[qubes-users] Unsupported Hardware Detected Error messsage

2018-10-18 Thread architectofthefuture
I am using xcp-ng.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/aec4c842-803a-4043-9ce1-85183741282b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] updating archlinux template failing

2018-10-18 Thread 'Modprobe' via qubes-users
Yeah, the arch template was 'fun' to get working. I assume that qubes repo is 
just a vestige from the template build, since it's in /tmp, so I just removed 
it from the repo list in the pacman configuration. Then your -Sy should start 
working again.

I also couldn't stand the dumb curl downloader, it's so ugly and doesn't work 
well, so I gave the templatevm a network connection and tweaked the qubes 
settings so it doesn't change pacman's xfer command. If you want to do that let 
me know and I'll figure out what all I did and write you instructions.
 Original Message 
On Oct 18, 2018, 3:54 PM, 'aluquest' via qubes-users wrote:

> Hi,
> I managed to get the archlinux template installed and am having problems 
> updating the template. Can someone instruct me on how to update the template 
> correctly, the template has an internet connection and interestingly I can 
> successfully update using pacman -Syu within an appVM (which is based on the 
> archlinux template).
> The error I get is the following:
> [user@archlinux ~]$ sudo pacman -Syu
> :: Synchronizing package databases...
>   % Total% Received % Xferd  Average Speed   TimeTime Time  
> Current
>  Dload  Upload   Total   SpentLeft  Speed
> 100  135k  100  135k0 0  87357  0  0:00:01  0:00:01 --:--:-- 87302
>   % Total% Received % Xferd  Average Speed   TimeTime Time  
> Current
>  Dload  Upload   Total   SpentLeft  Speed
>   0 00 00 0  0  0 --:--:--  0:00:01 --:--:-- 0
> curl: (22) The requested URL returned error: 404 Not Found
>   % Total% Received % Xferd  Average Speed   TimeTime Time  
> Current
>  Dload  Upload   Total   SpentLeft  Speed
> 100 1643k  100 1643k0 0   302k  0  0:00:05  0:00:05 --:--:--  350k
>   % Total% Received % Xferd  Average Speed   TimeTime Time  
> Current
>  Dload  Upload   Total   SpentLeft  Speed
>   0 00 00 0  0  0 --:--:-- --:--:-- --:--:-- 0
> curl: (22) The requested URL returned error: 404 Not Found
>   % Total% Received % Xferd  Average Speed   TimeTime Time  
> Current
>  Dload  Upload   Total   SpentLeft  Speed
> 100 4733k  100 4733k0 0   488k  0  0:00:09  0:00:09 --:--:--  642k
>   % Total% Received % Xferd  Average Speed   TimeTime Time  
> Current
>  Dload  Upload   Total   SpentLeft  Speed
>   0 00 00 0  0  0 --:--:-- --:--:-- --:--:-- 0
> curl: (22) The requested URL returned error: 404 Not Found
>   % Total% Received % Xferd  Average Speed   TimeTime Time  
> Current
>  Dload  Upload   Total   SpentLeft  Speed
> 100  174k  100  174k0 098k  0  0:00:01  0:00:01 --:--:--   98k
>   % Total% Received % Xferd  Average Speed   TimeTime Time  
> Current
>  Dload  Upload   Total   SpentLeft  Speed
>   0 00 00 0  0  0 --:--:-- --:--:-- --:--:-- 0
> curl: (22) The requested URL returned error: 404 Not Found
> curl: (37) Couldn't open file /tmp/qubes-packages-mirror-repo/pkgs/qubes.db
> error: failed to update qubes (error invoking external downloader)
> error: failed to synchronize all databases
>
> Do I need to use:
> update-local-repo.sh
> update-remote-repo.sh
> from: https://github.com/QubesOS/qubes-builder-archlinux/
> within the template?
>
> I have an additional question:
> Is there a way to use: https://archive.archlinux.org/ to get the last xorg 
> packages that work together with the qubes packages that are getting 
> installed? It is often the case that the arch xorg versions are too new for 
> the qubes packages :-/
>
> Any help with these problems would be greatly appreciated.
>
> Sent with [ProtonMail](https://protonmail.com) Secure Email.
>
> --
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> [https://groups.google.com/d/msgid/qubes-users/CZUfx8lpHDJC8uyb0UI4v1RmfnNNAcWTWBVVHg-lokZAIvkIfMOZYtxIjwJjU-KfRccvUV4I6sexQhGwpzWQ6T5SPhHUmgYj0q78XTmngz4%3D%40protonmail.com](https://groups.google.com/d/msgid/qubes-users/CZUfx8lpHDJC8uyb0UI4v1RmfnNNAcWTWBVVHg-lokZAIvkIfMOZYtxIjwJjU-KfRccvUV4I6sexQhGwpzWQ6T5SPhHUmgYj0q78XTmngz4%3D%40protonmail.com?utm_medium=email&utm_source=footer).
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscr

[qubes-users] updating archlinux template failing

2018-10-18 Thread 'aluquest' via qubes-users
Hi,
I managed to get the archlinux template installed and am having problems 
updating the template. Can someone instruct me on how to update the template 
correctly, the template has an internet connection and interestingly I can 
successfully update using pacman -Syu within an appVM (which is based on the 
archlinux template).
The error I get is the following:
[user@archlinux ~]$ sudo pacman -Syu
:: Synchronizing package databases...
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
100  135k  100  135k0 0  87357  0  0:00:01  0:00:01 --:--:-- 87302
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
  0 00 00 0  0  0 --:--:--  0:00:01 --:--:-- 0
curl: (22) The requested URL returned error: 404 Not Found
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
100 1643k  100 1643k0 0   302k  0  0:00:05  0:00:05 --:--:--  350k
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
  0 00 00 0  0  0 --:--:-- --:--:-- --:--:-- 0
curl: (22) The requested URL returned error: 404 Not Found
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
100 4733k  100 4733k0 0   488k  0  0:00:09  0:00:09 --:--:--  642k
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
  0 00 00 0  0  0 --:--:-- --:--:-- --:--:-- 0
curl: (22) The requested URL returned error: 404 Not Found
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
100  174k  100  174k0 098k  0  0:00:01  0:00:01 --:--:--   98k
  % Total% Received % Xferd  Average Speed   TimeTime Time  Current
 Dload  Upload   Total   SpentLeft  Speed
  0 00 00 0  0  0 --:--:-- --:--:-- --:--:-- 0
curl: (22) The requested URL returned error: 404 Not Found
curl: (37) Couldn't open file /tmp/qubes-packages-mirror-repo/pkgs/qubes.db
error: failed to update qubes (error invoking external downloader)
error: failed to synchronize all databases

Do I need to use:
update-local-repo.sh
update-remote-repo.sh
from: https://github.com/QubesOS/qubes-builder-archlinux/
within the template?

I have an additional question:
Is there a way to use: https://archive.archlinux.org/ to get the last xorg 
packages that work together with the qubes packages that are getting installed? 
It is often the case that the arch xorg versions are too new for the qubes 
packages :-/

Any help with these problems would be greatly appreciated.

Sent with [ProtonMail](https://protonmail.com) Secure Email.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CZUfx8lpHDJC8uyb0UI4v1RmfnNNAcWTWBVVHg-lokZAIvkIfMOZYtxIjwJjU-KfRccvUV4I6sexQhGwpzWQ6T5SPhHUmgYj0q78XTmngz4%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] How can I add networking to a minimal template VM?

2018-10-18 Thread Zbigniew Łukasiak
On Thu, Oct 18, 2018 at 1:40 PM unman  wrote:
>
> On Thu, Oct 18, 2018 at 04:36:00AM +0200, Zbigniew Łukasiak wrote:
> > I am trying to setup a printer AppVM as described in
> > https://www.qubes-os.org/doc/network-printer/ - i.e. first I am trying
> > to create a template VM and configure printing there.
> >
> > I cloned fedora-28-minimal for the template VM.
> >
> > I tried to configure the printing without networking - that should be
> > possible, but I failed at it and I think it is still useful to be able
> > to switch on networking temporarily in a template VM.
> >
> > Then in "Qube Settings" I changed Networking from "default (none)" to
> > "sys-net (current)" (I tried also "sys-firewall").
> >
> > Unfortunately it boots without networking - so I tried to set it up 
> > manually:
> >
> > bash-4.4# ip addr add 10.137.0.27/32 dev eth0
> > bash-4.4# ip route add default via 10.137.0.6 dev eth0
> > Error: Nexthop has invalid gateway.
> >
> > At one point that worked, but now it stopped with the above error message.
> >
> > --
> > Zbigniew Lukasiak
> > https://medium.com/@zby
> > http://brudnopis.blogspot.com/
> >
>
> have you read www.qubes-os.org/doc/templates/fedora-minimal ?

Yeah - somehow I missed this one. Later I found it - but thanks :)

Eventually I went with the normal fedora template - I need it for the
printer vm and there I need all the packages to display stuff - so I
guess the difference would not be that dramatic anyway.

>
> Your ip command does not work because you dent have a route to the IP your
> are setting as default.

I don't quite get that - because 10.137.0.27 and 10.137.0.6 are in the
same subnet (and I tried /24 as well).
But whatever.

> If you install the relevant qubes-core-agent-networking etc then you
> should get IP set up automatically.
>
Cheers,
Zbigniew

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAGL_UUuS78pS%2Bnb_WTmDzR76L9bWbtSqsGtQKvBimNGAG8P3Wg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes 4.0 on high(er) end workstations?

2018-10-18 Thread Yethal
W dniu środa, 17 października 2018 02:19:32 UTC+2 użytkownik tai...@gmx.com 
napisał:
> On 10/16/2018 12:21 PM, Yethal wrote:
> > W dniu wtorek, 16 października 2018 01:22:58 UTC+2 użytkownik 
> > tai...@gmx.com napisał:
> >> On 10/15/2018 02:09 PM, Yethal wrote:> It also has a PS/2 port
> >> (extremely important in Qubes and often overlooked)
> >> Misinformation.
> >>
> >> You instea dwant more than one USB controller on a system so you can
> >> have both trusted for keyboard/mice and untrusted for random stuff (all
> >> my recs in my other reply have this, the D16/D8's have a second
> >> controller via a few onboard usb headers)
> >>
> >> PS/2 is not secure at all - your keystrokes are outputted on the ground
> >> wire.
> >>
> >> I suggest purchasing a usb keyboard that doesn't have firmware such as
> >> the excellent us made unicomp model m mechanical keyboard, to prevent
> >> use of a keyboard virus.
> >>
> >> Definitely agreed with not buying nvidia junk though, they artificially
> >> hamper virt with their geforce stuff and they also hate linux drivers
> >> and FOSS.
> > 
> > If I have more than one USB controller and I leave one controller in dom0 
> > and all the other ones in sys-usb that is all fine and dandy except there 
> > is still a usb controller in dom0 which kinda defeats the purpose of even 
> > having sys-usb unless the keyboard and mouse wires were to be soldered 
> > directly to the ports. 
> > Also, if an attacker is capable of tapping into the ground wire of your 
> > keyboard to listen to the keystrokes then they are more than capable of 
> > simply plugging a usb keylogger and/or usb hub and a flashdrive. IMHO a usb 
> > controller in dom0 poses much bigger security risk due to reduced attack 
> > complexity.
> > 
> 
> Why would you have one in dom0? the idea is that you make one sys-usb
> per controller so for example one trusted for inputs and one not trusted
> for random stuff.
> 
> Ground wires where I live go far away from where I am sitting as they do
> in any large office complex so that is not so good. Any secure facility
> has ground wire isolation for that reason.

Because if you don't and you blacklist the controller in dom0 then it's not 
possible to type the disk passphrase as sys-usb is not active this early in 
boot process.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ac9e0748-952a-4231-b566-a6da01ef510d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes OS screensharing

2018-10-18 Thread Vít Šesták
Marmarek has identified the issue and fixed it: 
https://github.com/QubesOS/qubes-issues/issues/4351

So if you are patient, you can just wait until you see it in current 
repository. (There will be likely Gihtub comment.)

If you are eager, you can wait until it is in testing repository. (Again, we 
will probably see a Github comment.)

If you are supereager, you can compile it yourself 😉

Regards,
Vít Šesták 'v6ak'

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4438d31f-d9df-448c-b4cd-f62baafb27e8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes Warrant Canary Overdue

2018-10-18 Thread David L. Craig
On 18Oct16:2031-, ioeit65 via qubes-users wrote:

> Sorry for not replying directly to the existing thread Qubes Warrant
> Canary Overdue.
> 
> I checked the dates of all 17 and this is the first time a canary has been
> late. The canaries have a section called "Special announcements" but in
> #16 and #17 it contains only "None.". IMHO a delay is worth mentioning.
> 
> How often have warrant canary delays turned out to be serious with other
> projects?

I received this attached canary.
-- 

May the LORD God bless you exceedingly abundantly!

Dave_Craig__
"So the universe is not quite as you thought it was.
 You'd better rearrange your beliefs, then.
 Because you certainly can't rearrange the universe."
__--from_Nightfall_by_Asimov/Silverberg_

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181018124506.GA5728%40dlcz.home.
For more options, visit https://groups.google.com/d/optout.
From qubes-users+bncbdmmrn6vqunbbppastpakgqeaouz...@googlegroups.com Tue Oct 16 
00:29:10 2018
Return-path: 
Envelope-to: dlc@localhost
Delivery-date: Tue, 16 Oct 2018 00:29:10 +
Received: from localhost ([127.0.0.1] helo=dlcz.home)
by dlcz.home with esmtp (Exim 4.87_1)
(envelope-from 
)
id 1gCDET-0002Mu-Uf
for dlc@localhost; Tue, 16 Oct 2018 00:29:09 +
Delivered-To: dlc@gmail.com
Received: from googlemail-pop.l.google.com [173.194.206.16]
by dlcz.home with POP3 (fetchmail-6.3.26)
for  (single-drop); Tue, 16 Oct 2018 00:29:09 + (UTC)
Received: by 2002:a9d:21c9:0:0:0:0:0 with SMTP id s67csp4704451otb;
Mon, 15 Oct 2018 17:26:38 -0700 (PDT)
X-Received: by 2002:ac8:1:: with SMTP id a1-v6mr18323627qtg.74.1539649598764;
Mon, 15 Oct 2018 17:26:38 -0700 (PDT)
ARC-Seal: i=4; a=rsa-sha256; t=1539649598; cv=pass;
d=google.com; s=arc-20160816;
b=SQAU4d/LbHorP6seLG9e1wiB8mnznZHj+n+py6O+qoQ0aXScVEmdNiA5cqD+Yqh7Cj
 rfSA1UAQHrgls9zSulgyMzCN1HR35H5OjeLy44Uo2/C5bwFB29QDMF0Q6dwz6Cb8qakS
 0WkD4p0wT3Y4jmRtZKhGFvK8rcshZSzGMiwiuLSmtFCalLN1BRFolv6gowHOIHJ0GtCE
 3rwEsSKGzViMHZ92FMb7IC++Ie2eqo36eOstdpTJW0awqzXR5326+V4fOTDQooNVhACS
 IWVKo6OIclvZc7NN4Ibuwrk0sc2B/aQok6OaSrkQWJ+MmVCsUJtsaUldQpUK2oVoyYfL
 hEIw==
ARC-Message-Signature: i=4; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
s=arc-20160816;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
 :list-id:mailing-list:precedence:content-transfer-encoding
 :content-language:mime-version:date:organization:openpgp:subject
 :message-id:from:reply-to:to:sender:dkim-signature;
bh=glVFYAQEQhiRkzdv3J1xODQcuFCR1kIYyzvuGhAcDqA=;
b=Mew5q9TTNxmdTpQZWG1OfwJeIVDl5uB4FdzGqSSO1KfaiWmjQWTZ4QsaFF0KLPaLF/
 GMVCPdEzsGan9RsBe5WlL+FnVhBVmHVfStUTeGiXE8CnX2JGZWhoQmOgjDUZUNni+TEk
 pBOMCqX0eEmejqB9cnN+LKV94sUcKMvMR6NA0o3LFcaqBPpB68sp9frJU/ImyTQfEbgg
 mmLGC90g+syi44U1qBY7/NABzPubi8hyQ6tMRVwqI8iroSsrJv8InjDijmASrcn9nHe5
 n/kB1BB/3JqKHG+do77hubWVRCZiSWjl17QwuuoVMLcj6zOWrvY0WoCf4LCzrDDzQ5Xj
 NE0g==
ARC-Authentication-Results: i=4; mx.google.com;
   dkim=pass header.i=@googlegroups.com header.s=20161025 header.b=ao8vvAwh;
   arc=pass (i=3 spf=pass spfdomain=qubes-os.org dkim=pass 
dkdomain=qubes-os.org);
   spf=pass (google.com: domain of 
qubes-users+bncbdmmrn6vqunbbppastpakgqeaouz...@googlegroups.com designates 
209.85.220.55 as permitted sender) 
smtp.mailfrom=qubes-users+bncbdmmrn6vqunbbppastpakgqeaouz...@googlegroups.com
Received: from mail-sor-f55.google.com (mail-sor-f55.google.com. 
[209.85.220.55])
by mx.google.com with SMTPS id 
w187-v6sor7238132qkd.60.2018.10.15.17.26.38
(Google Transport Security);
Mon, 15 Oct 2018 17:26:38 -0700 (PDT)
Received-SPF: pass (google.com: domain of 
qubes-users+bncbdmmrn6vqunbbppastpakgqeaouz...@googlegroups.com designates 
209.85.220.55 as permitted sender) client-ip=209.85.220.55;
Authentication-Results: mx.google.com;
   dkim=pass header.i=@googlegroups.com header.s=20161025 header.b=ao8vvAwh;
   arc=pass (i=3 spf=pass spfdomain=qubes-os.org dkim=pass 
dkdomain=qubes-os.org);
   spf=pass (google.com: domain of 
qubes-users+bncbdmmrn6vqunbbppastpakgqeaouz...@googlegroups.com designates 
209.85.220.55 as permitted sender) 
smtp.mailfrom=qubes-users+bncbdmmrn6vqunbbppastpakgqeaouz...@googlegroups.com
ARC-Seal: i=3; a=rsa-sha256; t=1539649598; cv=pass;
d=google.com; s=arc-20160816;
b=qLi9CRs6rdF2APhYddKHIxxQEurtB+xSaAfRWtPzqMmUEIalbhtK/VWdPuZ+v8CnNG
 qlU6G3ph9J+uApEZeVspwUgUxmMrEBj/Rpv4+9ctY1n9/U

Re: [qubes-users] How can I add networking to a minimal template VM?

2018-10-18 Thread unman
On Thu, Oct 18, 2018 at 04:36:00AM +0200, Zbigniew Łukasiak wrote:
> I am trying to setup a printer AppVM as described in
> https://www.qubes-os.org/doc/network-printer/ - i.e. first I am trying
> to create a template VM and configure printing there.
> 
> I cloned fedora-28-minimal for the template VM.
> 
> I tried to configure the printing without networking - that should be
> possible, but I failed at it and I think it is still useful to be able
> to switch on networking temporarily in a template VM.
> 
> Then in "Qube Settings" I changed Networking from "default (none)" to
> "sys-net (current)" (I tried also "sys-firewall").
> 
> Unfortunately it boots without networking - so I tried to set it up manually:
> 
> bash-4.4# ip addr add 10.137.0.27/32 dev eth0
> bash-4.4# ip route add default via 10.137.0.6 dev eth0
> Error: Nexthop has invalid gateway.
> 
> At one point that worked, but now it stopped with the above error message.
> 
> -- 
> Zbigniew Lukasiak
> https://medium.com/@zby
> http://brudnopis.blogspot.com/
> 

have you read www.qubes-os.org/doc/templates/fedora-minimal ?

Your ip command does not work because you dent have a route to the IP your
are setting as default.
If you install the relevant qubes-core-agent-networking etc then you
should get IP set up automatically.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181018114041.5437uufaeyjwjkrs%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: White-list for block devices, networks, etc

2018-10-18 Thread unman
On Thu, Oct 18, 2018 at 12:06:21AM -0700, frozentime...@gmail.com wrote:
> On Tuesday, October 16, 2018 at 5:46:13 PM UTC, Frozentime345 wrote:
> > System: Fedora 27/Debian 9 Templates, R3.2->upgrading to 4.0 soon
> > 
> > I looked through rpc policy but I couldn't find anything like this, is there
> > a way to only allow certain block devices for certain appvms? Doesn't 
> > even have to be a secure feature just something to prevent user error, 
> > but it has to work at the qubes level so a
> > "bad" block device doesn't compromise the appvm.
> > 
> > Similarly, is there something in sys-net I can use to white-list? I 
> > tried the network connections manager but I cant seem to stop it from 
> > connecting to unknown ethernets, after its known I can set “don't 
> > automatically connect” though.
> 
> For some reason Im not receiving emails from my own thread lol? Luckily I 
> googled the group to see if the post made it. 
> Cool on qubes 4.1 sounds good. 
> 
> Thanks, I'll look into udev config.
> 
> Will this no auto default setting for network manager stop new connections or 
> just stop network manager? Ideally I want it to allow me to config new 
> networks before connecting or ask me confirmation before connecting, 
> basically to prevent user error. 
> 

man networkmanager.conf

Those were alternatives I gave - either disable NetworkManager OR
configure so as not to create default connections.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181018113424.ysdbsl4ksrpeoup4%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Updates to all recommends Vms on Qubes 4.0

2018-10-18 Thread Black Beard
Hey Community,


I'm an absolute novice regarding Linux, especially Qubes. I have already 
understood many things very well and I really like the OS.

Now I would like to update some virtual machines, including Fedora26, Whonix 
etc because they are outdated.

I have already read and followed the instructions for updating Fedora 26 to 27 
and 27 to 28. Unfortunately, I always get an error message when updating (I do 
not have it in my head because I'm at work).

According to a forum, I should change the identity at Tor to successfully 
install the upgrade. My system tells me that no gate has been installed ??!

At Whonix I get an error message from 13 to 14 to update.

How can I update Fedora and all other Vms?

Of course I am very happy about your feedbacks.

regards and many thx to all of you

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5598a9b2-9acd-4fa7-b338-db984213c7fc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] AMD-Radeon Graphik card driver on Qubes

2018-10-18 Thread Black Beard
Hey community,

In the next time I would like to work with Photoshop and other programs, which 
make reasonably high demands on the graphics card.

I have already installed the Adobe software on my Windows 7 HVM.

Is it possible to install the graphics card drivers there? Or do you have some 
advice for me to use Adobe, for example under Qubes?

Of course, I'm glad about your feedbacks

1000 thx to you

regards

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a1e758e2-d058-4a4b-bf38-ba224cb9b5ff%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Blacklist Dom0 Upgrades

2018-10-18 Thread Frozentime345
Just a minor convenient feature would be to blacklist certain dom0 rpm 
upgrades, the kernel updates keep breaking my Ethernet so I'm avoiding 
them. I'm manually applying the other updates but dom0 is still saying 
"has updates" so I also have to manually check whether new updates are 
available.


Not really a big deal but it would also prevent me from making the 
mistake of installing a kernel update(ideally it would blacklist by 
pattern as well so I could decide whether or not to try a new kernel).


Even more ideally we could roll back dom0 like templates =p, but I 
realize that's probably difficult or something lol.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8cdf595d-41ff-10f7-af91-c7a671aa396d%40gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: White-list for block devices, networks, etc

2018-10-18 Thread frozentime345
On Tuesday, October 16, 2018 at 5:46:13 PM UTC, Frozentime345 wrote:
> System: Fedora 27/Debian 9 Templates, R3.2->upgrading to 4.0 soon
> 
> I looked through rpc policy but I couldn't find anything like this, is there
> a way to only allow certain block devices for certain appvms? Doesn't 
> even have to be a secure feature just something to prevent user error, 
> but it has to work at the qubes level so a
> "bad" block device doesn't compromise the appvm.
> 
> Similarly, is there something in sys-net I can use to white-list? I 
> tried the network connections manager but I cant seem to stop it from 
> connecting to unknown ethernets, after its known I can set “don't 
> automatically connect” though.

For some reason Im not receiving emails from my own thread lol? Luckily I 
googled the group to see if the post made it. 
Cool on qubes 4.1 sounds good. 

Thanks, I'll look into udev config.

Will this no auto default setting for network manager stop new connections or 
just stop network manager? Ideally I want it to allow me to config new networks 
before connecting or ask me confirmation before connecting, basically to 
prevent user error. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/47dbbe1b-de38-42e3-9a9b-faa0334cbc19%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.