Re: [EXT] [qubes-users] MS Office 365 in Qubes

[William Oliver]

On Wed, 2021-05-26 at 15:53 +0200, Ulrich Windl wrote:
> 
> 
> Office 365 _without_ MS-Windows? Are you kidding? Maybe Microsoft 
> provides it for other platforms, but _why_ would one use the
> Microsoft 
> product? (I'm using OpenOffice/LibreOffice for years, and it's OK for
> me)


I use LibreOffice or Calligra for almost everything except...
 PowerPoint presentations that I have to give to someone else.  I
frequently speak at meetings where I have to provide a PPTX file of my
presentation weeks in advance, and I *have* to use whatever audiovisual
setup they have (often dictated by the venue).  I have found that
presentations made in LibreOffice format incorrectly in PowerPoint for
at least one slide over 80% of the time.  It gets worse when there are
videos and animations.

Normally, I create the presentation in LibreOffice and then take it to
a place that runs Windows at work and fix the presentation there.  I
retired from my normal job recently, so I can't do that any more, even
though I still do presentations.  At the moment, my church is letting
me use their computers for this, but I don't know that it will go on
forever.

billo

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3ec4e9bd6229d16fca97eb757771da27752211dd.camel%40billoblog.com.

Re: [EXT] [qubes-users] MS Office 365 in Qubes

[Sven Semmler]

On 5/26/21 11:01 AM, Ulrich Windl wrote:

most spammers want "to buy our products" ;-) Still we are not able to
use Office 365.


That one went straight over my head, possibly been away from Germany for
too long (15 years). Sorry for being a bit grumpy. Didn't sleep much
last night.

For others finding this thread later: of course in many cases
LibreOffice is the way to go. It's what I too use 95% of the time. If
you are just dealing with DOC(X)s, chances are you can do everything in
LibreOffice even when collaborating with M$ Office users.

Watching PPT(X) files works great too, but there will be minor format
errors. However, if you have to collaborate with M$ Office users working
on a PPT(X) for example, you will become very unpopular fast if you try
to pull that off using LibreOffice. The results just look too different.

Don't know about spreadsheets much, but I guess if you go all power user
on the formulas there might be surprises too.

Bottom-line: I get why someone might HAVE TO use Office just to not piss
off everyone else they are working with.

/Sven

--
 public key: https://www.svensemmler.org/0x8F541FB6.asc
fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cf2ec9f0-0154-4313-4f90-0ba6d29664ed%40SvenSemmler.org.


OpenPGP_signature
Description: OpenPGP digital signature

Re: [qubes-users] Re: [qubes-devel] Fedora 32 has reached EOL

[Andrew David Wong]

On 5/25/21 12:02 PM, 'icequbes1' via qubes-users wrote:




Dear Qubes Community,

Fedora 32 has reached EOL (end-of-life [1]). If you have not already
done so, we strongly recommend upgrading [2] your Fedora 32 TemplateVMs
and StandaloneVMs to Fedora 33 immediately. We provide a fresh Fedora 33
TemplateVM package through the official Qubes repositories, which you
can install in dom0 by following the standard installation instructions
[3].



Perhaps everyone is upgrading their templates after this message, but the 
yum.qubes-os.org repository server appears to be down, blocking dom0 updates 
(unless one uses a mirror or the hidden service).



There is an open issue for this now:

https://github.com/QubesOS/qubes-issues/issues/6637

--
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5421bec8-c7fc-d1f1-6c6e-c80ac8ebd257%40qubes-os.org.


OpenPGP_signature
Description: OpenPGP digital signature

[qubes-users] error updating qubes-template-centos-7

[Adam Mercer]

Hi

I'm trying to update the centos-7 template, installed from the
community templates repo, using the Qubes Update utility and the
process is failing with:

Updating centos-7

Error on updating centos-7: Command '['sudo', 'qubesctl',
'--skip-dom0', '--targets=centos-7', '--show-output', 'state.sls',
'update.qubes-vm']' returned non-zero exit status 20
centos-7:
  --
  _error:
  Failed to return clean data
  retcode:
  1
  stderr:
  Traceback (most recent call last):
File "/var/tmp/.root_dd8a91_salt/salt-call", line 27, in 
  salt_call()
File "/var/tmp/.root_dd8a91_salt/pyall/salt/scripts.py",
line 437, in salt_call
  import salt.cli.call
File "/var/tmp/.root_dd8a91_salt/pyall/salt/cli/call.py",
line 6, in 
  import salt.cli.caller
File
"/var/tmp/.root_dd8a91_salt/pyall/salt/cli/caller.py", line 14, in

  import salt.loader
File "/var/tmp/.root_dd8a91_salt/pyall/salt/loader.py",
line 7, in 
  import contextvars
File "/var/tmp/.root_dd8a91_salt/py3/contextvars.py", line
1, in 
  from _contextvars import Context, ContextVar, Token, copy_context
  ModuleNotFoundError: No module named '_contextvars'
  stdout:

How can I enusre then the template is updated?

Cheers

Adam

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CA%2Bmfgz0yX5HKJ7qTPYupqUW7pLno1k4azhpV5PUYh2gb--fMLQ%40mail.gmail.com.

Re: [EXT] [qubes-users] sys-net problems Intel 8265 / 8275

[haaber]

On 5/26/21 5:45 PM, Ulrich Windl wrote:


Do you have some hints how I could try to improve that? Best,  Bernhard



See what "journalctl -f" outputs in net-vm.


that gave an error message that helped to understand  that seemingly
mac-randomization-while-scanning and OpenWRT are a bad mixture ... I
deactivated it to test - and now it works. I guess that the
randomisation is a good thing as such, so I have to improve OpenWRT ?!

best, Bernhard

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e7bb30b0-c342-19e2-636e-98681b881ad1%40web.de.

Re: [EXT] Re: [qubes-users] qubes-dom0-update (https://github.com/QubesOS/qubes-issues/issues/6581)

[Ulrich Windl]

On 5/26/21 5:23 PM, unman wrote:

On Wed, May 26, 2021 at 04:22:39PM +0200, Ulrich Windl wrote:

Hi!

I know that the issue is marked fixed already, but I wonder if there should
have been some more popular notice for this surprising change in the update
mechanism.

Today I saw there (before installing updates):
[master@dom0 ~]$ sudo qubes-dom0-update
Using sys-firewall as UpdateVM to download updates for Dom0; this may take
some time...
warning: Converting database from bdb to sqlite backend
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
Configuration: OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
Configuration: OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
Configuration: OptionBinding with id "failovermethod" does not exist
Warning: Enforcing GPG signature check globally as per active RPM security
policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this message)

Today's updates were:
pm-plugin-systemd-inhibit-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 03:34:19 PM
CEST
rpm-plugin-selinux-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 03:34:19 PM
CEST
qubes-rpm-oxide-0.2.2-1.fc25.x86_64   Wed 26 May 2021 03:34:19 PM
CEST
qubes-mgmt-salt-dom0-4.0.25-1.fc25.noarch Wed 26 May 2021 03:34:19 PM
CEST
qubes-core-dom0-linux-kernel-install-4.0.30-1.fc25.x86_64 Wed 26 May 2021
03:34:19 PM CEST
qubes-core-dom0-linux-4.0.30-1.fc25.x86_64Wed 26 May 2021 03:34:19 PM
CEST
python3-rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:19 PM
CEST
python2-rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:19 PM
CEST
rpm-sign-libs-4.14.2.1-5.fc25.x86_64  Wed 26 May 2021 03:34:12 PM
CEST
rpm-libs-4.14.2.1-5.fc25.x86_64   Wed 26 May 2021 03:34:12 PM
CEST
rpm-build-libs-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 03:34:12 PM
CEST
rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:12 PM
CEST
qubes-mgmt-salt-config-4.0.25-1.fc25.noarch   Wed 26 May 2021 03:34:12 PM
CEST
qubes-mgmt-salt-base-config-4.0.2-1.fc25.noarch Wed 26 May 2021 03:34:12 PM
CEST
qubes-mgmt-salt-base-4.0.4-1.fc25.noarch  Wed 26 May 2021 03:34:12 PM
CEST
qubes-mgmt-salt-admin-tools-4.0.25-1.fc25.noarch Wed 26 May 2021 03:34:12 PM
CEST
qubes-mgmt-salt-4.0.25-1.fc25.noarch  Wed 26 May 2021 03:34:12 PM
CEST

When re-trying after those updates, (most of) the message is still there:
Using sys-firewall as UpdateVM to download updates for Dom0; this may take
some time...
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
Configuration: OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
Configuration: OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
Configuration: OptionBinding with id "failovermethod" does not exist
Warning: Enforcing GPG signature check globally as per active RPM security
policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this message)
Last metadata expiration check: 0:41:44 ago on Wed May 26 15:33:47 2021.
Dependencies resolved.
=
  PackageArchVersion Repository
Size
=
Upgrading:
  python2-rpmx86_64  4.14.2.1-5.fc25
qub

Re: [EXT] Re: [qubes-users] Dom0 update error (Converting database from bdb to sqlite backend)

[Ulrich Windl]

On 5/26/21 4:40 PM, unman wrote:

On Wed, May 26, 2021 at 04:11:44PM +0200, Ulrich Windl wrote:

On 5/14/21 3:22 PM, unman wrote:

On Fri, May 14, 2021 at 05:30:30AM -0700, load...@gmail.com wrote:

On Wednesday, May 12, 2021 at 10:00:16 PM UTC+3 awokd wrote:


load...@gmail.com:

On Monday, May 10, 2021 at 10:06:10 PM UTC+3 awokd wrote:



In dom0, check the files in /etc/yum.repos.d for the problem value.
Could possibly be copying them from there.



I removed the value it's complaining about (failovermethod=priority). And
nothing changed, the same error. Everytime when I save and try update again
I see this 'failovermethod=priority' in the file 'yum.repos.d'.

So I tried the fresh sys-firewall and tried to change UpdateVM on sys-net
and nothing changed :(



Then you simply have not deleted the entry from every file in dom0.

In any case it's a warning and harmless. Also a fix is in the pipeline.
It's always good practive to check that your problem isnt already covered
- it **has** been covered here the Forum, and also at github in the
issue tracker - #6581, and comes up with a trivial search.


After reading this, I tried to find the issue, starting at the Qubes OS main
page. Unfortunately you'll have to follow several links starting from the
"Team" link until you get there.


I wouldn't start from there.

ddg "qubes issues failovermethod" takes me straight to it, as does
"failovermethod=priority error".

"failovermethod=priority" takes you directly to the Red Hat bugzilla
where the issue is discussed and resolved.




I wonder:
* Is it possible to add some more direct links for "Search known issues"?
* Maybe also add shortcuts for "Issues recently reported", "Issues recently
fixed", and maybe "'popular' issues" (like those being opened many times;
unsure if that's possible)



Where do you think these links would be helpful?


Close to the home page; maybe in the top navigation bar under "Support" 
(does not exist yet, but could target at 
https://www.qubes-os.org/support/), even though people might be afraid 
of the traffic it may create ;-)






--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/df1731a4-134d-6f56-6de9-850d55e95458%40rz.uni-regensburg.de.

Re: [EXT] [qubes-users] MS Office 365 in Qubes

[Ulrich Windl]

On 5/26/21 4:24 PM, Sven Semmler wrote:

On 5/26/21 8:53 AM, Ulrich Windl wrote:

On 5/13/21 2:36 PM, 'taran1s' via qubes-users wrote:
due to my work assignment, I will need to use MS Office 365 and I 
would like to keep using my Qubes laptop.


IMHO running Office 365 from Qubes OS makes very little sense


The entire idea of Qubes OS is to compartmentalize your information, so
malicious code in one qube cannot damage the rest of your system.
Arguably it makes more sense to run Windows/O365 in Qubes OS then it
does bare metal.


At least Office 365 cannot affect the other VMs.




Will Office work without OneDrive?


Of course.

Does that work (e.g. copying text in a non-X11 application to paste it 
into some X11 application)?


Yes, in both cases: Windows qube with QWT or using Cross-Over (Win API 
emulated in X11)



Does Office/365 support Windows 7?


Yes it does. I have used it this way myself.


Wow, I'm impressed: As Microsoft continuously updates Office 365, they 
still support Windows 7 being an obsolete OS?




Ulrich, I found this particular post of yours remarkably uninformed and 
not constructive. It's not like the OP or myself advocate the use of 
O365, but there are circumstances where one HAS to use something in the 
context of earning money. Everyone outside of academia should be 
familiar with that situation.


Well, you are correct that I don't know enough about Office 365, but 
AFAIK the German BSI said you cannot use Office 365 for confidential 
data (that's what made me wonder about the combination of Office 365 and 
Qubes OS). Link like this: 
https://sharepoint360.de/bsi-analyse-deckt-neue-datenlecks-bei-der-office-telemetrie-auf-und-liefert-blockier-tipps/


On OneDrive: I never used Office 365, but when I tried to use OneNote, 
it said it will only work with OneDrive. And obviously: Microsoft wants 
you to use their cloud services.


Also don't conclude from my E-Mail address that I'm "in academica"; most 
spammers want "to buy our products" ;-) Still we are not able to use 
Office 365.  Well that might change in the future, but at least we had 
30 years without being attacked successfully...


Regards,
Ulrich

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9e765465-b671-249b-7b5c-18ed19690f44%40rz.uni-regensburg.de.

Re: [EXT] [qubes-users] sys-net problems Intel 8265 / 8275

[Ulrich Windl]

On 5/24/21 9:09 PM, haaber wrote:

I have an build-in Intel 8265 / 8275 wireless controller, and my
(debian-10-minimal based) sys-net has more and more problems to connect.
It starts to connect and then hangs. That is strange since it used to
run perfectly 2 years ago. But now it takes 1-5 minutes, sometime a
qvm-kill forced reboot (I use the std config with wpa_supplicant).
Usually 5Ghz networks do never finish the connection.

Do you have some hints how I could try to improve that? Best,  Bernhard



See what "journalctl -f" outputs in net-vm.
You could also try (in net-vm)
"watch iwconfig wlan0"
"watch ip route show"
etc.

Then report back some more details ;-)
Regards,
Ulrich

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8ffb67e8-7295-4fa9-efc9-206c6e37dcda%40rz.uni-regensburg.de.

Re: [EXT] Re: [qubes-users] Re: Fedora 32 approaching EOL

[Steve Coleman]

On Wed, May 26, 2021, 9:45 AM Ulrich Windl <
ulrich.wi...@rz.uni-regensburg.de> wrote:

> On 5/13/21 2:36 AM, Steve Coleman wrote:
> >
> >
> > On Wed, May 12, 2021, 5:52 PM Ulrich Windl
> >  > > wrote:
> >
> > On 4/30/21 1:31 AM, Andrew David Wong wrote:
> >  > Dear Qubes Community,
> >  >
> >  > Fedora 32 is scheduled to reach EOL (end-of-life [1]) on
> 2021-05-25.
> >
> > I have a question on
> > https://www.qubes-os.org/doc/template/fedora/upgrade/
> > :
> >
> > Towards the end of the update procedure "Detailed instructions for
> > standard Fedora TemplateVMs" there is the command
> > [user@dom0 ~]$ sudo dnf remove qubes-template-fedora-
> >
> > However I wonder: I did not install a fedora- template per
> > instructions, and I wonder about this asymmetry.
> >
> >
> > When you installed Qubes the default templates were installed for you.
> > Because the fedora-32 came onto your system as an rpm it can only be
> > removed by removing that rpm. To remove it, if you wish, you need to
> > change all AppVMs to use some other template, to remove any qubes
> > dependencies, then you remove the rpm.
> >
> > If you want to see all the default rpm templates you can do: "dom0> rpm
> > -qa | grep qubes-template". Those templates need to be removed via dnf
>
> "rpm -qa qubes-template\*" might be a bit more efficient. ;-)
>
> > or rpm rather than just deleting it from the qube-manager or the qvm-*
> > command line tool. When you clone a template it will not have an rpm
> > file associated with it, so it can be removed easily using qube-manager.
> >
> > I always clone all the rpm templates then remove the rpm's, and then
> > rename the clones to the name I actually want. If I ever need a fresh
> > copy I can always reinstall the rpm and clone it to start over.
>
> So cloning actually duplicates the rpm-installed template so it's safe
> to remove the RPM package afterwards?
>

Yes, it's safe. There are no rpm dependencies to prevent it's removal. You
just need to be sure no AppVM anywhere on your system is currently using
it. As long as no templates exist using the default name it's simple to
reinstall from rpm to grab a pristine unmodified copy whenever you need one.

Cloning it merely copies the template contents to a new template name that
is not controlled by any rpm. The new clone can be backed up and restored
like any normal vm and can be quickly removed as long as it has no Qubes
AppVM dependencies using it.

>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ5FDnjwY8tgWtsbgYPOiMimd529teSgsz_PgW7f6%3Doh4GfXUQ%40mail.gmail.com.

Re: [EXT] [qubes-users] Hotspots

[Ulrich Windl]

On 5/20/21 4:00 PM, '[🌹 NOTIFICATION]' via qubes-users wrote:
*_Does Qubes have automated features to conceal tether data as mobile 
under a tether?_*


Why should it when I use WLAN to connect my Smartphone and then share 
that connection via USB (or Bluetooth)?




See: https://bit.ly/343Q14h 



FOOTER

Per procurationem

🇺🇸 Express Actual Notice: This message is deemed private or 
confidential. Unless for criticism or news-report or research or 
scholarship or teaching or comment or opinion, this message may also be 
deemed copyright. Due to existence of sophisticated data collection 
programs globally, assume or presume by default that all digital data 
associated with this account is subject to intercepts, storage, 
surveillance or monitoring by intelligence systems and agencies, anytime 
or anywhere regardless of privacy or security or encryption (EO10995). 
Sender(s) or agent(s) nonassumpsit or accepts no liability for any 
message(s) or its attachment(s). All typing errors are not intended or 
intentional. Keep sent attachment size less than inbox size of 1 GB. 
Without Prejudice. All Rights Reserved. Special Deposit. †



🇨🇭 You are receiving this may due to possible time zone conflicts & to 
reduce and save forever paper, ink, phone minutes, fax, travel fuel and 
national-international mail postage expenses, excluding incurred data 
costs. 🗝️



Sent with ProtonMail  Secure Email.

--
You received this message because you are subscribed to the Google 
Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send 
an email to qubes-users+unsubscr...@googlegroups.com 
.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/EScvJ0zS4R5glF_aY3zekm-UB-ZJ41b-ltEOVj48_3HqdpTNMWwhBMaQlNmpM0pCPF5om8Gee9hOd02mEAnzkcaAJnVFtUQlWnDXG4OdTIw%3D%40protonmail.ch 
.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a9dd9ab1-534e-952a-8fe8-58e10daf50d9%40rz.uni-regensburg.de.

Re: [EXT] [qubes-users] Re: Is swap necessary?

[Ulrich Windl]

On 5/19/21 5:43 PM, TheGardner wrote:
For me, it would be necessary, if you're running Qubes with 4-8GB of 
RAM. But with 16,32 or even 64 GB of RAM a swap partition may be useless...


What about the "swappiness" kernel parameter? Here I see 
vm.swappiness=60 (default)


Having 16GB RAM and only 5 VMs running, no paging happened, even after I 
had set swappiness to 90 in Dom0:

[root@dom0 master]# free
  totalusedfree  shared  buff/cache 
available
Mem:3962388  817404 2410848   13412  734136 
2950516

Swap:  10485756   010485756


According to https://linuxhint.com/understanding_vm_swappiness/:
* 0: swap is disable
* 1: minimum amount of swapping without disabling it entirely
* 10: recommended value to improve performance when sufficient memory 
exists in a system

* 100: aggressive swapping

So I even set swappiness to 100, just top see what happens, and I still 
did not see any paging.


Even when starting three additional VMs, I could not see paging in Dom0:
[root@dom0 master]# vmstat 5
procs ---memory-- ---swap-- -io -system-- 
--cpu-
 r  b   swpd   free   buff  cache   si   sobibo   in   cs us sy 
id wa st
 0  0  0 2406852  55696 68186400   272   331 1101 1033  1 
1 97  0  1
 0  0  0 2406592  55696 6819320026   198 5320 5075  1 
1 97  0  1
 0  0  0 2406576  55704 6819400013   103 5164 4973  1 
1 97  0  1
 0  0  0 2406624  55704 6818600013   122 5217 5015  1 
1 97  0  1
 0  0  0 2405616  55708 6818760013   139 7042 6530  1 
1 96  0  1
 0  0  0 2406144  55716 6818880038   283 7819 7319  2 
1 95  0  2
 1  0  0 2408128  55716 68192400 1   118 7081 6661  1 
1 96  0  1
 1  0  0 2291836  55836 6823960079   366 8030 7576  7 
6 83  0  3
 0  0  0 2388740  54800 69263200 20717  2839 14237 12176  4 
 5 81  0  9
 3  0  0 2268800  54916 69455600 72948  6978 22038 21880  7 
10 69  0 14
 1  0  0 2332968  54916 70492000 12738 12858 13951 12536  6 
 6 71  0 17
 2  0  0 2259164  56068 70606800 12377  5766 13037 12304 10 
 9 64  1 17
 1  0  0 2263504  55040 71751200 47908  9822 17386 16391  3 
 6 75  0 15
 3  0  0 1950336  55048 71888400 50536 14435 20932 20627  4 
 6 69  1 21
 0  0  0 1789084  55056 71950400 22490  6858 12711 12202  2 
 3 84  0 10
 0  0  0 1821772  55064 71953200   275   433 6988 6579  3 
2 93  0  2
 1  0  0 1814452  55072 71949600   230   918 5477 5370  1 
1 94  0  3
 0  0  0 1712640  55080 71966000  4551 18286 8909 8085  2 
3 86  0  9
 0  0  0 2131492  56152 70911600  1826  5031 10883 9946  5 
 8 72  3 12
 4  0  0 2259808  56164 69880400  1322  7122 9417 8659  2 
3 88  0  6
 0  0  0 2333696  56224 69815600  1862  2295 9031 8399  4 
8 76  4  7
 0  0  0 2362572  56284 68670800   676  1020 7809 7022  4 
8 75  7  5
 0  0  0 2383836  56296 6864840013   374 5142 4777  2 
1 96  0  1
 0  0  0 2384740  56304 68646400 0   218 5131 4880  1 
1 97  0  1
 0  0  0 2385496  56304 68637200 0   124 4637 4471  1 
1 97  0  1

^C

Regards,
Ulrich



abra...@protonmail.com schrieb am Mittwoch, 19. Mai 2021 um 10:28:48 UTC+2:

The Qubes installer says swap is important. I did a Google search
and it turned out that Qubes hardly even uses swap. Specifically, I
found this:

https://www.reddit.com/r/Qubes/comments/86evqe/swap_is_useless_on_qubes/dz32iof/?context=8&depth=9




Is it at all important to install Qubes with a swap partition?
Currently I have it running without swap.


Sent with ProtonMail Secure Email.


--
You received this message because you are subscribed to the Google 
Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send 
an email to qubes-users+unsubscr...@googlegroups.com 
.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/10e71535-cb7b-4a84-b345-b2494da020c1n%40googlegroups.com 
.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dc596ea7-c16e-ee0b-ead5-ef9ab55a5a0a%40rz.uni-regensburg.de.

Re: [qubes-users] qubes-dom0-update (https://github.com/QubesOS/qubes-issues/issues/6581)

[unman]

On Wed, May 26, 2021 at 04:22:39PM +0200, Ulrich Windl wrote:
> Hi!
> 
> I know that the issue is marked fixed already, but I wonder if there should
> have been some more popular notice for this surprising change in the update
> mechanism.
> 
> Today I saw there (before installing updates):
> [master@dom0 ~]$ sudo qubes-dom0-update
> Using sys-firewall as UpdateVM to download updates for Dom0; this may take
> some time...
> warning: Converting database from bdb to sqlite backend
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
> OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
> OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
> OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
> Configuration: OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
> Configuration: OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
> Configuration: OptionBinding with id "failovermethod" does not exist
> Warning: Enforcing GPG signature check globally as per active RPM security
> policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this message)
> 
> Today's updates were:
> pm-plugin-systemd-inhibit-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 03:34:19 PM
> CEST
> rpm-plugin-selinux-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 03:34:19 PM
> CEST
> qubes-rpm-oxide-0.2.2-1.fc25.x86_64   Wed 26 May 2021 03:34:19 PM
> CEST
> qubes-mgmt-salt-dom0-4.0.25-1.fc25.noarch Wed 26 May 2021 03:34:19 PM
> CEST
> qubes-core-dom0-linux-kernel-install-4.0.30-1.fc25.x86_64 Wed 26 May 2021
> 03:34:19 PM CEST
> qubes-core-dom0-linux-4.0.30-1.fc25.x86_64Wed 26 May 2021 03:34:19 PM
> CEST
> python3-rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:19 PM
> CEST
> python2-rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:19 PM
> CEST
> rpm-sign-libs-4.14.2.1-5.fc25.x86_64  Wed 26 May 2021 03:34:12 PM
> CEST
> rpm-libs-4.14.2.1-5.fc25.x86_64   Wed 26 May 2021 03:34:12 PM
> CEST
> rpm-build-libs-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 03:34:12 PM
> CEST
> rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:12 PM
> CEST
> qubes-mgmt-salt-config-4.0.25-1.fc25.noarch   Wed 26 May 2021 03:34:12 PM
> CEST
> qubes-mgmt-salt-base-config-4.0.2-1.fc25.noarch Wed 26 May 2021 03:34:12 PM
> CEST
> qubes-mgmt-salt-base-4.0.4-1.fc25.noarch  Wed 26 May 2021 03:34:12 PM
> CEST
> qubes-mgmt-salt-admin-tools-4.0.25-1.fc25.noarch Wed 26 May 2021 03:34:12 PM
> CEST
> qubes-mgmt-salt-4.0.25-1.fc25.noarch  Wed 26 May 2021 03:34:12 PM
> CEST
> 
> When re-trying after those updates, (most of) the message is still there:
> Using sys-firewall as UpdateVM to download updates for Dom0; this may take
> some time...
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
> OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
> OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration:
> OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
> Configuration: OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
> Configuration: OptionBinding with id "failovermethod" does not exist
> Invalid configuration value: failovermethod=priority in
> /var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo;
> Configuration: OptionBinding with id "failovermethod" does not exist
> Warning: Enforcing GPG signature check globally as per active RPM security
> policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this message)
> Last metadata expiration check: 0:41:44 ago on Wed May 26 15:33:47 2021.
> Dependencies resolved.
> =
>  PackageArchVersion Repository
> Size
> 

Re: [EXT] Re: [qubes-users] Dom0 update error (Converting database from bdb to sqlite backend)

[unman]

On Wed, May 26, 2021 at 04:11:44PM +0200, Ulrich Windl wrote:
> On 5/14/21 3:22 PM, unman wrote:
> > On Fri, May 14, 2021 at 05:30:30AM -0700, load...@gmail.com wrote:
> > > On Wednesday, May 12, 2021 at 10:00:16 PM UTC+3 awokd wrote:
> > > 
> > > > load...@gmail.com:
> > > > > On Monday, May 10, 2021 at 10:06:10 PM UTC+3 awokd wrote:
> > > > 
> > > > 
> > > > In dom0, check the files in /etc/yum.repos.d for the problem value.
> > > > Could possibly be copying them from there.
> > > > 
> > > 
> > > I removed the value it's complaining about (failovermethod=priority). And
> > > nothing changed, the same error. Everytime when I save and try update 
> > > again
> > > I see this 'failovermethod=priority' in the file 'yum.repos.d'.
> > > 
> > > So I tried the fresh sys-firewall and tried to change UpdateVM on sys-net
> > > and nothing changed :(
> > > 
> > 
> > Then you simply have not deleted the entry from every file in dom0.
> > 
> > In any case it's a warning and harmless. Also a fix is in the pipeline.
> > It's always good practive to check that your problem isnt already covered
> > - it **has** been covered here the Forum, and also at github in the
> > issue tracker - #6581, and comes up with a trivial search.
> 
> After reading this, I tried to find the issue, starting at the Qubes OS main
> page. Unfortunately you'll have to follow several links starting from the
> "Team" link until you get there.

I wouldn't start from there.

ddg "qubes issues failovermethod" takes me straight to it, as does
"failovermethod=priority error".

"failovermethod=priority" takes you directly to the Red Hat bugzilla
where the issue is discussed and resolved.


> 
> I wonder:
> * Is it possible to add some more direct links for "Search known issues"?
> * Maybe also add shortcuts for "Issues recently reported", "Issues recently
> fixed", and maybe "'popular' issues" (like those being opened many times;
> unsure if that's possible)
> 

Where do you think these links would be helpful?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20210526144037.GA16045%40thirdeyesecurity.org.

Re: [EXT] [qubes-users] MS Office 365 in Qubes

[Sven Semmler]

On 5/26/21 8:53 AM, Ulrich Windl wrote:

On 5/13/21 2:36 PM, 'taran1s' via qubes-users wrote:
due to my work assignment, I will need to use MS Office 365 and I 
would like to keep using my Qubes laptop.


IMHO running Office 365 from Qubes OS makes very little sense


The entire idea of Qubes OS is to compartmentalize your information, so
malicious code in one qube cannot damage the rest of your system.
Arguably it makes more sense to run Windows/O365 in Qubes OS then it
does bare metal.


Will Office work without OneDrive?


Of course.

Does that work (e.g. copying text in a non-X11 application to paste 
it into some X11 application)?


Yes, in both cases: Windows qube with QWT or using Cross-Over (Win API 
emulated in X11)



Does Office/365 support Windows 7?


Yes it does. I have used it this way myself.

Ulrich, I found this particular post of yours remarkably uninformed and 
not constructive. It's not like the OP or myself advocate the use of 
O365, but there are circumstances where one HAS to use something in the 
context of earning money. Everyone outside of academia should be 
familiar with that situation.


/Sven

--
 public key: https://www.svensemmler.org/0x8F541FB6.asc
fingerprint: D7CA F2DB 658D 89BC 08D6 A7AA DA6E 167B 8F54 1FB6

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/49991a56-7db5-360a-963d-4bcc34ac58a2%40SvenSemmler.org.


OpenPGP_signature
Description: OpenPGP digital signature

[qubes-users] qubes-dom0-update (https://github.com/QubesOS/qubes-issues/issues/6581)

[Ulrich Windl]

Hi!

I know that the issue is marked fixed already, but I wonder if there 
should have been some more popular notice for this surprising change in 
the update mechanism.


Today I saw there (before installing updates):
[master@dom0 ~]$ sudo qubes-dom0-update
Using sys-firewall as UpdateVM to download updates for Dom0; this may 
take some time...

warning: Converting database from bdb to sqlite backend
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration: 
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration: 
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration: 
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo; 
Configuration: OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo; 
Configuration: OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo; 
Configuration: OptionBinding with id "failovermethod" does not exist
Warning: Enforcing GPG signature check globally as per active RPM 
security policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this 
message)


Today's updates were:
pm-plugin-systemd-inhibit-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 
03:34:19 PM CEST
rpm-plugin-selinux-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 03:34:19 
PM CEST
qubes-rpm-oxide-0.2.2-1.fc25.x86_64   Wed 26 May 2021 03:34:19 
PM CEST
qubes-mgmt-salt-dom0-4.0.25-1.fc25.noarch Wed 26 May 2021 03:34:19 
PM CEST
qubes-core-dom0-linux-kernel-install-4.0.30-1.fc25.x86_64 Wed 26 May 
2021 03:34:19 PM CEST
qubes-core-dom0-linux-4.0.30-1.fc25.x86_64Wed 26 May 2021 03:34:19 
PM CEST
python3-rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:19 
PM CEST
python2-rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:19 
PM CEST
rpm-sign-libs-4.14.2.1-5.fc25.x86_64  Wed 26 May 2021 03:34:12 
PM CEST
rpm-libs-4.14.2.1-5.fc25.x86_64   Wed 26 May 2021 03:34:12 
PM CEST
rpm-build-libs-4.14.2.1-5.fc25.x86_64 Wed 26 May 2021 03:34:12 
PM CEST
rpm-4.14.2.1-5.fc25.x86_64Wed 26 May 2021 03:34:12 
PM CEST
qubes-mgmt-salt-config-4.0.25-1.fc25.noarch   Wed 26 May 2021 03:34:12 
PM CEST
qubes-mgmt-salt-base-config-4.0.2-1.fc25.noarch Wed 26 May 2021 03:34:12 
PM CEST
qubes-mgmt-salt-base-4.0.4-1.fc25.noarch  Wed 26 May 2021 03:34:12 
PM CEST
qubes-mgmt-salt-admin-tools-4.0.25-1.fc25.noarch Wed 26 May 2021 
03:34:12 PM CEST
qubes-mgmt-salt-4.0.25-1.fc25.noarch  Wed 26 May 2021 03:34:12 
PM CEST


When re-trying after those updates, (most of) the message is still there:
Using sys-firewall as UpdateVM to download updates for Dom0; this may 
take some time...
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration: 
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration: 
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora.repo; Configuration: 
OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo; 
Configuration: OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo; 
Configuration: OptionBinding with id "failovermethod" does not exist
Invalid configuration value: failovermethod=priority in 
/var/lib/qubes/dom0-updates/etc/yum.repos.d/fedora-updates.repo; 
Configuration: OptionBinding with id "failovermethod" does not exist
Warning: Enforcing GPG signature check globally as per active RPM 
security policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this 
message)

Last metadata expiration check: 0:41:44 ago on Wed May 26 15:33:47 2021.
Dependencies resolved.
=
 PackageArchVersion 
Repository   Size

=
Upgrading:
 python2-rpmx86_64  4.14.2.1-5.fc25 
qubes-dom0-current  118 k
 python3-

Re: [EXT] Re: [qubes-users] Dom0 update error (Converting database from bdb to sqlite backend)

[Ulrich Windl]

On 5/14/21 3:22 PM, unman wrote:

On Fri, May 14, 2021 at 05:30:30AM -0700, load...@gmail.com wrote:

On Wednesday, May 12, 2021 at 10:00:16 PM UTC+3 awokd wrote:


load...@gmail.com:

On Monday, May 10, 2021 at 10:06:10 PM UTC+3 awokd wrote:



In dom0, check the files in /etc/yum.repos.d for the problem value.
Could possibly be copying them from there.



I removed the value it's complaining about (failovermethod=priority). And
nothing changed, the same error. Everytime when I save and try update again
I see this 'failovermethod=priority' in the file 'yum.repos.d'.

So I tried the fresh sys-firewall and tried to change UpdateVM on sys-net
and nothing changed :(



Then you simply have not deleted the entry from every file in dom0.

In any case it's a warning and harmless. Also a fix is in the pipeline.
It's always good practive to check that your problem isnt already covered
- it **has** been covered here the Forum, and also at github in the
issue tracker - #6581, and comes up with a trivial search.


After reading this, I tried to find the issue, starting at the Qubes OS 
main page. Unfortunately you'll have to follow several links starting 
from the "Team" link until you get there.


I wonder:
* Is it possible to add some more direct links for "Search known issues"?
* Maybe also add shortcuts for "Issues recently reported", "Issues 
recently fixed", and maybe "'popular' issues" (like those being opened 
many times; unsure if that's possible)






--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c367515a-70d5-da54-415e-905d18d075e0%40rz.uni-regensburg.de.

Re: [EXT] [qubes-users] Corrupt sys-usb after VeraCrypt accident

[Ulrich Windl]

On 5/14/21 12:49 PM, 'Cody Smith' via qubes-users wrote:

Hey all,

I'm going to love anyone who can assist me. So I have VeraCrypt 
installed on my sys-usb VM so I can mount my encrypted hard drives and 
usb sticks. I was encrypting a new USB drive (well I thought it was my 
USB drive) and then VeraCrypt crashed and sys-usb won't open any apps.


Here is what I know:

  * I selected a disk called /x***/ mounted to /rw on VeraCrypt it
was 50GB same as USB (similar so I assumed that was it)
  * It encrypted and formatted that disk 100%
  * I noticed the USB was not formatted, so I figured something was wrong
  * VeraCrypt crashed
  * Now I can't open any app on sys-usb "files" "terminal" etc
  * sys-usb still works for k&m and anything I attach to it.

Is there a easy way of repairing sys-usb or resetting it?


Welcome to the club: Once I had plugged in to USB sticks, wanting to 
backup one to another, when I actually overwrite the original...


In openSUSE Linux there is a rather useful "lscsi" command that gives a 
good summary of your (not just "SCSI") block devices (without partitions 
or logical devices such as LVM LVs, MD-RAIDs, etc.).




I looked through all the help and couldn't find any similar issues or 
request. Any help would be appreciated, thank you all.


I'm afraid there's nothing left to "repair"; it seems you musr 
"re-create" instead.





Regards,
Cody


--
You received this message because you are subscribed to the Google 
Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send 
an email to qubes-users+unsubscr...@googlegroups.com 
.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/oxfr3yIhSJFturMijOJ8ifgaXWTz1InOweUQcc_FgBJcMYqX_pKArmtd2UWf_V3O-vDfWM73mtQiAER3qD3D0MpsvMQKhFXm0Son0ZSjE3s%3D%40protonmail.ch 
.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5679d400-4904-100e-9061-fd296d2e1a8c%40rz.uni-regensburg.de.

Re: [qubes-users] Salting your Qubes

[unman]

On Tue, May 25, 2021 at 08:25:41PM +, pillule wrote:
> 
> pillule  writes:
> 
> > Hi unman.
> > 
> > I am learning to "salting my Qubes", what decided me is your recipe for
> > apt-cacher-ng (sometimes my bandwith really matters).
> > 
> > So far I get some things working such as an automated
> > template/templateDispVM/staticDispVM for firefox and its configuration
> > with some
> > extensions.
> > 
> > So with a little more confidence, right now I am installing your
> > apt-cacher-ng
> > recipe.
> > 
> > I read from the docs of apt-cacher-ng :
> > "6.3 Fedora Core
> > Attempts to add apt-cacher-ng support ended up in pain and the author
> > lost any
> > motivation in further research on this subject. "
> > 
> > Do you get it working ?
> > 
> > In all cases, can you explicit how you use apt-cacher-ng only for debian
> > derivatives? The RPC policy you provided will apply to all templates,
> > and calls
> > to https from fedora will be denied, preventing them to update ; or I am
> > missing something ?
> > 
> > > Happy to take suggestions for other configurations, or features.
> > > 
> > > unman
> > 
> > Sometimes ago you mentioned on the mailing list to use snort and
> > tripwire.
> > I don't know if it is trivial to deploy but that is surely one of the
> > next
> > things I will look at.
> 
> I have been fooled by :
> https://github.com/QubesOS/qubes-issues/issues/6585
> 
> Actually my apt-cacher-ng is also denying qubes updates :
> 
> Hit:1 http://HTTPS///deb.debian.org/debian buster InRelease
> Hit:2 http://HTTPS///deb.debian.org/debian-security buster/updates InRelease
> Err:3 http://HTTPS///deb.qubes-os.org/r4.0/vm buster InRelease
>  Connection failed [IP: 127.0.0.1 8082]
> Err:4 http://HTTPS///deb.qubes-os.org/r4.0/vm buster-testing InRelease
>  Connection failed [IP: 127.0.0.1 8082]
> Reading package lists...
> Building dependency tree...
> Reading state information...
> All packages are up to date.
> W: Failed to fetch
> http://HTTPS///deb.qubes-os.org/r4.0/vm/dists/buster/InRelease Connection
> failed [IP: 127.0.0.1 8082]
> W: Failed to fetch
> http://HTTPS///deb.qubes-os.org/r4.0/vm/dists/buster-testing/InRelease
> Connection failed [IP: 127.0.0.1 8082]
> W: Some index files failed to download. They have been ignored, or old ones
> used instead.
> 
> 
> 
The repository was unavailable for a while. Was that the issue?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20210526133016.GF15406%40thirdeyesecurity.org.

Re: [EXT] [qubes-users] MS Office 365 in Qubes

[Ulrich Windl]

On 5/13/21 2:36 PM, 'taran1s' via qubes-users wrote:
I am using Qubes as my main OS and now it seems that due to my work 
assignment, I will need to use MS Office 365 and I would like to keep 
using my Qubes laptop.


IMHO running Office 365 from Qubes OS makes very little sense (as you 
publish all your data to Microsoft basically). It's abit like runniing 
TOR browser and then fill in some form with all your personal data.




I will need to use the MS Office 365 ideally with/without the following 
features:


- no need to have internet connection


Is that possible for a longer time?


- no need to have win apps other than the MS Office 365 are needed now


Will Office work without OneDrive?


- need to copy and paste text in between win-AppVMs and non-win-AppVMs


Does that work (e.g. copying text in a non-X11 application to paste it 
into some X11 application)?


- need to file sharing between win-AppVMs and non-win-AppVMs (copy and 
move)
- need to ideally be able to open the MS Office 365 files in various 
separate AppVMs, but it is not a killer and I can live without it if it 
complicates the situation too much.


My question is, if there is some workaround other than necessity to 
install whole Windows OS in my Qubes.


Office 365 _without_ MS-Windows? Are you kidding? Maybe Microsoft 
provides it for other platforms, but _why_ would one use the Microsoft 
product? (I'm using OpenOffice/LibreOffice for years, and it's OK for me)




If the Windows OS installation is a necessity in this case, would you 
consider the WIN7 or WIN10 as better, less troublesome option? Could you 
point me to a how to guide? There is this guide 


The question is: Does Office/365 support Windows 7? I doubt that.

https://www.qubes-os.org/doc/windows/. Is there any other one you would 
propose for this case?





--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7f8b9e6a-4bff-bf11-ecdb-513690aca528%40rz.uni-regensburg.de.

Re: [EXT] Re: [qubes-users] Re: Fedora 32 approaching EOL

[Ulrich Windl]

On 5/13/21 2:36 AM, Steve Coleman wrote:



On Wed, May 12, 2021, 5:52 PM Ulrich Windl 
> wrote:


On 4/30/21 1:31 AM, Andrew David Wong wrote:
 > Dear Qubes Community,
 >
 > Fedora 32 is scheduled to reach EOL (end-of-life [1]) on 2021-05-25.

I have a question on
https://www.qubes-os.org/doc/template/fedora/upgrade/
:

Towards the end of the update procedure "Detailed instructions for
standard Fedora TemplateVMs" there is the command
[user@dom0 ~]$ sudo dnf remove qubes-template-fedora-

However I wonder: I did not install a fedora- template per
instructions, and I wonder about this asymmetry.


When you installed Qubes the default templates were installed for you. 
Because the fedora-32 came onto your system as an rpm it can only be 
removed by removing that rpm. To remove it, if you wish, you need to 
change all AppVMs to use some other template, to remove any qubes 
dependencies, then you remove the rpm.


If you want to see all the default rpm templates you can do: "dom0> rpm 
-qa | grep qubes-template". Those templates need to be removed via dnf 


"rpm -qa qubes-template\*" might be a bit more efficient. ;-)

or rpm rather than just deleting it from the qube-manager or the qvm-* 
command line tool. When you clone a template it will not have an rpm 
file associated with it, so it can be removed easily using qube-manager.


I always clone all the rpm templates then remove the rpm's, and then 
rename the clones to the name I actually want. If I ever need a fresh 
copy I can always reinstall the rpm and clone it to start over.


So cloning actually duplicates the rpm-installed template so it's safe 
to remove the RPM package afterwards?




--
You received this message because you are subscribed to the Google 
Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send 
an email to qubes-users+unsubscr...@googlegroups.com 
.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ5FDngFUjOQKS4nVAVLLVb-3ULJj1RyQOupXgi-BdYY%3D8u0bQ%40mail.gmail.com 
.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4fd799a4-6895-d6ce-6c55-a24e3b18f512%40rz.uni-regensburg.de.

Re: [qubes-users] Salting your Qubes

[unman]

On Tue, May 25, 2021 at 07:05:40PM +, pillule wrote:
> 
> Hi unman.
> 
> I am learning to "salting my Qubes", what decided me is your recipe for
> apt-cacher-ng (sometimes my bandwith really matters).
> 
> So far I get some things working such as an automated
> template/templateDispVM/staticDispVM for firefox and its configuration with
> some
> extensions.
> 
> So with a little more confidence, right now I am installing your
> apt-cacher-ng
> recipe.
> 
> I read from the docs of apt-cacher-ng :
> "6.3 Fedora Core
> Attempts to add apt-cacher-ng support ended up in pain and the author lost
> any
> motivation in further research on this subject. "
> 
> Do you get it working ?

Yes, apt-cacher-ng  works for Fedora updates.

You have to make some changes - 
First, on the client side, comment out "metalink" lines, and uncomment
"baseurl" lines. This is because the metalink will keep loading new
https:// repositories, and apt-cacher-ng cant cache those requests,
as you know.
Second, watch the caches in /var/cache/apt-cacher-ng , and add any new
ones to the fedora_mirrors file - this is because that file doesn't
contain all Fedora repositories.

After a while you will have almost all your Fedora updates cached, and
will see the speed increase.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20210526132914.GE15406%40thirdeyesecurity.org.

Re: [qubes-users] Re: sys-net problems Intel 8265 / 8275

[Vít Šesták]

This looks cumbersome, but I have a similar situation with my Wi-Fi card 
and Fedora template. However, the Intel webpage also links 
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tree/
 
(see the note above the table) as a source for newer versions.

I remember some issues with Wi-Fi in a minimal template (not sure if Debian 
or Fedora). Finally, I concluded it was not worth the hassle. This is the 
reason why I suggest trying some other template, even if it is not the 
preferred solution in long-term.

Regards,
Vít Šesták 'v6ak'

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9666f0ea-1943-4810-b814-19603b72ed7bn%40googlegroups.com.