[qubes-users] Intel CPU frequency scaling and boost mode?
Hi fellow qubes users, I just installed (not to say it was easy) Qubes on gen10 intel NUC. It has a "mobile" type CPU, 1.6Ghz with turbo boost up to 4GHz. However, Xentop never shows frequencies higher than 1.6 no matter if I have a CPU-intensive task or not. Does turbo boost work as expected? Also, I have an arduino-based analog meter controlled by USB I used on my previous systems to collect and display system load metering. However, most of the data is available in dom0 only. What is the best practice to send it to an AppVM? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/24d6e526-4f27-4942-8282-780b83ac61a9n%40googlegroups.com.
[qubes-users] Re: win7 seamless mode, teams, vmware
I would rather use native Teams client. However, regarding Win7 seamless mode (to which I am yet to give a try), is there a chance we will ever get rid of that ugly double window decorations? :) On Monday, November 2, 2020 at 12:50:27 PM UTC+2 Rasta Bude wrote: > Hello, > I try to run Windows 7 in seamless mode at my Qubes. So far everything ist > working great. I just have some problems with microsoft teams there. I only > see a white screen and cannot login. If I install a normal Windows 7 HVM > like in the description without Qubes Windows tools then it is running. Can > u tell me what I can try to fix this? It will be good for my work, to run > Teams in seamless mode, because then I don't need to copy the file between > vm's and else. I even tried it with several Windows7 images, And I am only > able to install a seamless Windows 7HVM via qvm-create-windows-qube.sh, > because I don't find how to activate the *seamless mode* in a Winodws 7 > HVM. The Quibes documentary is not up to date at this section and said u > can do this in the Qubes Manager, but there I cannot find this option. > Maybe there is a working *solution* *via terminal? T*hat will be really > great, then I can try to install a fresh win7 hvm with my own Iso, where > all the updates are integrated...Maybe this will work.:) > Or ist it possible to run *vmware on the qubes fedora or debian template*? > But I don't think so, because at Debian I always get an error GNU C > compiler 6.4.1 not found and at Fedora it install vmware, but while > installing it started uninstalling and cannot finish the installation. But > if this is possible it will be a solution, too and I am very thankful to > hear how to fix that problem.:) > Stay healthy, Best wishes and much thanks for ur support. > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/38c48597-e22e-4f8c-a64a-d2b2e5a4975fn%40googlegroups.com.
Re: [qubes-users] [unofficial] Qubes security advisory
I would make a full forensic image and then start investigating. Otherwise the evidence is very fragile. On Friday, November 6, 2020 at 12:20:32 AM UTC+2 tetra...@danwin1210.me wrote: > On Mon, Oct 26, 2020 at 04:04:30PM -0400, Chris Laprise wrote: > >On 10/25/20 10:24 PM, 'J.M. Porup' via qubes-users wrote: > >>One morning last week, I launched a disposable Debian 10 template with > my preset > >>defaults of no netvm and a blank page preset--but instead a default page > of > >>"https://www.youtube.com/"; appeared. It only happened once, but it was > enough. > > > >So to clarify, you launched a dispVM with no networking, and a youtube > >page was loaded and rendered on screen? > > > >That seems highly unlikely to be an accidental input or glitch. > > No, he's saying the Firefox homepage in his Debian-10 template was > changed from about:blank to youtube.com, leading the debian-10 > template-based DispVM to launch Firefox with youtube.com as the default > page. > > Ergo someone compromised his Debian-10 template and changed the Firefox > homepage... or, there was an error in the template configuration leading > to him accidentally changing the hompeage in what sounds like a > stressful situation. > > J.M., assuming you are indeed correct about a major attack, most of the > major Xen vulnerabilities that threaten a Qubes full compromise involve > sys-net. Since Five Eyes may get advance notice of Xen holes, if your > machine was indeed fully rooted it could be you were hit by the PCI > vulnerability from a while back. > > Due to precisely these kinds of issues, there is discussion for using > the much-harder-to-exploit OpenBSD as an operating system for the > sys-net VM: > https://github.com/QubesOS/qubes-issues/issues/5294 > > You may want to give it a go (after buying a new laptop, of course). > > Additionally, if a sys-net based attack is indeed a concern for your > threat model, consider disabling wi-fi entirely and using an ethernet > cable, wi-fi drivers are generally terrible. > > Nevertheless if you are really up against serious Five Eyes type > adversaries then it's unlikely you'll be able to keep *any* computer > secure for long and should probably buy that cabin in the Rockies you > always wanted... > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b70d4e94-7e63-4da1-819c-c72cf2a085e7n%40googlegroups.com.
Re: [qubes-users] [unofficial] Qubes security advisory
On Mon, Oct 26, 2020 at 04:04:30PM -0400, Chris Laprise wrote: On 10/25/20 10:24 PM, 'J.M. Porup' via qubes-users wrote: One morning last week, I launched a disposable Debian 10 template with my preset defaults of no netvm and a blank page preset--but instead a default page of "https://www.youtube.com/"; appeared. It only happened once, but it was enough. So to clarify, you launched a dispVM with no networking, and a youtube page was loaded and rendered on screen? That seems highly unlikely to be an accidental input or glitch. No, he's saying the Firefox homepage in his Debian-10 template was changed from about:blank to youtube.com, leading the debian-10 template-based DispVM to launch Firefox with youtube.com as the default page. Ergo someone compromised his Debian-10 template and changed the Firefox homepage... or, there was an error in the template configuration leading to him accidentally changing the hompeage in what sounds like a stressful situation. J.M., assuming you are indeed correct about a major attack, most of the major Xen vulnerabilities that threaten a Qubes full compromise involve sys-net. Since Five Eyes may get advance notice of Xen holes, if your machine was indeed fully rooted it could be you were hit by the PCI vulnerability from a while back. Due to precisely these kinds of issues, there is discussion for using the much-harder-to-exploit OpenBSD as an operating system for the sys-net VM: https://github.com/QubesOS/qubes-issues/issues/5294 You may want to give it a go (after buying a new laptop, of course). Additionally, if a sys-net based attack is indeed a concern for your threat model, consider disabling wi-fi entirely and using an ethernet cable, wi-fi drivers are generally terrible. Nevertheless if you are really up against serious Five Eyes type adversaries then it's unlikely you'll be able to keep *any* computer secure for long and should probably buy that cabin in the Rockies you always wanted... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20201105222013.GA1107%40danwin1210.me.
Re: [qubes-users] how much space is what using?
On 11/5/20 7:31 AM, Stumpy wrote: I am trying to figure out how to claw back some space on my hard drive but am having a really hard time understanding what is taking up how much space? For example, I have one appvm that in the qubes manager is showing disk usage as 173000MiB sudo Baoab is showing me that / is using: 10.5gb and df -f is showing me that / is using 11gb with 500gb free and when i try to reduce private storage anything less than it is already (it is set to 55gb) the settings wont let me, I change it, hit apply and it goes back to 55gb, no matter if i try to change it by 1 or 100gb, also regardless of if i have the appvm shutdown or not? Am having a really hard time understanding this so any clarification would be appreciated! It won't let you reduce the private storage capacity because that's a dangerous operation. The system is protecting you from yourself. :) If you just want to free up space, simply delete stuff you don't need inside of AppVMs. That will free up space, even though the AppVM private storage capacity remains the same. That's because it's total *capacity*, not the amount of space actually being used. If I create a brand new AppVM and immediately increase its private storage capacity to 500GB, that doesn't mean 500GB is being used. Only if I actually fill that AppVM with 500GB of data will that much actually be used on disk. Until I do that, it's just a big empty vessel. Now, if, for some unrelated reason, you really want to try to shrink the private storage capacity (and risk losing data to do so), have a look at this documentation: https://www.qubes-os.org/doc/resize-disk-image/#decreasing-the-size-of-disk-images Just remember that this is not at all necessary for saving disk space, and it's probably a bad idea unless you really, really know what you're doing. Most people will never need to do this. :) -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3740bcb8-9572-9aaf-fc00-efdbf7fb78e3%40qubes-os.org. OpenPGP_signature Description: OpenPGP digital signature
[qubes-users] Re: Stumpy's question about contributing
Hi Stumpy,
I replied to your email, but it was returned as undelivered with a
message stating that your email address is invalid ("Recipient address
rejected: User unknown"), so I'm replying here on qubes-users. :)
Stumpy asked a great question about how folks can contribute aside from
donating and writing code.
Thanks for asking! We actually have a list of such ways right here:
https://www.qubes-os.org/doc/contributing/
Many items on this list don't require any money or programming
knowledge. In particular, it's always helpful to test new releases and
updates:
https://www.qubes-os.org/doc/testing/
The just-released 4.0.4-rc1 is a great opportunity to do that:
https://www.qubes-os.org/news/2020/11/05/qubes-4-0-4-rc1/
However, individual package updates are also very important, and they
often don't receive as much feedback as they need:
https://www.qubes-os.org/doc/testing/#providing-feedback
https://github.com/QubesOS/updates-status/issues
Thank you for your willingness to contribute!
--
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/238de145-b838-1f85-7bbc-ee68e93618ec%40qubes-os.org.
OpenPGP_signature
Description: OpenPGP digital signature
[qubes-users] Qubes OS 4.0.4-rc1 has been released!
Dear Qubes Community, We're pleased to announce the first release candidate for Qubes OS 4.0.4. Qubes OS 4.0.4-rc1 includes many updates over the initial 4.0 release, in particular: - All 4.0 dom0 updates to date - Fedora 32 TemplateVM - Debian 10 TemplateVM - Whonix 15 Gateway and Workstation TemplateVMs - Linux kernel 4.19 by default Qubes 4.0.4-rc1 is available on the downloads page: https://www.qubes-os.org/downloads/ What is a point release? A point release does not designate a separate, new version of Qubes OS. Rather, it designates its respective major or minor release (in this case, 4.0) inclusive of all updates up to a certain point. Installing Qubes 4.0 and fully updating it results in the same system as installing Qubes 4.0.4. What should I do? - If you installed Qubes 4.0, 4.0.1, 4.0.2, or 4.0.3 and have fully updated [1], then your system is already equivalent to a Qubes 4.0.4 installation. No further action is required. Regardless of your current OS, if you wish to install (or reinstall) Qubes 4.0 for any reason, then the 4.0.4 ISO makes this more convenient and secure, since it bundles all Qubes 4.0 updates to date. Please see the installation guide [2] for detailed instructions. If you're willing to test [3] this release candidate, you can help to improve the stable release by reporting any bugs you encounter [4]. Release candidate planning -- If no major issues are discovered in 4.0.4-rc1, we expect to announce the stable release of 4.0.4 in a couple weeks. [1] https://www.qubes-os.org/doc/updating-qubes-os/ [2] https://www.qubes-os.org/doc/installation-guide/ [3] https://www.qubes-os.org/doc/testing/ [4] https://www.qubes-os.org/doc/reporting-bugs/ This announcement is also available on the Qubes website: https://www.qubes-os.org/news/2020/11/05/qubes-4-0-4-rc1/ -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8d4058ed-48e2-9998-3acd-d0804abab5e8%40qubes-os.org. OpenPGP_signature Description: OpenPGP digital signature
[qubes-users] how much space is what using?
I am trying to figure out how to claw back some space on my hard drive but am having a really hard time understanding what is taking up how much space? For example, I have one appvm that in the qubes manager is showing disk usage as 173000MiB sudo Baoab is showing me that / is using: 10.5gb and df -f is showing me that / is using 11gb with 500gb free and when i try to reduce private storage anything less than it is already (it is set to 55gb) the settings wont let me, I change it, hit apply and it goes back to 55gb, no matter if i try to change it by 1 or 100gb, also regardless of if i have the appvm shutdown or not? Am having a really hard time understanding this so any clarification would be appreciated! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/d10c0e8e-9444-14fb-ddb5-611b5b3bbfaa%40posteo.net.
Re: [qubes-users] Is it possible to upgrade a Fedora 31 Template to Fedora 32?
Hey donoban, Thanks. I'll take a look in more details later on. It seems a bit long of a process to try right now. Cheers On Thursday, 5 November 2020 at 12:31:23 UTC+2 donoban wrote: > On 11/5/20 7:23 AM, Claudio Chinicz wrote: > > Hi All, > > > > I have a Fedora 31 template where I've installed applications and made > > customization, which I want to upgrade to Fedora 32 because of F31 EOL. > > > > I've followed the process described > > here https://fedoramagazine.org/upgrading-fedora-31-to-fedora-32/ but > > got errors: > > Error: > > Problem 1: package rpmfusion-free-release-31-0.3.noarch requires > > system-release(31), but none of the providers can be installed > > - fedora-release-31-4.noarch does not belong to a distupgrade > repository > > - problem with installed package rpmfusion-free-release-31-0.3.noarch > > Problem 2: package fedora-release-31-4.noarch requires > > fedora-release-common = 31-4, but none of the providers can be installed > > - package rpmfusion-nonfree-release-31-0.3.noarch requires > > system-release(31), but none of the providers can be installed > > - fedora-release-common-31-4.noarch does not belong to a distupgrade > > repository > > - problem with installed package > rpmfusion-nonfree-release-31-0.3.noarch > > > > Is there a way to upgrade Fedora 31 Template? > > > > Thanks in advance for any input. > > Hi, try following this steps: > https://www.qubes-os.org/doc/template/fedora/upgrade/ > > If you still having problems with rpmfusion maybe disabling it helps. > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/985d4f53-7357-4a39-afa7-bd0536a02a5dn%40googlegroups.com.
Re: [qubes-users] Is it possible to upgrade a Fedora 31 Template to Fedora 32?
On 11/5/20 7:23 AM, Claudio Chinicz wrote: > Hi All, > > I have a Fedora 31 template where I've installed applications and made > customization, which I want to upgrade to Fedora 32 because of F31 EOL. > > I've followed the process described > here https://fedoramagazine.org/upgrading-fedora-31-to-fedora-32/ but > got errors: > Error: > Problem 1: package rpmfusion-free-release-31-0.3.noarch requires > system-release(31), but none of the providers can be installed > - fedora-release-31-4.noarch does not belong to a distupgrade repository > - problem with installed package rpmfusion-free-release-31-0.3.noarch > Problem 2: package fedora-release-31-4.noarch requires > fedora-release-common = 31-4, but none of the providers can be installed > - package rpmfusion-nonfree-release-31-0.3.noarch requires > system-release(31), but none of the providers can be installed > - fedora-release-common-31-4.noarch does not belong to a distupgrade > repository > - problem with installed package rpmfusion-nonfree-release-31-0.3.noarch > > Is there a way to upgrade Fedora 31 Template? > > Thanks in advance for any input. Hi, try following this steps: https://www.qubes-os.org/doc/template/fedora/upgrade/ If you still having problems with rpmfusion maybe disabling it helps. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/d15b454e-fda7-f1af-421f-dcc66f6d6641%40riseup.net. OpenPGP_0x141310D8E3ED08A5.asc Description: application/pgp-keys OpenPGP_signature Description: OpenPGP digital signature
