Re: Antw: [EXT] [qubes-users] probable lvm thin_pool exhaustion

[maiski]

Quoting brendan.h...@gmail.com:


On Wednesday, March 11, 2020 at 1:34:17 AM UTC, maiski wrote:



Quoting brend...@gmail.com :
>
> Qubes 4.1 (in development) has added a warning (in addition to the
current
> lvm space usage warning) for lvm metadata usage above a threshold. 4.0
> doesn't have the metadata nearing full warning, and that's what tends to
> cause these types of thinpool issues.
>
> In addition to the warning, Qubes 4.1 is also doubling (vs. the lvm
default
> value) the amount of space set aside for lvm thinpool metadata which
will
> substantially reduce the chances of ever hitting this issue under 4.1.
>
> Brendan
>
> PS - above is not helpful for recovering this machine, of course.
However,
> recovery from this can be very difficult and even after recovery not
> guaranteed to recover all the data. The Qubes devs are aware of this and
> very much want to avoid these issues in the next release.

Hm, yes, this does not help:/
What about running fstrim on the ssd and try booting again?
@brendan: I've seen that you had some thoughts about lvm in some postings,
so would you care to elaborate/brainstorm on the situation i
described, you know, every input is valuable right now :)




 TBH, I wouldn't know what to do. Ran into a similar problem with 4.0 a
long while back and just reinstalled because it seemed insurmountable at
the time.

I've been reducing my main pool usage and manually monitoring the metadata
to avoid the situation with my current install, waiting for 4.1 to become
stable before moving to it.

Chris Laprise (tasket) would be a better resource, if he's willing to jump
in.

Brendan



I remember also running into a similar issue wy back, I adjusted a  
param in grub/xen.cfg, i do not remember, and told lvm to surpass its  
set threshold for maximum filled pool size so it can boot, but yeah,  
this is not the issue here... Nonetheless thank you for the quick  
answer!



--
You received this message because you are subscribed to the Google  
Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it,  
send an email to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit  
https://groups.google.com/d/msgid/qubes-users/0c13f771-7bdc-4246-8459-216cb5dabbe2%40googlegroups.com.




--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200311025052.Horde._dcmO536WBsdlTdxZTTeLw8%40webmail.df.eu.

Re: Antw: [EXT] [qubes-users] probable lvm thin_pool exhaustion

[brendan . hoar]

On Wednesday, March 11, 2020 at 1:34:17 AM UTC, maiski wrote:
>
>
> Quoting brend...@gmail.com : 
> > 
> > Qubes 4.1 (in development) has added a warning (in addition to the 
> current 
> > lvm space usage warning) for lvm metadata usage above a threshold. 4.0 
> > doesn't have the metadata nearing full warning, and that's what tends to 
> > cause these types of thinpool issues. 
> > 
> > In addition to the warning, Qubes 4.1 is also doubling (vs. the lvm 
> default 
> > value) the amount of space set aside for lvm thinpool metadata which 
> will 
> > substantially reduce the chances of ever hitting this issue under 4.1. 
> > 
> > Brendan 
> > 
> > PS - above is not helpful for recovering this machine, of course. 
> However, 
> > recovery from this can be very difficult and even after recovery not 
> > guaranteed to recover all the data. The Qubes devs are aware of this and 
> > very much want to avoid these issues in the next release. 
>
> Hm, yes, this does not help:/ 
> What about running fstrim on the ssd and try booting again? 
> @brendan: I've seen that you had some thoughts about lvm in some postings, 
> so would you care to elaborate/brainstorm on the situation i   
> described, you know, every input is valuable right now :) 



 TBH, I wouldn't know what to do. Ran into a similar problem with 4.0 a 
long while back and just reinstalled because it seemed insurmountable at 
the time.

I've been reducing my main pool usage and manually monitoring the metadata 
to avoid the situation with my current install, waiting for 4.1 to become 
stable before moving to it.

Chris Laprise (tasket) would be a better resource, if he's willing to jump 
in.

Brendan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0c13f771-7bdc-4246-8459-216cb5dabbe2%40googlegroups.com.

Re: Antw: [EXT] [qubes-users] probable lvm thin_pool exhaustion

[maiski]

Quoting brendan.h...@gmail.com:


Qubes 4.1 (in development) has added a warning (in addition to the current
lvm space usage warning) for lvm metadata usage above a threshold. 4.0
doesn't have the metadata nearing full warning, and that's what tends to
cause these types of thinpool issues.

In addition to the warning, Qubes 4.1 is also doubling (vs. the lvm default
value) the amount of space set aside for lvm thinpool metadata which will
substantially reduce the chances of ever hitting this issue under 4.1.

Brendan

PS - above is not helpful for recovering this machine, of course. However,
recovery from this can be very difficult and even after recovery not
guaranteed to recover all the data. The Qubes devs are aware of this and
very much want to avoid these issues in the next release.


Hm, yes, this does not help:/
What about running fstrim on the ssd and try booting again?
@brendan: I've seen that you had some thoughts about lvm in some postings,
so would you care to elaborate/brainstorm on the situation i  
described, you know, every input is valuable right now :)


--
You received this message because you are subscribed to the Google  
Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it,  
send an email to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit  
https://groups.google.com/d/msgid/qubes-users/54c72ea0-be0b-4414-bc01-7fee409b7c73%40googlegroups.com.




--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200311023413.Horde.IOwm_GtrdCIkVGTGfYLkNA1%40webmail.df.eu.

Re: [qubes-users] Embarrassing question

[Sven Semmler]

On Tue, Mar 10, 2020 at 06:57:47PM -0500, Stuart Perkins wrote:
> How do I edit the configuration to suppress the splash?

There seems to be a parameter "rhgb" (Red Hat Graphical Boot) that needs
to be removed. 

https://groups.google.com/forum/#!topic/qubes-users/jsCup_hVa-E

> How do I regenerate the boot files?

If you boot with Grub by editing /etc/default/grub then run grub2-mkconfig -o 
/boot/grub2/grub.cfg

If you boot with EFI then just edit /boot/efi/EFI/qubes/xen.cfg

See also the bottom of this page for an example: 
https://www.qubes-os.org/doc/usb-qubes/

> None of it is making any sense today.

I haven't verified the above instructions will work, but hope they'll
get you started in the right direction. 

Cheers,
/Sven

-- 
 public key: https://www.svensemmler.org/0x8F541FB6.asc
fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200311004356.GB1104%40app-email-private.


signature.asc
Description: PGP signature

[qubes-users] Embarrassing question

[Stuart Perkins]

I can't for the life of me figure out how to regenerate the boot file...

I want to "nosplash" it, and I just can't find anything that works.

I find the "splash" screen annoying and I don't want to have keep pressing a 
key to make it go away.  I like to see the messages...they tell me stuff.

How do I edit the configuration to suppress the splash?

How do I regenerate the boot files?

None of it is making any sense today.

Stuart

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200310185747.3eb74f8e%40gmail.com.

Re: [qubes-users] Is it recommended to install any anti-virus, anti-malware or anti-spyware apps in Qubes OS 4.0.3 or does Qubes OS takes care of all that ? - If not, which do you recommend ?

[Tobias Gilberg]

> Is it recommended to install any anti-virus, anti-malware or
> anti-spyware apps in Qubes OS 4.0.3 or does Qubes OS takes care of all
> that ? - If not, which do you recommend ?
> -- 
> You received this message because you are subscribed to the Google
> Groups "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to qubes-users+unsubscr...@googlegroups.com
> .
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/f6cb2a0b-cf15-4070-9206-fce3f9002e22%40googlegroups.com
> .

Hello

Qubes OS doesn't have integrated anti-malware stuff. It does protect
you, because the most malware will be deletet when you shut down the
infected AppVM (because changes in another folder than the home folder
of the AppVM will be deletet on shutdown). And the separation of you
tasks and data in different AppVMs protects you even if one of your
AppVMs got compromised. The QubesFirewall can protect you from spyware,
if you set it up correctly (in the AppVM settings under "Firewall rules"
add only the domains that you want to use in the specific AppVM).

Now knowing this its about you to decide if you need some anti-malware
apps. But consider also, that anti-malware apps are just normal programs
that check for known not good software. So they can't protect you from
not known malware (witch is easy to create), it increases also your
attack surface im a heavy way and many of anti-malware programs behave
like malware (e.g. running an person in the middle attack on your web
connections or sending information about whats on your computer (in your
case the AppVM) to the producer of the app.).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/746a4ece-7ea2-c284-8cea-999f840ecd3e%40mail.de.

Re: [qubes-users] How to expand the amount of storage in a Win10 HVM ?

['M' via qubes-users]

Thanks a lot and for the very quick response. :)



tirsdag den 10. marts 2020 kl. 22.19.49 UTC+1 skrev Sven Semmler:

> On Tue, Mar 10, 2020 at 02:09:18PM -0700, 'M' via qubes-users wrote: 
> > But how do I configure the amount of storage space manually ? 
>
> - start your Windows VM 
> - open start menu and type 'disk' 
> - select the 'create and format hard disk partitions' entry 
> - when the 'Disk Management' starts it will prompt you about an 
>   uninitalized disk. Cancel that dialog. 
> - now you should see three disks. 
>
> - Disk 0 is the system disk 
> - Disk 1 contains the private image / user files 
> - Disk 2 ... leave that one alone 
>
> - if you enlarged the system area you will see free space after the 'c:' 
>   partition. Right-click on 'c:' and choose 'Extend Volume...' 
>   
> - same works for 'D:' if you enlarged the private volume 
>
> /Sven 
>
> -- 
>  public key: https://www.svensemmler.org/0x8F541FB6.asc 
> fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2cc1ef5a-2d8d-479e-80b2-7bf68d7c0c36%40googlegroups.com.

Re: [qubes-users] How to expand the amount of storage in a Win10 HVM ?

[Sven Semmler]

On Tue, Mar 10, 2020 at 02:09:18PM -0700, 'M' via qubes-users wrote:
> But how do I configure the amount of storage space manually ?

- start your Windows VM
- open start menu and type 'disk'
- select the 'create and format hard disk partitions' entry
- when the 'Disk Management' starts it will prompt you about an
  uninitalized disk. Cancel that dialog.
- now you should see three disks.

- Disk 0 is the system disk
- Disk 1 contains the private image / user files
- Disk 2 ... leave that one alone

- if you enlarged the system area you will see free space after the 'c:'
  partition. Right-click on 'c:' and choose 'Extend Volume...'
 
- same works for 'D:' if you enlarged the private volume

/Sven

-- 
 public key: https://www.svensemmler.org/0x8F541FB6.asc
fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200310211932.GA1104%40app-email-private.


signature.asc
Description: PGP signature

[qubes-users] How to expand the amount of storage in a Win10 HVM ?

['M' via qubes-users]

How to expand the amount of storage in a Win10 HVM ?

I have tried to go into "Qube Settings" of the Win10 HVM and under "System 
storage max. size" write 45.720 MiB. And then click apply. Then there 
appeared a message saying something like that I need to configure the 
amount of storage space manually.

But how do I configure the amount of storage space manually ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/165a6fca-d902-4d46-a927-eccaa90875fb%40googlegroups.com.

[qubes-users] Is it recommended to install any anti-virus, anti-malware or anti-spyware apps in Qubes OS 4.0.3 or does Qubes OS takes care of all that ? - If not, which do you recommend ?

['M' via qubes-users]

Is it recommended to install any anti-virus, anti-malware or anti-spyware 
apps in Qubes OS 4.0.3 or does Qubes OS takes care of all that ? - If not, 
which do you recommend ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f6cb2a0b-cf15-4070-9206-fce3f9002e22%40googlegroups.com.

[qubes-users] Shall Microsoft firewall or other Microsoft security features be activated and used when using a Win10 HVM, and if so which features should be activated and used ?

['M' via qubes-users]

Shall Microsoft firewall or other Microsoft security features be activated 
and used when using a Win10 HVM, and if so which features should be 
activated and used ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/87926ce9-bcd7-4acc-b1fa-a64c70059f95%40googlegroups.com.

Re: [qubes-users] Why not make it possible to use a custom key combination for changing the keyboard layout when installing Qubes OS ?

['M' via qubes-users]

torsdag den 5. marts 2020 kl. 14.19.59 UTC+1 skrev tetra...@danwin1210.me:
>
> On Thu, Mar 05, 2020 at 03:33:54AM -0800, A wrote: 
> >When installing Qubes OS, it’s possible to choose between some 
> predetermined key combinations for changing the keyboard layout. 
> > 
> >Why not also make it possible for the user to make his or her own key 
> >combination for changing the keyboard layout when installing Qubes OS ? 
>
> I still haven't figured out how to change the key combination once the 
> install is complete... 
>


You can't.

It's made as so as a security measure.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ed2eb245-e0d6-47a9-acfe-cf8a25397e30%40googlegroups.com.

Re: Antw: [EXT] [qubes-users] probable lvm thin_pool exhaustion

[brendan . hoar]

On Tuesday, March 10, 2020 at 11:49:58 AM UTC, maiski wrote:
>
> Quoting Ulrich Windl >: 
> > For some reason I have a "watch -n30 lvs" running in a big terminal.   
> > On one of the op lines I see the usage of the thin pool. Of course   
> > this only helps before the problem... 
> > 
> > But I thought some app is monitoring the VG; wasn't there some space   
> > warning before the actual problem? 
>
> Of course there was. But atm of failure there was none visible, which   
> does not excuse that beforehand I had created 3 new and downloaded a   
> minimal template for fun, so... why can it be simple, when it can be   
> complicated 
>


Qubes 4.1 (in development) has added a warning (in addition to the current 
lvm space usage warning) for lvm metadata usage above a threshold. 4.0 
doesn't have the metadata nearing full warning, and that's what tends to 
cause these types of thinpool issues.

In addition to the warning, Qubes 4.1 is also doubling (vs. the lvm default 
value) the amount of space set aside for lvm thinpool metadata which will 
substantially reduce the chances of ever hitting this issue under 4.1.

Brendan

PS - above is not helpful for recovering this machine, of course. However, 
recovery from this can be very difficult and even after recovery not 
guaranteed to recover all the data. The Qubes devs are aware of this and 
very much want to avoid these issues in the next release.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/54c72ea0-be0b-4414-bc01-7fee409b7c73%40googlegroups.com.

Re: [qubes-users] Appvm freezes whole system on startup?!

[Stumpy]

On 2020-03-06 08:16, Stumpy wrote:
I shutdown an appvm then tried to start it back up, but now, when i try 
to start it up, my monitor goes white (with a very thin outline of the 
appvm that i started, and then nothing. I cant kill it, change 
workspaces, access menus, nada.


I have tried to open a few things on that appvm but no matter what it 
seems to crash whether its FF or xterm etc, all freeze my sys at which 
point i have to restart.


How can i recover from this? or at least salvage the data in this appvm?

I am running a fully updated ver of qubes, the appvm is deb10.



Welll I finally figured out which was the offending application, anydesk 
(I know, close source etc, shame on me). I added the anydesk repo and 
then when i installed it, BANG, system froze - so, I'd suggest avoiding 
anydesk for now at least.


I do have a final question though, how can an app effectively crash the 
whole system? Ok, the, in the case "Fedora" template was borked, but not 
dom0 so should a template and its appvms be able to bring the system 
down like that?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/50766ab4-9cfe-76ae-c187-a17848716cfd%40posteo.net.

Re: [qubes-users] split-gpg, can't use keys from gpg VM

[unman]

On Mon, Mar 09, 2020 at 01:30:53PM -0700, Guerlan wrote:
> I can't use the keys from the same VM as the gpg VM. I know ideally I'd 
> have a separate VM just for signing but due to my constrained RAM and due 
> to the fact that I use a Yubikey, I'm using the 'social' VM (the one where 
> I use social media only) to sign. The problem is that I also need to use 
> the social VM sometimes to access things. But I can't select 'social' as 
> destination when 'social' is also target in the qubes-gpg-split dialog box.
> 
Why do you want to do this?
Since you're using the same qube, just use gpg.

> Also, which VM should I use for signing? I thougth of sys-usb but it does 
> not have internet access for me to install qubes-gpg-split and I don't want 
> to mess with its configurations just for that.

You install gpg-split in the template - no need for net access in the
qube.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200310155215.GA2605%40thirdeyesecurity.org.

[qubes-users] EE-PROM of an Lenovo X230

[ggg397]

As I am on Social Security and can not afford to purchase the Insurgo 
Privacy Beast, I was trying to emulate what the Insurgo on my own.  

I bought a refurb Lenovo X-230 with I5 processor and 4 GB RAM, 340 GB 
Spinning hard drive.  I have upgraded the RAM to 16 GB, (MICRON 
CT2K102464BF186D 16GB KIT 8GBX2 PC3-14900 1866, which is marked as Crucial 
- Germany)  Laptop sees the RAM, Boots, I have not run extensive memory 
tests.

And the same WiFi adapter as Insurgo Privacy Beast uses:   (Atheros AR9832 
AR5BHB116. Model: AR9832 AR5BHB116. 1 x Atheros AR9832 AR5BHB116 Wireless 
Card. Standard Wireless: 801.11 a/b/g/n. Russia,Brazil,Chile,New 
Zealand,Mexico,South Africa,Asia)

I am now looking for a plan to EE-PROM (flash core boot) onto it.  I bought 
a PROM  Organizer SOIC8 SOP8 Flash Chip IC Test Clips Socket Adpter 
Programmer BIOS + CH341A 24 25 Series EEPROM Flash BIOS USB Programmer 
Module (Double Cl 


I now read I will need a Pomona Clip:Test Clip SOIC8 Pomona 5250.

Which will have to wait until next month to afford.  However, I see the 
instructions of what of I am about to attempt to be very detailed, and I am 
looking for about of guidance from someone who has recently done this 
thing.  

What looks to be one of my sources of a check list is:  
https://www.chucknemeth.com/flash-lenovo-x230-coreboot/

Then what I can find on git hub.   I had hoped to install both Core Boot 
and Heads, and I am not sure if that is so easy for someone like me.  

I have not read all that yet, but wanted to be clear on the possible 
upgrades, fixes to documentation that should have occurred.  I am supposing 
that I will need to be careful choose the correct script for a core I5.  

Truthfully this EE-PROM of Core Boot is more than I wanted to learn how to 
do.  All this makes me appreciate how much Insurgo does to get their 
version working.  

Anyway, I thought I would see if anyone has any recent experience with this 
that might be different than all the documentation that is already 
available.   Thanks for any replies.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3228975c-f96b-45e1-bb12-fae3f7d3268a%40googlegroups.com.

[qubes-users] Qubes-Whonix 15 TemplateVMs (4.0.1-202003070901) -- Testers Wanted!

[Patrick Schleizer]

https://www.whonix.org/wiki/Qubes/Install/Testing

Or.

https://www.whonix.org/wiki/Qubes/Reinstall/Testing

Let's test these templates!

* https://github.com/QubesOS/updates-status/issues/1674
* https://github.com/QubesOS/updates-status/issues/1675

Alternatively:

In-place release upgrade is possible upgrade using Whonix testers repository

https://www.whonix.org/wiki/Project-APT-Repository

Changes:

Contains all enhancements there were recently released.

https://forums.whonix.org/t/whonix-virtualbox-15-0-0-8-9-point-release-vanguards-tcp-isn-leak-protection-extensive-hardening/8994

https://forums.whonix.org/t/whonix-virtualbox-15-0-0-9-4-testers-wanted/9089

Whonix forums discussion:

https://forums.whonix.org/t/qubes-whonix-15-templatevms-4-0-1-202003070901-testers-wanted/9093

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b6608954-8270-e4b7-12e1-e7eb6b92df13%40whonix.org.

Re: [qubes-users] Nitropad Intel ME neutering

[unman]

On Sun, Mar 08, 2020 at 09:03:33AM -0700, acharya.sagar.sag...@gmail.com wrote:
> Disabling Intel ME completely will shut off the processor completely and 
> so, the malicious part of the code has been suppressed according to the 
> information given in the below link
> 
> https://github.com/osresearch/heads-wiki/blob/master/Clean-the-ME-firmware.md
> 
> Does ME cleaning achieve removing completely the access of it over hard 
> disk files or is it just a better but incompletely secure state than Intel 
> ME complete as in other laptops?
> 
Depends on the processor.
Always better than ME complete - after flashing ME is good to boot, but
then disabled, so no access to HD files.
Swapping out WiFi card will also stop use of WiFi by ME.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200310120820.GB484%40thirdeyesecurity.org.

Re: [qubes-users] Installation of Kali

[unman]

On Mon, Mar 09, 2020 at 10:50:41AM -0700, redpoll...@gmail.com wrote:
> This is a cross post so apologies as I am just trying to maximise my 
> chances of getting some help.
> 
> I've been trying to install Kali 2020 on qubes 4 without success.
> 
> I can get through the installation procedure but I'm getting problems at 
> the point where Kali uses the net to download software such as the GUI. At 
> this point I manually input the network settings (address, gateway etc 
> which I get from the Qubes settings) and then select a mirror for it to do 
> this, but it gives me a continual error message that there is an error with 
> the mirror. I suspect that the issue is that, for some reason its not 
> getting onto the net as I've been through a heap if the mirrors with the 
> same issue. It won't connect to any of them. It will install but when 
> booted I get a terminal and I can't seem to move past this to a GUI. I've 
> googled it to death and I've tried all of the solutions I can find.
> 
> 
> It appears that it installs without the GUI and any attempt to get it on 
> the net is useless. It doesn't respond to apt-update, startx, etc etc. I've 
> installed Kali plenty of times, but there is a quirk in qubes that has me 
> stumped.
> 
> 
> Has anyone had any luck installing this and able to offer any assistance?
> 

Just installed it.
make sure you have the latest iso - there was an issue with 1st 2020
release.
At "networking" use the information from Qube Settings,but use netmask
255.255.255.0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200310120022.GA484%40thirdeyesecurity.org.

Re: Antw: [EXT] [qubes-users] probable lvm thin_pool exhaustion

[maiski]

Quoting Ulrich Windl :


For some reason I have a "watch -n30 lvs" running in a big terminal.  
On one of the op lines I see the usage of the thin pool. Of course  
this only helps before the problem...


But I thought some app is monitoring the VG; wasn't there some space  
warning before the actual problem?





Of course there was. But atm of failure there was none visible, which  
does not excuse that beforehand I had created 3 new and downloaded a  
minimal template for fun, so... why can it be simple, when it can be  
complicated




--
You received this message because you are subscribed to the Google  
Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it,  
send an email to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit  
https://groups.google.com/d/msgid/qubes-users/5E67408E02A100037B31%40gwsmtp.uni-regensburg.de.




--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20200310124954.Horde.7R4L5nij6QnELir0hWnkNw6%40webmail.df.eu.

Re: [qubes-users] Is it possible to connect a USB device like a flash drive or CD-ROM drive to a Win10 HVM in Qubes OS 4.0.3 and if so how ?

[Gerhard Weck]

In oder to find the files copied to Windows 10 in the usual location 
*Qubes_incoming*
in the user directory, *qvm-prefs default_user* has to be set to the 
Windows login user name. 

If the default_user property is set to the wrong user name, the files are 
stored in
C:\Windows\System32\config\systemprofile\Documents\QubesIncoming\

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/33db5a2f-13ef-4f5f-a997-fec8cb15241a%40googlegroups.com.

Antw: [EXT] [qubes-users] probable lvm thin_pool exhaustion

[Ulrich Windl]

>>>  schrieb am 09.03.2020 um 22:14 in Nachricht
<32730_1583788450_5E66B1A2_32730_943_1_20200309221408.Horde.6suQ5c39eHZROYAnW9Jp
w...@webmail.df.eu>:
> Hello folks,
> 
> I have Qubes 4.0 Release standard luks + lvm thin pool.
> After a sudden reboot and entering the encryption pass, the dracut
> emergency shell comes up.
> "Check for pool qubes-dom/pool00 failed (status:1). Manual repair
> required!"
> The only aclive lv is qubes_dom0/swap.
> All the others are inactive.
> 
> step 1:
> from https://github.com/QubesOS/qubes-issues/issues/5160 
> /lvm vgscan vgchange -ay
> lvm lvconvert --repair qubes_dom0/pool00/
> Result:
> /using default stripesize 64.00 KiB.
> Terminate called after throwing an instance of 'std::runtime_error'
> what(): transaction_manager::new_block() couldn't allocate new block
> Child 7212 exited abnormally
> Repair of thin metadata volume of thin pool qubes_dom0/pool00 failed
> (status:1). Manual repair required!/
> 
> step 2:
> since i suspect that my lvm is full (though it does mark 15 g as free)
> i tried the following changes in the /etc/lvm/lvm.conf
> thin_pool_autoextend_threshold = 80
> thin_pool_autoextend_percent = 2 (Since my the pvs output gives PSize:
> 465.56g Pfree 15.78g, I set this to 2% to be overly cautious not to extend
> beyond the 15 G marked as free, since idk)
> auto_activation_volume_list = to hold the group, root, pool00, swap and a
> vm that would like to delete to free some space
> volume_list = the same as auto_activation_volume_list
> 
> and tried step 1 again, did not work, got the same result as above with
> qubes_swap as active only
> 
> step 3
> tried /lvextend -L+1G qubes_dom0/pool00_tmeta/
> Result:
> /metadata reference count differ for block xx, expected 0, but got 1
> ...
> Check for pool qubes-dom/pool00 failed (status:1). Manual repair required!/
> 
> Since I do not know my way around lvm, what do you think, would be the best
> way out of this?
> Adding another external PV? migrating to a bigger PV?
> I did not play with backup or achive out of fear to loose any unbackuped
> data which happens to be a bit :|

For some reason I have a "watch -n30 lvs" running in a big terminal. On one of 
the op lines I see the usage of the thin pool. Of course this only helps before 
the problem...

But I thought some app is monitoring the VG; wasn't there some space warning 
before the actual problem?


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5E67408E02A100037B31%40gwsmtp.uni-regensburg.de.