[qubes-users] Re: Macbook Pro - Broadcom WLAN adapter BCM43602 causing freezing under Qubes OS 4.0 rc5

2018-03-22 Thread q120248681
在 2018年3月16日星期五 UTC+8上午10:19:41,Greg写道:
> Hi,
> 
> Please assist if possible - I'm trying to get the Broadcom WLAN adapter 
> BCM43602 working on my Macbook Pro under Qubes OS 4.0 rc5. 
> 
> "03:00.0 Network controller: Broadcom Limited BCM43602 802.11ac Wireless LAN 
> SoC (rev 01)"
> 
> I've managed to install Qubes OS successfully (during the second part of 
> setup, just before sys-net creation I switched to a console and started a 
> short bash script that just loops over and over trying to remove the BCM43602 
> from sys-net, then I went back and completed the setup. The script 
> successfully removed the BCM43602 from sys-net before sys-net was started by 
> the setup wizard, meaning that I managed to avoid the system freeze that 
> would have otherwise occurred during setup).
>  
> Now I'm trying to actually get the BCM43602 working, i.e. attach the adapter 
> to a qube (e.g. sys-net, standalone hvm or anything at all without freezing). 
> However it seems that the system freezes the moment I start the qube it is 
> attached to and it doesn't matter which kernel the associated qube is 
> actually running (e.g. it freezes even when I attach it to a qube that is a 
> fresh Ubuntu 17.10 install with hvm and no kernel seleced). I've tried 
> different combinations of permissive mode and no-strict-reset and pv/hvm but 
> every combination results in freezing. 
> 
> I'm not sure how to proceed? Does anyone have the BCM43602 working under 4.0 
> rc5?
> 
> Any pointers would be appreciated.
> 
> Thanks,
> Greg

Hi, hopes I'm not bothering you and thanks for your tips I finally got Qubes 
running on my MBP. However, I can't get the wifi card working using methods you 
discussed above, after running "sudo xl pci-attach sys-net 
'02:00.0,permissive=1'" (02:00.0 is the network controller pci address), 
sys-net still don't have the network controller attached and using "qvm-pci 
attach" still cause the system to freeze, how do you finish the attach phase?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/53b32c81-9edf-468d-80ec-247e332094e7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Dom0 updates broken

2018-03-22 Thread cooloutac
On Friday, March 16, 2018 at 10:23:56 AM UTC-4, Lorenzo Lamas wrote:
> On Friday, March 16, 2018 at 10:29:25 AM UTC+1, awokd wrote:
> > On Fri, March 16, 2018 8:42 am, Lorenzo Lamas wrote:
> > > On Qubes 3.2 I'm getting this error when performing qubes-dom0-update:
> > >
> > >
> > > tar: /var/lib/qubes/dom0-updates: Cannot open: No such file or directory
> > > tar: Error is not recoverable: exiting now
> > > Dom0 updates dir does not exists: /var/lib/qubes/dom0-updates
> > 
> > https://github.com/QubesOS/qubes-issues/issues/3620
> > 
> > Update your update template once the R3.2 patch hits current.
> 
> Thanks! I updated one template from the current-testing and it works again.

I had this problem when updating debian-8 to 9.  Had to switch sys-net to 
fedora 26.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1fb1c1ac-12f8-42c0-8743-545bf10ccff3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: unexpected hard reboot on xen-4.6.6-37 (in security-testing repo)

2018-03-22 Thread cooloutac
On Saturday, March 17, 2018 at 7:53:09 PM UTC-4, qubes...@riseup.net wrote:
> Hi,
> 
> this is just a warning for those that have qubes-dom0-security-testing enabled
> and did not upgrade yet.
> 
> Besides breaking dispVM functionality [1] I also had a strange
> unexpected hard reboot since I upgraded to xen-4.6.6-37.
> I don't know the root cause of the reboot but it _might_ be related
> to the xen update. 
> 
> 
> So if you enabled the dom0 security-testing repo you might want to
> avoid upgrading just yet.
> 
> 
> 
> 
> [1] https://github.com/QubesOS/qubes-issues/issues/3711

I'm not having this issue,  I use 3.2 and only testing repo i enable is the 
security one.   Also i've been posting in this thread 
https://groups.google.com/forum/#!topic/qubes-users/rpzprvCQz9g but i'm not 
even sure I have the same type of dispvm problems as the other users.   

What exactly do you mean dispvm functionality is broken?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6882c49b-adf8-4c51-aa37-56eb4f5273b4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: DispVM broken in 3.2?

2018-03-22 Thread cooloutac
On Thursday, March 22, 2018 at 5:47:25 PM UTC-4, cooloutac wrote:
> I should add the dispvm is more likely to freeze with 100% cpu use when 
> loading from the dom0 appmenu option loading firefox.
> 
> Almost never happened when loading chrome from an appvm terminal in a dispvm. 
>   But now its freezing at 100% cpu use everytime I try to attach a usb to it. 
>  Whether loading the firefox app from main menu or loading chrome one from an 
> appvm terminal...

wanted to add that adding more cores to the dispvm doesn't help.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6c4c7b29-668f-44e2-a8e1-ed3530dc77bd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Booting from two separate hard drives?

2018-03-22 Thread cooloutac
On Monday, March 19, 2018 at 12:59:40 PM UTC-4, Linus Stridbeck wrote:
> Hi, I have the opportunity to by a computer (HP EliteBook) that have space 
> for two hardrives one SSD and one Sata M.2 SSD 2242. 
> 
> I would like to run Windows on the SSD and Qubes on the Sata M.2 SSD 2242 
> 
> From what I have read it is possible all it takes is some modifications in 
> bios.
>  
> But is it advisable from a security point of viwe? I know its a bad ider to 
> boot from one singel hardrive but in this case i guese the Windows hard drive 
> is completely disconnected when runing qubes on the Sata drive?

No its not advisable because windows if compromised can  undermine the qubes 
/boot partition which is not encrypted.

And even if you are disconnecting drives,  its much easier to flash firmware 
from windows then in qubes,  which would also then undermine qubes when you 
connect its drive and run it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3fecb166-a118-4e4e-a225-fb31bb3f883b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] strange message in qubes-dom0-update

2018-03-22 Thread cooloutac
I don't use 4.0 but if noone else gets this maybe you changed something 
yourselves manually in your profile or bash profile?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/90041d96-922b-40f0-9b61-d933678fc0ce%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] strange message in qubes-dom0-update

2018-03-22 Thread cooloutac
On Thursday, March 22, 2018 at 12:12:55 PM UTC-4, awokd wrote:
> On Thu, March 22, 2018 12:32 pm, haaber wrote:
> > When I run in Q4rc(4,5) the update command
> >
> >
> > sudo  qubes-dom0-update --enablerepo=qubes-dom0-current-testing
> >
> > I get the message
> >
> >
> > /usr/lib/qubes/qubes-rpc-multiplexer: 14:
> > /etc/profile.d/20_power_savings_disable_in_vms.sh: shopt: not found
> >
> >
> > followed by "no new updates available". Do you experience the same? May I
> > ignore this?  Bernhard
> 
> I experience the same; not sure what it's about but doesn't seem too
> concerning as long as updates are still getting through.

quick google search shows it might have something to do with disabling screen 
locker and power savings for inside vms.maybe its related to whonix since 
its here on github.  
https://github.com/Whonix/power-savings-disable-in-vms/blob/master/etc/profile.d/20_power_savings_disable_in_vms.sh

I guess unless your vms are blacking out I wouldn't worry about it, probably 
something that was being tested.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/68537432-26c6-4945-8905-6374e659e01d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: desktop recommendations?

2018-03-22 Thread cooloutac
also just wanted to say the other reason I suggest the legacy ps2 port is if 
you plan to use usb 3.0 ports most boards route all the usb controllers into 
one when 3.0 controller (xhci) is enabled.  so you would need to use the usb 
proxy and it would not be safe using a keyboard this way.

Although some mobos will let you manually route usb ports to specific 
controllers.   There is always two next to the ps2 port for keyboard and mouse 
on separate controller if you are fine with disabling 3.0 and don't want to use 
a ps2 adapter.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0debeb47-8b3d-4e45-9a0c-e208a166defb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: desktop recommendations?

2018-03-22 Thread cooloutac
also forgot to mention TPM plus TXT features in bios would add to security if 
you plan to use them.  But again it is for more advanced users.  But would 
imply the board might be more compatible for qubes since it has these extra 
security features in the first place.  Just my opinion.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6e9adb18-decc-470f-9c28-aea9e76b4d6c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: desktop recommendations?

2018-03-22 Thread cooloutac
On Thursday, March 22, 2018 at 5:07:24 PM UTC-4, Ted Brenner wrote:
> Hi all,
> 
> 
> My current desktop is getting old so I'm looking for an upgrade. Obviously I 
> want to run qubes on it so hoping some of you may have recently built a new 
> desktop that you're currently running qubes on. I've seen a lot of emails 
> about laptops but rarely about desktops so thought it was worth asking.
> 
> 
> Also, I've seen the hardware compatibility list. The problem with that is you 
> have no idea how old those posts are and what sort of system they're part of. 
> Or if they work with Qubes 4.
> 
> 
> Anyway, thanks for help in advance.
> 
> Ted
> 
> 
> -- 
> 
> Sent from my Desktop

My advice would be to research a mobo and cpu combo on linux forums and mailing 
lists.  Read linux forums and see if people have alot of problems with that set 
up or how popular they are, if it works well or not.

For gpu its best to use intel which is most compatible with linux,   if you 
want a discrete gpu, which would only be for desktop effects but does improve 
performance somewhat.  You would be better off with a gpu that is not too new.  
 I'd say don't get one that is newer then 2 or 3 years old.  Also research 
their linux compatibility. 

Also to make sure the mobo is compatible with Qubes,  look at the manual 
online.   Look for vt-d iommu option is available. Is it on by default or 
not, do they describe it as a security feature.   Even better and as qubes 
documentation has recommended,  best if you actually see a pic of the option 
shown enabled in the manual.

I would suggest gigabyte or asus business type mobos.   not gaming ones or 
anything like that.   Also would suggest it has a ps2 legacy keyboard port and 
you use a usb to ps2 adapter for better security when using sys-usb vm.


Now some others on here would say that is not going far enough and might 
suggest some server mobo you can flash an open source bios onto.  Thats great 
if your a computer expert if not just get something basic for less headaches 
you will be reasonably secure.

   

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f1fca8ea-dd0d-484a-a0b8-7160f195d06e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread cooloutac
On Thursday, March 22, 2018 at 9:25:18 PM UTC-4, cooloutac wrote:
> Well Steve it worked.  after formatting the usb to ext, changing ownership of 
> it to user,  and using a non disposable template browser.  I was able to 
> download the 4.4gb iso to it.
> 
> Still not something the avg user would know how to do,  but Qubes is no 
> longer aimed at the average user it seems.  Your solution was simple enough 
> for me at least.
> 
> So Thank you again

Just to clarify in case not obvious,  i meant from the appvm browser,  not from 
within the template.

I would like to upgrade to 4.0 just to see if I still get the same disposable 
vm problems,  but I have a feeling I would find more bugs and worry it will be 
way less user friendly for my family.  Some of which need the use of the pc for 
important matters at the moment.   But at least now I have it downloaded and 
know how to download it in the future.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9508a591-707b-47b3-932f-87e3002f3088%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread cooloutac
On Thursday, March 22, 2018 at 5:43:40 PM UTC-4, awokd wrote:
> On Thu, March 22, 2018 8:40 pm, cooloutac wrote:
> > didn't work,  even with the usb formatted as ext4.  and me watching its
> > avaialable space go down as I downloaded, and nothing changing on the
> > root or appvm space,the 4.0 iso failed again at 4.3gb...lmao
> 
> Towards the beginning of this thread, I linked a document about how to
> grow your root/template space. It sounds like you might have missed a step
> so you may want to review it again. Let me know if anything is unclear so
> I can suggest more edits if needed.
> 
> Might be worth trying to download the ISO from a non-Qubes machine just in
> case there's a problem with your network.
> 
> Roughly 5000 people have managed to download and install Qubes 4.0.
> Hopefully you'll be able to join them soon.

You were the one telling me the debian-9 template was in the repos.  When even 
the Qubes docs themselves stated it clearly wasn't.   So no offense.  But just 
like most of those 5000 people,  you are obviously not a sole Qubes user 
either.  Just another cool tech experiment tester.

Dual booting also means this is just a "cool tech experiment" to you.  

 I'm talking for people right now who use qubes 3.2 as their sole operating 
machine for everything in their life.  Which probably almost noone in this 
thread does.  Yuraitha included.  

Maybe Uman does, not sure,  but he probably drives away as much people as he 
helps.  I don't even trust him.  I really like most of your posts awokd and you 
are very helpful to users.  Don't go down Umans path.

If Qubes goal is still really to become a household operating system and not 
just enterprise software.  Then they need to start realizing simple things like 
being able to download the latest version of their own os from within their own 
os should be trivial.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/94974533-b685-4596-b87e-980c300760b3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread cooloutac
Well Steve it worked.  after formatting the usb to ext, changing ownership of 
it to user,  and using a non disposable template browser.  I was able to 
download the 4.4gb iso to it.

Still not something the avg user would know how to do,  but Qubes is no longer 
aimed at the average user it seems.  Your solution was simple enough for me at 
least.

So Thank you again.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0215485f-cc25-49af-b046-a9d2e8136a82%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes/Whonix onion repositories down?

2018-03-22 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2018-03-22 20:04, js...@riseup.net wrote:
> Andrew David Wong:
>> On 2018-03-22 17:45, js...@riseup.net wrote:
>>> Trying to update my templates I get "connection failed" errors 
>>> on connecting to the qubes and whonix onion repos 
>>> (qubesos4z6n4.onion and kk63ava6.onion).
>> 
>> Yes, this is a known issue. See:
>> 
>> https://github.com/QubesOS/qubes-issues/issues/1352#event-1536336416
>> 
> Thanks Andrew and unman. Hopefully fortasse will fix it soon!
> 
> -Jackie
> 

In the meantime, note that the non-onion repos are also accessible via
Tor.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-
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=GHds
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4ab06bc5-c54e-73c6-d9c0-d5121d9f0311%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes/Whonix onion repositories down?

2018-03-22 Thread js...@riseup.net
Andrew David Wong:
> On 2018-03-22 17:45, js...@riseup.net wrote:
>> Trying to update my templates I get "connection failed" errors on
>> connecting to the qubes and whonix onion repos (qubesos4z6n4.onion
>> and kk63ava6.onion).
> 
> Yes, this is a known issue. See:
> 
> https://github.com/QubesOS/qubes-issues/issues/1352#event-1536336416

Thanks Andrew and unman. Hopefully fortasse will fix it soon!

-Jackie

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5c192365-6368-bcd1-191e-4b5a9efe0502%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes/Whonix onion repositories down?

2018-03-22 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2018-03-22 17:45, js...@riseup.net wrote:
> Hi everyone,
> 
> Trying to update my templates I get "connection failed" errors on
> connecting to the qubes and whonix onion repos (qubesos4z6n4.onion
> and kk63ava6.onion). The debian onion repos work like normal.
> 
> I also can't connect to the v3 versions, and I can't connect to the
> .onion sites in Tor Browser either. Updates work when I change the
> source to the standard clearnet repos (at least for qubes, haven't
> confirmed with whonix yet).
> 
> Anyone else having this problem?
> 
> -Jackie
> 

Yes, this is a known issue. See:

https://github.com/QubesOS/qubes-issues/issues/1352#event-1536336416

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-
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=l79G
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/29738812-88c0-a88b-ebdc-6b0d65b877b9%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes/Whonix onion repositories down?

2018-03-22 Thread Unman
On Thu, Mar 22, 2018 at 10:45:24PM +, js...@riseup.net wrote:
> Hi everyone,
> 
> Trying to update my templates I get "connection failed" errors on
> connecting to the qubes and whonix onion repos (qubesos4z6n4.onion
> and kk63ava6.onion). The debian onion repos work like normal.
> 
> I also can't connect to the v3 versions, and I can't connect to the
> .onion sites in Tor Browser either. Updates work when I change the
> source to the standard clearnet repos (at least for qubes, haven't
> confirmed with whonix yet).
> 
> Anyone else having this problem?
> 
> -Jackie

They've been up and down over the last few days. Whether this is more
than just network congestion on Tor I can't say.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180322232228.izpbukwbacev7edk%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes/Whonix onion repositories down?

2018-03-22 Thread js...@riseup.net
Hi everyone,

Trying to update my templates I get "connection failed" errors on
connecting to the qubes and whonix onion repos (qubesos4z6n4.onion
and kk63ava6.onion). The debian onion repos work like normal.

I also can't connect to the v3 versions, and I can't connect to the
.onion sites in Tor Browser either. Updates work when I change the
source to the standard clearnet repos (at least for qubes, haven't
confirmed with whonix yet).

Anyone else having this problem?

-Jackie

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dc909534-434e-cbb3-a36d-58d1330aa6ad%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] ERROR

2018-03-22 Thread Unman
On Thu, Mar 22, 2018 at 07:49:28AM -0700, c.rrapa...@gmail.com wrote:
> how can i fix this 
> ERROR:invalid argument : could not find capabilities for arch=x86_64
> 
Have you enabled VT-x in BIOS?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2018031432.qhk2xlmh4eugqrw3%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: DispVM broken in 3.2?

2018-03-22 Thread cooloutac
I should add the dispvm is more likely to freeze with 100% cpu use when loading 
from the dom0 appmenu option loading firefox.

Almost never happened when loading chrome from an appvm terminal in a dispvm.   
But now its freezing at 100% cpu use everytime I try to attach a usb to it.  
Whether loading the firefox app from main menu or loading chrome one from an 
appvm terminal...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ba84230d-1037-47b4-8d14-0171ecbd908e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread cooloutac
well it turns out when I formatted the usb to ext4 with gparted it made it 
owned by root.  Wish I would of known that...

So I did sudo chown user:user on it.

I also might of forgot to set the downloads directory to the usb again when 
loading another dispvm.

But now it turns out I can't even attach the usb anymore to a dispvm without it 
freezing,  wonder if thats cause its ext4 now.  even after rebooting the 
machine... wow..  

Steve are you in cahoots with Uman? haha just kidding i hope.

Now I'm using a non disposable appvm to try and download it onto the usb 
stick...crossing my fingers.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b4e4ed86-7ce5-4063-87aa-c563c5d4cf0f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread 'awokd' via qubes-users
On Thu, March 22, 2018 8:40 pm, cooloutac wrote:
> didn't work,  even with the usb formatted as ext4.  and me watching its
> avaialable space go down as I downloaded, and nothing changing on the
> root or appvm space,the 4.0 iso failed again at 4.3gb...lmao

Towards the beginning of this thread, I linked a document about how to
grow your root/template space. It sounds like you might have missed a step
so you may want to review it again. Let me know if anything is unclear so
I can suggest more edits if needed.

Might be worth trying to download the ISO from a non-Qubes machine just in
case there's a problem with your network.

Roughly 5000 people have managed to download and install Qubes 4.0.
Hopefully you'll be able to join them soon.



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cd4ebf5c3c29e02802a520b509ffd2ad.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] desktop recommendations?

2018-03-22 Thread [799]
Hello Ted,

On 03/22/2018 05:07 PM, Ted Brenner wrote:
> Hi all,
> 
> My current desktop is getting old so I'm looking for an upgrade.
> [...]

for what reason are you looking for a desktop? Because of high perfomance or to 
use several harddrives/ssds?
Buying a laptop has lots of advantages compared to a desktop and with a docking 
station you get a very flexible desktop replacement.

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180322214151.g2ssv6je4vgjxng3%40my-privmail.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] desktop recommendations?

2018-03-22 Thread Chris Laprise

On 03/22/2018 05:07 PM, Ted Brenner wrote:

Hi all,

My current desktop is getting old so I'm looking for an upgrade. 
Obviously I want to run qubes on it so hoping some of you may have 
recently built a new desktop that you're currently running qubes on. 
I've seen a lot of emails about laptops but rarely about desktops so 
thought it was worth asking.


Also, I've seen the hardware compatibility list. The problem with that 
is you have no idea how old those posts are and what sort of system 
they're part of. Or if they work with Qubes 4.


Anyway, thanks for help in advance.
Ted

--
Sent from my Desktop



Hi Ted,

The HCL has a column showing which version of Qubes the report is for. 
Also the 'Credit' column contains a link to the original email 
submission where you can see the date.



--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fb80cead-128c-0a2c-91c0-e6ba6e0c3f5c%40posteo.net.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] desktop recommendations?

2018-03-22 Thread Ted Brenner
Hi all,

My current desktop is getting old so I'm looking for an upgrade. Obviously
I want to run qubes on it so hoping some of you may have recently built a
new desktop that you're currently running qubes on. I've seen a lot of
emails about laptops but rarely about desktops so thought it was worth
asking.

Also, I've seen the hardware compatibility list. The problem with that is
you have no idea how old those posts are and what sort of system they're
part of. Or if they work with Qubes 4.

Anyway, thanks for help in advance.
Ted

-- 
Sent from my Desktop

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CANKZutxyV_9NeWWB8t3FVcqa5AxLsX%3Dd%2BfXvOa4PmKVbmLOoRg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread cooloutac
didn't work,  even with the usb formatted as ext4.  and me watching its 
avaialable space go down as I downloaded, and nothing changing on the root or 
appvm space,the 4.0 iso failed again at 4.3gb...lmao

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/039188bc-5fba-49ca-bd6e-13ac2c04e93d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: DispVM broken in 3.2?

2018-03-22 Thread cooloutac
xl info shows i'm on xen 4.6.6 is what what you guys are on?

One thing that does bother i've noticed past few month is from time to time,  
especially if I load it right after machine boots,  The dispvm will use 100% 
cpu and be freezing on me and working slow.  And if I kill it,  from that point 
on as soon as I load it it has the yellow triangle.  Until I reboot the whole 
machine.  Just seeing that yellow triangle bothers me.

To lessen this i try to give time for qubes to fully boot before I load the 
dispvm.   But it will still happen at times,  though much much less frequently, 
 maybe depending on the page I visit.

I don't know what this means though I'd put it out there.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/21773940-4b9c-488f-ae85-409196a865db%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread cooloutac
On Thursday, March 22, 2018 at 3:56:25 PM UTC-4, cooloutac wrote:
> On Thursday, March 22, 2018 at 12:08:31 PM UTC-4, steve.coleman wrote:
> > On 03/21/18 11:37, cooloutac wrote:
> > > On Wednesday, March 21, 2018 at 10:16:01 AM UTC-4, Yuraeitha wrote:
> > >> On Wednesday, March 21, 2018 at 3:14:33 AM UTC, cooloutac wrote:
> > >>> On Tuesday, March 20, 2018 at 11:10:52 AM UTC-4, Unman wrote:
> >  On Mon, Mar 19, 2018 at 05:00:05PM -0700, cooloutac wrote:
> > > Can't download qubes 4.0 not enough space.  tried to raise system 
> > > storage size on template through qubes manager.  messag said I might 
> > > have use resize2f.   tried that didn't do antyhing.   Tried to use 
> > > qvm-grow-root  it staid to start template to complete process but it 
> > > also didn't change.
> > 
> > What I do is to use an external USB drive reformatted as an ext4 volume, 
> > use qvm-block to attach it to the download vm, Nautilus in that vm to 
> > mount it, and then have firefox in that VM save it directly to that 
> > external volume. This makes it easy to transfer that entire volume to 
> > where the DVD writer can burn that image and thus it has no long lasting 
> > effects with growing or changing any VM's file systems. You can even use 
> > a DVM to do the download. The trick is to make sure the filesystem type 
> > on that device does not have the screwy 4GB file size limitation.
> 
> Steve I can already tell this is doing the trick,  tyvm!  I appreciate the 
> tip.
> 
> I still think its like some sick joke being played on qubes 3.2 users.  That 
> the 4.0 iso is 100mb larger then the temporary space available  what is 
> up with that? seriously...  I'm talking even with a fresh default template.   
> its 4.2 / 10.5gb available...
> 
> Ajoke Sort of like Uman telling me to make the /tmp 4096M.   Which still 
> would have been again just short of the iso...  I mean come on  Are the 
> devs just trying to get us to stop using Qubes for some reason!?!

Uman even with a fresh template,  and a fresh non disposable vm.  This is the 
issue.   Someone is playing jokes on users.

I was seriously at the point of just going back to buying a cheap machine for 
dedicated banking booting up a hardened linux cd like the US Airfirce Tens, 
formerly known as lps.

I already suspect my qubes is compromised.   But I'm even more paranoid about 
using my windows or bare bones linux machines to download the iso lol.  no 
matter how I verify it.   I'm so paranoid I'm going to delete and recreate the 
sys-usb qube just to use to attach this fresh usb stick I have to dd the iso.

I'm open to any suggestions for an even safer way...

But thanks again Steve.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ab7a5d37-8849-4757-ba15-48d986473023%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread cooloutac
On Thursday, March 22, 2018 at 12:08:31 PM UTC-4, steve.coleman wrote:
> On 03/21/18 11:37, cooloutac wrote:
> > On Wednesday, March 21, 2018 at 10:16:01 AM UTC-4, Yuraeitha wrote:
> >> On Wednesday, March 21, 2018 at 3:14:33 AM UTC, cooloutac wrote:
> >>> On Tuesday, March 20, 2018 at 11:10:52 AM UTC-4, Unman wrote:
>  On Mon, Mar 19, 2018 at 05:00:05PM -0700, cooloutac wrote:
> > Can't download qubes 4.0 not enough space.  tried to raise system 
> > storage size on template through qubes manager.  messag said I might 
> > have use resize2f.   tried that didn't do antyhing.   Tried to use 
> > qvm-grow-root  it staid to start template to complete process but it 
> > also didn't change.
> 
> What I do is to use an external USB drive reformatted as an ext4 volume, 
> use qvm-block to attach it to the download vm, Nautilus in that vm to 
> mount it, and then have firefox in that VM save it directly to that 
> external volume. This makes it easy to transfer that entire volume to 
> where the DVD writer can burn that image and thus it has no long lasting 
> effects with growing or changing any VM's file systems. You can even use 
> a DVM to do the download. The trick is to make sure the filesystem type 
> on that device does not have the screwy 4GB file size limitation.

Steve I can already tell this is doing the trick,  tyvm!  I appreciate the tip.

I still think its like some sick joke being played on qubes 3.2 users.  That 
the 4.0 iso is 100mb larger then the temporary space available  what is up 
with that? seriously...  I'm talking even with a fresh default template.   its 
4.2 / 10.5gb available...

Ajoke Sort of like Uman telling me to make the /tmp 4096M.   Which still would 
have been again just short of the iso...  I mean come on  Are the devs just 
trying to get us to stop using Qubes for some reason!?!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/22612443-50a0-4bac-a851-abaf362d9e83%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-22 Thread cooloutac
On Thursday, March 22, 2018 at 12:08:31 PM UTC-4, steve.coleman wrote:
> On 03/21/18 11:37, cooloutac wrote:
> > On Wednesday, March 21, 2018 at 10:16:01 AM UTC-4, Yuraeitha wrote:
> >> On Wednesday, March 21, 2018 at 3:14:33 AM UTC, cooloutac wrote:
> >>> On Tuesday, March 20, 2018 at 11:10:52 AM UTC-4, Unman wrote:
>  On Mon, Mar 19, 2018 at 05:00:05PM -0700, cooloutac wrote:
> > Can't download qubes 4.0 not enough space.  tried to raise system 
> > storage size on template through qubes manager.  messag said I might 
> > have use resize2f.   tried that didn't do antyhing.   Tried to use 
> > qvm-grow-root  it staid to start template to complete process but it 
> > also didn't change.
> 
> What I do is to use an external USB drive reformatted as an ext4 volume, 
> use qvm-block to attach it to the download vm, Nautilus in that vm to 
> mount it, and then have firefox in that VM save it directly to that 
> external volume. This makes it easy to transfer that entire volume to 
> where the DVD writer can burn that image and thus it has no long lasting 
> effects with growing or changing any VM's file systems. You can even use 
> a DVM to do the download. The trick is to make sure the filesystem type 
> on that device does not have the screwy 4GB file size limitation.

I might have to try this Steve thankyou for the reply.

Increasing /tmp, or /dev/shm doesn't do anything.  It seems to be all about the 
/dev/mapper/dmroot which I still dont' know how to increase.  As you can see 
from my df -h results:

/dev/mapper/dmroot  9.8G  5.4G  4.0G  58% /
/dev/xvdd   477M  286M  166M  64% 
/usr/lib/modules/4.14.13-1.pvops.qubes.x86_64
devtmpfs141M 0  141M   0% /dev
tmpfs   1.0G   65M  960M   7% /dev/shm
tmpfs   149M  692K  149M   1% /run
tmpfs   149M 0  149M   0% /sys/fs/cgroup
tmpfs   4.9G   11M  4.9G   1% /tmp
tmpfs30M   16K   30M   1% /run/user/1000
[user@fedora-26-clone-untrusted-dvm ~]$ df -h
Filesystem  Size  Used Avail Use% Mounted on
/dev/mapper/dmroot  9.8G  5.8G  3.5G  63% /
/dev/xvdd   477M  286M  166M  64% 
/usr/lib/modules/4.14.13-1.pvops.qubes.x86_64
devtmpfs141M 0  141M   0% /dev
tmpfs   1.0G   33M  992M   4% /dev/shm
tmpfs   149M  744K  149M   1% /run
tmpfs   149M 0  149M   0% /sys/fs/cgroup
tmpfs   4.9G   11M  4.9G   1% /tmp
tmpfs30M   24K   30M   1% /run/user/1000


You can see I indeed increased the /tmp file size in the disposable vm.  but as 
I'm downloading its going to /dev/mapper/dmroot...   Every vm is like this by 
default in 3.2 it seems?   I will try your method of setting firefox to save 
the file to the attached usb drive and see if it changes anything.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/00af1151-bf40-4bdb-af23-4e43e75a40b7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] strange message in qubes-dom0-update

2018-03-22 Thread 'awokd' via qubes-users
On Thu, March 22, 2018 12:32 pm, haaber wrote:
> When I run in Q4rc(4,5) the update command
>
>
> sudo  qubes-dom0-update --enablerepo=qubes-dom0-current-testing
>
> I get the message
>
>
> /usr/lib/qubes/qubes-rpc-multiplexer: 14:
> /etc/profile.d/20_power_savings_disable_in_vms.sh: shopt: not found
>
>
> followed by "no new updates available". Do you experience the same? May I
> ignore this?  Bernhard

I experience the same; not sure what it's about but doesn't seem too
concerning as long as updates are still getting through.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ef558fbb3b6f4df503ee3cdf531df380.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] ERROR

2018-03-22 Thread c . rrapaj19
how can i fix this 
ERROR:invalid argument : could not find capabilities for arch=x86_64

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9a34ea8c-c729-4f2b-8da5-cbbb0f4c0cdc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes on Mini Pc

2018-03-22 Thread Shashank
Hello,

I was looking to buy a Mini Pc, (or a Mini workstation), and have Qubes 
installed on it. Anyone here has a Mini pc with qubes running? If so I would 
like to know which pc that is and what configurations are you running.

I Was thinking of HP z2 mini workstation, the basic model without NVIDIA 
Quadro, anyone has an Idea if it is compatible with qubes

i7-7700 processor + intel HD graphics
16 gig DDR3
512 gig SSD

Any other setups that people out there are already using and have qubes running 
successfully please leave in your suggestions

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7b517ee0-e617-4064-beaf-095d185941f3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Monero Wallet on Qubes

2018-03-22 Thread abilgili950
On Wednesday, March 21, 2018 at 10:25:50 AM UTC-4, abilg...@gmail.com wrote:
> Hi there beautiful community,
> 
> 5 months user here.
> I think i have figured Qubes out enough to use it as my main OS but still i'm 
> so noob.
> I have been trying to move my monero wallet to Qubes from windows as well and 
> there is no good documentation about it just like any other thing about 
> Qubes.
> 
> So i have found this guide : 
> 
> https://github.com/0xB44EFD8751077F97/monero-site/blob/3e6f4fa28b7b834a7049ee45edc294ff1c026565/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.md
> 
> I have followed every step and managed to setup everything EXCEPT running and 
> synchronizing MONEROD ( monero blockchain ) 
> 
> This is the error that i'm getting :
> 
> user@host:~/monero-v0.11.1.0$ ./monerod
> 2018-03-21 14:17:46.267 719f8bf9e740INFOglobal  
> src/daemon/main.cpp:279 Monero 'Helium Hydra' (v0.11.1.0-release)
> 2018-03-21 14:17:46.267 719f8bf9e740INFOglobal  
> src/daemon/protocol.h:55Initializing cryptonote protocol...
> 2018-03-21 14:17:46.268 719f8bf9e740INFOglobal  
> src/daemon/protocol.h:60Cryptonote protocol initialized OK
> 2018-03-21 14:17:46.268 719f8bf9e740INFOglobal  
> src/daemon/p2p.h:63 Initializing p2p server...
> 2018-03-21 14:17:52.126 719f8bf9e740INFOglobal  
> src/daemon/p2p.h:68 P2p server initialized OK
> 2018-03-21 14:17:52.126 719f8bf9e740INFOglobal  
> src/daemon/rpc.h:58 Initializing core rpc server...
> 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> contrib/epee/include/net/http_server_impl_base.h:70   Binding on 
> 127.0.0.1:18081
> 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> src/daemon/rpc.h:63 Core rpc server initialized OK on port: 18081
> 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> src/daemon/core.h:73Initializing core...
> 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> src/cryptonote_core/cryptonote_core.cpp:323   Loading blockchain from 
> folder /home/user/.bitmonero/lmdb ...
> 2018-03-21 14:17:52.128 719f8bf9e740WARNblockchain.db.lmdb
>   src/blockchain_db/lmdb/db_lmdb.cpp:1155   LMDB memory map needs to be 
> resized, doing that now.  
> 2018-03-21 14:17:52.164 719f8bf9e740INFOglobal  
> src/blockchain_db/lmdb/db_lmdb.cpp:494LMDB Mapsize increased.  Old: 
> 1024MiB, New: 2048MiB
> Bus error
> 
> If any of the users of this community have this software or using this wallet 
> for XMR can help me, that'd be highly appreciated.
> 
> If not, no worries.
> 
> Have a good day.
> King Regards.

>Yeah, I'd agree with Giulio. I too use the daemon so I don't have to dedicate 
>a ton of disk space to the blockchain. 

Guess, will try that if i fail to complete this lovely setup.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a966fef7-273b-4c30-a2c3-52e9a26565b9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Monero Wallet on Qubes

2018-03-22 Thread abilgili950
On Wednesday, March 21, 2018 at 10:25:50 AM UTC-4, abilg...@gmail.com wrote:
> Hi there beautiful community,
> 
> 5 months user here.
> I think i have figured Qubes out enough to use it as my main OS but still i'm 
> so noob.
> I have been trying to move my monero wallet to Qubes from windows as well and 
> there is no good documentation about it just like any other thing about 
> Qubes.
> 
> So i have found this guide : 
> 
> https://github.com/0xB44EFD8751077F97/monero-site/blob/3e6f4fa28b7b834a7049ee45edc294ff1c026565/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.md
> 
> I have followed every step and managed to setup everything EXCEPT running and 
> synchronizing MONEROD ( monero blockchain ) 
> 
> This is the error that i'm getting :
> 
> user@host:~/monero-v0.11.1.0$ ./monerod
> 2018-03-21 14:17:46.267 719f8bf9e740INFOglobal  
> src/daemon/main.cpp:279 Monero 'Helium Hydra' (v0.11.1.0-release)
> 2018-03-21 14:17:46.267 719f8bf9e740INFOglobal  
> src/daemon/protocol.h:55Initializing cryptonote protocol...
> 2018-03-21 14:17:46.268 719f8bf9e740INFOglobal  
> src/daemon/protocol.h:60Cryptonote protocol initialized OK
> 2018-03-21 14:17:46.268 719f8bf9e740INFOglobal  
> src/daemon/p2p.h:63 Initializing p2p server...
> 2018-03-21 14:17:52.126 719f8bf9e740INFOglobal  
> src/daemon/p2p.h:68 P2p server initialized OK
> 2018-03-21 14:17:52.126 719f8bf9e740INFOglobal  
> src/daemon/rpc.h:58 Initializing core rpc server...
> 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> contrib/epee/include/net/http_server_impl_base.h:70   Binding on 
> 127.0.0.1:18081
> 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> src/daemon/rpc.h:63 Core rpc server initialized OK on port: 18081
> 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> src/daemon/core.h:73Initializing core...
> 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> src/cryptonote_core/cryptonote_core.cpp:323   Loading blockchain from 
> folder /home/user/.bitmonero/lmdb ...
> 2018-03-21 14:17:52.128 719f8bf9e740WARNblockchain.db.lmdb
>   src/blockchain_db/lmdb/db_lmdb.cpp:1155   LMDB memory map needs to be 
> resized, doing that now.  
> 2018-03-21 14:17:52.164 719f8bf9e740INFOglobal  
> src/blockchain_db/lmdb/db_lmdb.cpp:494LMDB Mapsize increased.  Old: 
> 1024MiB, New: 2048MiB
> Bus error
> 
> If any of the users of this community have this software or using this wallet 
> for XMR can help me, that'd be highly appreciated.
> 
> If not, no worries.
> 
> Have a good day.
> King Regards.

>
I use the monero gui in a clean fedora-25 template succesfully. However i use a 
remote daemon for the gui because of the cpu power and storage space (50gb+) 
needed. Are you trying to sync locally?

Yes that's what i'm trying to do. Well trying to enjoy the best security 
possible with local daemon and traffic through TOR.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3290c5e5-ddd8-47e2-8afb-98dbdfbb2e39%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Monero Wallet on Qubes

2018-03-22 Thread abilgili950
On Wednesday, March 21, 2018 at 10:59:40 AM UTC-4, Unman wrote:
> On Wed, Mar 21, 2018 at 07:25:50AM -0700,  wrote:
> > Hi there beautiful community,
> > 
> > 5 months user here.
> > I think i have figured Qubes out enough to use it as my main OS but still 
> > i'm so noob.
> > I have been trying to move my monero wallet to Qubes from windows as well 
> > and there is no good documentation about it just like any other thing 
> > about Qubes.
> > 
> > So i have found this guide : 
> > 
> > https://github.com/0xB44EFD8751077F97/monero-site/blob/3e6f4fa28b7b834a7049ee45edc294ff1c026565/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.md
> > 
> > I have followed every step and managed to setup everything EXCEPT running 
> > and synchronizing MONEROD ( monero blockchain ) 
> > 
> > This is the error that i'm getting :
> > 
> > user@host:~/monero-v0.11.1.0$ ./monerod
> > 2018-03-21 14:17:46.267 719f8bf9e740INFOglobal  
> > src/daemon/main.cpp:279 Monero 'Helium Hydra' (v0.11.1.0-release)
> > 2018-03-21 14:17:46.267 719f8bf9e740INFOglobal  
> > src/daemon/protocol.h:55Initializing cryptonote protocol...
> > 2018-03-21 14:17:46.268 719f8bf9e740INFOglobal  
> > src/daemon/protocol.h:60Cryptonote protocol initialized OK
> > 2018-03-21 14:17:46.268 719f8bf9e740INFOglobal  
> > src/daemon/p2p.h:63 Initializing p2p server...
> > 2018-03-21 14:17:52.126 719f8bf9e740INFOglobal  
> > src/daemon/p2p.h:68 P2p server initialized OK
> > 2018-03-21 14:17:52.126 719f8bf9e740INFOglobal  
> > src/daemon/rpc.h:58 Initializing core rpc server...
> > 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> > contrib/epee/include/net/http_server_impl_base.h:70   Binding on 
> > 127.0.0.1:18081
> > 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> > src/daemon/rpc.h:63 Core rpc server initialized OK on port: 18081
> > 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> > src/daemon/core.h:73Initializing core...
> > 2018-03-21 14:17:52.127 719f8bf9e740INFOglobal  
> > src/cryptonote_core/cryptonote_core.cpp:323   Loading blockchain from 
> > folder /home/user/.bitmonero/lmdb ...
> > 2018-03-21 14:17:52.128 719f8bf9e740WARNblockchain.db.lmdb  
> > src/blockchain_db/lmdb/db_lmdb.cpp:1155   LMDB memory map needs to be 
> > resized, doing that now.  
> > 2018-03-21 14:17:52.164 719f8bf9e740INFOglobal  
> > src/blockchain_db/lmdb/db_lmdb.cpp:494LMDB Mapsize increased.  Old: 
> > 1024MiB, New: 2048MiB
> > Bus error
> > 
> > If any of the users of this community have this software or using this 
> > wallet for XMR can help me, that'd be highly appreciated.
> > 
> > If not, no worries.
> > 
> > Have a good day.
> > King Regards.
> > 
> 
> Greetings
> 
> Can you confirm which Qubes version you're using?
> Is there anything in the logs?
> Can you check memory allocated and also free space with df ?
> 
> It looks as if LMDB wants 2G space, and if this is in ~ you'll need to
> allocate more space for /rw

Thank you for your reply.

Qubes 3.2

Logs are normal except can't run monerod like stated above.

Tried to change private storage max to 122880 MB.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1995e9b3-8238-4710-982d-dfb08ece814d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: DispVM broken in 3.2?

2018-03-22 Thread cooloutac
On Saturday, March 17, 2018 at 7:53:23 AM UTC-4, qubes...@riseup.net wrote:
> DispVM functionality does no longer work for me in Q3.2 since yesterday.
> 
> First I assumed the template is broken but after reinstalling the fedora-26 
> template
> from the rpm repo and recreating the DVM I get the very same error.
> 
> Has anyone else the same problem after installing the latest dom0 updates?
> 
> from the dom0 yum.log the latest installed updates were (2018-03-15):
> 
>  libgcc-5.3.1-6.qubes1.fc23.x86_64
>  2001:xen-licenses-4.6.6-37.fc23.x86_64
>  2001:xen-libs-4.6.6-37.fc23.x86_64
>  2001:xen-hypervisor-4.6.6-37.fc23.x86_64
>  2001:xen-runtime-4.6.6-37.fc23.x86_64
>  libstdc++-5.3.1-6.qubes1.fc23.x86_64
>  2001:xen-hvm-4.6.6-37.fc23.x86_64
>  2001:xen-4.6.6-37.fc23.x86_64
>  qubes-gpg-split-dom0-2.0.28-1.fc23.x86_64
>  libgomp-5.3.1-6.qubes1.fc23.x86_64
> 
> 
> I also tried a reboot but that did not change anything either.
> 
> 
> This is the error I get when trying to start xterm (or anything else) in a 
> DispVM:
> 
> 
> echo xterm| /usr/lib/qubes/qfile-daemon-dvm qubes.VMShell dom0 DEFAULT red
> time=1521287074.5, qfile-daemon-dvm init
> time=1521287074.51, creating DispVM
> time=1521287075.04, collection loaded
> time=1521287075.05, VM created
> time=1521287075.06, VM starting
> time=1521287075.06, creating config file
> time=1521287075.06, calling restore
> Traceback (most recent call last):
>   File "/usr/lib/qubes/qfile-daemon-dvm", line 217, in 
> main()
>   File "/usr/lib/qubes/qfile-daemon-dvm", line 205, in main
> dispvm = qfile.get_dvm()
>   File "/usr/lib/qubes/qfile-daemon-dvm", line 167, in get_dvm
> return self.do_get_dvm()
>   File "/usr/lib/qubes/qfile-daemon-dvm", line 103, in do_get_dvm
> dispvm.start()
>   File 
> "/usr/lib64/python2.7/site-packages/qubes/modules/01QubesDisposableVm.py", 
> line 193, in start
> domain_config, libvirt.VIR_DOMAIN_SAVE_PAUSED)
>   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 4405, in 
> restoreFlags
> if ret == -1: raise libvirtError ('virDomainRestoreFlags() failed', 
> conn=self)
> libvirt.libvirtError: internal error: libxenlight failed to restore domain 
> 'disp1'

I still use fedora 26 for my dispvm.  from time to time it breaks.  even when 
using debian.   has always been a problem for me since using qubes.  the 
solution for me is just to simply delete the DVM template.  Using the qubes 
manager in 3.2,  select view and show inactive hidden vms.   then simply delete 
the fedora dvm.Then recreate it with qvm-create-default-dvm fedora-26.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7d780d27-ab8c-4d01-955e-4ac79fb26eb4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Choosing between TPM or ME removal

2018-03-22 Thread cooloutac
On Tuesday, March 20, 2018 at 6:51:24 AM UTC-4, awokd wrote:
> On Mon, March 19, 2018 5:03 pm, Giulio wrote:
> 
> > In summary,
> > are the TPM benefits enough to forcw me to keep the ME? I know this may be
> > more subjective depending on everyone's own threat model but i would like
> > to hear opinions on it.
> 
> Like you said, depends on threat model. TPM would allow you to use
> Anti-Evil Maid in Qubes, which helps prevent local tampering with the
> device. There are some other measures that can also help deter local
> tampering such as keeping GRUB/boot off local storage or SED (depending
> how much you trust your manufacturer's implementation).
> 
> ME with AMT and known and potentially more unknown exploits permits
> remote/network tampering with the device. ME without AMT and unknown
> exploits may also permit remote/network tampering or escalations of
> privilege. Since the source code is closed, there's no way for an end-user
> to be sure.

It doesn't actually "prevent" tampering.  Just notifies you if something 
changed.   And if it was compromised the only solution is to buy a new pc.

Any board that lets you flash firmware from the O/S is exploitable remotely.  
Which is pretty much all of them.  Unless you have a board with secure boot, 
secure flash,  or a board with a jumper to prevent flashing.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/139eecab-cabf-417d-9c3e-065290c6c749%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Issues with Yubikey 4 input

2018-03-22 Thread brendan . hoar
On Wednesday, March 21, 2018 at 2:38:25 PM UTC-4, Jon R. wrote:
> Just a brief update on this -- I snagged a few Yubikey FIDO specific devices 
> and they seem to work fine and as you'd expect. The issue seems to be 
> isolated to the Yubikey 4 / the ones that support smart card features / 
> things of that nature.
> 
> Color me confused.

A U2F Yubikey has a single USB "interface" that provides the U2F functionality. 
Yubikey NEOs/4s out of the box are setup to provide three USB "interfaces": 
U2F, classic Yubikey (two slots, HID based) and CCID (smart card) "interfaces". 
Discussion of USB "interfaces" can be found here:  
https://stackoverflow.com/questions/33103711/whats-difference-between-configuration-and-interface-in-usb-device

As I read it, if the device works in sys-usb but doesn't work in other VMs 
using the same template, perhaps the qubes/xen code that handles reassigning 
USB devices doesn't handle multi-interface USB devices well?

Perhaps try temporarily configuring your Yubikey 4 to disable OTP and CCID 
(leaving only the U2F interface enabled) using the Yubikey NEO Manager and see 
if that allows the U2F to function when the USB device is assigned to a VM. IF 
that works, see if other combinations (U2F+CCID, U2F+OTP) work or don't.

Brendan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/42830839-73c5-45e5-9490-bde157013e49%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] strange message in qubes-dom0-update

2018-03-22 Thread haaber
When I run in Q4rc(4,5) the update command

sudo  qubes-dom0-update --enablerepo=qubes-dom0-current-testing

I get the message

/usr/lib/qubes/qubes-rpc-multiplexer: 14:
/etc/profile.d/20_power_savings_disable_in_vms.sh: shopt: not found

followed by "no new updates available". Do you experience the same? May
I ignore this?  Bernhard

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2ab64ba4-12a5-baf0-8b3b-b415a4ad8e16%40web.de.
For more options, visit https://groups.google.com/d/optout.