Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"
On Tue, Jan 28, 2020 at 11:52:56PM +, 'Andrey Arapov' via qubes-users wrote: Hum, I have just realized that you have also noticed one more error: libxl_pci.c: libxl__device_pci_reset: The kernel doesn't support reset from sysfs for PCI device :00:14.0 It looks like this error is related to this code https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=tools/libxl/libxl_pci.c;h=6f8f49c7c0a80478b244c52ae65e75f8a78c6481;hb=b03cee73197f4a37bf2941b9367105187355e638#l1150 [https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=tools/libxl/libxl_pci.c;h=6f8f49c7c0a80478b244c52ae65e75f8a78c6481;hb=b03cee73197f4a37bf2941b9367105187355e638#l1150] where, it appears to me at the first sight, we are not patching it. I raised that question here https://github.com/QubesOS/qubes-issues/issues/3518#issuecomment-579526805 Thank you! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200129062741.GC1043%40danwin1210.me.
Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"
On Tue, Jan 28, 2020 at 10:59:00PM +, 'Andrey Arapov' via qubes-users wrote: Hi tetrahedra, The original error ("unable to reset PCI device...") still occurs when trying to start disp-sys-usb. Despite have the "no-strict-reset" set to True, you will continue to see the "Unable to reset PCI device: ... no FLR, PM reset or bus reset available" "error" message each time you are trying to attach a PCI device that does not support the FLR (Function Level Reset) [2]. The "no-strict-reset" enablement patch [1] allows you (libvirt) to assign a PCI device to domU, even when the device does not support any reset method . The error message is kept there for the informational purposes so this way a person may become aware of that his PCI device may not be working as desired because it does not support any reset method, despite of which it still gets assigned to domU when "no-strict-reset" is set to True, thanks to the patch [1]. Hi Andrey, All that may be true but it does not explain why the error message was accompanying an *error condition* -- specifically that the VM refused to start. If the error had simply been printed in the logs and the VM started normally (with USB controllers) then it would not have been an issue. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200129062707.GB1043%40danwin1210.me.
Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"
On Tue, Jan 28, 2020 at 12:22:00PM +, unman wrote: Now *that* confusion is cleared up, I assume your problem has gone away? Yes (so far). -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200129062428.GA1043%40danwin1210.me.
[qubes-users] How to connect to internet by using a mobile broadband USB modem ?
How to connect to internet by using a mobile broadband USB modem ? I have tried to set up a new network connection by clicking on Network Connection -> Add. and following the guide. At the end I can’t click on save as it says: “No polkit authorization to perform the action”. And I have tried it both when I was logged in as user and as root - with the same result. The modem is: Huawei E3372 - the version with onboard drivers for both Linux, Windows and Mac. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0c263a8f-1a6a-4b75-83ef-bbf4e533bb8e%40googlegroups.com.
Re: [qubes-users] Installation on Lenovo ThinkStation P330 (2. generation)
Although I earlier experienced a black screen problem when restarting after a successful install of Qubes OS in legacy mode, the version 4.0.3 didn’t ended up with the same result. I have tried to restart the computer afterwards both as legacy first and UEFI first, and now there’s no problem with that. PC: Lenovo ThinkStation P330 30C7 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e729bdab-ada4-4d42-bf19-c1249c2bdb0e%40googlegroups.com.
[qubes-users] How shall the result look like after editing xen.cfg to prevent a pc from booting to a black screen after an successful installation ?
Although I earlier experienced a black screen problem when restarting after a successful install of Qubes OS in legacy mode, the version 4.0.3 didn’t ended up with the same result. I have tried to restart the computer afterwards both as legacy first and UEFI first, and now there’s no problem with that. PC: Lenovo ThinkStation P330 30C7 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3c617c4d-7298-48a5-9a45-c329cf7404fe%40googlegroups.com.
Re: [qubes-users] How to open a text editor in qubes after installation when sys-firewall configuration failed ?
Ups, I meant: sudo vi /boot/efi/EFI/qubes/xen.cfg -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/92412003-e3ab-47d5-b485-bb825cf131a0%40googlegroups.com.
Re: [qubes-users] How to open a text editor in qubes after installation when sys-firewall configuration failed ?
When I write the following in the Terminal either as user or as root, I only get a lot of lines with “~” on each line... sudo vi /boot/efi/EFI/wubes/xen.cfg What is wrong... ? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2428fd3b-da78-4ef6-ba5a-4a2d4ecc904c%40googlegroups.com.
[qubes-users] Re: Anyone using remmina for RDP? (AND able to alt+tab in the RDP session w/o xfce stealing the keystroke)
On Monday, January 27, 2020 at 8:34:33 PM UTC, Stumpy wrote: > > I am using remmina (1.3.10) on a debian (10) appvm to rdp into a win10 > box and it works fairly well, but there is some sort of issue with > remmina grabbing the keystrokes? > When i try to alt+tab in my rdp session xfce/qubes grabs it instead of > the win10 session alt+tabbing. I have tried changing the alt+tab keys in > I haven't used the software, but for local Windows HVMs, I'm able to send alt-whatever by using windows-alt-whatever. Kind of a difficult one-hand operation, even with my fat fingers, but relatively easy to pull off with two hands. Might work with this client as well? Brendan -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f96e97f9-5e86-434f-a880-d976a6d4e4cc%40googlegroups.com.
Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"
> > The original error ("unable to reset PCI device...") still occurs when > > trying to start disp-sys-usb. > > > > Despite have the "no-strict-reset" set to True, you will continue to see the > "Unable to reset PCI device: ... no FLR, PM reset or bus reset available" > "error" message each time you are trying to attach a PCI device that does not > support the FLR (Function Level Reset) [2]. > > The "no-strict-reset" enablement patch [1] allows you (libvirt) to assign a > PCI device to domU, even when the device does not support any reset method . Hum, I have just realized that you have also noticed one more error: > > libxl_pci.c: libxl__device_pci_reset: The kernel doesn't support reset from > sysfs for PCI device :00:14.0 > > It looks like this error is related to this code https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=tools/libxl/libxl_pci.c;h=6f8f49c7c0a80478b244c52ae65e75f8a78c6481;hb=b03cee73197f4a37bf2941b9367105187355e638#l1150 [https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=tools/libxl/libxl_pci.c;h=6f8f49c7c0a80478b244c52ae65e75f8a78c6481;hb=b03cee73197f4a37bf2941b9367105187355e638#l1150] where, it appears to me at the first sight, we are not patching it. I raised that question here https://github.com/QubesOS/qubes-issues/issues/3518#issuecomment-579526805 Kind regards, Andrey Arapov -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3aa9d170-af8e-4703-9e25-ae28533e3fb8%40localhost. signature.asc Description: PGP signature
Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"
Hi tetrahedra, > The original error ("unable to reset PCI device...") still occurs when trying > to start disp-sys-usb. Despite have the "no-strict-reset" set to True, you will continue to see the "Unable to reset PCI device: ... no FLR, PM reset or bus reset available" "error" message each time you are trying to attach a PCI device that does not support the FLR (Function Level Reset) [2]. The "no-strict-reset" enablement patch [1] allows you (libvirt) to assign a PCI device to domU, even when the device does not support any reset method . The error message is kept there for the informational purposes so this way a person may become aware of that his PCI device may not be working as desired because it does not support any reset method, despite of which it still gets assigned to domU when "no-strict-reset" is set to True, thanks to the patch [1]. I think it'd be good to mention here the whole message from the "no-strict-reset" patch: > This allows to assign PCI device to some VM, even when the device does not > support any reset method. This may be dangerous in some cases (especially > when the device is later assigned to some other VM). But in some cases it > still makes sense - for example when the device is assigned to the same VM > whole the time. To check if your PCI device has a FLR function, run: $ sudo lspci -vv -s 00:14.0 If you see output with "FLReset-" then your PCI device does not support FLR function. If output has "FLReset+" then it does. There are very few PCI devices which support FLR function. [1]: https://github.com/QubesOS/qubes-core-libvirt/blob/release4.0/patches.qubes/0010-Add-nostrictreset-attribute-to-PCI-host-devices.patch#L160 [2]: https://libvirt.org/git/?p=libvirt.git;a=blob_plain;f=src/util/virpci.c;hb=d7acab0bfeec5c9ae75db21b3519486e3586250c Kind regards, Andrey Arapov -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/eec1c63f-840b-43c7-ab0b-f186e9900b3c%40localhost. signature.asc Description: PGP signature
Re: [qubes-users] How to open a text editor in qubes after installation when sys-firewall configuration failed ?
On 2020-01-28 14:59, M wrote: How can I open a text editor in Qubes to view logs and edit xen.cfg file ? You can usually count on vi being on any linux distribution > sudo vi /boot/efi/EFI/wubes/xen.cfg And I can’t get internet access from the pc as sys-firewall failed. To trouble shoot that, you can open Qube Manager and right click on sys-firewall, then you will see "logs" at the bottom of the dropdown menu. if you don't find the problem in there then you might try: dom0> sudo dmesg or dom0> sudo systemctl and look for your errors. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9260d5f4-35a3-f998-86dd-898b41be6ea8%40jhuapl.edu.
[qubes-users] How to open a text editor in qubes after installation when sys-firewall configuration failed ?
How can I open a text editor in Qubes to view logs and edit xen.cfg file ? Can’t find any when I run true the list of applications in Qubes. And I can’t get internet access from the pc as sys-firewall failed. Version: 4.0.3 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1c2e8da7-9c3f-433e-935b-1dedb314e683%40googlegroups.com.
[qubes-users] Firefox discontinues addon sideloading
Dear all, apparently Mozilla decided to discontinue that feature [1] without providing a lot of alternatives [2]. It was quite useful in the past to update addons inside Qubes OS template VMs by downloading them to another VM and pass them to the template VM without having to start firefox and perform a lot of clicking. That'll be gone. So does anyone have an alternative available apart from a dedicated template VM just for firefox? Update the addons on every disposable VM start? ^^ BR David [1] https://blog.mozilla.org/addons/2019/10/31/firefox-to-discontinue-sideloaded-extensions/ [2] https://discourse.mozilla.org/t/questions-on-sideloading-alternatives/49245 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3f495bb6-9276-80bd-3f7b-f00b5a531337%40hackingthe.net. smime.p7s Description: S/MIME Cryptographic Signature
Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"
On Tue, Jan 28, 2020 at 04:30:13AM +0100, tetrahe...@danwin1210.me wrote: > On Mon, Jan 27, 2020 at 11:37:01AM +, unman wrote: > > I run named disposable sys-usbs, from a usb template. In my experience > > it is *not* necessary to pass the reset option on each boot. The option > > is set once and applies on every boot. > > (On one x230 I have a separate print usb, and just switch between the > > standard named usb and print qube without any issues. Again the reset > > option is set once.) > > > > I cant account for what's happening in your set-up. > > I'm assuming that your original sys-usb worked fine. > > Take a step back: delete all the disposable sys-usb, and confirm that > > your sys-usb works fine. > > Then create a disposable template - confirm tat *that* works fine. > > Then create disposable sys-usb. > > > > If you hit a problem, tell us what hardware you have. > > You quoted a different message than the one you were replying to... > I quoted a message referring to disposable sys-usbs, and told you my own experience of disposable sus-usbs. > The confusion appears to have been that I thought no-strict-reset was a > setting applied to a PCI device. Instead it appears to be an option > applied to a specific connection between a PCI device and a VM. > Now *that* confusion is cleared up, I assume your problem has gone away? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200128122200.GA6902%40thirdeyesecurity.org.