[qubes-users] Creating a qubes hidden system with Veracrypt

[skynewts]

Just as the title says. I wish to create a qubes hidden system in Veracrypt, 
but I'm not entirely sure what the process for that would be. Do I run 
veracrypt on Dom0, and from there the hidden volume that is created, will be a 
clone of the whole OS? How would I run Veracrypt on Dom0?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/78282345-1667-4f91-ba09-193fe1c74a2f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes R3.2 on AMD 890FX board, making Interrupt Remapping work.

[taii...@gmx.com]

*forgot to say*
If you see
"AMD-Vi: Interrupt remapping enabled"
in dmesg then you should be fine as the hardware supports it.

The HCL doesn't test for IR.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/51448119-711a-b8f0-19db-f678b265e432%40gmx.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes R3.2 on AMD 890FX board, making Interrupt Remapping work.

[taii...@gmx.com]

On 02/22/2017 10:19 AM, Illidan Pornrage wrote:


Hello Qubes Community,

this is my first contact.
I have tried to get Qubes R3.2 running on the Gigabyte GA-890FXA-UD7 Board.

Mostly worked but Xen disabled Interrupt Remapping because of:

(XEN) AMD-Vi: IVHD Device Entry: type 0x48 id 0 flags 0xd7
(XEN) AMD-Vi: IVHD Special: :00:14.0 variety 0x1 handle 0x8
(XEN) AMD-Vi: IVHD Device Entry: type 0x48 id 0 flags 0xd7
(XEN) AMD-Vi: IVHD Special: :00:14.0 variety 0x2 handle 0
(XEN) AMD-Vi: IVHD Device Entry: type 0x48 id 0 flags 0
(XEN) AMD-Vi: IVHD Special: :00:00.1 variety 0x1 handle 0x8
(XEN) IVHD Error: Conflicting IO-APIC 0x8 entries

The latest BIOS' from their website are stable F4, beta F5a and unlisted
versions up to F5f, which I found via filename crawling.
F4 does not even have the IOMMU Option.
F5a and F5f have that same bug. Almost all of the letters inbetween are
completely broken and I had to recover the Bios.

I asked Gigabyte support to provide me a Bios with fixed IVRS entries.
They posted me a non-public Bios Version. F5j
Still the same bug.


I tried overriding ioapic locations from the hypervisor and actually got
Interrupt Remapping to activate.

I have set the :00:14.0 to handle 8
and the :00:00.2 to handle 0.

Xen CMDline additions: ivrs_ioapic[8]=00:14.0 ivrs_ioapic[0]=00:00.2

Can one of the seasoned people here answer me if isolation works or if
there are some red flags / obvious / nonobvious bugs?

I have attached both the Xen dmesg logs, from with and without override.

Also the HCL generator says IOMMU is now enabled.
Latest stable updates from Qubes. Xen 4.6.4-25.fc23 Kernel 4.4.38-11


Greetings to you wonderful people that make Qubes.

Illidan

You would be better off posting on the Xen mailing list as most people 
here have no technical aptitude, and I don't know how to fix this 
because I have never encountered it due to not buying low quality boards 
from foreign vendors.


In the past I have tried bugging vendors to get them to fix IOMMU but it 
is next to impossible to get them to do it unless you have a 
server/workstation board (they don't consider IOMMU a "desktop" feature)


FYI:
The 8xx and 9xx chipset series from AMD has real IOMMU with IR and ACS 
(unlike intel's stuff from the same era which lacks IR making it useless 
for security, even almost all new intel CPUs lack ACS which again makes 
them useless).

This is an issue with your BIOS, but the hardware itself supports it.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/922f9f93-890a-32f8-97ce-b4dccb01c5ae%40gmx.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] removed qubes-core-dom0 by accident

[sofoobard]

upgrading from 3.1 to 3.2 broke with several hundred dupe packages. 
package-cleanup didn't work, so I had to remove dupes by hand one by one.

clicking through many y/N questions, I inadvertently removed libxml dupe, which 
in turn removed qubes-core-dom0, all templates, and borked my system.

I'm hurting here. Is there any way to restore my Qubes to a working system?

No backups. (of course.)

Any suggestions for system recovery?

Or at least recovering my data?

thanks
so foobard

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bc4c15ad-58f8-4aa3-b339-601b12e48592%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: [qubes-devel] Re: Google Summer of Code 2017

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-03-01 13:41, Grzegorz Chodzicki wrote:
> 
> 
> On 03/01/2017 10:19 PM, Andrew David Wong wrote:
>> On 2017-03-01 07:39, Grzesiek Chodzicki wrote:
>>> W dniu środa, 1 marca 2017 16:05:32 UTC+1 użytkownik Grzesiek 
>>> Chodzicki napisał:
 W dniu środa, 1 marca 2017 04:45:27 UTC+1 użytkownik Andrew 
 David Wong napisał:
>>> On 2017-02-28 03:21, Grzesiek Chodzicki wrote:
>>> W dniu wtorek, 28 lutego 2017 06:50:47 UTC+1
>>> użytkownik Andrew David Wong napisał: On 2017-02-27
>>> 10:29, Grzesiek Chodzicki wrote:
>> W dniu poniedziałek, 27 lutego 2017 19:19:07
>> UTC+1 użytkownik Andrew David Wong napisał: We’re
>> pleased to announce that the Qubes OS Project has
>> been accepted as a mentor organization for Google
>> Summer of Code (GSoC) 2017! Many interesting
>> projects have already been proposed, and we’re
>> still looking for both students and mentors. If
>> you’re interested in participating, please see
>> our GSoC 2017 page for details!
>> 
>> https://www.qubes-os.org/gsoc/
>> 
>> 
>> Congratulations to the team! I've noticed that
>> the GSoC page is not linked to from any other 
>> documentation pages, is tihs by design?
>> 
>>> 
>>> More likely that we haven't had a chance to do it yet. 
>>> However, it's not clear to me which *documentation*
>>> pages should link to the GSoC page. Which ones do you
>>> have in mind?
>>> 
>>> 
>>> For example doc page on USB devices 
>>> https://www.qubes-os.org/doc/usb/
>>> 
>>> On the bottom of the page there is an information that
>>> USB Passthrough and USB Keyboard functionalities are
>>> not available in the Qubes Manager. However there is
>>> GUI Improvements Project Idea in GSoC that aims to
>>> implement these options in the VM Manager so a link to
>>> the GSoC page with a brief explanation, something like:
>>> "This feature is not available yet in Qubes Manager but
>>> if you'd like to help implement it, and you're a
>>> student then you can apply for the Google Summer of
>>> Code program" and a link to the Project Idea on the
>>> gsoc page.
>>> 
>> 
>>> Ah, I see. Would you mind submitting pull requests for these?
>> 
>>> For reference: https://www.qubes-os.org/doc/doc-guidelines/
>> 
 
 Sure, no problem.
>> 
>>> Just submitted a PR for the USB page, if the text is acceptable
>>> I can add it to all other pages that may require it. If not
>>> please tell me what to change.
>> 
>> 
>> I haven't received a PR from you. Please try again.
>> 
>> 
> 
> How about now?
> 

Merged. Thanks!

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=4KIV
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9ab5027e-d4d9-1a3c-8c50-8a8e973fa972%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Trouble reinstalling Whonix-ws template in Qubes 3.2

[Chris Laprise]

On 03/01/2017 04:57 AM, Andrew David Wong wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-02-28 20:28, shaun.the.don.hug...@gmail.com wrote:

I'm trying to reinstall the whonix-ws template following the user docs, but I 
keep getting an error.

In Dom0 I used:
sudo qubes-dom0-update --enablerepo=qubes-templates-community 
--action=reinstall qubes-template-whonix-ws

I get the following error:
-
Last metadata expiration check: 0:38:17 ago on Tue Feb 28 21:05:57 2017.
installed package qubes-template-whonix-ws-3.0.5-201602110904.noarch not 
available.
Error: Nothing to do.
-

I also tried the older method mentioned in the user docs as well.

Any help would be great since I screwed whonix up VERY well.


Try uninstalling the tmeplate then installing it as separate actions.
qubes-dom0-update hides the availability of templates that are already
installed.

- -- 
Andrew David Wong (Axon)

Community Manager, Qubes OS
https://www.qubes-os.org


The reason it failed is that the same version of the package has to be 
available, although in this case 3.0.5 was removed from the repo. I'm 
looking into making this more flexible.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dcf3b811-8fa0-7551-af5c-6386e723f963%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: When qubes will support modern nvdia Graphic cards ?

[Grzesiek Chodzicki]

W dniu środa, 1 marca 2017 19:59:33 UTC+1 użytkownik codeu...@gmail.com napisał:
> Le mardi 28 février 2017 23:31:37 UTC+1, Grzesiek Chodzicki a écrit :
> > W dniu wtorek, 28 lutego 2017 23:19:09 UTC+1 użytkownik codeu...@gmail.com 
> > napisał:
> > > When qubes will support GTX 1060 ? Or how qubes can support it ? Because 
> > > it's laggy with several opened browser tabs with the only CPU graphic 
> > > working.
> > 
> > Which kernel are You running? If You're on 4.4 try updating to 4.8 and see 
> > if it gets better.
> 
> Upgrated to 4.8.12-12 following this : 
> https://www.qubes-os.org/doc/managing-vm-kernel/#installing-different-kernel-using-qubes-kernel-package
> But still does not work screen freeze on boot.

According to the nouveau page support for Pascale architecture would require 
Nvidia to release firmware blobs (something they haven't done yet) so either 
install the proprietary driver in dom0 or switch over to the integrated GPU

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9bfdc631-70c9-44a1-8bf0-77186f921a06%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Trouble reinstalling Whonix-ws template in Qubes 3.2

[shaun . the . don . hughes]

On Wednesday, 1 March 2017 04:57:49 UTC-5, Andrew David Wong  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2017-02-28 20:28, shaun.the.don.hug...@gmail.com wrote:
> > I'm trying to reinstall the whonix-ws template following the user docs, but 
> > I keep getting an error.  
> > 
> > In Dom0 I used:
> > sudo qubes-dom0-update --enablerepo=qubes-templates-community 
> > --action=reinstall qubes-template-whonix-ws
> > 
> > I get the following error:
> > -
> > Last metadata expiration check: 0:38:17 ago on Tue Feb 28 21:05:57 2017.
> > installed package qubes-template-whonix-ws-3.0.5-201602110904.noarch not 
> > available.
> > Error: Nothing to do.
> > -
> > 
> > I also tried the older method mentioned in the user docs as well.
> > 
> > Any help would be great since I screwed whonix up VERY well.
> > 
> 
> Try uninstalling the tmeplate then installing it as separate actions.
> qubes-dom0-update hides the availability of templates that are already
> installed.
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> -BEGIN PGP SIGNATURE-
> 
> iQIcBAEBCgAGBQJYtpsMAAoJENtN07w5UDAwJqAP/jA8bi+kmOwkGoOr3t8RRq1X
> UQKorCQ4Nd96PkJ75uYPAmRspoxnTfIgaul6mtoO6ZVYXArQlcX9BkAxhqlcjelb
> pX534wiL9uZa/ALApFQcDA94w28FGjJiiB3px0aAOLdX43px4BhRUNNU7EubeArG
> QtyLoHrrKZLnHQlNNHwahxOZBL043hb/6T3JGX/BEm700N/AQXSbTiTZZ9xYla1F
> D9irCgsI0dVH1SHCDrFlAaYH7vfgleEra2VSAQ422pRhkSTVot63wmbknPBIiIaE
> wPcRHNkDi0BBWoJnWJTkoPGek06EA5v4TUKsFGUlrYdCFS59z/VrgBY588GCXuLt
> kbRiZvOqU1mSax8XIQDKuVYHL6x+38oXyrEm7oOwQ+7CrnPe1x/bYxgzAZy+pxzC
> J1RjuzipLJ0I/I4ODyPr/KIDgUp6OkcFObvf03Uo9iBrPPnLNWe2HBEKwp7711Mg
> t1JgsrZ3SnqbsUJrAmVFh3egmJ66SiFJq+aSDi1gpj6KpkaWQud5dk0E9cYQ/p0d
> YF8i/01lqh4oGQiUcZGxg5hYegQD0qEWQj0CSlvx8D+KH1MWZhipHovNcLtdoKGD
> yMi6y20ZTncWkioB+Fb+YIljbDMvIjTQW08Prj6qr+vf7xMNjLr8xXZG0iIXPAqs
> 1jaRcotuNHbOLSQYh1qS
> =mzV0
> -END PGP SIGNATURE-

The removal and reinstall did allow me to reinstall whonix, but didn't solve my 
overall issue.  Thank you for the quick response

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/de2c014e-99a8-4b96-a33d-5a7dad59830c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: [qubes-devel] Re: Google Summer of Code 2017

[Grzegorz Chodzicki]

On 03/01/2017 10:19 PM, Andrew David Wong wrote:
> On 2017-03-01 07:39, Grzesiek Chodzicki wrote:
> > W dniu środa, 1 marca 2017 16:05:32 UTC+1 użytkownik Grzesiek
> > Chodzicki napisał:
> >> W dniu środa, 1 marca 2017 04:45:27 UTC+1 użytkownik Andrew
> >> David Wong napisał:
> > On 2017-02-28 03:21, Grzesiek Chodzicki wrote:
> > W dniu wtorek, 28 lutego 2017 06:50:47 UTC+1 użytkownik
> > Andrew David Wong napisał: On 2017-02-27 10:29, Grzesiek
> > Chodzicki wrote:
>  W dniu poniedziałek, 27 lutego 2017 19:19:07 UTC+1
>  użytkownik Andrew David Wong napisał: We’re pleased
>  to announce that the Qubes OS Project has been
>  accepted as a mentor organization for Google Summer
>  of Code (GSoC) 2017! Many interesting projects have
>  already been proposed, and we’re still looking for
>  both students and mentors. If you’re interested in
>  participating, please see our GSoC 2017 page for
>  details!
> 
>  https://www.qubes-os.org/gsoc/
> 
> 
>  Congratulations to the team! I've noticed that the
>  GSoC page is not linked to from any other
>  documentation pages, is tihs by design?
> 
> >
> > More likely that we haven't had a chance to do it yet.
> > However, it's not clear to me which *documentation* pages
> > should link to the GSoC page. Which ones do you have in
> > mind?
> >
> >
> > For example doc page on USB devices
> > https://www.qubes-os.org/doc/usb/
> >
> > On the bottom of the page there is an information that USB
> > Passthrough and USB Keyboard functionalities are not
> > available in the Qubes Manager. However there is GUI
> > Improvements Project Idea in GSoC that aims to implement
> > these options in the VM Manager so a link to the GSoC page
> > with a brief explanation, something like: "This feature is
> > not available yet in Qubes Manager but if you'd like to
> > help implement it, and you're a student then you can apply
> >  for the Google Summer of Code program" and a link to the
> > Project Idea on the gsoc page.
> >
>
> > Ah, I see. Would you mind submitting pull requests for these?
>
> > For reference: https://www.qubes-os.org/doc/doc-guidelines/
>
> >>
> >> Sure, no problem.
>
> > Just submitted a PR for the USB page, if the text is acceptable I
> > can add it to all other pages that may require it. If not please
> > tell me what to change.
>
>
> I haven't received a PR from you. Please try again.
>
>

How about now?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/05d8c974-3787-75d6-9e08-1bed0c0c0a20%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: [qubes-devel] Re: Google Summer of Code 2017

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-03-01 07:39, Grzesiek Chodzicki wrote:
> W dniu środa, 1 marca 2017 16:05:32 UTC+1 użytkownik Grzesiek 
> Chodzicki napisał:
>> W dniu środa, 1 marca 2017 04:45:27 UTC+1 użytkownik Andrew
>> David Wong napisał:
> On 2017-02-28 03:21, Grzesiek Chodzicki wrote:
> W dniu wtorek, 28 lutego 2017 06:50:47 UTC+1 użytkownik 
> Andrew David Wong napisał: On 2017-02-27 10:29, Grzesiek 
> Chodzicki wrote:
 W dniu poniedziałek, 27 lutego 2017 19:19:07 UTC+1 
 użytkownik Andrew David Wong napisał: We’re pleased 
 to announce that the Qubes OS Project has been 
 accepted as a mentor organization for Google Summer 
 of Code (GSoC) 2017! Many interesting projects have 
 already been proposed, and we’re still looking for 
 both students and mentors. If you’re interested in 
 participating, please see our GSoC 2017 page for 
 details!
 
 https://www.qubes-os.org/gsoc/
 
 
 Congratulations to the team! I've noticed that the 
 GSoC page is not linked to from any other 
 documentation pages, is tihs by design?
 
> 
> More likely that we haven't had a chance to do it yet. 
> However, it's not clear to me which *documentation* pages 
> should link to the GSoC page. Which ones do you have in 
> mind?
> 
> 
> For example doc page on USB devices 
> https://www.qubes-os.org/doc/usb/
> 
> On the bottom of the page there is an information that USB 
> Passthrough and USB Keyboard functionalities are not 
> available in the Qubes Manager. However there is GUI 
> Improvements Project Idea in GSoC that aims to implement 
> these options in the VM Manager so a link to the GSoC page 
> with a brief explanation, something like: "This feature is 
> not available yet in Qubes Manager but if you'd like to 
> help implement it, and you're a student then you can apply
>  for the Google Summer of Code program" and a link to the 
> Project Idea on the gsoc page.
> 
> 
> Ah, I see. Would you mind submitting pull requests for these?
> 
> For reference: https://www.qubes-os.org/doc/doc-guidelines/
> 
>> 
>> Sure, no problem.
> 
> Just submitted a PR for the USB page, if the text is acceptable I 
> can add it to all other pages that may require it. If not please 
> tell me what to change.
> 

I haven't received a PR from you. Please try again.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=UrDK
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/aba56808-7d99-ebac-70ac-7fe03aaaed03%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: sys-net stopped working after update

['Slideshowbob' via qubes-users]

 Original Message 
Subject: Re: [qubes-users] sys-net stopped working after update
Local Time: February 28, 2017 10:27 PM
UTC Time: February 28, 2017 9:27 PM
From: va...@statfact.org
To: qubes-users  va...@statfact.org, 
tas...@openmailbox.org

It starts. But there is no ip resolution.

(resent because I forgot to CC qubes-users)

You could try to create a new net-vm, assign your network hardware and start 
this instead. Maybe it's some incompatability with the config files. If it 
works, set it as standard net-vm.

Another thing you could try is: before shutting down your net-vm, right-click 
on the NetworkManager applet and untick "Enable Networking". I have to do this 
when I'm in one specific wlan, because otherwise after a restart of the net-vm 
I won't get an ip assigned (no clue why but this reliable solves the issue for 
me).

slideshowbob

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ywGvX4uf0BB-HvR7LdEAMVurHStDCc1qvE4N8P-3sQeIv1s-jENSOoVY0G1xNeUS-rPVzpjYHNoJegKMh9RmWL6T1a_zmw-ph92SdEUBYkg%3D%40protonmail.ch.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Kernel issues preparing for 3.1 - 3.2 Upgrade

['Slideshowbob' via qubes-users]

 Original Message 

Subject: [qubes-users] Kernel issues preparing for 3.1 - 3.2 Upgrade
Local Time: March 1, 2017 10:46 AM
UTC Time: March 1, 2017 9:46 AM
From: qubes-users@googlegroups.com
To: qubes-users@googlegroups.com 

I've always had difficulties booting the default kernel of 3.1 (4.1.24.10), 
graphic corruption making it impossible to complete a boot. As such I've just 
always used 3.18.17-8 which behaves fine on my hardware.

Am now preparing to make the upgrade to 3.2, but want to ensure if at all 
possible there is a kernel that will boot before I do. Is it possible / logical 
to test the same kernel version that will be available / default with 3.2 on 
3.1 or is it much more a suck-it-and-see if it sucks sort of situation?

Thanks


I'd recommend you make a test installation on a usb stick (needs 32 GB or 
bigger). I could not run 3.2 on my pc and having it on usb gives you time to 
fix the issues (if there are any) without having a non working pc. Oh and of 
course don't forget to make backups.

slideshowbob

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4yckQ7jUlPVZY36OzTTMla8EUixRVRXratElteoh_6kWJFzrqJ0Bbi_KbEPgpBtiltjfjJrVtFs4KX8BUksN6DAGHya976eEMujWFB0tZuw%3D%40protonmail.ch.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Programmatically performing software update

[Jimmy Axenhus]

Den 2017-03-01 kl. 06:41, skrev loke...@gmail.com:
> I tend to use Qubes VM's not just for security purposes, but also as a very 
> convenient way to have clean, manageable VM's where I only install the stuff 
> I need for a specific task.
> 
> This has led me to have a large number non-template VM's, all of which needs 
> to be manually updated every time there is a software update.
> 
> Right now, for each VM, I have to click on update, wait for the dialogue box 
> to spin for a while waiting for the VM to start, then manually choose “yes” 
> to update. This process gets old really fast.
> 
> Is there a way to automate this so that I can simply say “yes, I want to 
> update all these VM's, go ahead and do it”?
> 
> Regards,
> Elias
> 

I got a Python script for that. Put in dom0 and run it. Unlike Andrews
script this one will update all VMs in parallel and is interactive
rather than non-interactive.

https://gist.github.com/JimmyAx/818bcf11a14e85531516ef999c8c5765


Here it is, embedded in the email:



#!/usr/bin/python2

import subprocess

from time import sleep

from qubes.qubes import QubesVmCollection


if __name__ == "__main__":
qvm_collection = QubesVmCollection()
qvm_collection.lock_db_for_reading()
try:
qvm_collection.load()
finally:
qvm_collection.unlock_db()

vms = qvm_collection.values()

exclude_vms = ("debian-8-hvm", "win7", "win7-orig")
#"archlinux-aur", "archlinux")

processes = []
for vm in vms:
dom0 = vm.qid == 0
if not dom0 and vm.updateable and vm.name not in exclude_vms:
print "Updating VM template %s..." % vm.name
if not vm.is_running():
vm.start()
sleep(3)
p = vm.run_service("qubes.InstallUpdatesGUI", gui=True,
wait=False, passio_popen=True)
processes.append((vm, p))

print "Waiting for VMs to complete updating..."
for vm, p in processes:
p.wait()
if vm.is_running():
vm.shutdown()

subprocess.check_call(["sudo", "/usr/bin/qubes-dom0-update"])

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9150dbaa-6783-f57c-611a-5bef296da163%40axenhus.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: When qubes will support modern nvdia Graphic cards ?

[codeur4life]

Le mardi 28 février 2017 23:31:37 UTC+1, Grzesiek Chodzicki a écrit :
> W dniu wtorek, 28 lutego 2017 23:19:09 UTC+1 użytkownik codeu...@gmail.com 
> napisał:
> > When qubes will support GTX 1060 ? Or how qubes can support it ? Because 
> > it's laggy with several opened browser tabs with the only CPU graphic 
> > working.
> 
> Which kernel are You running? If You're on 4.4 try updating to 4.8 and see if 
> it gets better.

Upgrated to 4.8.12-12 following this : 
https://www.qubes-os.org/doc/managing-vm-kernel/#installing-different-kernel-using-qubes-kernel-package
But still does not work screen freeze on boot.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9a393221-d9ab-4f02-9bcd-e192b3f352fb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Cannot setup sound for all running VM's

[York Keyser]

Found the solution for this :

https://github.com/QubesOS/qubes-issues/issues/1927

Regards York





On 03/01/2017 05:02 PM, York Keyser wrote:

Hi group,

I have a problem with the sound. For some time I cannot see all 
running VM's in the Pulse Audio Volume Control at the Playback Tab. I 
only see following VM's there


  - System Sounds
  - sys-net
  - sys-firewall
  - sys-usb

Have somebody any idea how I can set up all other running VMs?

Regards York



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e311c895-7885-2da3-fc87-b74b9c6866bb%40cryptea.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Cannot setup sound for all running VM's

[York Keyser]

Hi, it looks like that the debian VM's are not connected so maybe 
something is missing. The pulseaudio daemon is running under dom0 but 
not on the other VM's under debian. How do I find out if the sink is 
active or not?


Regards and thanks for your Help

York




On 03/01/2017 07:09 PM, emd...@gmail.com wrote:

Am Mittwoch, 1. März 2017 17:02:20 UTC+1 schrieb York Keyser:

Have somebody any idea how I can set up all other running VMs?

- The qubes sink has to be installed (properly, there is a bug with debian-9) 
in the appvm

- the pulseaudio daemon must be running.

which VMs do _not_ show up? can you check if the daemon is running and if the 
sink is active?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/021705e3-e437-b08b-201f-36b6c5496d78%40cryptea.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Cog Systems SEC Phones with Hypervisor Tech

['0238'09'4302'40'24189'418489]

Hello,

Cog Systems designed a secure phone based on hypervisor technology...

https://cog.systems/htc-secured-by-d4/

iOS was just the new way, how to run an desktop os on a mobile phone.

Will it be possible in the near of far future, that Qubes OS will run on some 
smart-phone?

Kind Regards

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4c440dc5-767a-4848-bff9-64e4ae9f4c8b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Cannot setup sound for all running VM's

[emdete]

Am Mittwoch, 1. März 2017 17:02:20 UTC+1 schrieb York Keyser:
> Have somebody any idea how I can set up all other running VMs?

- The qubes sink has to be installed (properly, there is a bug with debian-9) 
in the appvm

- the pulseaudio daemon must be running.

which VMs do _not_ show up? can you check if the daemon is running and if the 
sink is active?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8978cfe4-3060-4954-a0ec-5db370dadced%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: I can't see my webcam in dom0 with qvm-usb but have to pass to another skype-vm

[Grzesiek Chodzicki]

W dniu środa, 1 marca 2017 16:18:53 UTC+1 użytkownik Arnulf Bultmann napisał:
> this is the output:
> 
> lspci -tv
> -[:00]-+-00.0  Intel Corporation Skylake Host Bridge/DRAM Registers
>+-02.0  Intel Corporation HD Graphics 530
>+-08.0  Intel Corporation Skylake Gaussian Mixture Model
>+-14.0  Intel Corporation Sunrise Point-H USB 3.0 xHCI Controller
>+-14.2  Intel Corporation Sunrise Point-H Thermal subsystem
>+-16.0  Intel Corporation Sunrise Point-H CSME HECI #1
>+-17.0  Intel Corporation Sunrise Point-H SATA controller
> [AHCI mode]
>+-1d.0-[01]--
>+-1d.3-[02]00.0  Realtek Semiconductor Co., Ltd.
> RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller
>+-1f.0  Intel Corporation Sunrise Point-H LPC Controller
>+-1f.2  Intel Corporation Sunrise Point-H PMC
>+-1f.3  Intel Corporation Sunrise Point-H HD Audio
>\-1f.4  Intel Corporation Sunrise Point-H SMBus

okay, and what does the output of lsusb -tv looks like?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0ab95d86-bee1-4734-93b9-2276f7aa318e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] strange firefox behavior

[Oleg Artemiev]

Firefox asks for "choose what I share" but usual controls are absent
in settings - I cannot disable automatic reporting. What should be a
reason? Feedora 23 template, Qubes 3.2

-- 
Bye.Olli.
gpg --search-keys grey_olli , use key w/ fingerprint below:
Key fingerprint = 9901 6808 768C 8B89 544C  9BE0 49F9 5A46 2B98 147E
Blog keys (the blog is mostly in Russian): http://grey-olli.livejournal.com/tag/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABunX6MbF6LjXs4pw_1qCO7JedQuycLQQmjE%3Di%3Dp5WNo%3DLbr0Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] i18n regression bug in Qubes 3.2 - what details will be helpful?

[Oleg Artemiev]

switching keyboard layouts seem to hang for a few seconds from time to
time , but indication doesn't hang. This is very annoying.

This seem to happen on high loads when 6 or more VMs are running.

 Any extra details to show to localize the bug?

-- 
Bye.Olli.
gpg --search-keys grey_olli , use key w/ fingerprint below:
Key fingerprint = 9901 6808 768C 8B89 544C  9BE0 49F9 5A46 2B98 147E
Blog keys (the blog is mostly in Russian): http://grey-olli.livejournal.com/tag/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABunX6PxiFD3ye4G9Pwk%2Bpy-psxW0X7t5zJJrjfhD9E7brDcZQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Time sync failed

[Richard]

My clock is not syncing and I can't figure out what the issue is.  Any 
assistance would be greatly appreciated.

I'm running Qubes 3.2 (R3.2)

>From Dom0:
$ qubes-pref
clockvm   : sys-net
default-fw-netvm  : sys-net
default-kernel: 4.4.38-11
default-netvm : sys-firewall

$ qvm-sync-clock --verbose
--> Waiting for network for ClockVM.
Time sync failed! - Exiting

$ timedatectl status
Failed to query server: Input/output error

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/829349fd-08ea-488c-b7f8-3a77ba6de98d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Cannot setup sound for all running VM's

[York Keyser]

Hi group,

I have a problem with the sound. For some time I cannot see all running 
VM's in the Pulse Audio Volume Control at the Playback Tab. I only see 
following VM's there


  - System Sounds
  - sys-net
  - sys-firewall
  - sys-usb

Have somebody any idea how I can set up all other running VMs?

Regards York

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c56b6bbb-0df5-323d-2bb9-3634f49d3b74%40cryptea.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: QEMU: virtfs permits guest to access entire host filesystem

[Grzesiek Chodzicki]

W dniu środa, 1 marca 2017 14:14:51 UTC+1 użytkownik Salmiakki napisał:
> Just curious if this affects Qubes, or not.
> 
> https://bugs.chromium.org/p/project-zero/issues/detail?id=1035=6=

Probably not since Qubes isolates the QEMU in its own dedicated stubdomain.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d2a68702-09cb-4a5a-add7-4626ee7b784a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: [qubes-devel] Re: Google Summer of Code 2017

[Grzesiek Chodzicki]

W dniu środa, 1 marca 2017 16:05:32 UTC+1 użytkownik Grzesiek Chodzicki napisał:
> W dniu środa, 1 marca 2017 04:45:27 UTC+1 użytkownik Andrew David Wong 
> napisał:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA512
> > 
> > On 2017-02-28 03:21, Grzesiek Chodzicki wrote:
> > > W dniu wtorek, 28 lutego 2017 06:50:47 UTC+1 użytkownik Andrew 
> > > David Wong napisał: On 2017-02-27 10:29, Grzesiek Chodzicki wrote:
> >  W dniu poniedziałek, 27 lutego 2017 19:19:07 UTC+1
> >  użytkownik Andrew David Wong napisał: We’re pleased to
> >  announce that the Qubes OS Project has been accepted as a
> >  mentor organization for Google Summer of Code (GSoC) 2017!
> >  Many interesting projects have already been proposed, and
> >  we’re still looking for both students and mentors. If you’re
> >  interested in participating, please see our GSoC 2017 page
> >  for details!
> >  
> >  https://www.qubes-os.org/gsoc/
> >  
> >  
> >  Congratulations to the team! I've noticed that the GSoC page
> >   is not linked to from any other documentation pages, is tihs
> >   by design?
> >  
> > > 
> > > More likely that we haven't had a chance to do it yet. However, 
> > > it's not clear to me which *documentation* pages should link to the
> > > GSoC page. Which ones do you have in mind?
> > > 
> > > 
> > > For example doc page on USB devices 
> > > https://www.qubes-os.org/doc/usb/
> > > 
> > > On the bottom of the page there is an information that USB 
> > > Passthrough and USB Keyboard functionalities are not available in 
> > > the Qubes Manager. However there is GUI Improvements Project Idea 
> > > in GSoC that aims to implement these options in the VM Manager so a
> > > link to the GSoC page with a brief explanation, something like: 
> > > "This feature is not available yet in Qubes Manager but if you'd 
> > > like to help implement it, and you're a student then you can apply
> > >  for the Google Summer of Code program" and a link to the Project 
> > > Idea on the gsoc page.
> > > 
> > 
> > Ah, I see. Would you mind submitting pull requests for these?
> > 
> > For reference: https://www.qubes-os.org/doc/doc-guidelines/
> > 
> > - -- 
> > Andrew David Wong (Axon)
> > Community Manager, Qubes OS
> > https://www.qubes-os.org
> > -BEGIN PGP SIGNATURE-
> > 
> > iQIcBAEBCgAGBQJYtkPGAAoJENtN07w5UDAwMIMP/j1b1lyv8UvxU1S/9/yg6XrQ
> > gdwFcER6Wp0tVQdvuivpGG4KhgFWYMRW6c/1EafnlVWgNmvovwo35/wwJ2+FpdEo
> > w2NUMioO8ZMBi+UY00MSnBFKuDLahprcXMtKw3SgSWsFqLEr8Bbd8G/ZaA9WFyVz
> > 4W6aoaWTe2XDNCipr9gy+0TBORkKMNxr+s7L2VcUIjok9rA+/hd8+BIePNZpC/vJ
> > udBoj4vnCcusN4TLA5YgOMgDgKiiaZ4xA+ajHcmTyadjPsXNDZ3EW4JuIiJaSMgW
> > VHg3qogaWa3J7RgUj6fTxjNGEguhJkMYeWKu2IAGRDXE1sKDmkjRj72VEPV1fNy4
> > rsGitTwSAolaoZicGpIEkPNrxCiSK3/e5WMFwBMCnmZf6DBKRKcwOAtRAk69Pplz
> > cbH7FpIySLcVD+oaqWGOtlJGmg5M5gW2TgnoW2xX6X2EXCq12gTmj5vRUC+G5ll1
> > pOVPN8GTr5BnwDrgerVIbEZcQ5+oeyGovhqvT7EKHkc/eRV/CZm+nxLu9L+6CyE6
> > VK9eh7+Ao0VfCwf+HVCQf6xPl+x8DioTLI+bdXXKK/V/uLYMpIpFPW/JReljtvY+
> > 1QRWPDfGwwQXLEOse/VAUgwAlaxSv4oVRZE4mtpXfXN23pEiB5RPJm0Yy9QOeOXb
> > nB1Oj2RPj0mF0jxhqcS6
> > =j1PK
> > -END PGP SIGNATURE-
> 
> Sure, no problem.

Just submitted a PR for the USB page, if the text is acceptable I can add it to 
all other pages that may require it. If not please tell me what to change.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/01d8cc41-f37a-4057-b4b3-bba2829bc0c4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: [qubes-devel] Re: Google Summer of Code 2017

[Grzesiek Chodzicki]

W dniu środa, 1 marca 2017 04:45:27 UTC+1 użytkownik Andrew David Wong napisał:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 2017-02-28 03:21, Grzesiek Chodzicki wrote:
> > W dniu wtorek, 28 lutego 2017 06:50:47 UTC+1 użytkownik Andrew 
> > David Wong napisał: On 2017-02-27 10:29, Grzesiek Chodzicki wrote:
>  W dniu poniedziałek, 27 lutego 2017 19:19:07 UTC+1
>  użytkownik Andrew David Wong napisał: We’re pleased to
>  announce that the Qubes OS Project has been accepted as a
>  mentor organization for Google Summer of Code (GSoC) 2017!
>  Many interesting projects have already been proposed, and
>  we’re still looking for both students and mentors. If you’re
>  interested in participating, please see our GSoC 2017 page
>  for details!
>  
>  https://www.qubes-os.org/gsoc/
>  
>  
>  Congratulations to the team! I've noticed that the GSoC page
>   is not linked to from any other documentation pages, is tihs
>   by design?
>  
> > 
> > More likely that we haven't had a chance to do it yet. However, 
> > it's not clear to me which *documentation* pages should link to the
> > GSoC page. Which ones do you have in mind?
> > 
> > 
> > For example doc page on USB devices 
> > https://www.qubes-os.org/doc/usb/
> > 
> > On the bottom of the page there is an information that USB 
> > Passthrough and USB Keyboard functionalities are not available in 
> > the Qubes Manager. However there is GUI Improvements Project Idea 
> > in GSoC that aims to implement these options in the VM Manager so a
> > link to the GSoC page with a brief explanation, something like: 
> > "This feature is not available yet in Qubes Manager but if you'd 
> > like to help implement it, and you're a student then you can apply
> >  for the Google Summer of Code program" and a link to the Project 
> > Idea on the gsoc page.
> > 
> 
> Ah, I see. Would you mind submitting pull requests for these?
> 
> For reference: https://www.qubes-os.org/doc/doc-guidelines/
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> -BEGIN PGP SIGNATURE-
> 
> iQIcBAEBCgAGBQJYtkPGAAoJENtN07w5UDAwMIMP/j1b1lyv8UvxU1S/9/yg6XrQ
> gdwFcER6Wp0tVQdvuivpGG4KhgFWYMRW6c/1EafnlVWgNmvovwo35/wwJ2+FpdEo
> w2NUMioO8ZMBi+UY00MSnBFKuDLahprcXMtKw3SgSWsFqLEr8Bbd8G/ZaA9WFyVz
> 4W6aoaWTe2XDNCipr9gy+0TBORkKMNxr+s7L2VcUIjok9rA+/hd8+BIePNZpC/vJ
> udBoj4vnCcusN4TLA5YgOMgDgKiiaZ4xA+ajHcmTyadjPsXNDZ3EW4JuIiJaSMgW
> VHg3qogaWa3J7RgUj6fTxjNGEguhJkMYeWKu2IAGRDXE1sKDmkjRj72VEPV1fNy4
> rsGitTwSAolaoZicGpIEkPNrxCiSK3/e5WMFwBMCnmZf6DBKRKcwOAtRAk69Pplz
> cbH7FpIySLcVD+oaqWGOtlJGmg5M5gW2TgnoW2xX6X2EXCq12gTmj5vRUC+G5ll1
> pOVPN8GTr5BnwDrgerVIbEZcQ5+oeyGovhqvT7EKHkc/eRV/CZm+nxLu9L+6CyE6
> VK9eh7+Ao0VfCwf+HVCQf6xPl+x8DioTLI+bdXXKK/V/uLYMpIpFPW/JReljtvY+
> 1QRWPDfGwwQXLEOse/VAUgwAlaxSv4oVRZE4mtpXfXN23pEiB5RPJm0Yy9QOeOXb
> nB1Oj2RPj0mF0jxhqcS6
> =j1PK
> -END PGP SIGNATURE-

Sure, no problem.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ab2c7cf1-e2ae-492c-87c6-5890cb2d1263%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: I can't see my webcam in dom0 with qvm-usb but have to pass to another skype-vm

[Grzegorz Chodzicki]

On 03/01/2017 03:38 PM, Arnulf Bultmann wrote:
> thank you.
>
> I can't pass the entire USB controller to the VM because keyboard and
> trackball are connected to it. This doesn't resolve my problem that I
> can't see the camera using qvm-usb.
>
>
> On 02/28/2017 11:32 PM, Grzesiek Chodzicki wrote:
>> W dniu wtorek, 28 lutego 2017 14:42:24 UTC+1 użytkownik a.bul...@allmedo.de 
>> napisał:
>>> Hello,
>>> I have a problem I can't resolve by myself.
>>> running qubes 3.2 with feb updates.
>>> I use a Logitech webcam C525 which shows up besides all my other usb stuff 
>>> when I use lsusb.
>>> When I use qvm-usb I get an empty list.
>>> I have to pass the webcam to a VM based on fedora 24 which I plan to use 
>>> for skype.
>>> But I'm stuck...
>>> Any help appreciated.
>>> Thanx
>> Try passing entire USB controller to the VM instead of the single device.
So, what does show up after running lspci -tv?
Also, please keep the qubes-users mailing group cc'ed and please do not
top-post.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/de12a3d0-b392-3251-afb3-fdef523710dd%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] QEMU: virtfs permits guest to access entire host filesystem

[Salmiakki]

Just curious if this affects Qubes, or not.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1035=6=

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c75d00af-99b5-4d9b-b051-cae1a41c6a72%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Sharing a bit more on Kali Linux with users of qubes-os.org

[Ammar Atrache]

Hi

I noticed you wrote about Kali Linux on your site, here: 
qubes-os.org/doc/pentesting/kali/

It is great to have you helping users get to know Kali.

Mr Ghaznavi-Zadeh just published a chapter from his book "Kali Linux – A guide 
to Ethical hacking" and it is available for free here:

https://www.vpnmentor.com/blog/kali-linux-a-guide-to-ethical-hacking/

Can you share this page with the users of your site, so they too will 
understand more about what is ethical hacking?

Thanks,
Ammar



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/HE1PR1001MB11144B1A3075E36241417423E8290%40HE1PR1001MB1114.EURPRD10.PROD.OUTLOOK.COM.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Programmatically performing software update

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-02-28 21:41, loke...@gmail.com wrote:
> I tend to use Qubes VM's not just for security purposes, but also
> as a very convenient way to have clean, manageable VM's where I
> only install the stuff I need for a specific task.
> 
> This has led me to have a large number non-template VM's, all of
> which needs to be manually updated every time there is a software
> update.
> 
> Right now, for each VM, I have to click on update, wait for the
> dialogue box to spin for a while waiting for the VM to start, then
> manually choose “yes” to update. This process gets old really
> fast.
> 
> Is there a way to automate this so that I can simply say “yes, I
> want to update all these VM's, go ahead and do it”?
> 
> Regards, Elias
> 

Here's an example of scripting updates (optionally as a cron job):

https://gist.github.com/andrewdavidwong/d0b109186de65835255d467ae103c289

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=O2W9
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a4be9c88-66be-8b86-fe5a-ad5af2896914%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Trouble reinstalling Whonix-ws template in Qubes 3.2

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-02-28 20:28, shaun.the.don.hug...@gmail.com wrote:
> I'm trying to reinstall the whonix-ws template following the user docs, but I 
> keep getting an error.  
> 
> In Dom0 I used:
> sudo qubes-dom0-update --enablerepo=qubes-templates-community 
> --action=reinstall qubes-template-whonix-ws
> 
> I get the following error:
> -
> Last metadata expiration check: 0:38:17 ago on Tue Feb 28 21:05:57 2017.
> installed package qubes-template-whonix-ws-3.0.5-201602110904.noarch not 
> available.
> Error: Nothing to do.
> -
> 
> I also tried the older method mentioned in the user docs as well.
> 
> Any help would be great since I screwed whonix up VERY well.
> 

Try uninstalling the tmeplate then installing it as separate actions.
qubes-dom0-update hides the availability of templates that are already
installed.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=mzV0
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/76cd1901-cfe9-e3b7-619a-186dc8a8cd33%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Kernel issues preparing for 3.1 - 3.2 Upgrade

['Vincent Adultman' via qubes-users]

I've always had difficulties booting the default kernel of 3.1 (4.1.24.10), 
graphic corruption making it impossible to complete a boot. As such I've just 
always used 3.18.17-8 which behaves fine on my hardware.

Am now preparing to make the upgrade to 3.2, but want to ensure if at all 
possible there is a kernel that will boot before I do. Is it possible / logical 
to test the same kernel version that will be available / default with 3.2 on 
3.1 or is it much more a suck-it-and-see if it sucks sort of situation?

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/YJHiVcbFY3HLWGABu3YVLyZz-I_lF6Cgyzfh-1lfFSKA85vKz6Bovt_cxT0nn1pdUY0Tonm4Bj6tSNQJsJ5T-yQGKcwNB2PChBUqL33pEaQ%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: do I really need these packages in dom0 :?

[pixel fairy]

i also noticed glusterfs in dom0. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6f24d5bd-92fe-4bfb-b998-edbe9d6ac37d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Installing Qubes on MacBook Air

[pixel fairy]

On Monday, February 27, 2017 at 12:00:18 AM UTC-8, peten...@gmail.com wrote:
> I posted this on GitHub earlier and was advised to post here.
> 
> Basically I am attempting to install Qubes on a MacBook Air and I have had 
> little success following the instructions for putting the Broadcom wireless 
> device into PCI passtrough so I'm going to try the other option of removing 
> it from the Mac altogether to get the install to work. 

just curious, have you tried an external usb wifi as a workaround or temporary 
solution?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6722e9c3-6e7a-4688-9bf2-0cdc0d73c06b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes OS 3.1 reaches EOL on 2017-03-29

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Dear Qubes community,

Qubes OS releases are normally supported for six months after each subsequent
major or minor release (see [Supported Versions] and [Version Scheme]). In
accordance with this policy, Qubes 3.1, which was released on 2016-03-09, is
scheduled to reach end-of-life (EOL) on 2017-03-29 --- six months after Qubes
3.2 was released on 2016-09-29. We strongly urge all current Qubes 3.1 users to
upgrade to Qubes 3.2 or newer before 2017-03-29. As always, newer releases are
available on the [downloads] page.

You can view this announcement on the Web at:
https://www.qubes-os.org/news/2017/03/01/qubes-os-3-1-eol-on-2017-03-29/

[Supported Versions]: https://www.qubes-os.org/doc/supported-versions/
[Version Scheme]: https://www.qubes-os.org/doc/version-scheme/
[downloads]: https://www.qubes-os.org/downloads/

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJYto3sAAoJENtN07w5UDAw0bUP/RllMa3XpvVbKB8m5+0UokAj
Fq9tvnfWTTjfPmUwsRVSi+z/DRTbLWa4HXxkeSWEfqibkWoKXE5j28eO/zJY33B6
mZh3aDNmDUoXuRKoCP8zEbWuY2qxG2UoLzBApDduk6Uw/wU6AQjDNDHeP/aIAXwP
bjrrQB3r0Nxf0bpiLod3m5A+oQzjo3QnNhxwnQm0oS/nn2cAevw1ZbHq1nwe2JiX
8oFBnbah0DmJrezB+VZaiy51KQ/6TfOLz8+kNvOKdh1vvOgc5AB9VYc8yTqXDGYi
A1WqJZeSYx1xXTghc0U573c8wLu5ivUdVIP/46JI+0kl5xbNkKzh1Gs/KjKs6Cxo
UqpM7KCrQduGIui8WoqPLS+Ewj2tBLm8TKp0HWIcav7abQ+kSm3978MQHuF9k11P
40+cMEdiSIHZMiq0+vaDm9khgJ316f+iPh+av8lgadJ1z9Flfznl1S6usF969yyb
jCu1Yjptfx/yE3WKxsI+2bZA92Lri1oXyvPtHBErFXl2Ffn4B7HEmAKdWq4WJmcT
HwEMPHFGSop4gW8IzwH8sTkNFvhtPnLoCx1JyetdOJTexiNuq+ShM/aZ51nBwbuy
GSvSxY5BxX/Uuw7wKCazay008tq6PkgmR+6kcc6ePyGgYcQU1Awlh47cEjrcPxL7
fu0Ba1rTN8J+nJqbx68/
=y4pt
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/352ae231-dd96-c8fb-2b3a-cc226242d106%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.