Re: [qubes-users] Re: Qubes R4.0 broken by 'TypeError: not enough arguments...' for most qvm-* commands

[Brendon Green]

According to the LVM documentation, the thin pool will become read-only for
operations that require a change to metadata in the event of the metadata
volume becoming exhausted. It seems I was lucky enough to experience the
system failure prior to data loss occurring (although that would have cost
only another reinstall, as it was my second day using the new OS).

On Fri, 13 Apr 2018, 13:34 'awokd' via qubes-users, <
qubes-users@googlegroups.com> wrote:

> On Fri, April 13, 2018 12:33 am, Pablo Di Noto wrote:
>
> > Ah! The joy! Now back to R4.0 without massive reinstall.
> >
> >
> > Thanks Marek, awokd and techg...!
>
> I think you taught me more than I helped on this one! Thanks for sharing
> your resolution.
>
>
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "qubes-users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/qubes-users/SV_BlWTvB2g/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/04dac88f740f67b95a41f3d69060abe7.squirrel%40tt3j2x4k5ycaa5zt.onion
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJrT%2BY%3DKtGAHQuu%2Boba24FZ99u5xmE7mqzrnuqvJaXGnn8toQg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes VM Hardening v0.8.2 Released!

[none]

Is there some official opinion on this from whomever the Qubes 
developers are ?


Looks like it's a bit non trivial, and interacts with dom0 ; hence I'm 
likely to break Q4.0  trying to 'harden' it :)



I was thinking I could clone the Deb-9 Template, and all would be OK, if 
I failed however ...


Am a bit curious who is officially a dev  on here, I have a few guess, 
besides Marek, but  maybe its folks with the PGP sigs , shrug.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/aabfffab-765a-e97d-1299-010bba746bdd%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] [R3.2] PS/2 mouse issue

[Gaijin]

In preparation for R4.0 I procured a new workstation that has PS/2 ports
for the keyboard and mouse. The PS/2 keyboard works fine, but the PS/2
mouse is not recognized on boot of R3.2. After a reboot, I must unplug
the PS/2 mouse and plug it back in so that it will work. 

Is this a known issue, or are there any work-arounds?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0176e7b9b9775c45b969fa30ee9beec4%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] This really sucks....

[Drew White]

Can you please explain...

Multiple backups having issues restoring... 
I have 2 backups that are useless that I can't use.. Probably more.

This is completely unacceptable that you still have not resolved these bugs I 
mentioned in Qubes version 2. Please fix!


Extracting data: 11.1 GiB to restore
ERROR: unable to extract files for 
/var/tmp/restore_4y7IsA/vm31/private.img.027, tar output: tar: 
vm31/private.img: Cannot write: No space left on device tar: Exiting with 
failure status due to previous errors 
Some errors occurred during data extraction, continuing anyway to restore at 
least some VMs
-> Restoring QubesHVm win7x64...
-> Done. Please install updates for all the restored templates.
Please unmount your backup volume and cancel the file selection dialog.
Finished with errors!

There was 18 GB on the dive where I was restoring to.
1. Why isn't it restoring to where it's meant to restore?
2. Why is it restoring to the operating system partition?
3. Why doesn't it check space BEFORE it starts?
4. If there isn't enough space why doesn't it restore to where it's told to?



Extracting data: 18.5 GiB to restore
Some errors occurred during data extraction, continuing anyway to restore at 
least some VMs
-> Restoring QubesTemplateHVm Win7x64...
ERROR: VM private image file doesn't exist: 
/var/lib/qubes/vm-templates/Win7x64/private.img
*** Skipping VM: Win7x64
-> Done. Please install updates for all the restored templates.
Please unmount your backup volume and cancel the file selection dialog.
Finished with errors!

private.img does exist in the archive/backup.
Why isn't it knowing that and restoring?





-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fc6fc099-4b8f-4856-825d-284cb38da57c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Small Templates

[Drew White]

Has anyone managed to work out a miniature template that works for Qubes with 
all the additions?

I'm just talking about super small versions.

Are there any versions that are nice and small?

Has anyone got pfsense working properly with Qubes?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/77f376db-721e-490c-986e-37ae5f71ee2f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - Thinkpad X1 Carbon 5th gen - Qubes 4.0-rc3

[fiasco4297]

On Friday, December 15, 2017 at 4:54:19 PM UTC-8, Marek Marczykowski-Górecki 
wrote:
> Hi,
> 
> I have some initial comments about Qubes 4.0rc3 on Lenovo Thinkpad X1
> Carbon 5th gen. I'll dig further into issues listed below. But for now I
> wouldn't call it "works out of the box", unfortunately :/
> 
>  - EFI installer do not boot - gets back into grub instantly, /noexitboot
>/mapbs do not help
>  - legacy mode install works fine (although I've noticed small graphics
>glithes once or twice)
>  - at next boot grub is horribly slow (you can see drawing each char)
>  - system starts with default kernel (4.9.56)
>  - trackpoint/touchpad do not work:
>  
>  psmouse serio1: TouchPad at isa0060/serio1/input0 lost sync at byte 1
>  psmouse serio1: TouchPad at isa0060/serio1/input0 lost sync at byte 1
>  psmouse serio1: TouchPad at isa0060/serio1/input0 lost sync at byte 1
>  psmouse serio1: TouchPad at isa0060/serio1/input0 lost sync at byte 1
>  psmouse serio1: TouchPad at isa0060/serio1/input0 lost sync at byte 1
>  psmouse serio1: issuing reconnect request
>  psmouse serio1: synaptics: queried max coordinates: x [..5678], y 
> [..4758]
>  psmouse serio1: synaptics: queried min coordinates: x [1266..], y 
> [1094..]
>  
>  - suspend: hang on suspend (green light flash quickly)
> 
> Next step: upgrade dom0 (only!) kernel to 4.14.6
> (https://github.com/QubesOS/qubes-linux-kernel/pull/13). You need to
> build it yourself, there is no
> binary package available, yet. 
> 
> Then add iwlmvm and iwlwifi to /rw/config/suspend-module-backlist in sys-net
> 
>  - this fixed suspend issue, wireless also works after suspend
>  - touchpad/trackpoint still do not work
> 
> Other issues:
>  - https://github.com/QubesOS/qubes-issues/issues/3108
> 
> 
> Untested:
>  - mic
>  - camera
>  - ethernet
>  - thunderbolt (and do not plan to)
>  - WiGig (does it even have Linux support?)
>  - bluetooth
>  - NFC
>  - fingerprint reader (do not plan to test)
> 
> Attached hardware info.
> 
> -- 
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?

Did you (or anyone else) ever figure out how to fix the suspend/resume issues? 
I'm seeing that issue on my X1 Carbon 6th gen (qubes 4.0). Install worked 
smoothly with EFI. My HCL post: 
https://groups.google.com/forum/#!topic/qubes-users/QrG7uUZsSZY

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2b3bec5c-4eed-4482-bff1-03a476379134%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] HCL - Thinkpad X1 Carbon 6th gen - Qubes 4.0

[fiasco4297]

Summary: Install worked reasonably well and it boots with EFI into the 
installed Qubes 4.0 nicely. There are a few issues to resolve.

1. I have the model with a touch screen and I haven't debugged how to make it 
work yet (I'll get to that and post back what worked).

2. Suspend/resume doesn't work and I have to do a hard reset. A few times (not 
all) I had to hard reset twice to get it to reboot properly.

3. HCL reports no TPM, but I have a dTPM 2.0.

It's booting with UEFI smoothly. I haven't tested the mic, camera, or ports 
except USB for storage yet. I'll update once I find fixes for the above. If 
anyone could point me in the right direction for the suspend freezing issue, 
let me know. I tried shutting down all VMs, including service VMs after reading 
this, https://groups.google.com/d/msg/qubes-users/81t26xq4MEI/HrfDEcjeAgAJ but 
the problem persisted didn't change anything.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9fb2385b-c7fe-40e4-9a1d-e1e670894c8d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-LENOVO-20KH002JUS-20180416-115836.yml
Description: Binary data

[qubes-users] Re: New Lenovo X1 Carbon 6th Gen Compatability

[fiasco4297]

On Thursday, February 8, 2018 at 10:19:11 AM UTC-8, John Pacific wrote:
> Hello!
> 
> The new X1 Carbon 6th gen will be released soon(tm)!
> I was wondering if anyone had planned on trying to install Qubes on it and 
> reporting back here.
> 
> It has the following hardware:
> 
> 8th Generation Intel® Core i7-8650U with vPro®
> Integrated Intel® UHD Graphics 620
> 16GB LPDDR3 2133 MHz
> 1TB SSD OPAL PCIe TLC
> dTPM 2.0
> (Apparently, some FIDO device?)
> Intel Wireless-AC 8265 2x2 AC
> 
> I was thinking about buying it and using it for work (with Qubes), but I 
> cannot justify nearly $3,000 for an experiment.
> 
> 
> If any of you have tried it out or intend to try it out, please let me know!
> 
> 
> Thanks,
> 
> John Pacific

Trying it out now. Works with EFI booting out of the box. Never booted into 
Windows other than to test that it turned on and touchscreen worked.
Currenlty figuring out why the following is showing:
1. Freezes on resume from suspend.
Tried shutting down all VMs and it still happens, so I suspect it's not the 
same fix as: https://groups.google.com/forum/#!topic/qubes-users/81t26xq4MEI
2. HCL script says no TPM, but I definitely have a TPM.
3. Touchscreen isn't working. I haven't put any time into figuring this out yet.

Install was easy. Setup was otherwise easy. I currently have it set on UEFI 
only, disabling CSM (Compatibility Support Mode)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/608f0ea6-7848-4e0f-8cb8-9dac3bcf9078%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] meetup

[799]

Hello,

 schrieb am Mo., 16. Apr. 2018, 22:24:

> cool!
> no I was not aware! cu!
>
> Quoting Michael Carbone :
>
> > hey, you may have missed previous emails about it but there is a monthly
> > meeting in Berlin for Qubes users at a local hackerspace. The most
> > recent meet-up was today.
> >
> > You can find out more info here:
> > https://qubesusersberlin.github.io


Ok, you need to improve Public Relations ;-)
Never heard of it before, I am also Berlin based and would attend.

How many users are there? And how many of those are Coreboot Users?

Regards

[799]

>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2txM3SFCnoSG741aQ1xU99ThC_6S_aDPM2wurrbWuGFcQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: CentOS Virtualization From Multiple .vmdk

[hype]

Using the following guide I've been able to mount the raw, qemu-img converted 
.vmdk files onto a loop device, thus I'm able to access every partition of the 
virtual machine.

https://www.turnkeylinux.org/blog/convert-vm-iso

Unfortunately the end of the guide is broken for my case and I'm unable to 
generate the iso. I've successfully extracted the root filesystem.

Now that I have all the data, how to I turn this into an iso file which will 
load the vm? Please help, I've been banging my head on this thing for a week 
and am lost. :(

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1e0ebd07-bcf9-4c1a-9b68-b6eaeb96968b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] minimum size for a qube image

['awokd' via qubes-users]

> However, The VM Manager insists on at least 10 GB for each qube. Giving
> up 100 GB with 75 GB empty (i.e. 15 % of total disk space) is steep. So my
> question is: how can I create smaller images for my qubes?

This is thin provisioned on disk, not dedicated. So you could give each VM
100GB, but if you only put a 1MB file in there, it will only take up 1MB
(+ the filesystem metadata overhead) on disk.

> I'm also open to discussing the basic concept: is it worth trying to
> keep, for example, Firefox and GIMP in separate qubes, or should I just
> relax and use one fat TemplateVM with the union of all packages I need?

I'm partial to small, medium, large approach to templates. The large one
has everything, but never gets a network connection. I wouldn't recommend
HVMs for what you are doing; you lose non-persistence of the root
filesystem.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/db55125c7db8e734ff0b366c46904e99.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] minimum size for a qube image

[Jan Hustak]

Hello,

I really like Qubes' isolation approach. I would also like to isolate 
the programs I run from code they don't need. So I want to split not 
just my data into separate qubes, but also the software that works with 
said data.


One way to do this is to install required software under /usr/local in 
each qube. That has the important drawback of ignoring the qube's 
package manager and the consistent updates it provides.


Another option is to build my qubes as StandaloneVMs copied from a 
minimalist template. The qubes have to be updated one by one but at 
least it's still done using the package manager.


So I created a Debian template trimmed to about 2.5 GB. I identified my 
task domains - there were about 10 - and planned to cut a 4GB qube for 
each. This would eat up 40 GB from my 500 GB drive which I can live with.


However, The VM Manager insists on at least 10 GB for each qube. Giving 
up 100 GB with 75 GB empty (i.e. 15 % of total disk space) is steep. So 
my question is: how can I create smaller images for my qubes?


I'm also open to discussing the basic concept: is it worth trying to 
keep, for example, Firefox and GIMP in separate qubes, or should I just 
relax and use one fat TemplateVM with the union of all packages I need?


Any advice appreciated.

jh

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2a754a65-6e8f-5746-e9d8-94322d445a9c%40journey.sk.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] meetup

[maiski]

cool!
no I was not aware! cu!

Quoting Michael Carbone :


On 04/16/18 16:08, mai...@maiski.net wrote:

Hello guys,

I am a qubes user for nearly three years now and would love to meet
other people, discuss, learn from each other, contribute...
That is why i would like to organize a meetup in the city where i am
currently residing - Berlin.
For starters (first meetup) i think a cafe would be fine. And then
decide where and how often to meet, what do we want to do in particular
etc.

Here is a small duddle poll. I think till the end of this week there is
enough time to get an idea if there are enough people wanting to come:

https://dudle.inf.tu-dresden.de/would_I_like_to_participate_in_a_Berlin_Qubes_meetup/


greets,

m



hey, you may have missed previous emails about it but there is a monthly
meeting in Berlin for Qubes users at a local hackerspace. The most
recent meet-up was today.

You can find out more info here:

https://qubesusersberlin.github.io

There is also a mailing list that you can join to be notified about
meetings or otherwise talk.

Hope to see you at the next meet-up,
Michael




--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180416222426.Horde.WlppiEO5vSOBlF50YDHoNw1%40webmail.df.eu.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] meetup

[maiski]

Hello guys,

I am a qubes user for nearly three years now and would love to meet  
other people, discuss, learn from each other, contribute...
That is why i would like to organize a meetup in the city where i am  
currently residing - Berlin.
For starters (first meetup) i think a cafe would be fine. And then  
decide where and how often to meet, what do we want to do in  
particular etc.


Here is a small duddle poll. I think till the end of this week there  
is enough time to get an idea if there are enough people wanting to  
come:


https://dudle.inf.tu-dresden.de/would_I_like_to_participate_in_a_Berlin_Qubes_meetup/

greets,

m

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180416220851.Horde.bKbtB6TyTIPLcd64UlJ9xQ9%40webmail.df.eu.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: How to verify Qubes

[Tobias Killer]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hey,

Am 16.04.2018 um 18:13 schrieb myblackcatisb...@gmail.com:
> thread can be closed. It works perfectly.

If you're really concerned about security then you should verify that
the signing key you have is the real one, as I described in my very
recent email.

A system booted from a compromised ISO could also "work perfectly" but
compromise your computer system. A real attacker won't warn you but
give you the illusion that everything was fine.

Regards,
Tobias
-BEGIN PGP SIGNATURE-
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=6s5Z
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/170aa583-cc06-4454-aae5-b4994950c599%40posteo.de.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: How to verify Qubes

[Tobias Killer]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Am 16.04.2018 um 16:53 schrieb myblackcatisb...@gmail.com:
> Hey guys,

Hello,

> 
> i following the tutorial which Chris wrote.
> 
> It works, but by the last step "verify the Iso" i become this
> message.
> 
> http://www.bilder-upload.eu/show.php?file=fe395a-1523890343.png
> 
> The Screenshot from the command promp i uploaded to a hoster.
> 

Since it's written in German, I'll roughly transcript and translate
the screenshot here:

==
C:\Users\cyper\Downloads>gpg --verify Qubes-R4.0-x86_64.iso.asc
Qubes-R4.0-x86_64.iso
gpg: Signature made We 28 Mar 2018 05:31:04 CEST
gpg:using RSA key 5817A43B283DE5A9181A522E1848792F9E2795E9
gpg: Good signature from "Qubes OS Release 4 Signing Key" [undefined]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:  There is no indication that the signature belongs to the
owner.
Primary key fingerprint: 5817 A43B 283D E5A9 181A  522E 1848 792F 9E27
95E9
==

It tells you that the signature itself is correct which means that the
ISO file you have has not been manipulated and is in fact from the
Qubes OS project AS LONG AS the "Qubes OS Release 4 Signing Key" you
have is NOT A FAKE.

Your GPG does not know if the signing key you have is a fake or not.
This means that GPG cannot confirm if the signature you verified is
really from the Qubes OS project or not. That's what the warning
message is about.

If you trust the key then everything is fine. Here

https://www.qubes-os.org/security/verifying-signatures/#importing-qubes-signing-keys

is a list of ideas how you can check if the fingerprint of the key you
have equals the fingerprint of the real "Qubes OS Release 4 Signing
Key". If they match, using several sources, then it's likely that you
have the real key.

> Is this Iso not correct?

As long as you trust the signing key.

> 
> About a message i would be happy.
> 
> regards and thx in advance
> 

Regards,
Tobias
-BEGIN PGP SIGNATURE-
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=1DEv
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1a126451-fb47-b10a-ebdf-6dcde080d8ec%40posteo.de.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: How to verify Qubes

[myblackcatisback]

Hey,

thread can be closed. It works perfectly.

@Chris Laprise

Your Thread was very helpful. Thumbs up.

Thanks to all.

regards


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/27310a61-bd7e-486f-90c5-4b4fc1c02d9f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: USB Device Question

[Stuart Perkins]

I am able to browse and copy the phone's file system via the file manager 
application, but the path is mtp://[usb:002,004]/Phone/ which won't work with 
rsync.  I don't see it under "run" anywhere...or under any of the file system 
starting at root.  It is like it really isn't mounted at all.  It shows up 
under file manager as a network location though.  How would I tell rsync to 
reference it as a network location?

On Mon, 16 Apr 2018 06:43:17 -0700 (PDT)
cooloutac  wrote:

>On Sunday, April 15, 2018 at 3:34:25 PM UTC-4, Stuart Perkins wrote:
>> I have the following setup:
>> 
>> Qubes 3.2, xfce4 interface
>> sys-usb
>> 
>> I want to be able to connect my Android phone to a vm and rsync its 
>> contents.  I can connect the phone and "qvm-usb -a" it to the VM, and it 
>> appears available under the File Manager application as 
>> "mtp://[usb:002,004]/" but I cannot locate a mount point to use for rsync.  
>> It does not appear under /run/user/[uid]/gvfs.  Any idea where it mounts so 
>> I can use rsync to reference it?
>> 
>> Thanks in advance...
>> 
>> Stuart  
>
>usually in /run/media I think.  If worse comes to worse you can just copy the 
>files to sys-usb and then transfer it to your media vm.
>
>ALso usually when you click it in the file manager,  you then have to click 
>allow on the phone itself before you can access the directories.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20180416120655.76c932ed%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Experimenting with Wireguard VPN @Mullvad.net

[litedag]

On Tuesday, February 13, 2018 at 12:16:29 AM UTC, kereke...@gmail.com wrote:
> Finally solved the issue by reinstalling all kernel modules! (3.2, fedora-26, 
> 4.14.16-200)

Hi. 

I got the wireguard.ko in a fedora-25 vm, but it wont work on debian, saying 
that it needs to use the same kernel that it was compiled on. Plus the 
wireguard-dkms gives an error because it doesn't have a version for the qubes 
kernel so it installs 4.9.0-6.
So I decided to do it in fedora-26.
I am very new to all this, please excuse my lack of knowledge.

I have the same problem as kereke... I have been trying for a week to get it to 
work.Can you please post instructions and download links?
I could not find the packages for 4.14.16 , and I am not sure what files I need 
and what to do with them.Did i miss a step here? I did: 
dkms autoinstall -k 4.14.16-200
grub-mkconfig -o /boot/grub2/grub.cfg
set the qvm-prefs to 'pvgrub2' and then to '', but neither worked
Please help.thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fe3963a7-ff03-4a43-917d-18f6876fde3e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: boot problem on my production qubes (urgent!)

[donoban]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 04/11/18 15:49, 'awokd' via qubes-users wrote:
> 
> I think it's related to this. My guess is, when you installed 4.0,
> it overwrote the boot menu entry in your EFI firmware, so now it
> doesn't work for 3.2. If you were using legacy mode boot for 3.2,
> try to set that first in your boot order. If EFI mode, you might
> have to boot into Qubes recovery mode (possibly from the 3.2 DVD),
> then repair the EFI boot entry. The command will be something
> like:
> 
> sudo efibootmgr -c -L Qubes32 -d /dev/sda -p 1 -l
> \\EFI\\qubes\\xen.efi
> 
> Note the "/dev/sda" and "-p 1" might vary. "-p 1" is the partition
> number for your EFI partition (and this is what might have changed
> with your 4.0 install.
> 

I also had this problem when I did my first Qubes 4 test. For avoid
fixing anytime I install Qubes 4, I renamed the Qubes 3.2 entry.

Maybe would be a good idea to default Qubes 4 to a different name to
avoid this kind of problems.
-BEGIN PGP SIGNATURE-
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=JdcM
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a60b487f-c65e-4361-297d-66309904a501%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: How to verify Qubes

[myblackcatisback]

Hey guys,

i following the tutorial which Chris wrote.

It works, but by the last step "verify the Iso" i become this message.

http://www.bilder-upload.eu/show.php?file=fe395a-1523890343.png

The Screenshot from the command promp i uploaded to a hoster.

Is this Iso not correct?

About a message i would be happy.

regards and thx in advance

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cbb7dd73-937f-44c1-ba53-04f4cb711efd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: HCL - Lenovo Thinkpad T480

[bbrr3332]

On Monday, April 16, 2018 at 1:29:24 PM UTC+1, Ivan Mitev wrote:
> On 04/16/2018 02:23 PM, Ivan Mitev wrote:
> > 
> > 
> > On 04/16/2018 01:49 PM, bbrr3...@gmail.com wrote:
> >> On Saturday, April 14, 2018 at 10:13:10 PM UTC+1, bbrr...@gmail.com wrote:
> >>> System basically works nicely out of the box with Q4.0. I recommend the 
> >>> laptop.
> >>>
> >>> The only glitch was consistent crash when resuming from suspend. I 
> >>> debugged by shutting down service vm's and narrowed it down to sys-usb. 
> >>> Then detached the second USB controller from sys-usb and everything seems 
> >>> to work fine.  I did not seem to loose any devices/ports doing this but 
> >>> did not do an exhaustive test. 
> >>>
> >>> I have the high-res screen and text is pretty small. Haven't yet figure 
> >>> out how to scale things up in qubes?
> >>
> >> Thanks. Unfortunately it seems to have no effect:
> >>
> >> echo Xft.dpi: XXX | xrdb -merge 
> >> xterm &
> >>
> >> produces the same size text regardless of XXX
> > 
> > hmm :( I see that the 'Xft.dpi: XXX' setting is indeed ignored on the
> > default fedora-26 template, while it works perfectly in templateVMs I've
> > customized from fedora-26-minimal. There's probably a package in
> > fedora-26 (that I don't have in my templates) which is messing up with
> > the dpi setting; I'll update the doc and I'll reply here if I find out
> > what's causing that.
> 
> Looking at differences between fedora-26-minimal (where Xft.dpi works)
> and fedora-26 (where it doesn't), it seems that gsd-settings (from the
> gnome-settings-daemon package) overrides the dpi setting.
> 
> The following works:
> 
> - in VMs with gnome-settings-daemon:
> 
> gsettings set org.gnome.desktop.interface scaling-factor 2
> gsettings set org.gnome.desktop.interface text-scaling-factor 0.75
> 
> - in VMs without gnome-settings-daemon (or when gsd-settings is
> prevented from starting):
> 
> set the 'Xft.dpi: XXX' xresource
> 
> 
> Note that by default glib applications (like xterm) use non xft fonts,
> so if you want to have scaling in xterm you have to set an xft font like so:
> 
> XTerm*faceName: DejaVu Sans Mono:size=14:antialias=true
> 
> I'm attaching my $HOME/.Xresources file if you want to have a look.
> 
> Please let me know what works and what doesn't so that I update the doc
> and the official issue...

Thanks. Both methods work. I can just kill the gsd process and the Xft resource 
is correctly picked up and gives a nice result.

The gsettings approach also works. I did not look into it in detail but the Xft 
seems to give visually better results.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7eae9d67-98f1-4bec-8f96-782c07b1a27c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Q4 Laptops...

['awokd' via qubes-users]

On Mon, April 16, 2018 1:20 pm, Thierry Laurion wrote:
> Le lun. 16 avr. 2018 05:47, awokd  a écrit :


>> They don't have a titanium frame, but what laptops do these days? I did
>> a full Stretch linux-image build in 2.5 hours on one, but that's the
>> heaviest work I put it through. With 16GB RAM and a good SSD, they're
>> fast enough for what I need.
>>
> What is your CPU speed? How much lasts the battery? How is the screen?
> Does
> it feel bulky in a backpack?

My CPU speed is 1 linux-image build in 2.5 hours. :) It was capped on CPU
the whole time inside the HVM, so I think it's a good measure. In Hz, it's
2.5GHz x 4 core.

Battery life is short, maybe a couple hours under heavy Qubes use but I
just have the stock 4 cell in there. Usually leave it plugged in.

Screen is an ugly 1366x768 glossy. Don't like the chiclet keyboard either.
Never tried it in a backpack (see usually plugged in), but it's wider than
I like.

But all of those are secondary considerations for me. Primary was
something owner controlled (which as far as I'm concerned, is a
requirement for security). That's not true for everyone, and others have
different priorities. The "right" solution for someone is somewhere on a
multi-dimensional sliding scale.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/44d8b27d3bee3634fbfe0305d3213bf2.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: USB Device Question

[cooloutac]

On Sunday, April 15, 2018 at 3:34:25 PM UTC-4, Stuart Perkins wrote:
> I have the following setup:
> 
> Qubes 3.2, xfce4 interface
> sys-usb
> 
> I want to be able to connect my Android phone to a vm and rsync its contents. 
>  I can connect the phone and "qvm-usb -a" it to the VM, and it appears 
> available under the File Manager application as "mtp://[usb:002,004]/" but I 
> cannot locate a mount point to use for rsync.  It does not appear under 
> /run/user/[uid]/gvfs.  Any idea where it mounts so I can use rsync to 
> reference it?
> 
> Thanks in advance...
> 
> Stuart

usually in /run/media I think.  If worse comes to worse you can just copy the 
files to sys-usb and then transfer it to your media vm.

ALso usually when you click it in the file manager,  you then have to click 
allow on the phone itself before you can access the directories.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f755f67b-265c-4100-aa6f-9143edeca049%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: 4.0 not updating dom0 nor fedora?

[cooloutac]

On Sunday, April 15, 2018 at 8:34:52 PM UTC-4, Stumpy wrote:
> One small caveat, whonix-ws updated, everything else says there are no 
> updates? While this is possible I am thinking its unlikely?
> I tried to update dom0 from the terminal
>   sudo qubes-dom0-update
> and got
>   /usr/lib/qubes/qubes-rpc-multiplexer: 14: 
> /etc/profile.d/20_power_savings_disable_in_vms.sh shopt: not found
>  /usr/lib/qubes/qubes-rpc-multiplexer: 14: 
> /etc/profile.d/20_power_savings_disable_in_vms.sh shopt: not found
>  No new updates available
>  No updates available
> For what its worth, none of them, not even whonix-ws would update until 
> I set whonix-gw as the NetVMs, even though I had selected the option for 
> appvms to update via tor.
> I did open a terminal for each template and managed to do updates using 
> apt-get for debian and whonix but not for fedora nor dom0, and not via 
> the qubes manager "update qube" option
> For fedora it gave the error
>  Error: Failed to synchronize cache for repo qubes-vm-r4.0-current
> Thoughts?

I get the same errors when updating dom0.  I think its a known issue.  I hope 
lol.

For the fedora error,  when using whonix as updatevm you have to go into the 
qubes-r4.repo file in /etc/yum.repos.d directory of the fedora template and 
change everything from http to https.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e9953247-3d4b-4aa1-9102-535e026a931d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Q4 Laptops...

[Thierry Laurion]

Le lun. 16 avr. 2018 05:47, awokd  a écrit :

> On Sun, April 15, 2018 12:52 pm, Thierry Laurion wrote:
>
> > Let's start a real debate aimed at improving stuff and building proper
> > arguments. Pressure against manufacturers will build with market laws,
> and
> > energy should be put where things can evolve in the meantime.
>
> I think everyone can agree to this!
>
> > G505s are not powerful and tough enough to run Qubes as a daily
> > driver.
>
> They don't have a titanium frame, but what laptops do these days? I did a
> full Stretch linux-image build in 2.5 hours on one, but that's the
> heaviest work I put it through. With 16GB RAM and a good SSD, they're fast
> enough for what I need.
>
What is your CPU speed? How much lasts the battery? How is the screen? Does
it feel bulky in a backpack?

>
> > ME is a really nasty piece of shit to deal with, agreed. But things needs
> >  to move forward. Hiding in a cave waiting for things to magically happen
> > is not enough.
>
> I think everyone can agree to this too. I posted some thoughts on ways
> forward over on qubes-devel a little while ago
> https://www.mail-archive.com/qubes-devel@googlegroups.com/msg03097.html
> and there were a couple related threads around the same time. Neither
> Intel or AMD seem concerned about actual security, only locking down the
> platform by handing over control of it to manufacturers instead of end
> users.
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAAzJznybiJUNTPDn%3Dg3fk_c8WO-B%2BH%3DP7FnHU85ircyPLF-dLA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Windows 7 VM is freezing during the installation

[Nico De Musso]

On Friday, April 13, 2018 at 5:20:29 PM UTC+2, awokd wrote:
> On Fri, April 13, 2018 1:17 pm, Nico De Musso wrote:
> > I have the same issue.At the second boot the installation continue then
> > the window disappear.
> 
> Check out taradiddles' pending documentation update
> (https://github.com/taradiddles/qubes-doc/blob/eec2893b2bf58206a6c18857f43eb854bc27af22/managing-os/windows/windows-vm.md)
> - look for the step about Cirrus video adapter.

Thank you very much this guide worked for me.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e53fa230-14c5-480d-860d-667f17976c23%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: HCL - Lenovo Thinkpad T480

[Ivan Mitev]

On 04/16/2018 02:23 PM, Ivan Mitev wrote:
> 
> 
> On 04/16/2018 01:49 PM, bbrr3...@gmail.com wrote:
>> On Saturday, April 14, 2018 at 10:13:10 PM UTC+1, bbrr...@gmail.com wrote:
>>> System basically works nicely out of the box with Q4.0. I recommend the 
>>> laptop.
>>>
>>> The only glitch was consistent crash when resuming from suspend. I debugged 
>>> by shutting down service vm's and narrowed it down to sys-usb. Then 
>>> detached the second USB controller from sys-usb and everything seems to 
>>> work fine.  I did not seem to loose any devices/ports doing this but did 
>>> not do an exhaustive test. 
>>>
>>> I have the high-res screen and text is pretty small. Haven't yet figure out 
>>> how to scale things up in qubes?
>>
>> Thanks. Unfortunately it seems to have no effect:
>>
>> echo Xft.dpi: XXX | xrdb -merge 
>> xterm &
>>
>> produces the same size text regardless of XXX
> 
> hmm :( I see that the 'Xft.dpi: XXX' setting is indeed ignored on the
> default fedora-26 template, while it works perfectly in templateVMs I've
> customized from fedora-26-minimal. There's probably a package in
> fedora-26 (that I don't have in my templates) which is messing up with
> the dpi setting; I'll update the doc and I'll reply here if I find out
> what's causing that.

Looking at differences between fedora-26-minimal (where Xft.dpi works)
and fedora-26 (where it doesn't), it seems that gsd-settings (from the
gnome-settings-daemon package) overrides the dpi setting.

The following works:

- in VMs with gnome-settings-daemon:

gsettings set org.gnome.desktop.interface scaling-factor 2
gsettings set org.gnome.desktop.interface text-scaling-factor 0.75

- in VMs without gnome-settings-daemon (or when gsd-settings is
prevented from starting):

set the 'Xft.dpi: XXX' xresource


Note that by default glib applications (like xterm) use non xft fonts,
so if you want to have scaling in xterm you have to set an xft font like so:

XTerm*faceName: DejaVu Sans Mono:size=14:antialias=true

I'm attaching my $HOME/.Xresources file if you want to have a look.

Please let me know what works and what doesn't so that I update the doc
and the official issue...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f43a3b23-b880-7c48-1347-0c4e0600c33f%40maa.bz.
For more options, visit https://groups.google.com/d/optout.
! This is the global resources file that is loaded when
! all users log in, as well as for the login screen

! Fix the Xft dpi ; this prevents tiny fonts
! or HUGE fonts depending on the screen size.
Xft.dpi: 108

! hintstyle: medium means that (for Postscript fonts) we
! position the stems for maximum constrast and consistency
! but do not force the stems to integral widths. hintnone,
! hintslight, and hintfull are the other possibilities.
Xft.hintstyle: hintmedium
Xft.hinting: true

! ivan - include does not work because xinit uses the -nocpp option
! #include  "/usr/lib/qubes-tweak/Xresources"

! https://wiki.archlinux.org/index.php/Xterm#Configuration

URxvt*scrollBar:False
XTerm*scrollBar:False

URxvt.clipboard.autocopy:   True
XTerm*selectToClipboard:True

! urxft has fast scrolling on by default
XTerm*fastScroll:   True

URxvt*font: xft:DejaVu Sans 
Mono:size=14:antialias=true
XTerm*faceName: DejaVu Sans Mono:size=14:antialias=true

URxvt*saveLines:1000
XTerm*saveLines:1000

URxvt*loginShell:   True
XTerm*loginShell:   True

URxvt.fading:   0

! decrease char width in urxvt
URxvt.letterSpace:  -2

! fix invisible underscore in xterm
XTerm*scaleHeight: 1.01

! selection characters; see CHARACTER CLASS in xterm man page
**charClass:
33:48,35:48,37:48,43:48,45-47:48,64:48,95:48,126:48


!! COLORS
!XTerm.vt100.foreground:LightGray
!XTerm.vt100.background:Black
!XTerm*CursorColor: Green
!XTerm*CursorBlink: False


! http://ethanschoonover.com/solarized

!! drop in Solarized colorscheme for Xresources/Xdefaults

!!SOLARIZED HEX 16/8 TERMCOL  XTERM/HEX   L*A*B  RGB HSB
!!- ---  ---  --- -- --- ---
!!base03#002b36  8/4 brblack  234 #1c1c1c 15 -12 -12   0  43  54 193 100  21
!!base02#073642  0/4 black235 #262626 20 -12 -12   7  54  66 192  90  26
!!base01#586e75 10/7 brgreen  240 #585858 45 -07 -07  88 110 117 194  25  46
!!base00#657b83 11/7 

Re: [qubes-users] Re: HCL - Lenovo Thinkpad T480

[Ivan Mitev]

On 04/16/2018 01:49 PM, bbrr3...@gmail.com wrote:
> On Saturday, April 14, 2018 at 10:13:10 PM UTC+1, bbrr...@gmail.com wrote:
>> System basically works nicely out of the box with Q4.0. I recommend the 
>> laptop.
>>
>> The only glitch was consistent crash when resuming from suspend. I debugged 
>> by shutting down service vm's and narrowed it down to sys-usb. Then detached 
>> the second USB controller from sys-usb and everything seems to work fine.  I 
>> did not seem to loose any devices/ports doing this but did not do an 
>> exhaustive test. 
>>
>> I have the high-res screen and text is pretty small. Haven't yet figure out 
>> how to scale things up in qubes?
> 
> Thanks. Unfortunately it seems to have no effect:
> 
> echo Xft.dpi: XXX | xrdb -merge 
> xterm &
> 
> produces the same size text regardless of XXX

hmm :( I see that the 'Xft.dpi: XXX' setting is indeed ignored on the
default fedora-26 template, while it works perfectly in templateVMs I've
customized from fedora-26-minimal. There's probably a package in
fedora-26 (that I don't have in my templates) which is messing up with
the dpi setting; I'll update the doc and I'll reply here if I find out
what's causing that.

BTW, did you try the gnome/gtk specific instructions (the 'gsettings'
instructions for R3.2) ?


> 
> Is there a good application which definitely should honour this resource that 
> I can use to test?

xterm should work, but you can also try with libreoffice, eog,
galculator, ...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2e27e751-e766-7137-065a-739f6ecb3414%40maa.bz.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - Lenovo Thinkpad T480

[bbrr3332]

On Sunday, April 15, 2018 at 4:15:31 AM UTC+1, vel...@tutamail.com wrote:
> Thanks for sharing...my understanding is you can get this Laptop new? Not 
> sure if you know but this can come with either these processors:
> 
> 
> 8th Generation Intel® Core™ i7-8550U Processor (1.80GHz, up to 4.0GHz with 
> Turbo Boost, 8MB Cache)
> 
> or
> 
> 
> 8th Generation Intel® Core™ i7-8650U Processor with vPro (1.90GHz, up to 
> 4.20GHz with Turbo Boost, 8MB Cache)
> 
> Your HCL states you have the vPro...
> 
> Would you or anybody know if you can get all the functionality including AEM 
> with the i7-8550U (with out the vPro)?
> 
> Is there a higher risk of attack with the vPro?
> 
> Thanks for doing this HCL...

Yes, the T480 is brand new. I haven't tried the AEM .

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/30cf1edc-2ce8-475b-9f82-5f5c41f06dd3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - Lenovo Thinkpad T480

[bbrr3332]

On Saturday, April 14, 2018 at 10:13:10 PM UTC+1, bbrr...@gmail.com wrote:
> System basically works nicely out of the box with Q4.0. I recommend the 
> laptop.
> 
> The only glitch was consistent crash when resuming from suspend. I debugged 
> by shutting down service vm's and narrowed it down to sys-usb. Then detached 
> the second USB controller from sys-usb and everything seems to work fine.  I 
> did not seem to loose any devices/ports doing this but did not do an 
> exhaustive test. 
> 
> I have the high-res screen and text is pretty small. Haven't yet figure out 
> how to scale things up in qubes?

Thanks. Unfortunately it seems to have no effect:

echo Xft.dpi: XXX | xrdb -merge 
xterm &

produces the same size text regardless of XXX

Is there a good application which definitely should honour this resource that I 
can use to test?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cc4c6705-3a07-42ac-bc7d-baf99ef64d09%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Q4 Laptops...

['awokd' via qubes-users]

On Sun, April 15, 2018 12:52 pm, Thierry Laurion wrote:

> Let's start a real debate aimed at improving stuff and building proper
> arguments. Pressure against manufacturers will build with market laws, and
> energy should be put where things can evolve in the meantime.

I think everyone can agree to this!

> G505s are not powerful and tough enough to run Qubes as a daily
> driver.

They don't have a titanium frame, but what laptops do these days? I did a
full Stretch linux-image build in 2.5 hours on one, but that's the
heaviest work I put it through. With 16GB RAM and a good SSD, they're fast
enough for what I need.

> ME is a really nasty piece of shit to deal with, agreed. But things needs
>  to move forward. Hiding in a cave waiting for things to magically happen
> is not enough.

I think everyone can agree to this too. I posted some thoughts on ways
forward over on qubes-devel a little while ago
https://www.mail-archive.com/qubes-devel@googlegroups.com/msg03097.html
and there were a couple related threads around the same time. Neither
Intel or AMD seem concerned about actual security, only locking down the
platform by handing over control of it to manufacturers instead of end
users.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d49a2605e3b7a5f8f9a10afcf4d91876.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.