Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"

2020-01-28 Thread tetrahedra via qubes-users

On Tue, Jan 28, 2020 at 11:52:56PM +, 'Andrey Arapov' via qubes-users wrote:

Hum, I have just realized that you have also noticed one more error:



libxl_pci.c: libxl__device_pci_reset: The kernel doesn't support reset from 
sysfs for PCI device :00:14.0





It looks like this error is related to this code 
https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=tools/libxl/libxl_pci.c;h=6f8f49c7c0a80478b244c52ae65e75f8a78c6481;hb=b03cee73197f4a37bf2941b9367105187355e638#l1150
 
[https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=tools/libxl/libxl_pci.c;h=6f8f49c7c0a80478b244c52ae65e75f8a78c6481;hb=b03cee73197f4a37bf2941b9367105187355e638#l1150]
where, it appears to me at the first sight, we are not patching it.

I raised that question here 
https://github.com/QubesOS/qubes-issues/issues/3518#issuecomment-579526805


Thank you!

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200129062741.GC1043%40danwin1210.me.


Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"

2020-01-28 Thread tetrahedra via qubes-users

On Tue, Jan 28, 2020 at 10:59:00PM +, 'Andrey Arapov' via qubes-users wrote:


Hi tetrahedra,


The original error ("unable to reset PCI device...") still occurs when trying 
to start disp-sys-usb.


Despite have the "no-strict-reset" set to True, you will continue to see the "Unable to reset 
PCI device: ... no FLR, PM reset or bus reset available" "error" message each time you are 
trying to attach a PCI device that does not support the FLR (Function Level Reset) [2].

The "no-strict-reset" enablement patch [1] allows you (libvirt) to assign a PCI 
device to domU, even when the device does not support any reset method .

The error message is kept there for the informational purposes so this way a person may 
become aware of that his PCI device may not be working as desired because it does not 
support any reset method, despite of which it still gets assigned to domU when 
"no-strict-reset" is set to True, thanks to the patch [1].


Hi Andrey,

All that may be true but it does not explain why the error message was
accompanying an *error condition* -- specifically that the VM refused to
start. If the error had simply been printed in the logs and the VM
started normally (with USB controllers) then it would not have been an
issue.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200129062707.GB1043%40danwin1210.me.


Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"

2020-01-28 Thread tetrahedra via qubes-users

On Tue, Jan 28, 2020 at 12:22:00PM +, unman wrote:

Now *that* confusion is cleared up, I assume your problem has gone away?


Yes (so far).

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200129062428.GA1043%40danwin1210.me.


[qubes-users] How to connect to internet by using a mobile broadband USB modem ?

2020-01-28 Thread M
How to connect to internet by using a mobile broadband USB modem ?

I have tried to set up a new network connection by clicking on Network 
Connection -> Add. and following the guide. At the end I can’t click on save as 
it says: “No polkit authorization to perform the action”. And I have tried it 
both when I was logged in as user and as root - with the same result.

The modem is: Huawei E3372 - the version with onboard drivers for both Linux, 
Windows and Mac.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0c263a8f-1a6a-4b75-83ef-bbf4e533bb8e%40googlegroups.com.


Re: [qubes-users] Installation on Lenovo ThinkStation P330 (2. generation)

2020-01-28 Thread M
Although I earlier experienced a black screen problem when restarting after a 
successful install of Qubes OS in legacy mode, the version 4.0.3 didn’t ended 
up with the same result. I have tried to restart the computer afterwards both 
as legacy first and UEFI first, and now there’s no problem with that.

PC: Lenovo ThinkStation P330 30C7

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e729bdab-ada4-4d42-bf19-c1249c2bdb0e%40googlegroups.com.


[qubes-users] How shall the result look like after editing xen.cfg to prevent a pc from booting to a black screen after an successful installation ?

2020-01-28 Thread M
Although I earlier experienced a black screen problem when restarting after a 
successful install of Qubes OS in legacy mode, the version 4.0.3 didn’t ended 
up with the same result. I have tried to restart the computer afterwards both 
as legacy first and UEFI first, and now there’s no problem with that.

PC: Lenovo ThinkStation P330 30C7

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3c617c4d-7298-48a5-9a45-c329cf7404fe%40googlegroups.com.


Re: [qubes-users] How to open a text editor in qubes after installation when sys-firewall configuration failed ?

2020-01-28 Thread M
Ups, I meant:

sudo vi /boot/efi/EFI/qubes/xen.cfg

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/92412003-e3ab-47d5-b485-bb825cf131a0%40googlegroups.com.


Re: [qubes-users] How to open a text editor in qubes after installation when sys-firewall configuration failed ?

2020-01-28 Thread M
When I write the following in the Terminal either as user or as root, I only 
get a lot of lines with “~” on each line...

sudo vi /boot/efi/EFI/wubes/xen.cfg

What is wrong... ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2428fd3b-da78-4ef6-ba5a-4a2d4ecc904c%40googlegroups.com.


[qubes-users] Re: Anyone using remmina for RDP? (AND able to alt+tab in the RDP session w/o xfce stealing the keystroke)

2020-01-28 Thread brendan . hoar
On Monday, January 27, 2020 at 8:34:33 PM UTC, Stumpy wrote:
>
> I am using remmina (1.3.10) on a debian (10) appvm to rdp into a win10 
> box and it works fairly well, but there is some sort of issue with 
> remmina grabbing the keystrokes? 
> When i try to alt+tab in my rdp session xfce/qubes grabs it instead of 
> the win10 session alt+tabbing. I have tried changing the alt+tab keys in 
>

 I haven't used the software, but for local Windows HVMs, I'm able to send 
alt-whatever by using windows-alt-whatever.

Kind of a difficult one-hand operation, even with my fat fingers, but 
relatively easy to pull off with two hands.

Might work with this client as well?

Brendan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f96e97f9-5e86-434f-a880-d976a6d4e4cc%40googlegroups.com.


Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"

2020-01-28 Thread 'Andrey Arapov' via qubes-users

> > The original error ("unable to reset PCI device...") still occurs when 
> > trying to start disp-sys-usb.
> >
>
> Despite have the "no-strict-reset" set to True, you will continue to see the 
> "Unable to reset PCI device: ... no FLR, PM reset or bus reset available" 
> "error" message each time you are trying to attach a PCI device that does not 
> support the FLR (Function Level Reset) [2].
>
> The "no-strict-reset" enablement patch [1] allows you (libvirt) to assign a 
> PCI device to domU, even when the device does not support any reset method .

Hum, I have just realized that you have also noticed one more error:

> 
> libxl_pci.c: libxl__device_pci_reset: The kernel doesn't support reset from 
> sysfs for PCI device :00:14.0
> 
> 


It looks like this error is related to this code 
https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=tools/libxl/libxl_pci.c;h=6f8f49c7c0a80478b244c52ae65e75f8a78c6481;hb=b03cee73197f4a37bf2941b9367105187355e638#l1150
 
[https://xenbits.xen.org/gitweb/?p=xen.git;a=blob;f=tools/libxl/libxl_pci.c;h=6f8f49c7c0a80478b244c52ae65e75f8a78c6481;hb=b03cee73197f4a37bf2941b9367105187355e638#l1150]
where, it appears to me at the first sight, we are not patching it.

I raised that question here 
https://github.com/QubesOS/qubes-issues/issues/3518#issuecomment-579526805

Kind regards,
Andrey Arapov


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3aa9d170-af8e-4703-9e25-ae28533e3fb8%40localhost.


signature.asc
Description: PGP signature


Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"

2020-01-28 Thread 'Andrey Arapov' via qubes-users

Hi tetrahedra,

> The original error ("unable to reset PCI device...") still occurs when trying 
> to start disp-sys-usb.

Despite have the "no-strict-reset" set to True, you will continue to see the 
"Unable to reset PCI device: ... no FLR, PM reset or bus reset available" 
"error" message each time you are trying to attach a PCI device that does not 
support the FLR (Function Level Reset) [2].

The "no-strict-reset" enablement patch [1] allows you (libvirt) to assign a PCI 
device to domU, even when the device does not support any reset method .

The error message is kept there for the informational purposes so this way a 
person may become aware of that his PCI device may not be working as desired 
because it does not support any reset method, despite of which it still gets 
assigned to domU when "no-strict-reset" is set to True, thanks to the patch [1].

I think it'd be good to mention here the whole message from the 
"no-strict-reset" patch:

> This allows to assign PCI device to some VM, even when the device does not 
> support any reset method. This may be dangerous in some cases (especially 
> when the device is later assigned to some other VM). But in some cases it 
> still makes sense - for example when the device is assigned to the same VM 
> whole the time.

To check if your PCI device has a FLR function, run:

$ sudo lspci -vv -s 00:14.0

If you see output with "FLReset-" then your PCI device does not support FLR 
function. If output has "FLReset+" then it does.

There are very few PCI devices which support FLR function.

[1]: 
https://github.com/QubesOS/qubes-core-libvirt/blob/release4.0/patches.qubes/0010-Add-nostrictreset-attribute-to-PCI-host-devices.patch#L160

[2]: 
https://libvirt.org/git/?p=libvirt.git;a=blob_plain;f=src/util/virpci.c;hb=d7acab0bfeec5c9ae75db21b3519486e3586250c

Kind regards,
Andrey Arapov

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/eec1c63f-840b-43c7-ab0b-f186e9900b3c%40localhost.


signature.asc
Description: PGP signature


Re: [qubes-users] How to open a text editor in qubes after installation when sys-firewall configuration failed ?

2020-01-28 Thread Steve Coleman

On 2020-01-28 14:59, M wrote:


How can I open a text editor in Qubes to view logs and edit xen.cfg file ?


You can usually count on vi being on any linux distribution

> sudo vi /boot/efi/EFI/wubes/xen.cfg


And I can’t get internet access from the pc as sys-firewall failed.


To trouble shoot that, you can open Qube Manager and right click on 
sys-firewall, then you will see "logs" at the bottom of the dropdown 
menu. if you don't find the problem in there then you might try:


dom0> sudo dmesg

or

dom0> sudo systemctl

and look for your errors.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9260d5f4-35a3-f998-86dd-898b41be6ea8%40jhuapl.edu.


[qubes-users] How to open a text editor in qubes after installation when sys-firewall configuration failed ?

2020-01-28 Thread M
How can I open a text editor in Qubes to view logs and edit xen.cfg file ?

Can’t find any when I run true the list of applications in Qubes. And I can’t 
get internet access from the pc as sys-firewall failed.

Version: 4.0.3

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1c2e8da7-9c3f-433e-935b-1dedb314e683%40googlegroups.com.


[qubes-users] Firefox discontinues addon sideloading

2020-01-28 Thread David Hobach

Dear all,

apparently Mozilla decided to discontinue that feature [1] without 
providing a lot of alternatives [2].


It was quite useful in the past to update addons inside Qubes OS 
template VMs by downloading them to another VM and pass them to the 
template VM without having to start firefox and perform a lot of clicking.


That'll be gone.

So does anyone have an alternative available apart from a dedicated 
template VM just for firefox?


Update the addons on every disposable VM start? ^^

BR
David

[1] 
https://blog.mozilla.org/addons/2019/10/31/firefox-to-discontinue-sideloaded-extensions/
[2] 
https://discourse.mozilla.org/t/questions-on-sideloading-alternatives/49245


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3f495bb6-9276-80bd-3f7b-f00b5a531337%40hackingthe.net.


smime.p7s
Description: S/MIME Cryptographic Signature


Re: [qubes-users] Disposable sys-usb creation fails with "unable to recet PCI device"

2020-01-28 Thread unman
On Tue, Jan 28, 2020 at 04:30:13AM +0100, tetrahe...@danwin1210.me wrote:
> On Mon, Jan 27, 2020 at 11:37:01AM +, unman wrote:
> > I run named disposable sys-usbs, from a usb template. In my experience
> > it is *not* necessary to pass the reset option on each boot. The option
> > is set once and applies on every boot.
> > (On one x230 I have a separate print usb, and just switch between the
> > standard named usb and print qube without any issues. Again the reset
> > option is set once.)
> > 
> > I cant account for what's happening in your set-up.
> > I'm assuming that your original sys-usb worked fine.
> > Take a step back: delete all the disposable sys-usb, and confirm that
> > your sys-usb works fine.
> > Then create a disposable template - confirm tat *that* works fine.
> > Then create disposable sys-usb.
> > 
> > If you hit a problem, tell us what hardware you have.
> 
> You quoted a different message than the one you were replying to...
> 
I quoted a message referring to disposable sys-usbs, and told you my own
experience of disposable sus-usbs.

> The confusion appears to have been that I thought no-strict-reset was a
> setting applied to a PCI device. Instead it appears to be an option
> applied to a specific connection between a PCI device and a VM.
> 

Now *that* confusion is cleared up, I assume your problem has gone away?


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200128122200.GA6902%40thirdeyesecurity.org.