3.2 onto my laptop.

Video and audio playback works well, tested with random videos on Youtube.

Webcam and microphone works well, when set up through an usb qube, and 
connected to a fresh videoconferencing qube.


The second nvidia graphics card in the laptop has not been tested yet.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/11ffa6b2-c649-3622-8637-bf5d733f7772%40fnord.no.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-LENOVO-20FWCTO1WW-20161226-201327.cpio.gz
Description: application/gzip


Qubes-HCL-LENOVO-20FWCTO1WW-20161226-201327.yml
Description: application/yaml


Re: [qubes-users] New Lenovo laptops: X1 (4th Gen), T460/p, and T560

2016-12-26 Thread 'Olivier Médoc' via qubes-users
On 04/30/2016 09:13 AM, Andrew David Wong wrote:
> Has anyone had a chance to test (or is in a position to test) Qubes
> compatibility with any of the new higher-end Lenovo laptops, such as
> the X1 Carbon (4th Gen), the T460/p, or the T560?
>
> The only information I'm aware of so far is Linus' (very helpful)
> thread about the T460s:
> https://groups.google.com/d/topic/qubes-users/-xXKdAkIjxU/discussion
>

Qubes R3.2 works on Lenovo Thinkpad T560, however the installer is not
working properly as it does not use at least kernel 4.5.

In order to install it, I had :

1/ to extract the T560 laptop SSD, install Qubes using a different
supported laptop, and pluging the extracted SSD as an external hard drive.

2/ Then, the kernel must be upgraded to unstable (kernel 4.8), still on
the supported laptop by enabling qubes-dom0-unstable.

3/ Finally, shutdown the laptop, reinstall the SSD inside the Lenovo
T560, and it should work straightaway.

It seems to work properly, I have not tested thoroughly all features.

Maybe, Qubes installer bootloader could support both stable and unstable
kernels, in order to support new hardware ?

Regards,
Olivier Médoc

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3fda7a4c-e8e9-0fa8-b77c-980c026d54de%40yahoo.fr.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] T-shirts at 33C3!

2016-12-26 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hello,

Wojtek an I have made a small project to spread the word about Qubes
OS, and also help the project financially a little :) There will be
t-shirts with Qubes OS logo at the 33rd Chaos Communication Congress in
Hamburg!

We'll sell them at Qubes OS Assembly[1]. The base price is €20, but you
can pay more to support Qubes OS even more. Suggested price is €33.
There will be also an option to pay in BTC[*].

All profits will be donated to Qubes OS (open source development)!

[1] https://events.ccc.de/congress/2016/wiki/Assembly:Qubes
[*] GreenAddress.it wallet with instant confirmations is recommended,
but others will do too.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJYYRYkAAoJENuP0xzK19csdvEH/0G9r2jANESAKNytJjngvQv/
vZ6bgaMGTxjWIbCuGm5cqmcA7Sgi57FIMr4fFsPqvpBTYiMneoxNPt07yi0sx/9v
qAOREzj7mziBGgnnXcExxAfAYEl6ai38Hx4t9V69NJFIJJ49B0758BTF0RS1OVl6
ySeRdLOfjv7t+EbS8CQVcLluFQOe/Ywz7euCXr1OtS8rQcJg2LLgqevIvOzeS4Pe
SaIvqUh2FhLEtZNV2TkLpK1OjamjlgmDIoJcZoj+b0GJOUKtjTdN5Yte4jD9NupY
MxxZbit/V0lSGRqoKbK1/MJwvuqeuuL+57zFYCnluYn8rRRQNkgypKjJa8xTRzI=
=v93A
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20161226130746.GO1409%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: FYI: Experimental Qubes coldkernel support now available

2016-12-26 Thread 黃于軒
 2016-12-14 23:33 GMT+08:00 Reg Tiangha :

> On 12/14/2016 06:03 AM, Foppe de Haan wrote:
> > To clarify: this has to be done in every template in which you want to
> use this? Or can I just copy the whole dir after compiling (seems necessary
> for the make install-deb step?), install whatever packages I need to
> perform the post-build steps, and perform those?
> > (thinking of D8-template, D9-, Whonix-gw/ws)
> >
> For Debian systems, you only need to follow the coldhak instructions
> once to create the kernel deb packages. If you want to take your work
> and install it on other Debian templates without having to set up the
> dev environment again, just install the qubes-kernel-vm-support and
> grub2-common packages on them (and you'll probably want paxctl too to
> help with managing the pax stuff until you've figured out what you want
> your pax ruleset to look like), then copy over the linux-headers and
> linux-image packages that you had just made and install them in that
> order (headers first, then image). Install the firmware packages only if
> you need them. That seemed to work for me.
>
> Make sure to clone the templates you want to try this on for testing
> purposes if you don't want to lose your originals; for example, by
> default, you won't be able to connect to a Whonix template running
> coldkernel as qrexec won't start up properly (but if you switch back to
> a normal kernel, it'll work fine again). And if you enable this on a
> service vm like sys-net, no machine configured to use it as a net vm
> will start up. I don't know how to troubleshoot this or fix this, so if
> anyone out there figures that part out, please share.
>

​​For those of you who are trying to get the kernel working on Whonix, just
install busybox and update the initramfs. Seems to be a missing dependency
of qubes-kernel-vm-support.
​


>
> Don't forget to follow the rest of the coldhak instructions to install
> and configure paxctld, set up grub, and to add the relevant grsecurity
> groups!
>
> sudo groupadd -g 9001 grsecproc
> sudo groupadd -g 9002 tpeuntrusted
> sudo groupadd -g 9003 denysockets
>
​​
--WillyPillow
​

​

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAKmAYVsMNkfDFY-n8PYtpf-Qia1Ayo8OmJ%2BKVk_vx5-Q3NdQXw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Xscreensaver bug at dom0

2016-12-26 Thread legawrique
Hello! I have very annoying bug with xscreensaver, it flashes the screen... It 
is difficult to me to describe this, but I will do my best)

This looks like xscreensaver is turning on and locking the screen, but it's 
not, I have only image of it, moving the mouse to any element make this element 
visible, or element becomes visible if it has any kind of animation (like 
Processor monitor or Clock at the panel). It is weird, because this happens 
even if screensaver is off in dom0 parameters.

How to fix this?

Screenshot of this - https://postimg.org/image/hne16nmvt/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/43c06cd1-526e-4849-a258-512927f49401%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes OS Live

2016-12-26 Thread niely . b0yk3n
Hi

This page [https://www.qubes-os.org/doc/live-usb/] says that Qubes OS Live is 
still in Beta-version.

I'm wondering if this is than safe to use. Will I have the same 
security-benefits if I use the Live-version than when I use the normal version?

If no,
would it be possible to install it on an USB and not on the default harddrive?

And when does it quit the beta?
I think a Live-option would be a good thing this OS needs.

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6f9211c3-6cee-41f4-ba69-951772d0152d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Q3.2 installation issues - x not starting on XPS13 HVW8J

2016-12-26 Thread Niels ten Oever
Hi all,

Things I've tried thusfar:

- I tried in EFI and legacy mode,

- I verified the Internet Core I7 7500 Kaby Lake processor does VT-D and
VT-X [0] and both are switched on in the bios.

- I've added nomodeset as a kernel option in xen.cfg

Still no luck with getting xserver to start during install process.

Any other hints? Would be much appreciated!

Cheers,

Niels

[0]
https://ark.intel.com/products/95451/Intel-Core-i7-7500U-Processor-4M-Cache-up-to-3_50-GHz-


On 12/24/2016 01:52 PM, Niels ten Oever wrote:
> Hello all,
> 
> Merry christmas and thanks a lot for your awesome work on Qubes. I have
> been trying to install Qubes R3.2-x86_64 on my XPS 13 - 9360HVW8J with a
> Intel Core i7-7500U, but I've run into some problems. (My specific
> laptop model is not mentioned in the HCL [0]).
> 
> Firstly the x server is not starting.
> 
> Secondly the text-based installer is running in a loop when I try set
> the installation destination I run into the following error:
> 
> 'Encryption requested for LUKS device nvme0n1p2 but no encryption key
> specified for this device', which seems to be a upstream problem [0]
> 
> I read about a kickstart file , but that seems to be for an older
> version (Qubes R2) [1].
> 
> Any suggestions on how I could get this working? Thanks much in advance.
> 
> Cheers,
> 
> Niels
> 
> 
> 
> [0]
> https://groups.google.com/forum/#!msg/qubes-users/-9qRHSkwfy8/CCx08nnTVEAJ
> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1020345
> [2]
> https://groups.google.com/forum/#!msg/qubes-users/-9qRHSkwfy8/CCx08nnTVEAJ
> 

-- 
Niels ten Oever
Head of Digital

Article 19
www.article19.org

PGP fingerprint8D9F C567 BEE4 A431 56C4
 678B 08B5 A0F2 636D 68E9

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6b0e7c5e-fc04-2515-e01b-72d825c2b75c%40digitaldissidents.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: How to Backup Qubes Using New USB Hard Drive

2016-12-26 Thread Benjamin Richter
The short answer is: You do not need to do anything with the disk. Just connect 
it, as you noticed it gets attached to dom0. Then use the Qubes manager to 
backup your VMs, they will be stored in one compressed file, so the disk format 
doesn't matter much.

That's all.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bdcc0af9-d036-4a4e-8add-449c858c09d8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Unable to change timezone?

2016-12-26 Thread Jodie
On Sunday, December 25, 2016 at 4:17:17 PM UTC-10, Jodie wrote:
> On Sunday, December 25, 2016 at 4:32:16 AM UTC-10, john.david.r.smith wrote:
> > > I have already tried that, and it fails with "Failed to set time zone: 
> > > Unit systemd-timedated.service is masked".
> > >
> > 
> > I just tried it and it works for me (it even updates the time instantly).
> > 
> > did you change stuff in dom0?
> 
> No, I didn't. But that gives me a few avenues to explore. Thanks!

Okay, so this is a workaround. What I ended up doing was symlinking (manually) 
/usr/share/zoneinfo/myrelevanttimezone to /etc/localtime.

After that, because it still bothered me that it didn't work for me as it did 
other people. I unmasked the systemd-timedated.service with the command:

systemctl unmask systemd-timedated.service

Now, it works as John described. I'm not sure why it was masked, though. 
Perhaps fodder for a future enquiry.

Although I am glad that I have the right time zone now. :^)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0fa7921f-93e8-4dd8-ba48-03452a0c06f8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.