[qubes-users] Re: Installation from USB fails

2017-06-11 Thread Richard Brown 
Have you read?

https://www.qubes-os.org/doc/uefi-troubleshooting/

Id also recommend testing usb drive on another computer to see if it works 
there.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f3f0425c-0852-4476-9a11-1619dfbc4530%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] RAM available

2017-06-11 Thread nimrod . ugo 
On Sunday, June 11, 2017 at 3:43:49 PM UTC-5, Unman wrote:
> On Sun, Jun 11, 2017 at 10:18:45PM +0200, Patrik Hagara wrote:
> > On 06/11/2017 09:57 PM, nimrod@gmail.com wrote:
> > > Is there any way to make sure that the Qubes OS system can recognize all 
> > > the RAM in my system?
> > 
> > Issuing `xl info` from a dom0 terminal will output the total system RAM
> > size usable by Xen, look for the "total_memory" line.
> > 
> > 
> > Cheers,
> > Patrik
> > 
> 
> Questions about RAM in dom0 actually feature in the Xen FAQs - xl info shows
> the system RAM in MB - "free memory" in the output shows the total
> not allocated to any qube or dom0, which can be useful.

I got it! Thank you

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/56fd7a39-4505-42c2-9778-c4424a118de7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Attempting to make dedicated USB Qube

2017-06-11 Thread Franz 
On Sun, Jun 11, 2017 at 10:16 PM, Christopher Thacker  wrote:

>
> On Sun, 11 Jun 2017 at 17:29, blacklight  wrote:
>
>> On Sunday, 11 June 2017 03:56:50 UTC+2, Christopher Thacker  wrote:
>> > I want to make a dedicated USB Qube per the directions shown here:
>> >
>> > https://www.qubes-os.org/doc/usb/
>> >
>> > However I have some problems:
>> >
>> > 1) The directions state "You can create a USB qube using the management
>> stack by performing the following steps as root in dom0:"
>> >
>> > Unfortunately I don't know how to access root in Qubes 3.2, which is
>> what I use.  I don't even know if root is enabled.
>> >
>> > How should I proceed?
>> >
>> > 2) The same directions briefly discuss hiding all USB controllers from
>> dom0.
>> >
>> > Should I do so?
>> >
>> > FYI - My system is Qubes 3.2 on i7-4700hq at 2.4ghz with 4 USB 3.0
>> slots and 8gb system ram.
>> >
>> > Thank you.
>>
>> first,with as root, they mean you should type "sudo" in front of all the
>> commands (without the quotation marks) in the dom0 command line.
>> second, it depends on your threat level, as it is described: during boot,
>> dom0 is shortly exposed to all the usb controllers, so if one where to be
>> able to plug in a malicous usb drive during the early boot period, he might
>> be able to takeover your system, this can be prevented by blacklisting all
>> usb controllers in dom0. deciding whether this might be a threat in your
>> situation is up to you and depends entirely on your threat level.
>>
>
>
> unman, blacklight -
>
> I appreciate your input but I decided at this point, Qubes requires more
> skill than I can muster.  It is a fantastic product but I just can't keep
> track of the moving parts.
>
>
I agree that without some confidence with the command line and the terminal
you definitely need some luck to be able to use Qubes long term.  However
luck depends also on the laptop you have. Some are more compatible than
others. I selected my laptop just to be able to run Qubes reliably.

Of course it is possible to use it also with less compatible ones, but then
you need more time and experience to fix the problems.

--
>> You received this message because you are subscribed to a topic in the
>> Google Groups "qubes-users" group.
>> To unsubscribe from this topic, visit https://groups.google.com/d/
>> topic/qubes-users/AS8PkqO9zVI/unsubscribe.
>> To unsubscribe from this group and all its topics, send an email to
>> qubes-users+unsubscr...@googlegroups.com.
>> To post to this group, send email to qubes-users@googlegroups.com.
>> To view this discussion on the web visit https://groups.google.com/d/
>> msgid/qubes-users/4e0a2518-1df4-4583-a1d0-17469b5604bb%40googlegroups.com
>> .
>> For more options, visit https://groups.google.com/d/optout.
>>
> --
> -- Christopher Thacker
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-users/CANpb_zVPD1t7i8rA%3DxL-gHYe%
> 2BSB9sJpPM%2BfDhnJfhDfLpRqpyw%40mail.gmail.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAPzH-qAjkY5gFopvmRuQ7C4xu_b32W4VAyWfPjkq0PaVqF30-A%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Attempting to make dedicated USB Qube

2017-06-11 Thread Christopher Thacker 
On Sun, 11 Jun 2017 at 17:29, blacklight  wrote:

> On Sunday, 11 June 2017 03:56:50 UTC+2, Christopher Thacker  wrote:
> > I want to make a dedicated USB Qube per the directions shown here:
> >
> > https://www.qubes-os.org/doc/usb/
> >
> > However I have some problems:
> >
> > 1) The directions state "You can create a USB qube using the management
> stack by performing the following steps as root in dom0:"
> >
> > Unfortunately I don't know how to access root in Qubes 3.2, which is
> what I use.  I don't even know if root is enabled.
> >
> > How should I proceed?
> >
> > 2) The same directions briefly discuss hiding all USB controllers from
> dom0.
> >
> > Should I do so?
> >
> > FYI - My system is Qubes 3.2 on i7-4700hq at 2.4ghz with 4 USB 3.0 slots
> and 8gb system ram.
> >
> > Thank you.
>
> first,with as root, they mean you should type "sudo" in front of all the
> commands (without the quotation marks) in the dom0 command line.
> second, it depends on your threat level, as it is described: during boot,
> dom0 is shortly exposed to all the usb controllers, so if one where to be
> able to plug in a malicous usb drive during the early boot period, he might
> be able to takeover your system, this can be prevented by blacklisting all
> usb controllers in dom0. deciding whether this might be a threat in your
> situation is up to you and depends entirely on your threat level.
>


unman, blacklight -

I appreciate your input but I decided at this point, Qubes requires more
skill than I can muster.  It is a fantastic product but I just can't keep
track of the moving parts.

Thank you.

>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "qubes-users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/qubes-users/AS8PkqO9zVI/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/4e0a2518-1df4-4583-a1d0-17469b5604bb%40googlegroups.com
> .
> For more options, visit https://groups.google.com/d/optout.
>
-- 
-- Christopher Thacker

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CANpb_zVPD1t7i8rA%3DxL-gHYe%2BSB9sJpPM%2BfDhnJfhDfLpRqpyw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Attempting to make dedicated USB Qube

2017-06-11 Thread blacklight 
On Sunday, 11 June 2017 03:56:50 UTC+2, Christopher Thacker  wrote:
> I want to make a dedicated USB Qube per the directions shown here:
> 
> https://www.qubes-os.org/doc/usb/
> 
> However I have some problems:
> 
> 1) The directions state "You can create a USB qube using the management stack 
> by performing the following steps as root in dom0:"
> 
> Unfortunately I don't know how to access root in Qubes 3.2, which is what I 
> use.  I don't even know if root is enabled.  
> 
> How should I proceed?
> 
> 2) The same directions briefly discuss hiding all USB controllers from dom0.  
> 
> Should I do so?
> 
> FYI - My system is Qubes 3.2 on i7-4700hq at 2.4ghz with 4 USB 3.0 slots and 
> 8gb system ram.
> 
> Thank you.

first,with as root, they mean you should type "sudo" in front of all the 
commands (without the quotation marks) in the dom0 command line.
second, it depends on your threat level, as it is described: during boot, dom0 
is shortly exposed to all the usb controllers, so if one where to be able to 
plug in a malicous usb drive during the early boot period, he might be able to 
takeover your system, this can be prevented by blacklisting all usb controllers 
in dom0. deciding whether this might be a threat in your situation is up to you 
and depends entirely on your threat level.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4e0a2518-1df4-4583-a1d0-17469b5604bb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] trying to mount a USB drive w/o a sys-usb in Terminal

2017-06-11 Thread Unman 
On Sun, Jun 11, 2017 at 10:12:48AM -1000, qubester wrote:
> 
> I seem to have done this successfully sometime not long ago, but now am
> unable to do it again
> 
> 1)
> qvm-block -l
> dom0:sdb3
> 2)
> I then attached to the AppVM I want successfully
> 3)
> However, in the file system it is not listed as a device,  per below I'm
> supposed to mount it ?
> 
> I don't know the proper command
> 
> mount sdb3 /dev
> 
> etc
> 
> Assuming I've attached the correct partition I guess ,  when I did this via
> the VM GUI it showed some devices , but complained they were in windows
> format or something.
> 
> So, went to trying it via CLI , I may even be repeating  troubleshooting
> from when I did this last.
> 
> I don't have the USB device allocated in the VM tabs, because when I do that
> I lose  my USB mouse control and am left with only the PS2 keyboard, and end
> up having to reboot Qubes :)
> 
> 
> 
> 
> https://www.qubes-os.org/doc/usb/
> If the device does not appear in Nautilus, you will need to mount it
> manually. The device will show up as /dev/xvdi (or /dev/xvdj if there is
> already one device attached  if two, /dev/xvdk, and so on).

If you have attached the device, it should appear as /dev/xvdi, with
partitions shown as /dev/xvdi1 /dev/xvdi2 etc.
If you attach a PARTITION it will appear as /dev/xvdi - it seems this
is what you have done.

In a terminal in the qube to which you attached the block device,
mount it:
sudo mount /dev/xvdi /mnt

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170611204930.GC28149%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] RAM available

2017-06-11 Thread Unman 
On Sun, Jun 11, 2017 at 10:18:45PM +0200, Patrik Hagara wrote:
> On 06/11/2017 09:57 PM, nimrod@gmail.com wrote:
> > Is there any way to make sure that the Qubes OS system can recognize all 
> > the RAM in my system?
> 
> Issuing `xl info` from a dom0 terminal will output the total system RAM
> size usable by Xen, look for the "total_memory" line.
> 
> 
> Cheers,
> Patrik
> 

Questions about RAM in dom0 actually feature in the Xen FAQs - xl info shows
the system RAM in MB - "free memory" in the output shows the total
not allocated to any qube or dom0, which can be useful.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170611204345.GB28149%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] RAM available

2017-06-11 Thread Patrik Hagara 
On 06/11/2017 09:57 PM, nimrod@gmail.com wrote:
> Is there any way to make sure that the Qubes OS system can recognize all the 
> RAM in my system?

Issuing `xl info` from a dom0 terminal will output the total system RAM
size usable by Xen, look for the "total_memory" line.


Cheers,
Patrik

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fee52c20-d1c7-d6ec-1f10-76b92c059f69%40gmail.com.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] trying to mount a USB drive w/o a sys-usb in Terminal

2017-06-11 Thread qubester 


I seem to have done this successfully sometime not long ago, but now am 
unable to do it again


1)
qvm-block -l
dom0:sdb3
2)
I then attached to the AppVM I want successfully
3)
However, in the file system it is not listed as a device,  per below I'm 
supposed to mount it ?


I don't know the proper command

mount sdb3 /dev

etc

Assuming I've attached the correct partition I guess ,  when I did this 
via the VM GUI it showed some devices , but complained they were in 
windows format or something.


So, went to trying it via CLI , I may even be repeating  troubleshooting 
from when I did this last.


I don't have the USB device allocated in the VM tabs, because when I do 
that I lose  my USB mouse control and am left with only the PS2 
keyboard, and end up having to reboot Qubes :)





https://www.qubes-os.org/doc/usb/
If the device does not appear in Nautilus, you will need to mount it 
manually. The device will show up as /dev/xvdi (or /dev/xvdj if there is 
already one device attached  if two, /dev/xvdk, and so on).


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a05d90c1-877b-94a3-d92c-f6a9903eabbd%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] RAM available

2017-06-11 Thread Ilpo Järvinen 
On Sun, 11 Jun 2017, nimrod@gmail.com wrote:

> I just upgrade the RAM on my laptop from 8GB to 16GB.
> 
> But when i run cat /proc/meminfo in my terminal dom0, reports of 4GB. 
> The Qubes VM manager RAM column seems to sum to more than 8GB, however.

Dom0 memory is intentionally limited to 4GB (and actually even less than 
that if your physical RAM would be smaller). Do you see some issue due to 
this limitation or you just noticed that it's limited?

> Is there any way that can guarantee the total amount of RAM available 
> for my system Qubes?

Qubes "system" has access to more memory than dom0 alone.

Anyway, it's possible to tweak the 4GB limit from grub cmdlines but 
unless you have some issues, you probably shouldn't increase it.

-- 
 i.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/alpine.DEB.2.20.1706112248260.21248%40whs-18.cs.helsinki.fi.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Attempting to make dedicated USB Qube

2017-06-11 Thread Franz 
On Sun, Jun 11, 2017 at 11:15 AM, Christopher Thacker  wrote:

> I made the sys-usb (it is a red icon).
>
> I noticed that I can now attach a USB device to dom0 but I still can't
> attach a USB device to a specific Qube.
>
> Is installing "qubes-usb-proxy" my next step?  It do I have options?
>
>
If you do not find better solutions I would try to make a backup of your
VMs to your hard disk mounted on dom0,  Then reinstall Qubes using the
option that creates USB qube. After that restore your VMs
Best
Fran

> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-users/42906df2-662f-4110-8449-662e8c5ebe03%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAPzH-qBwAwVbHki-GS2NmpoagZvjWMrfB0wKbAdqyPxUZohhsQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Anyone got a intel z270 motherboard to work with Qube os

2017-06-11 Thread carrefamilyhomestay 
On Saturday, June 10, 2017 at 8:35:52 PM UTC-4, qubenix wrote:
> carr...@gmail.com:
> > Hi,
> > 
> > My motherboard broke and I need to rebuild my computer. I am looking to get 
> > something that will last forever and has all the bells and whistles. I am 
> > currently looking at the Asus prime 
> > z270-K(https://www.newegg.com/Product/Product.aspx?Item=N82E16813132938=1).
> >  Has anyone gotten qube os to work on this board? 
> > 
> > Has anyone gotten qube os on any z270? Any help would be really 
> > appreciated. 
> > 
> 
> I just built a rig around z170 board. Everything is working fine so far.
> I'll be doing an HCL once my tpm module arrives.
> 
> -- 
> qubenix
> GPG: B536812904D455B491DCDCDD04BE1E61A3C2E500

Which model motherboard? What is HCL? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/31554e1e-345d-421f-9961-7c491daf6cac%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: No bootable device neither in BIOS or UEFI after Qubes R3 fresh install

2017-06-11 Thread arnaud . fortier 
I had the same issue on a Thinkpad x230 where I installed a second hard drive 
using the m-SATA connector, in the BIOS I switched the first boot disk to be 
the m-SATA, told Qubes to use both disks and first reboot failed right after 
grub's menu without any error messages, I reinstall Qubes from scratch changing 
the boot order to boot on the SATA disk first then m-SATA and it did the trick. 
Hope this helps!

Thanks for the distribution :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e48cb7f0-6915-425b-b1a8-32866dcf822f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.