Re: [qubes-users] Re: sys-whonix / tor / thunderbird
2017-11-25 20:19 GMT-02:00 entr0py <3n7r0...@gmail.com>: > Not sure what you mean by "AppVM level" but "New Identity" marks ALL > circuits dirty regardless of where it's invoked. So using "New Identity" in > anon-whonix-6 is the same as using it in sys-whonix for purposes of > generating new circuits for Thunderbird. TorButton (in Tor Browser) > performs a few additional tasks as described in link below compared to arm, > but as it relates to circuits, they both send SIGNAL NEWNYM. > > https://stem.torproject.org/faq.html#how-do-i-request-a- > new-identity-from-tor > https://www.torproject.org/projects/torbrowser/design/#new-identity > I wasn't aware of that, good to know! -- iuri.neocities.org -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAF0bz4QdZ2Ts4thWCAnhNeLVrrF9N8fgeYTEZ4E%3DYnMctTPjBg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] HCL - ASRock Z170 Pro4 - i7-6700k
Just installed Qubes 4.0-RC2. I had issues with the installation (was getting libvirt errors), I solved the errors by temporarily switching all VMs to PV, update dom0 and restore them back to HVM. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c40e27bf-74f1-43a0-9593-29ed09083869%40googlegroups.com. For more options, visit https://groups.google.com/d/optout. Qubes-HCL-ASRock-Z170_Pro4-20171125-223100.yml Description: Binary data
[qubes-users] will uninstalling a base template delete a clone of the template?
I recently made a kali template vm by cloning the qubes debian 8 template and converting it to kali. If I were to remove the base debian 8 template from dom0, would this also remove the cloned kali template vm? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/27b13bcc-1e33-4a18-997c-2e28bac33b61%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: How To Replace Libvirt Drivers
On Saturday, November 25, 2017 at 8:06:27 PM UTC-8, Person wrote: > “In an earlier install, after I got this error, I switched all VMs to using > pv virt_mode and managed to get `qubes-dom0-update` to run, after doing that, > I still got the same weird /proc/cpuinfo and lscpu output but VMs were > booting OK with hvm.” > > How exactly do you switch VMs to using pv virt_mode? The only thing I > actually want is for the VMs to book correctly, and that would save me a lot > of trouble. sudo qvm-prefs virt_mode pv -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5f034717-237a-45aa-a158-bfaa00ca4110%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: How To Replace Libvirt Drivers
“In an earlier install, after I got this error, I switched all VMs to using pv virt_mode and managed to get `qubes-dom0-update` to run, after doing that, I still got the same weird /proc/cpuinfo and lscpu output but VMs were booting OK with hvm.” How exactly do you switch VMs to using pv virt_mode? The only thing I actually want is for the VMs to book correctly, and that would save me a lot of trouble. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/25968877-e1f4-4c00-afb5-2849ff70e21a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] how to forward webcam to a VM?
On Sat, November 25, 2017 16:46, evo wrote: > I have connected a webcam and i see it via lsusb on sys-usb. I also can > use it with "cheese" programm on the sys-usb-VM. But how can i forward > it to webcam-VM and use it there?? Many webcams can be used over USB proxy. From dom0, enter "qvm-usb" with the webcam connected. You should see a list of available USB devices, including the webcam. From there, you'd enter "qvm-usb -a webcam-VM sys-usb:12.3". Use the correct name for your VM and sys-usb:device identifier for your webcam. See https://www.qubes-os.org/doc/usb/ for more instructions. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c620e8e7708b12d566b387df44f04485%40elude.in. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: qubes 4.0 crate standalone vm failure
fixed from enabling testing updates -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/27428047-b773-46bd-ad5e-e56c6f219d76%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] qubes 4.0 crate standalone vm failure
My cpu supports vt-x, vt-d this works qvm-create [vmname] --class StandaloneVM --label green this does not qvm-start --cdrom :/home/user/Downloads/.iso returns error: Start failed: Internal Error: libxenlight failed to create new domain libxl logs tell me this: Backend for CD devices on HVM guests must be QDisks Unable to set disk defaults for disk 4 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e4664353-632a-45b9-bce9-33eff10d5ee1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: sys-whonix / tor / thunderbird
Desobediente: > I think the most straightforward way to achieve this would be to leave the > arm terminal open > > KDE/XCFE Menu > sys-whonix > Arm - Tor Controller > > Then press 'n' for a new identity whenever desired. > > This will make a new tor circuit for every AppVM connected to sys-whonix. > > For the AppVM level, you may do as suggested - use the "new identity" > feature on a Tor Browser inside the same AppVM as thunderbird is running. > It could be anon-whonix, a clone of anon-whonix or any other AppVM using > whonix-ws as template. > > You could clone whonix-ws and install needed software in the cloned > template as well. > Not sure what you mean by "AppVM level" but "New Identity" marks ALL circuits dirty regardless of where it's invoked. So using "New Identity" in anon-whonix-6 is the same as using it in sys-whonix for purposes of generating new circuits for Thunderbird. TorButton (in Tor Browser) performs a few additional tasks as described in link below compared to arm, but as it relates to circuits, they both send SIGNAL NEWNYM. https://stem.torproject.org/faq.html#how-do-i-request-a-new-identity-from-tor https://www.torproject.org/projects/torbrowser/design/#new-identity -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/fb1af417-a554-7abd-26fd-9480fe9c39ae%40gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: sys-whonix / tor / thunderbird
haaber: > On 11/24/17 13:47, entr0py wrote: >> Yuraeitha: >>> On Friday, November 24, 2017 at 9:01:24 AM UTC, Bernhard wrote: Hello, one of the most useful features of tor-browser is Ctl-Shift-L to change the tor-path (and so, with high proba, the exit node IP) : this way, websites that block a specific exit node for a certain time can be still loaded (of course some fascist websites block all tor-exits and so that this measure does not help) . I feel that the same feature would be useful in other applications (in particular in thunderbird). How can this be done? Maybe a "forced reconnect" of IMAP connections suffices, but apart totally restarting thunderbird I don't see how this can be done. Any hints? Or is there good reason not to torify mail-fetching? Or never via IMAP? thank you, Bernhard >> >> Each request to your Tor client (in sys-whonix) via SocksPort is accompanied >> by a SOCKS username and password. By clicking "New Tor Circuit for this >> Site" in Tor Browser, you are changing the password component, which causes >> the Tor client to generate a new circuit for the same first-person domain >> when a request is received. >> >> Thunderbird is torrified by an extension called TorBirdy. Your requested >> feature has been tracked for quite some time (5 years) but appears nearing >> implementation now that Thunderbird-related roadblocks have been cleared. >> (https://trac.torproject.org/projects/tor/ticket/6359) Also, the main reason >> for that ticket is not circuit swapping but stream isolation. At present >> (Whonix bonus), each different email server you connect to is given a >> different circuit. With #6359, multiple accounts at the same email provider >> can also be isolated by circuit. >> >> Currently, you can generate new circuits for all future Tor requests by >> using the "New Identity" feature via one of the following equivalent options: >> 1. From anon-whonix, use "New Identity" in Tor Browser. (applies to all Tor >> connections, not just the browser.) >> 2. From sys-whonix, use arm/nyx (monitoring tool) to send New Identity >> request >> 3. From sys-whonix, send SIGNAL NEWNYM via telnet to 127.0.0.1:9051 > > Thank you for this detailed answer. I read over the ticket & it seems > that socks was the problem & should be fine now. I wanted to copy the > "network-connections" config form tor-browser into a thunderbird, but I > do not understand anything there. It uses > file:///var/run/anon-ws-disable-stacked-tor/127.0.0.1_9150.sock > This folder contains a lot of 0-byte special files that are past my > understanding. Link [4] Did not help me :( > > Or should I better run thunderbird inside anon-whonix? Or clone > anon-whonix and run it there? > > Thanks, Bernhard > Wait, what are we talking about? I thought you were asking about "New Tor Circuit for this Site". Do you need help torrifying Thunderbird? If you are using Thunderbird in a non-whonix-workstation VM, you can install the TorBirdy extension and point it to your sys-whonix IP and Port 9102. Thunderbird is installed and torrified by default in anon-whonix already. You can use anon-whonix, clone it, make a new appVM based on whonix-ws, whatever fits your needs. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/94de539b-9760-e3cf-5e20-70283ab60e05%40gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: sys-whonix / tor / thunderbird
I think the most straightforward way to achieve this would be to leave the arm terminal open KDE/XCFE Menu > sys-whonix > Arm - Tor Controller Then press 'n' for a new identity whenever desired. This will make a new tor circuit for every AppVM connected to sys-whonix. For the AppVM level, you may do as suggested - use the "new identity" feature on a Tor Browser inside the same AppVM as thunderbird is running. It could be anon-whonix, a clone of anon-whonix or any other AppVM using whonix-ws as template. You could clone whonix-ws and install needed software in the cloned template as well. -- iuri.neocities.org -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAF0bz4SQJJLHet5mBMGxH-%2BffhS9eSSNY%2B_EJ6Y-37QmP%2B3F%3Dg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] update dom0 offline
Hello, As I described in the other topic titled "How To Replace Libvirt Drivers"; Upon installation, I get the error `libvirtError.libvirt: libxenlight failed to create new domain “domain name”` and updating the system seems to have helped. I want to attempt to update all packages before continuing the initial_setup, so how can I update dom0 offline? Another option I have is to perform a net-install, I tried using `https://mirrors.kernel.org/qubes/repo/yum/r4.0/current-testing/dom0/fc25/` as an additional repository in the installer but I got "Error setting up base repository". Wael -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ddc651f0-3759-4de1-966f-e1a36200d963%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Looking for Qubes OS-Users in Munich-Germany
You could visit the "CrypotParty Advanced" from the ChaosComputerClub in Munich.They show how to install Coreboot, use MEcleaner, configfure/encrypt your Grub etc, install/use QubesOS.Its held by the very same Guy i think Kai is mentioning here. cheers -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/36e62963-11cb-4eb4-8bcf-8b5f471fe251%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] how to forward webcam to a VM?
Hey! I have connected a webcam and i see it via lsusb on sys-usb. I also can use it with "cheese" programm on the sys-usb-VM. But how can i forward it to webcam-VM and use it there?? greets evo -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/666c1d91-e8ea-0293-7ec0-e676492610c7%40aliaks.de. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Eve V - nice QubesOS platform?
Hello, might be the new Eve V starup-laptop from finland be a nice QubesOS platform? https://eve.community/t/eve-v-vs-competition/2290 Perhaps some partnership can help, to spread both tech-tools? Kind Regards -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2f97631c-80e7-49c3-af6a-5c83ac22ac87%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] HCL - X220 (Coreboot - SeaBios + Coreinfo, Qubes Release 4.0-rc2)
Hi, Qubes work out of box. Strange, TPM chip in coreboot enabled, but Qubes didn't find it. Laptop cost 140$ , lol. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a310c3ea-73ac-4577-a16e-aa8df934f92c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout. Qubes-HCL-LENOVO-4291Q50-20171125-174606.yml Description: Binary data
Re: [qubes-users] Re: sys-whonix / tor / thunderbird
On 11/24/17 13:47, entr0py wrote: > Yuraeitha: >> On Friday, November 24, 2017 at 9:01:24 AM UTC, Bernhard wrote: >>> Hello, >>> >>> one of the most useful features of tor-browser is Ctl-Shift-L to change >>> the tor-path (and so, with high proba, the exit node IP) : this way, >>> websites that block a specific exit node for a certain time can be still >>> loaded (of course some fascist websites block all tor-exits and so that >>> this measure does not help) . >>> >>> I feel that the same feature would be useful in other applications (in >>> particular in thunderbird). How can this be done? Maybe a "forced >>> reconnect" of IMAP connections suffices, but apart totally restarting >>> thunderbird I don't see how this can be done. Any hints? Or is there >>> good reason not to torify mail-fetching? Or never via IMAP? >>> >>> thank you, Bernhard > > Each request to your Tor client (in sys-whonix) via SocksPort is accompanied > by a SOCKS username and password. By clicking "New Tor Circuit for this Site" > in Tor Browser, you are changing the password component, which causes the Tor > client to generate a new circuit for the same first-person domain when a > request is received. > > Thunderbird is torrified by an extension called TorBirdy. Your requested > feature has been tracked for quite some time (5 years) but appears nearing > implementation now that Thunderbird-related roadblocks have been cleared. > (https://trac.torproject.org/projects/tor/ticket/6359) Also, the main reason > for that ticket is not circuit swapping but stream isolation. At present > (Whonix bonus), each different email server you connect to is given a > different circuit. With #6359, multiple accounts at the same email provider > can also be isolated by circuit. > > Currently, you can generate new circuits for all future Tor requests by using > the "New Identity" feature via one of the following equivalent options: > 1. From anon-whonix, use "New Identity" in Tor Browser. (applies to all Tor > connections, not just the browser.) > 2. From sys-whonix, use arm/nyx (monitoring tool) to send New Identity request > 3. From sys-whonix, send SIGNAL NEWNYM via telnet to 127.0.0.1:9051 Thank you for this detailed answer. I read over the ticket & it seems that socks was the problem & should be fine now. I wanted to copy the "network-connections" config form tor-browser into a thunderbird, but I do not understand anything there. It uses file:///var/run/anon-ws-disable-stacked-tor/127.0.0.1_9150.sock This folder contains a lot of 0-byte special files that are past my understanding. Link [4] Did not help me :( Or should I better run thunderbird inside anon-whonix? Or clone anon-whonix and run it there? Thanks, Bernhard -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/89991eca-5825-16d3-5169-94efdc0d299d%40web.de. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: HOWTO: Compiling Kernels for dom0
On Friday, November 24, 2017 at 6:00:37 PM UTC+1, Foppe de Haan wrote: > On Friday, November 24, 2017 at 3:25:40 PM UTC+1, Frédéric Pierret (fepitre) > wrote: > > Le vendredi 24 novembre 2017 15:22:20 UTC+1, Foppe de Haan a écrit : > > > On Thursday, November 23, 2017 at 9:30:30 PM UTC+1, Frédéric Pierret > > > (fepitre) wrote: > > > > Le mercredi 22 novembre 2017 18:31:29 UTC+1, Foppe de Haan a écrit : > > > > > Now that 4.14's reached stable, does anyone plan to test it soon (or > > > > > have an idea when they'll have time to do so)? Since 4.13 wasn't > > > > > stable 'by default' in qubes, I would assume 4.14 won't be either, > > > > > but although I'll certainly give it a go, I'm fairly sure I am not > > > > > the best person to try to figure out what's wrong when I run into > > > > > trouble. :) > > > > > > > > Ok so I'm trying kernel-4.14.1 since this morning and it seems to be > > > > more stable than 4.13. I have not experienced any random crash which > > > > normally would have occurred at least once in a day with kernel-4.13. > > > > You can try it if you want: > > > > https://github.com/fepitre/qubes-linux-kernel/tree/devel-4.14 > > > > > > Great. :) Which fedora version did you use to build it, though? When I > > > try using 25 or 26, it errors while whining about u2mfn. I've checked the > > > thread in the bug tracker, but it doesn't really > > > > I'm using a Fedora 26 (on a Debian server with Xen, not Qubes) with a > > DIST_DOM0 as Fedora 23. If you want, I can upload the kernel files on > > sourceforge. > > it may have something to do with the fact that 'dkms status u2mfn' doesn't > return anything, as that results in 'cp -r /usr/src/u2mfn-$u2mfn_ver > /home/user/qubes-linux-kernel/u2mfn' erroring out. So when it tries to run this script prior to building the kernel: https://github.com/QubesOS/qubes-linux-utils/blob/master/kernel-modules/qubes-prepare-vm-kernel , it fails, because 'dkms status u2mfn' yields an empty string when run in a (fc26) VM. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1d87f219-1e1c-49eb-89d9-bff576604867%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: download new fedora-26
On Friday, 24 November 2017 07:17:44 UTC-5, Frédéric Pierret (fepitre) wrote: > Le vendredi 24 novembre 2017 12:02:56 UTC+1, Yuraeitha a écrit : > > On Thursday, November 23, 2017 at 6:39:26 AM UTC, Roy Bernat wrote: > > > On Wednesday, 22 November 2017 11:11:17 UTC-5, Roy Bernat wrote: > > > > Hi > > > > > > > > i am trying to download fedora-26 but with no success . > > > > > > > > i succeeded a month ago but now i am getting nothing . > > > > > > > > any suggestions ? > > > > > > > > R > > > > > > Thank for all answers . > > > > > > i am using qubes4.0 and i used to download the template using > > > > > > Qubes-dom0-update command . > > > > > > manually download i tried to use wget but there is no wget availble in > > > dom 0 . > > > > > > R > > > > Sorry for the extra day delay, here are my findings when I tried to install > > Fedora-26 again. > > > > Interestingly it now works for me, it did not some 2 weeks ago. > > I verified it on multiple Qubes 4 machines, all of them installed Fedora-26 > > perfectly fine now. > > > > Possibly something was fixed that changed that? > Yes there were some updates with respect to pulseaudio version notably. > > > @Roy Bernat, have you tried running updates? Also the testing updates? Be > > careful with the testing updates though as they might break your system if > > unlucky, so backup first just in case. But there i a lot of packages in the > > dom0 testing repository atm. It's a possibility, that it might fix it, > > though it may also not fix it either. I use to download it using update and --action=install but now it is not working , -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/35bdf366-c31f-4c6a-86a7-2423e4c25b7c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
