Re: [qubes-users] Custom shared directory between VM's

2017-05-18 Thread Ángel
On 2017-05-18 at 07:20 -0700, loke...@gmail.com wrote:
> I regularly compile the latest version of Emacs for use in my development VM. 
> I simply compile Emacs from the git repository and install it in /usr/local. 
> All works the way it's supposed to.
> 
> However, I now have more than one VM where I need to use Emacs, and I would 
> like to avoid having to compile it from source in both VM's.
> 
> The only way I can think of to handle this situation is to create a separate 
> templatevm for this, enabline networking in the template so that I can use 
> git from it, and then compile Emacs there.
> 
> Is there a better way to handle this? Ideally I'd like to be able to compile 
> Emacs and install it to some specific directory that can then be made 
> available to both VM's.
> 
> What is the best way to handle this situation?

I would compile in a dev VM and create a "package" (which may be just a
tgz of /usr/local), then move it to the template VM.

Please note that on default templates, /usr/local is a symlink
to /rw/usrlocal (ie. it is per-VM), so you would want to make it a
normal folder before installing shared programs there.

Personally, I prefer having /usr/local at the template, and use
$HOME/bin for per-VM programs. Otherwise, there's no good place to
install a non-packaged program to several VMs.

Cheers

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1495158778.963.30.camel%4016bits.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] how to investigate ports which needs to be open when firewall rules seems to be to restricted

2017-05-18 Thread Unman
On Fri, May 19, 2017 at 12:21:08AM +0200, 'PR' via qubes-users wrote:
> Hello Unman,
> 
> 
> On 05/19/2017 12:01 AM, Unman wrote:
> >On Thu, May 18, 2017 at 01:55:31PM -0700, 'PR' via qubes-users wrote:
> >>Hello,
> >>
> >>when using AppVMs for special purposes, I like to use deny all firewall 
> >>rules and only open the neccessary ports.
> >>Unfortunately this means a step-by-step approach to find out which domains 
> >>and ports needs to open.
> >>
> >>Question:
> >>Where can I find a log file which shows what the firewall is blocking from 
> >>inside (AppVM) to outside (WAN).
> >>I know that I've missed some ports to get things up and running, but I 
> >>don't know where to look for them.
> >Hello,
> >
> >You create a log file by inserting a new rule in the iptables chain,
> >using the LOG target.
> >
> >Let's say you want to check what's happening on sys-firewall to
> >traffic from 10.137.1.101
> >iptables -L -nv will show the current rules.
> >Count where the current DROP rule appears in the FORWARD chain - say,
> >it's at position 4.
> >Then insert a LOG rule before that DROP rule:
> >iptables -I FORWARD 4 -s 10.137.1.101 -j LOG
> >
> >
> >Now all the DROPPED traffic will be logged, and you can use dmesg to
> >inspect those logs.
> >
> >unman
> perfect, thanks!!
> I assume that this rule is non-persistent and will not survive a reboot of
> sys-net, correct?
> This would be great as I only need this rule to fine tune my firewall
> settings.
> 
> - P

reboot of "sys-firewall" I think you mean, otherwise you're right.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170518230817.GA23932%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] how to investigate ports which needs to be open when firewall rules seems to be to restricted

2017-05-18 Thread 'PR' via qubes-users

Hello Unman,


On 05/19/2017 12:01 AM, Unman wrote:

On Thu, May 18, 2017 at 01:55:31PM -0700, 'PR' via qubes-users wrote:

Hello,

when using AppVMs for special purposes, I like to use deny all firewall rules 
and only open the neccessary ports.
Unfortunately this means a step-by-step approach to find out which domains and 
ports needs to open.

Question:
Where can I find a log file which shows what the firewall is blocking from 
inside (AppVM) to outside (WAN).
I know that I've missed some ports to get things up and running, but I don't 
know where to look for them.

Hello,

You create a log file by inserting a new rule in the iptables chain,
using the LOG target.

Let's say you want to check what's happening on sys-firewall to
traffic from 10.137.1.101
iptables -L -nv will show the current rules.
Count where the current DROP rule appears in the FORWARD chain - say,
it's at position 4.
Then insert a LOG rule before that DROP rule:
iptables -I FORWARD 4 -s 10.137.1.101 -j LOG


Now all the DROPPED traffic will be logged, and you can use dmesg to
inspect those logs.

unman

perfect, thanks!!
I assume that this rule is non-persistent and will not survive a reboot 
of sys-net, correct?
This would be great as I only need this rule to fine tune my firewall 
settings.


- P

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7682876a-acf6-d3d6-d8de-bcbdeda51a7a%40googlemail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] how to investigate ports which needs to be open when firewall rules seems to be to restricted

2017-05-18 Thread Unman
On Thu, May 18, 2017 at 01:55:31PM -0700, 'PR' via qubes-users wrote:
> Hello,
> 
> when using AppVMs for special purposes, I like to use deny all firewall rules 
> and only open the neccessary ports.
> Unfortunately this means a step-by-step approach to find out which domains 
> and ports needs to open.
> 
> Question:
> Where can I find a log file which shows what the firewall is blocking from 
> inside (AppVM) to outside (WAN).
> I know that I've missed some ports to get things up and running, but I don't 
> know where to look for them.
> 
> - P
> 

Hello,

You create a log file by inserting a new rule in the iptables chain,
using the LOG target.

Let's say you want to check what's happening on sys-firewall to
traffic from 10.137.1.101
iptables -L -nv will show the current rules.
Count where the current DROP rule appears in the FORWARD chain - say,
it's at position 4.
Then insert a LOG rule before that DROP rule:
iptables -I FORWARD 4 -s 10.137.1.101 -j LOG


Now all the DROPPED traffic will be logged, and you can use dmesg to
inspect those logs.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170518220139.GA23598%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] sys-net does not see any network devices

2017-05-18 Thread kbottner
Trying to configure Qubes 3.2 and having an issue getting my network up and 
going.'

sys-net does not see either of my network devices (ethernet or wifi). The only 
device that it can see is the loopback (lo) device. The devices are listed in 
the Devices tab for the VM and I can see both devices with lspci and cannot 
find any errors in any logs with regards to these devices; however, sys-net 
just can't see them.

Any suggestions on how to troubleshoot (or just an answer would work :-).

Devices are;
3a:00.1 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 
PCI Express Gigabit Ethernet Controller (rev 12)
3b:00.1 Network controller: Intel Corporation Device 24fd (rev 78)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ae346c0f-f5ba-4d22-bdfe-d436cd791041%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] how to investigate ports which needs to be open when firewall rules seems to be to restricted

2017-05-18 Thread 'PR' via qubes-users
Hello,

when using AppVMs for special purposes, I like to use deny all firewall rules 
and only open the neccessary ports.
Unfortunately this means a step-by-step approach to find out which domains and 
ports needs to open.

Question:
Where can I find a log file which shows what the firewall is blocking from 
inside (AppVM) to outside (WAN).
I know that I've missed some ports to get things up and running, but I don't 
know where to look for them.

- P

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a9b57185-a56b-4d2e-8873-c8a2ad380b54%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: SD Card Reader "Realtek Semiconductor Co., Ltd. Device 5287 (rev01)" is preventing ANY domains

2017-05-18 Thread kbottner
That WORKED! Thanks for the quick reply. Now I just have to figure out how to 
configure my WiFi in the sys-net.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/63db087e-3e71-45cd-b6fa-5811032269e0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: SD Card Reader "Realtek Semiconductor Co., Ltd. Device 5287 (rev01)" is preventing ANY domains

2017-05-18 Thread Grzesiek Chodzicki
W dniu czwartek, 18 maja 2017 21:43:04 UTC+2 użytkownik kbot...@gmail.com 
napisał:
> I have a new laptop that I am trying to get Qubes 3.2 installed. So far so 
> good except for this one issue. NONE of the domain VMs will start. They all 
> fail with the following error:
> 
> "libvirt.libvirtError: internal error: unable to reset PCI device 
> :3a:00.1: internal error: Active :3a:00.0 devices on bus with 
> :3a:00.1, not doing bus reset"
> 
> I have read all of the other threads that are even remotely related and none 
> of the suggestions work:
> - At first it wasn't assigned to ANY VM, I assigned to sys-usb, no change as 
> other VMs still do not launch.
> - Set the pci_strictreset to FALSE (since it's in the sys-usb domain), no 
> change as other VMs still do not launch.
> - Verified that the device is not assigned to ANY other VMs except for the 
> sys-usb, no change as other VMs still do not launch.
> 
> Quite frankly I don't even care of the SD card reader works (I never use it 
> anyway) but it's blocking me getting Qubes working. Is there any other way I 
> can disable it, or any suggestions on other things I can try to get past this 
> issue.
> 
> Thanks in advance for any help!

99% sure the problem will disappear once you assign the device to sys-net and 
set strictreset to false in sys-net.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ea66600e-2e0c-42bc-98c1-04d96ccf10c6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] SD Card Reader "Realtek Semiconductor Co., Ltd. Device 5287 (rev01)" is preventing ANY domains

2017-05-18 Thread kbottner
I have a new laptop that I am trying to get Qubes 3.2 installed. So far so good 
except for this one issue. NONE of the domain VMs will start. They all fail 
with the following error:

"libvirt.libvirtError: internal error: unable to reset PCI device :3a:00.1: 
internal error: Active :3a:00.0 devices on bus with :3a:00.1, not doing 
bus reset"

I have read all of the other threads that are even remotely related and none of 
the suggestions work:
- At first it wasn't assigned to ANY VM, I assigned to sys-usb, no change as 
other VMs still do not launch.
- Set the pci_strictreset to FALSE (since it's in the sys-usb domain), no 
change as other VMs still do not launch.
- Verified that the device is not assigned to ANY other VMs except for the 
sys-usb, no change as other VMs still do not launch.

Quite frankly I don't even care of the SD card reader works (I never use it 
anyway) but it's blocking me getting Qubes working. Is there any other way I 
can disable it, or any suggestions on other things I can try to get past this 
issue.

Thanks in advance for any help!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7ddb05b2-093e-41fb-9010-0e42b4f8bf2d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Can't seem to identify my webcam/device?

2017-05-18 Thread Unman
On Mon, May 15, 2017 at 11:13:06PM -0400, Gaiko Kyofusho wrote:
> I thought it would be fairly straight forward, going to VM SEttings ->
> Devices -> selecting one of the USB devices but after having tried all 3 of
> them (including USB 3 which i really didn't think was right), then I tried
> the 4 PCI devices, one of them crashed my system, others either gave
> errors, or no errors at all but I still couldn't access the webcams audio
> or video on that appvm so error or not those others didn't seem to work. I
> was not able to get most of the errors because they were in the little
> qubes pop-up windows and cut off so couldn't be completely read or copied
> (I assume there is another way, dmesg or something?). If it helps I pasted
> the output of lspci and lsusb below:
> 
> 00:00.0 Host bridge: Intel Corporation 2nd Generation Core Processor Family
> DRAM Controller (rev 09)
> 00:02.0 VGA compatible controller: Intel Corporation 2nd Generation Core
> Processor Family Integrated Graphics Controller (rev 09)
> 00:16.0 Communication controller: Intel Corporation 6 Series/C200 Series
> Chipset Family MEI Controller #1 (rev 04)
> 00:16.3 Serial controller: Intel Corporation 6 Series/C200 Series Chipset
> Family KT Controller (rev 04)
> 00:19.0 Ethernet controller: Intel Corporation 82579LM Gigabit Network
> Connection (rev 04)
> 00:1a.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset
> Family USB Enhanced Host Controller #2 (rev 04)
> 00:1b.0 Audio device: Intel Corporation 6 Series/C200 Series Chipset Family
> High Definition Audio Controller (rev 04)
> 00:1c.0 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family
> PCI Express Root Port 1 (rev b4)
> 00:1c.2 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family
> PCI Express Root Port 3 (rev b4)
> 00:1c.3 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family
> PCI Express Root Port 4 (rev b4)
> 00:1c.7 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family
> PCI Express Root Port 8 (rev b4)
> 00:1d.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset
> Family USB Enhanced Host Controller #1 (rev 04)
> 00:1f.0 ISA bridge: Intel Corporation QM67 Express Chipset Family LPC
> Controller (rev 04)
> 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset
> Family 6 port SATA AHCI Controller (rev 04)
> 02:00.0 System peripheral: JMicron Technology Corp. SD/MMC Host Controller
> (rev 30)
> 02:00.2 SD Host controller: JMicron Technology Corp. Standard SD Host
> Controller (rev 30)
> 03:00.0 Network controller: Intel Corporation Centrino Advanced-N 6205
> [Taylor Peak] (rev 34)
> 04:00.0 USB controller: NEC Corporation uPD720200 USB 3.0 Host Controller
> (rev 04)
> 
> Bus 004 Device 003: ID 1bcf:2805 Sunplus Innovation Technology Inc.
> Bus 004 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
> Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
> Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
> Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> 
> Thoughts?

I know that Sunplus produce webcams for Dells - I cant find that
particular device identifier though. Have you tried that device?

Have you checked to see if the webcam is available in sys-usb?

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170518191439.GF22521%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Can "see" but not access secondary storage?

2017-05-18 Thread Unman
On Mon, May 15, 2017 at 11:17:57PM -0400, Gaiko Kyofusho wrote:
> I managed (with help from qubes-users) to setup secondary storage on
> another computer but I am having trouble with my current computer.
> 
> It (they) are two drives setup with hardware raid, I partd/formated (ext4)
> them as one raid drive which seemd to go ok. Qubes "sees" it, actually it
> saw both drives for awhile but now only sees one (don't know what I did
> there) but now when I try to attach it, it qubes vm manager shows it
> attached but it doesn't seem to be accessible from things like nautilus? I
> assume I just need to partition/setup as lvm/encrupt or something like that
> but am unsure how to go about it correctly? I'd be happy to post some logs
> or something but am not sure where to go to get them?

When you attach the drive to a qube, open a terminal in the qube and
run dmesg. Look at the contents of /dev/ and see what xvd* devices are
there. If you have attached the whole drive you would expect to see
/dev/xvdi, and associated partitions.

You haven't said what template you are using, but it is possible that
you will have to manually mount the device/partition.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170518191033.GE22521%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Custom shared directory between VM's

2017-05-18 Thread Unman
On Thu, May 18, 2017 at 07:20:49AM -0700, loke...@gmail.com wrote:
> I regularly compile the latest version of Emacs for use in my development VM. 
> I simply compile Emacs from the git repository and install it in /usr/local. 
> All works the way it's supposed to.
> 
> However, I now have more than one VM where I need to use Emacs, and I would 
> like to avoid having to compile it from source in both VM's.
> 
> The only way I can think of to handle this situation is to create a separate 
> templatevm for this, enabline networking in the template so that I can use 
> git from it, and then compile Emacs there.
> 
> Is there a better way to handle this? Ideally I'd like to be able to compile 
> Emacs and install it to some specific directory that can then be made 
> available to both VM's.
> 
> What is the best way to handle this situation?
> 

That's a plausible approach.
I rarely enable further networking for templates- you can always git
clone in a disposableVM and them qvm-copy the directory in to the
template.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170518190024.GD22521%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Installing linux-firmware W/O a Working NIC

2017-05-18 Thread Unman
On Thu, May 18, 2017 at 02:48:16AM +, David L. Craig wrote:
> I'm a newb for Qubes OS, Xen, Fedora, not to mention avoiding
> systemd like the plague, so this is probably simple for someone.
> I've installed Qubes 3.2 without problem except neither of the
> RTL8111/8168/8144 NICs come up.  All r8169 references in the
> [dom0]/var/log/xen/console/guest-sys-net.log for enp0s0 and enp0s1
> indicate the links are down or not ready.  I read in the User's FAQ
> under the "Why does my network adaptor not work?" question that
> linux-firmware probably needs to be installed in the sys-net's
> templatevm (using "sudo yum"--is not an update to use dnf indicated?)
> but "sudo dnf install linux-firmware" produces a nastygram ("Error:
> failed to synchronize cache for repo 'fedora'") that seems to
> indicate there may be a chicken and egg situation afoot.  Any
> suggestions before I attempt to import files from a /lib/firmware
> somewhere via a USB-stick?

Hello David,

Welcome to Qubes.

yum is retained as placeholder for dnf in later versions, so that old
instructions will continue to work. (I assume Fedora will remove this at
some point.)

You are indeed in a chicken and egg situation. The best you can do is
download the files on another machine, or using a live distro, and then
import them as you suggest. If you have a sys-net and have
assigned the network device to sys-net you will have to install the
firmware in the template used by sys-net.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170518184941.GC22521%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Size of HVM VM's

2017-05-18 Thread Unman
On Thu, May 18, 2017 at 03:11:12AM -0700, sanderhoog...@gmail.com wrote:
> On Thursday, 18 May 2017 11:14:20 UTC+2, blacklight  wrote:
> > On Thursday, 18 May 2017 10:40:03 UTC+2, sander...@gmail.com  wrote:
> > > Hi People,
> > > 
> > > I just spinned up two HVM's (Win10 and Ubuntu).
> > > They both work fine but i can't get them fullscreen or at least a little 
> > > bigger.
> > > 
> > > Is there a way to resize the VM's? So i can do my work normally and don't 
> > > have to scroll all the time to read a single email.
> > > 
> > > I'd like to hear of you.
> > > 
> > > Greetz,
> > > 
> > > Sander
> > 
> > you would want to take a look at this 
> > :https://www.qubes-os.org/doc/full-screen-mode/
> > 
> > i have to warn you though, enableing fullscreen does have some security 
> > risks.
> > copied from the link above: 
> > 
> > Why is full screen mode potentially dangerous?
> > If one allowed one of the VMs to “own” the full screen, e.g. to show a 
> > movie on a full screen, it might not be possible for the user to know if 
> > the applications/VM really “released” the full screen, or if it has started 
> > emulating the whole desktop and is pretending to be the trusted Window 
> > Manager, drawing shapes on the screen that look e.g. like other windows, 
> > belonging to other domains (e.g. to trick the user into entering a secret 
> > passphrase into a window that looks like belonging to some trusted domain).
> > 
> > 
> > 
> > good luck :)
> 
> Thankyou for the fast response. I tried what it stated in the link you sent 
> me.
> 
> But it didn't work for my standalone Ubuntu, Win10 and Kali-Mate Machines.
> 
> Do you know how i can fix this?
> 

Have you set the screen resolution from within the HVM using normal
tools?  I don't use Windows but that works for Debian based HVMs.
Set the display resolution to that of your screen: Right Click on the
title Bar and select FullScreen.

If you just want a larger window, then just set the resolution.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170518184122.GB22521%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Help with installation

2017-05-18 Thread Chris Laprise

On 05/18/2017 01:08 PM, Franz wrote:

On Thu, May 18, 2017 at 4:55 AM, blacklight > wrote:

On Wednesday, 17 May 2017 22:38:22 UTC+2, James Chi  wrote:
> I downloaded Qubes to USB and installed on a Lenovo M91P desktop. It 
wasn't on the hardware list but wanted to try anyway. After the installation, I was 
asked to reboot which I did. I left the usb drive in and it went straight to the 
installation again. I then unplugged the usb and rebooted and then the computer gave me 
this error: Error 1962: No operating system found. Press any key to repeat boot 
sequence."
>
> Can someone help me figure this out? thanks.

have you verified the Iso before installing?
your iso could have become corrupt during your download causing
a defect installaton to take place.


perhaps you may have more than one hard disk in your desktop and you may
have installed Qubes on the hard disk that does not boot



Who hasn't done this? :)

--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/94edc184-7418-8653-423e-1424b3a993cb%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Help with installation

2017-05-18 Thread James Chi
hmmm, perhaps.  I will check.  Thanks!



James Chi

On Thu, May 18, 2017 at 1:08 PM, Franz <169...@gmail.com> wrote:

>
>
> On Thu, May 18, 2017 at 8:22 AM, James Chi  wrote:
>
>> I will verify again.  Thanks for the suggestion.
>>
>>
>>
>> James Chi
>>
>> On Thu, May 18, 2017 at 4:55 AM, blacklight 
>> wrote:
>>
>>> On Wednesday, 17 May 2017 22:38:22 UTC+2, James Chi  wrote:
>>> > I downloaded Qubes to USB and installed on a Lenovo M91P desktop. It
>>> wasn't on the hardware list but wanted to try anyway. After the
>>> installation, I was asked to reboot which I did. I left the usb drive in
>>> and it went straight to the installation again. I then unplugged the usb
>>> and rebooted and then the computer gave me this error: Error 1962: No
>>> operating system found. Press any key to repeat boot sequence."
>>> >
>>> > Can someone help me figure this out? thanks.
>>>
>>> have you verified the Iso before installing?
>>> your iso could have become corrupt during your download causing a defect
>>> installaton to take place.
>>>
>>>
> perhaps you may have more than one hard disk in your desktop and you may
> have installed Qubes on the hard disk that does not boot
>
>
>> --
>>> You received this message because you are subscribed to a topic in the
>>> Google Groups "qubes-users" group.
>>> To unsubscribe from this topic, visit https://groups.google.com/d/to
>>> pic/qubes-users/iFP6KpOohHY/unsubscribe.
>>> To unsubscribe from this group and all its topics, send an email to
>>> qubes-users+unsubscr...@googlegroups.com.
>>> To post to this group, send email to qubes-users@googlegroups.com.
>>> To view this discussion on the web visit https://groups.google.com/d/ms
>>> gid/qubes-users/c0b1fd67-f368-4d55-a338-431b78f6b265%40googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "qubes-users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to qubes-users+unsubscr...@googlegroups.com.
>> To post to this group, send email to qubes-users@googlegroups.com.
>> To view this discussion on the web visit https://groups.google.com/d/ms
>> gid/qubes-users/CAKz%2BW1_ZPOQVdvrSKf2h1UDjpMfEMMoWBxJ8hogm%
>> 2BwAPTXgq0A%40mail.gmail.com
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAKz%2BW18yjeDCVVCfECRX6ZgJbn2fmLeVaupvM7mR18fCbGHE0w%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Help with installation

2017-05-18 Thread Franz
On Thu, May 18, 2017 at 8:22 AM, James Chi  wrote:

> I will verify again.  Thanks for the suggestion.
>
>
>
> James Chi
>
> On Thu, May 18, 2017 at 4:55 AM, blacklight 
> wrote:
>
>> On Wednesday, 17 May 2017 22:38:22 UTC+2, James Chi  wrote:
>> > I downloaded Qubes to USB and installed on a Lenovo M91P desktop. It
>> wasn't on the hardware list but wanted to try anyway. After the
>> installation, I was asked to reboot which I did. I left the usb drive in
>> and it went straight to the installation again. I then unplugged the usb
>> and rebooted and then the computer gave me this error: Error 1962: No
>> operating system found. Press any key to repeat boot sequence."
>> >
>> > Can someone help me figure this out? thanks.
>>
>> have you verified the Iso before installing?
>> your iso could have become corrupt during your download causing a defect
>> installaton to take place.
>>
>>
perhaps you may have more than one hard disk in your desktop and you may
have installed Qubes on the hard disk that does not boot


> --
>> You received this message because you are subscribed to a topic in the
>> Google Groups "qubes-users" group.
>> To unsubscribe from this topic, visit https://groups.google.com/d/to
>> pic/qubes-users/iFP6KpOohHY/unsubscribe.
>> To unsubscribe from this group and all its topics, send an email to
>> qubes-users+unsubscr...@googlegroups.com.
>> To post to this group, send email to qubes-users@googlegroups.com.
>> To view this discussion on the web visit https://groups.google.com/d/ms
>> gid/qubes-users/c0b1fd67-f368-4d55-a338-431b78f6b265%40googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-users/CAKz%2BW1_ZPOQVdvrSKf2h1UDjpMfEMMoWBxJ8h
> ogm%2BwAPTXgq0A%40mail.gmail.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAPzH-qAT16XwF%3D3QpE_yxJ6_0DH2serGoZmsViy-EH0hpyn4pA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Installation Issues on WD MyPassport Ultra Drive

2017-05-18 Thread Dara Vakili
Sorry the graphical installer, that's what I mean with blue installer. I'll 
take a look at my hardware but it should work. There's people who have the same 
model laptop with qubes installed.  

Sent from my iPhone

> On 18 May 2017, at 15:24, Mystic Buyer  wrote:
> 
> You might want to check the hardware support of your laptop with qubes. I am 
> not sure of the blue installer. If the graphical installer starts then your 
> laptop is compatible with qubes and will install it. Not sure whats causing 
> the problem in your case.
> 
>> On Thu, May 18, 2017 at 1:55 AM, Dara Vakili  wrote:
>> Hi Mystic 
>> 
>> So When I do test and install, I get that error when the test begins. 
>> 
>> If I reboot and try to install without the test, I get to the blue installer 
>> (anaconda?) and it asks me what language and key layout for qubes. The 
>> second I see that screen it fails and outputs a long error that I currently 
>> don't have a way of saving. 
>> 
>> I'll try downloading another version of the ISO but it shouldn't be due to 
>> the ISO integrity. 
>> 
>> I know qubes works on this laptop, people on the qubes Reddit have managed, 
>> just trying to also see if they also had these issues. 
>> 
>> Bests
>> D  
>> 
>> Sent from my iPhone
>> 
>>> On 18 May 2017, at 01:49, Mystic Buyer  wrote:
>>> 
>>> Hi,
>>> 
>>> Did the anaconda installer start? or did this happen when you chose test 
>>> and install. If it happened during test and install and it did not get to 
>>> graphical installer at all, you should probably test the integrity of the 
>>> downloaded qubes iso
>>> as per the instruction given on the qubes os site and just start the 
>>> installation without testing it from the menu. Go straight to install qubes 
>>> I think the second option.
>>> 
 On Wed, May 17, 2017 at 11:19 AM, Dara Vakili  wrote:
 Thanks for that. I was able to boot from the USB. When starting by testing 
 media I get the report in the photo, sorry for the res 
 
 If I go to install, the installer asks me what language and instantly 
 fails due to some random error 
 
 Bests 
 D
 
 
 
 Sent from my iPhone
 
> On 17 May 2017, at 15:26, Mystic Buyer  wrote:
> 
> Hi, 
> 
> You may want to turn off secure boot in bios, that sometimes causes the 
> usb to not boot
> 
>> On Wed, May 17, 2017 at 9:10 AM, Dara Vakili  wrote:
>> Hey all
>> 
>>  
>> 
>> I’m still struggling to get it to work. I have used rubus to write the 
>> qubes ISO as a dd image onto a usb stick. When it was complete I could 
>> see two folders.
>> 
>>  
>> 
>> I restart my laptop with UEFI bios putting USB boot as my primary. For 
>> some reason it won’t boot from the USB. Does the qubes installation need 
>> to be done in legacy mode or it works with UEFI?
>> 
>>  
>> 
>> Best Wishes
>> 
>> Dara
>> 
>>  
>> 
>> Sent from Mail for Windows 10
>> 
>>  
>> 
>> From: Franz
>> Sent: 15 May 2017 21:35
>> To: dvakil...@gmail.com
>> Cc: qubes-users@googlegroups.com
>> Subject: Re: [qubes-users] Installation Issues on WD MyPassport Ultra 
>> Drive
>> 
>>  
>> 
>>  
>> 
>>  
>> 
>> On Mon, May 15, 2017 at 4:30 PM,  wrote:
>> 
>> Hey Guys
>> 
>>  
>> 
>> Trying to write ISO as DD with rufus onto my external HDD. When I use 
>> rufus, tell it to read all files and select the iso, confirm I want it 
>> as dd image and not as iso then I hit start. The bugger gets to around 
>> 15% after like 4 hours then fails with an error message. Error message 
>> just says write failure.  
>> 
>>  
>> 
>> The HDD works fine but there’s some issue with my windows 10 laptop from 
>> formatting it properly. I had to download minitool partition wizard as 
>> windows couldn’t partition or format it.
>> 
>>  
>> 
>> Anyone know any other dd writer that works on windows? Or anything else 
>> I can try?
>> 
>> All I want to do is install qubes onto this 2TB external HDD. Any advice 
>> greatly appreciated xxx
>> 
>>  
>> 
>> Two notes:
>> 
>> 1. if you do not find any better way, you may boot a live linux 
>> distribution over your windows installation without damaging it.
>> 
>> 2. To install Qubes onto this 2TB external HDD I imagine you need 
>> another source (such as a USB pendrive) for keeping the Qubes iso 
>> installer. Then, installation should start with the pendrive and the 2TB 
>> HDD will be the target. Once I did that and it worked.
>> 
>> Best
>> 
>> Fran
>> 
>>  
>> 
>> Bests
>> 
>> D
>> 
>>  
>> 

[qubes-users] Custom shared directory between VM's

2017-05-18 Thread lokedhs
I regularly compile the latest version of Emacs for use in my development VM. I 
simply compile Emacs from the git repository and install it in /usr/local. All 
works the way it's supposed to.

However, I now have more than one VM where I need to use Emacs, and I would 
like to avoid having to compile it from source in both VM's.

The only way I can think of to handle this situation is to create a separate 
templatevm for this, enabline networking in the template so that I can use git 
from it, and then compile Emacs there.

Is there a better way to handle this? Ideally I'd like to be able to compile 
Emacs and install it to some specific directory that can then be made available 
to both VM's.

What is the best way to handle this situation?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ecced993-8dad-4200-9537-4f213f68b3bd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: AMD Ryzen working with IOMMU, HCL results attached

2017-05-18 Thread skilpa3
On Tuesday, May 16, 2017 at 1:35:20 AM UTC-4, Bjoern Christoph wrote:
> Am Montag, 15. Mai 2017 23:00:25 UTC+2 schrieb Grzesiek Chodzicki:
> > W dniu poniedziałek, 15 maja 2017 21:24:30 UTC+2 użytkownik Bjoern 
> > Christoph napisał:
> > > Hi all,
> > > 
> > > Attached are the HCL results of my Ryzen system.
> > > 
> > > It did NOT work out of the box on Qubes - IOMMU was not available. 
> > > However, Ubuntu stated it's working (BIOS IOMMU looks great) so I played 
> > > around a bit.
> > > 
> > > Basically, two things are needed for working IOMMU in Xen used by Qubes:
> > > 1) Update Xen with an IOMMU patch from AMD
> > > 2) Update Xen with family 17h == Ryzen
> > > 
> > > For step 1): Apply this patch (part or Xen 4.8.0): 
> > > https://patchwork.kernel.org/patch/9145119/
> > > 
> > > For step 2): xen/arch/x86/oprofile/nmi_int.c - Create a "case 0x17:" 
> > > entry which is the same as "case 0x15:"
> > > 
> > > I installed Qubes, then proceeded as described to compile Qubes from 
> > > scratch. Before I did "make vmm-xen" I changed the above files within the 
> > > xen*.gz file. After that, I moved the files to dom0 and forced a 
> > > reinstall of the RPM files.
> > > 
> > > Rebooted and voila, you can see the resul in the files :) Now I can get a 
> > > TPM I guess ;)
> > > 
> > > I posted this nmi_int.c patch also on the xen-devel mailing list, let's 
> > > see if it's enough for them.
> > > 
> > > Maybe these two patches can be added to Qubes 3.2 (if they work 
> > > properly). Not sure if there is anything else I can do to test if IOMMU 
> > > is working properly, if something is there to test that please let me 
> > > know!
> > > 
> > > Cheers,
> > > Bjoern
> > 
> > Does PCI passthrough work for Windows VMs now that IOMMU is enabled?
> 
> Ok, it's NOT working after all. Trying to install a HVM causes a reboot... so 
> I guess there is more work left there after all.
> 
> You can ignore the HCL report then as well.

Thanks for looking into this though. I'm starting to part out a system that 
will be specifically for Qubes usage and I'm very interested in the new AMD 
chips.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/81bfbbe5-f063-41da-a45a-52bba3de4015%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Help with installation

2017-05-18 Thread James Chi
I will verify again.  Thanks for the suggestion.



James Chi

On Thu, May 18, 2017 at 4:55 AM, blacklight  wrote:

> On Wednesday, 17 May 2017 22:38:22 UTC+2, James Chi  wrote:
> > I downloaded Qubes to USB and installed on a Lenovo M91P desktop. It
> wasn't on the hardware list but wanted to try anyway. After the
> installation, I was asked to reboot which I did. I left the usb drive in
> and it went straight to the installation again. I then unplugged the usb
> and rebooted and then the computer gave me this error: Error 1962: No
> operating system found. Press any key to repeat boot sequence."
> >
> > Can someone help me figure this out? thanks.
>
> have you verified the Iso before installing?
> your iso could have become corrupt during your download causing a defect
> installaton to take place.
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "qubes-users" group.
> To unsubscribe from this topic, visit https://groups.google.com/d/
> topic/qubes-users/iFP6KpOohHY/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-users/c0b1fd67-f368-4d55-a338-431b78f6b265%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAKz%2BW1_ZPOQVdvrSKf2h1UDjpMfEMMoWBxJ8hogm%2BwAPTXgq0A%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Laptop with discrete graphics card, any chance it'll work?

2017-05-18 Thread lokedhs
On Thursday, 18 May 2017 03:17:42 UTC+8, Vít Šesták  wrote:

> With external GPU, be careful about additional outputs (HDMI/DVI/DP/VGA). 
> They 
> might be wired to the dedicated GPU, which can cause various problems with 
> your 
> setup. First, it is generally poorly supported with Linux. (It should be 
> reportedly better soon, but it might require Wayland, which you will likely 
> wait 
> a while for.) Second, if you manage to attach the second GPU to an AppVM, you 
> obviously cannot access it from dom0.

Thanks for the information.

I have no intention of connecting an external monitor, so the HDMI issue is not 
a problem for me. Attaching the GPU to an appvm is exactly what I need to do, 
since the only VM that needs it is the one I run my development environment in.

Does this work with all laptops that has a Radeon GPU? Or is there something 
else I need to check before committing?

Finally, I've been looking for Radeon laptops, and all I've found so far are 
big "mobile workstation" machines, weighing around 4 kg or more. Does anyone 
know of a smaller machine with Radeon graphics?

Thanks,
Elias

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3a17f9f8-50a6-4231-b96b-67cb5a421d8f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Size of HVM VM's

2017-05-18 Thread sanderhoog . sh
On Thursday, 18 May 2017 11:14:20 UTC+2, blacklight  wrote:
> On Thursday, 18 May 2017 10:40:03 UTC+2, sander...@gmail.com  wrote:
> > Hi People,
> > 
> > I just spinned up two HVM's (Win10 and Ubuntu).
> > They both work fine but i can't get them fullscreen or at least a little 
> > bigger.
> > 
> > Is there a way to resize the VM's? So i can do my work normally and don't 
> > have to scroll all the time to read a single email.
> > 
> > I'd like to hear of you.
> > 
> > Greetz,
> > 
> > Sander
> 
> you would want to take a look at this 
> :https://www.qubes-os.org/doc/full-screen-mode/
> 
> i have to warn you though, enableing fullscreen does have some security risks.
> copied from the link above: 
> 
> Why is full screen mode potentially dangerous?
> If one allowed one of the VMs to “own” the full screen, e.g. to show a movie 
> on a full screen, it might not be possible for the user to know if the 
> applications/VM really “released” the full screen, or if it has started 
> emulating the whole desktop and is pretending to be the trusted Window 
> Manager, drawing shapes on the screen that look e.g. like other windows, 
> belonging to other domains (e.g. to trick the user into entering a secret 
> passphrase into a window that looks like belonging to some trusted domain).
> 
> 
> 
> good luck :)

Thankyou for the fast response. I tried what it stated in the link you sent me.

But it didn't work for my standalone Ubuntu, Win10 and Kali-Mate Machines.

Do you know how i can fix this?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/eafde545-bfdf-40ba-b6ca-863d3678241b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Size of HVM VM's

2017-05-18 Thread blacklight
On Thursday, 18 May 2017 10:40:03 UTC+2, sander...@gmail.com  wrote:
> Hi People,
> 
> I just spinned up two HVM's (Win10 and Ubuntu).
> They both work fine but i can't get them fullscreen or at least a little 
> bigger.
> 
> Is there a way to resize the VM's? So i can do my work normally and don't 
> have to scroll all the time to read a single email.
> 
> I'd like to hear of you.
> 
> Greetz,
> 
> Sander

you would want to take a look at this 
:https://www.qubes-os.org/doc/full-screen-mode/

i have to warn you though, enableing fullscreen does have some security risks.
copied from the link above: 

Why is full screen mode potentially dangerous?
If one allowed one of the VMs to “own” the full screen, e.g. to show a movie on 
a full screen, it might not be possible for the user to know if the 
applications/VM really “released” the full screen, or if it has started 
emulating the whole desktop and is pretending to be the trusted Window Manager, 
drawing shapes on the screen that look e.g. like other windows, belonging to 
other domains (e.g. to trick the user into entering a secret passphrase into a 
window that looks like belonging to some trusted domain).



good luck :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5877d39e-223f-4fed-a7b9-823b2fc46054%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Help with installation

2017-05-18 Thread blacklight
On Wednesday, 17 May 2017 22:38:22 UTC+2, James Chi  wrote:
> I downloaded Qubes to USB and installed on a Lenovo M91P desktop. It wasn't 
> on the hardware list but wanted to try anyway. After the installation, I was 
> asked to reboot which I did. I left the usb drive in and it went straight to 
> the installation again. I then unplugged the usb and rebooted and then the 
> computer gave me this error: Error 1962: No operating system found. Press any 
> key to repeat boot sequence." 
> 
> Can someone help me figure this out? thanks.

have you verified the Iso before installing?
your iso could have become corrupt during your download causing a defect 
installaton to take place.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c0b1fd67-f368-4d55-a338-431b78f6b265%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Size of HVM VM's

2017-05-18 Thread sanderhoog . sh
Hi People,

I just spinned up two HVM's (Win10 and Ubuntu).
They both work fine but i can't get them fullscreen or at least a little bigger.

Is there a way to resize the VM's? So i can do my work normally and don't have 
to scroll all the time to read a single email.

I'd like to hear of you.

Greetz,

Sander

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1b9867fd-af7c-495b-9ae9-a7630bc5650d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: "root=/dev/mapper/dmroot crashed"

2017-05-18 Thread qubenix
devr...@gmail.com:
> Hmm.  Two devices with the same major:minor numbers? /dev/mapper/dmroot & 
> /dev/dm-0
> 
> /dev/mapper/dmroot does not appear in Dom0, nor does any error appear in 
> journalctl.  I do find that device in sys-{net,firewall,whonix,usb} and in 
> those cases it always appears as:
> 
> ls -l /dev/mapper/dmroot
> brw-rw 1 root disk 251, 0 May 13 20:11 /dev/mapper/dmroot
> 
> lsblk /dev/xvdc
> NAME   MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
> xvdc   202:32   1 11.5G  0 disk 
> ├─xvdc1202:33   11G  0 part [SWAP]
> └─xvdc2202:34   1 10.5G  0 part 
>   └─dmroot 251:00   10G  0 dm   /
> 
> In each of these VM's I find only one error related to dmroot.  On a single 
> bootup (but not subsequently) and in all the VM's:
> 
> May 13 02:56:21 fedora-25 systemd-udevd[7757]: conflicting device node 
> '/dev/mapper/dmroot' found, link to '/dev/dm-0' will not be created
> 
> In all those VM's I also find:
> 
> ls -l /dev/dm-0
> brw-rw 1 root disk 251, 0 May 13 20:11 /dev/dm-0
> 
> Notice the same major:minor numbers as /dev/mapper/dmroot
> 

I'm also getting this error from my usb vm on startup. It has a Fedora24
template. The template is untouched from initial Qubes install, aside
from updates via qubes-vm-r3.2-current-testing repo.

For me the issue just started today for no obvious reason.

-- 
qubenix
GPG: B536812904D455B491DCDCDD04BE1E61A3C2E500

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f04ec9b9-7990-5aa8-3e10-3008c836a208%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] which things are, and which things are not encrypted on the disk.

2017-05-18 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 05/18/2017 09:48 AM, pandakaas...@gmail.com wrote:
> I recently came across this PDF file stating that dom0 and the
> hypervisor (Xen) are stored unencrypted on the disk, because the
> disk wouldnt be able to boot(According to the PDF). but as far as I
> know, only /boot and GRUB are stored unencrypted.  so is this PDF
> file wrong, or was I wrong (or both?).
> 
> Here you have a link to the file, you can find it on page 7: 
> http://www.cs.uu.nl/docs/vakken/b3sec/Proj15/QubesOS.pdf
> 

The Xen itself and the dom0 kernel (located in /boot) are both
unencrypted.

This can be the reason using TPM and AEM:
https://blog.invisiblethings.org/2011/09/07/anti-evil-maid.html
https://www.qubes-os.org/doc/anti-evil-maid/


- -- 
Zrubi
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=69AL
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dc9cd077-2a20-7491-d859-396d43c3b6de%40zrubi.hu.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] which things are, and which things are not encrypted on the disk.

2017-05-18 Thread pandakaasftw
I recently came across this PDF file stating that dom0 and the hypervisor (Xen) 
are stored unencrypted on the disk, because the disk wouldnt be able to 
boot(According to the PDF). but as far as I know, only /boot and GRUB are 
stored unencrypted.  so is this PDF file wrong, or was I wrong (or both?).

Here you have a link to the file, you can find it on page 7: 
http://www.cs.uu.nl/docs/vakken/b3sec/Proj15/QubesOS.pdf

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5ad7fce7-e5c4-4f9f-8895-e90e0dc3cb18%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.