[qubes-users] rc3: Split-gpg + enigmail frequent "qubes.Gpg" prompts

2018-01-12 Thread Chris Laprise
only once for the defined time interval). With the current behavior, I'll probably have to disable Enigmail. I've double-checked my settings with the split-gpg doc, but I'm wondering if this could be a bug or if I'm just missing something. Versions Debian 9 or Fedora 26 Thunderbird 52.5.2 Enigmail 1.9.9

Re: [qubes-users] Qubes 4.0-rc3

2018-01-11 Thread Chris Laprise
On 01/11/2018 10:31 PM, Andrew David Wong wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 2018-01-11 14:41, Chris Laprise wrote: >> >> At least no section repetition for the scripts should be necessary. But >> doing this for the dialogs still add

Re: [qubes-users] Qubes 4.0-rc3

2018-01-11 Thread Chris Laprise
cripts still use iptables even in fedora-26. IIUC, iptables and nft are two different interfaces to netfilter. I don't know if it really matters, at least for the R4.0 window. I'd prefer to put the syntax change (for docs) off until a later release. -- Chris Laprise, tas...@posteo.net https:

Re: [qubes-users] Qubes 4.0-rc3

2018-01-11 Thread Chris Laprise
At least no section repetition for the scripts should be necessary. But doing this for the dialogs still adds a lot to an already long doc. I feel that, apart from making some docs look deceptively long and less readable, the most significant downside to melding 3.x/4.x instructions together wo

Re: [qubes-users] memory management in dom0 ?

2018-01-11 Thread Chris Laprise
ot/grub2/grub.cfg on the lines beginning with 'multiboot /xen'. Its currently at 1800M on this system and can probably go lower. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You rec

Re: [qubes-users] Qubes 4.0-rc3

2018-01-10 Thread Chris Laprise
On 01/10/2018 01:53 PM, 'Tom Zander' via qubes-users wrote: On Wednesday, 10 January 2018 18:32:39 GMT Chris Laprise wrote: I also have a download-able project that makes the scripted/antileak setup fairly simple in Qubes R4.0: Please consider updating the docs repo with this :-) I poked

Re: [qubes-users] rc04

2018-01-09 Thread Chris Laprise
and ARM. So he can not dance :) From my recollection of AMD statements: SP1: Very hard to exploit on any CPU SP2: Much harder to exploit on AMD than Intel SP3/Meltdown: AMD not affected -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5

Re: [qubes-users] Help verifying install files: how to verify the Release 3 Signing Key?

2018-01-01 Thread Chris Laprise
the same.) This lists the Qubes master key under the uid for the Qubes release key, showing the release key has been signed by the master. The exclamation mark after "sig" means the signature has been verified as good. -- Chris Laprise, tas...@posteo.net https://github.com/ta

Re: [qubes-users] Appvm - memory

2017-12-24 Thread Chris Laprise
when i add more apps . Any ideas ? R This sounds like Issue #3265. Workaround from dom0 is: sudo systemctl restart qubes-qmemman.service Repeat every so often as needed... -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A

Re: [qubes-users] Anyway to boot into only dom0 (4.0rc3)/sys-firewall stuck at boot

2017-12-24 Thread Chris Laprise
primary Qubes laptop is not usable state thanks to this issue. Any tips to solve this will be a big help. Kushal What worked for me is simply disable "Start on boot" for sys-net and sys-firewall. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/tt

Re: [qubes-users] Verifying Install Files: Confused About How to Verify R3 ISO file

2017-12-20 Thread Chris Laprise
t;. For more options, visit https://groups.google.com/d/optout. The Master key just verifies the release keys (one for each Qubes version). You need to import the v3 release key also. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 35

Re: [qubes-users] vms fail to return memory after pc idle for a long time.

2017-12-20 Thread Chris Laprise
is to do 'sudo systemctl qubes-qmemman.service' in dom0. It will stop working again, so you may need to repeat it or put it in a timed loop. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You

Re: [qubes-users] Bitmask log with errors - it's normal?

2017-12-18 Thread Chris Laprise
None:None - ('Connection aborted.', gaierror(-2, 'Name or service not known')) [2017-12-18 08:14:22] WARNING - L#None : None:None - Could not connect to OpenVPN yet: MissingSocketError() -- Its probably better to ask on the leap-discuss mailing list. BTW, I got the attention of a bitmask deve

Re: [qubes-users] Bitmask VPN DNS leaks

2017-12-18 Thread Chris Laprise
un bitmask in the appVM itself, instead of in a proxyVM. That might stop the leaks for that particular VM. Also see my other message in thread about stopping leaks in the proxyVM: https://groups.google.com/d/msgid/qubes-users/c0e97ad5-e448-6eef-8182-08e94316a6c1%40posteo.net -- Chris La

Re: [qubes-users] Bitmask VPN DNS leaks

2017-12-18 Thread Chris Laprise
/config/qubes-firewall-user-script and make it executable. On Qubes R4.0-rc you may have to do this for it to work: ln -s /rw/config/qubes-firewall-user-script /rw/config/qubes-ip-change-hook -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5

Re: [qubes-users] Q4rc3 debian-9 template fails to update.

2017-12-18 Thread Chris Laprise
On 12/16/2017 07:49 AM, Yuraeitha wrote: On Saturday, December 16, 2017 at 10:51:30 AM UTC, Chris Laprise wrote: On 12/16/2017 04:21 AM, haaber wrote: I freshly installed debian-9 ; when installing packages, apt-get hangs for days(!) with 81% [waiting for headers] ... followed by Err:XX

Re: [qubes-users] DMA attacks are possible not only via USB?!

2017-12-17 Thread Chris Laprise
ant better-designed hardware. Finally, there is the notion that if someone is resourceful enough to trick your TPM, then "you probably have bigger problems than PC security anyway". Its sort of an infosec cop-out, but there's some truth to it. -- Chris Laprise, tas...@posteo.ne

Re: [qubes-users] Re: VPN Disconnects when Qubes goes to sleep (and does not reconnect when coming out of sleep)?

2017-12-17 Thread Chris Laprise
t debian-9. This has been an off-and-on issue with notify-send over the years. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Goo

Re: [qubes-users] Trying to get my head around a configuration for a VPN-Proxy VM and its firewall?

2017-12-16 Thread Chris Laprise
rt and the sys-vpn config isolates the tunnel traffic as VPN doc and Qubes-vpn-support do. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to

Re: [qubes-users] Q4rc3 debian-9 template fails to update.

2017-12-16 Thread Chris Laprise
is running sys-net. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from

Re: [qubes-users] Trying to get my head around a configuration for a VPN-Proxy VM and its firewall?

2017-12-15 Thread Chris Laprise
d. [1] https://github.com/tasket/Qubes-vpn-support -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users&qu

Re: AW: Re: [qubes-users] Qubes 4rc3 :: 50% reduced battery runtime compared to Qubes 3.2 on Lenovo X230

2017-12-13 Thread Chris Laprise
On 12/13/2017 01:30 PM, [799] wrote: Hello Chris, Original-Nachricht An 13. Dez. 2017, 19:15, Chris Laprise schrieb > Increased CPU usage is a known issue. > You can see it in the 'xentop' listing. > This may be one of the core tradeoffs > when moving to

Re: [qubes-users] Re: Q4R3 - debian-stable

2017-12-13 Thread Chris Laprise
starting programs. A fix is in the works, and a workaround is deleting an @service link like so: sudo rm /etc/systemd/system/multi-user.target.wants/wpa_supplicant@.service -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB

Re: [qubes-users] vpn's log option

2017-12-13 Thread Chris Laprise
On 12/13/2017 11:21 AM, charly LEMMINKÄINEN wrote: Le mercredi 13 décembre 2017 15:55:39 UTC+1, Chris Laprise a écrit : On 12/13/2017 08:38 AM, charly LEMMINKÄINEN wrote: is there any possibility to put a log option in the vpn scripts described in the wiki? To know the reason why a vpn has

Re: [qubes-users] Qubes 4rc3 :: 50% reduced battery runtime compared to Qubes 3.2 on Lenovo X230

2017-12-13 Thread Chris Laprise
Increased CPU usage is a known issue. You can see it in the 'xentop' listing. This may be one of the core tradeoffs when moving to R4.0. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- Yo

Re: [qubes-users] vpn's log option

2017-12-13 Thread Chris Laprise
pn-support This will ensure openvpn gets re-started anytime it exits. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qub

Re: [qubes-users] [HOWTO] use 2nd drive partition as 'home' drive.

2017-12-12 Thread Chris Laprise
/mnt/newdisk To have it come online automatically, add entries in /etc/crypttab and /etc/fstab respectively. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because

Re: [qubes-users] [HOWTO] use 2nd drive partition as 'home' drive.

2017-12-11 Thread Chris Laprise
inside a new volume group) then use qvm-pool to add it to Qubes. Then you can specify it when using qvm-create etc. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because

Re: [qubes-users] 3.2 gpg verification works no more

2017-12-09 Thread Chris Laprise
e, instead of pasting the signature? If you think the .iso downloaded incorrectly, first thing to check is the exact number of bytes with 'ls -l' in case the download stopped prematurely. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E

Re: [qubes-users] What happened to domain manager in 4?

2017-12-08 Thread Chris Laprise
On 12/08/2017 04:29 AM, 'Tom Zander' via qubes-users wrote: On Friday, 8 December 2017 06:09:32 CET Chris Laprise wrote: There is the question of whether someone should try porting the original Qt-based Qubes Manager to R4.0. I mention this since the biggest complaint so far is not having

Re: [qubes-users] What happened to domain manager in 4?

2017-12-07 Thread Chris Laprise
people think... -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from

Re: [qubes-users] What happened to domain manager in 4?

2017-12-07 Thread Chris Laprise
. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop

Re: [qubes-users] dom0 update in Qubes 4.0

2017-12-07 Thread Chris Laprise
wrong. question 2: Is there a standard way one is supposed to sign up for VM update availability notices in the new world? I'm not aware of an update notifier (yet) in R4.0. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D1

Re: [qubes-users] What happened to domain manager in 4?

2017-12-06 Thread Chris Laprise
hat will not get you the attention of the DE projects or potential userbase. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google G

Re: [qubes-users] R3.2: Debian 9 template fails to update 50% of the time

2017-12-06 Thread Chris Laprise
On 12/06/2017 10:21 AM, dim...@united.gr wrote: Sorry, I didn't notice the stale part. I am using an upgraded 8 to 9 Debian and in my case it is actually updating. The best way I found is to disable apt-daily.service, not apt-daily.timer. -- Chris Laprise, tas...@posteo.net https

Re: [qubes-users] What happened to domain manager in 4?

2017-12-06 Thread Chris Laprise
the same window is bad design and/or intimidating to users. Now we have two tiny icons on opposite sides of the screen and the user is starved of info. I would welcome the return of Qubes Manager. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2

Re: [qubes-users] Re: VPN Disconnects when Qubes goes to sleep (and does not reconnect when coming out of sleep)?

2017-12-03 Thread Chris Laprise
On 12/03/2017 10:30 PM, Michael Siepmann wrote: On 12/02/2017 11:14 PM, Chris Laprise wrote: Looking at openvpn entries in 'journalctl' can give you a better idea. I've seen instances where openvpn versions starting with 2.4 have this bad reaction to disconnection (which is what sleep/wake

Re: [qubes-users] Re: VPN Disconnects when Qubes goes to sleep (and does not reconnect when coming out of sleep)?

2017-12-02 Thread Chris Laprise
On 12/03/2017 12:09 AM, Michael Siepmann wrote: On 11/30/2017 10:14 PM, Chris Laprise wrote: On 11/30/2017 11:44 PM, Michael Siepmann wrote: On Jun 12, 2017, Andrew Morgan wrote: Did you follow the "Set up a ProxyVM as a VPN gateway using iptables and CLI scripts" section of the

Re: [qubes-users] Re: VPN Setup on qubes 4 RC3

2017-12-01 Thread Chris Laprise
the Qubes VPN guide. Then, where it says to save the script as "qubes-firewall-user-script" save it as "qubes-ip-change-hook" instead. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D

Re: [qubes-users] Re: VPN Disconnects when Qubes goes to sleep (and does not reconnect when coming out of sleep)?

2017-11-30 Thread Chris Laprise
ProxyVM as a VPN gateway using iptables and CLI scripts" instructions but for me executing "/rw/config/rc.local" doesn't make it work again. I've also tried commenting out or deleting "persist tun" from my OpenVPN config file, as Chris Laprise as suggested in the thre

Re: [qubes-users] qvm-backup-restore --verify-only broken ?

2017-11-29 Thread Chris Laprise
about this. I've started to fix the code, and can verify backups already. So far all my backups appear to be OK, so I think qvm-backup is creating the backup files correctly. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A

Re: [qubes-users] Qubes OS 4.0-rc3 has been released!

2017-11-27 Thread Chris Laprise
-community: key 1 import failed. error: can't create transaction lock on /var/lib/rpm/.rpm.lock (Resource temporarily unavailable) error: /etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-4-unstable: key 1 import failed. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP

Re: [qubes-users] Qubes OS 4.0-rc3 has been released!

2017-11-27 Thread Chris Laprise
On 11/27/2017 03:41 PM, Chris Laprise wrote: On 11/27/2017 10:29 AM, Andrew David Wong wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear Qubes Community, We're pleased to announce the third release candidate for Qubes 4.0! Our goal for this release candidate is to improve

Re: [qubes-users] Qubes OS 4.0-rc3 has been released!

2017-11-27 Thread Chris Laprise
starve some of your VMs of RAM, making them run very slowly. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "

Re: [qubes-users] Re: R4-rc2 consuming all my disk space (250MB)

2017-11-26 Thread Chris Laprise
On 11/26/2017 11:55 PM, Yuraeitha wrote: On Sunday, November 26, 2017 at 10:05:46 PM UTC, Chris Laprise wrote: I currently have 4GB remaining on my drive according to the 'lvs' based script from issue #3240. However, I know I don't have nearly that much in templates and data; there was a lot

[qubes-users] R4-rc2 consuming all my disk space (250MB)

2017-11-26 Thread Chris Laprise
. So I'm wondering if this is a real problem with R4 and what can be done about it. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed

Re: [qubes-users] Re: will uninstalling a base template delete a clone of the template?

2017-11-26 Thread Chris Laprise
, would this also remove the cloned kali template vm? The answer is No. Cloned templates are not dependent on each other. If you have appVMs dependent on the debian-8 template, you'll have to re-assign them to another template before you do the removal. -- Chris Laprise, tas...@posteo.net

Re: [qubes-users] Local network access when using ProxyVM as VPN gateway using iptables and CLI scripts?

2017-11-24 Thread Chris Laprise
On 11/21/2017 04:07 PM, Michael Siepmann wrote: On 11/16/2017 09:50 PM, Michael Siepmann wrote: On 11/16/2017 08:11 AM, Chris Laprise wrote: On 11/15/2017 10:17 PM, Michael Siepmann wrote: I've followed the instructions to "Set up a ProxyVM as a VPN gateway using iptables and CLI sc

Re: [qubes-users] mount root.img files

2017-11-22 Thread Chris Laprise
On 11/22/2017 10:01 AM, Chris Laprise wrote: Glad you recovered OK. The best way to execute the vm-sudo instructions is to switch to root user first with 'sudo su'. Notice that all the shell prompts in the document are '[root@vmname]#'. BTW I have a project Qubes-VM-hardening that uses vm

Re: [qubes-users] mount root.img files

2017-11-22 Thread Chris Laprise
documentation either. So I ask in despair for some help. Bernhard Glad you recovered OK. The best way to execute the vm-sudo instructions is to switch to root user first with 'sudo su'. Notice that all the shell prompts in the document are '[root@vmname]#'. -- Chris Laprise, tas...@po

Re: [qubes-users] A lot of trouble with qubes 4.0 rc2

2017-11-20 Thread Chris Laprise
, and I believe its the latter you should be concerned about. Not sure just how you are using rsync... a lot depends on what your source and target are. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1

Re: [qubes-users] Possible privacy concerns with Qubes 4 and the transition away from paravirtualization?

2017-11-20 Thread Chris Laprise
makes Qubes great for privacy is that privacy is best implemented on top of strong security. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you

Re: [qubes-users] Copying file from Debian8(or Whonix) to a Fedora VM?

2017-11-20 Thread Chris Laprise
On 11/19/2017 07:55 PM, vel...@tutamail.com wrote: On Sunday, November 19, 2017 at 4:03:44 PM UTC-6, Chris Laprise wrote: On 11/19/2017 01:48 PM, v wrote: I have been using Qubes 3.2 for about 5 months and love it...thank you all who have contributed! I am a noobie so be gentle...I am also

Re: [qubes-users] Copying file from Debian8(or Whonix) to a Fedora VM?

2017-11-19 Thread Chris Laprise
tall the python-gtk2 package separately). The easiest way to get this working like it does in Fedora is to run 'sudo tasksel' and select the Gnome desktop for installation. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4

Re: [qubes-users] Qubes4 rc2 - sys-firewall fails at 1st boot

2017-11-17 Thread Chris Laprise
- No 3153 on 8 October 2017 against Qubes4 rc1 Any solution yet? A recent update seems to have helped on my system. If you can get sys-net working, try updating dom0 with: sudo qubes-dom0-update --enablerepo=qubes*testing -- Chris Laprise, tas...@posteo.net https://github.com/tasket https

Re: [qubes-users] Hope to install the OS on an SSD and /home on a spinning disk

2017-11-17 Thread Chris Laprise
/ The first uses symlinks for each appVM folder. I'm not sure but I think you can symlink the whole appvms folder if you want all appVM storage to go to the other drive automatically. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E

Re: [qubes-users] Local network access when using ProxyVM as VPN gateway using iptables and CLI scripts?

2017-11-16 Thread Chris Laprise
ain kinds of threats. If your use case does not call for an appVM accessing both VPN and LAN at the same time then there should be no reason to make the compromise. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D1

Re: [qubes-users] When transferring file between Qubes, MD5 changes.

2017-11-16 Thread Chris Laprise
VMs? Is the same mdsum program being using on both ends? -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qu

Re: [qubes-users] Re: Installing Debian template 4.0rc2

2017-11-11 Thread Chris Laprise
On 11/11/2017 08:51 AM, Yuraeitha wrote: @ Chris Laprise On Saturday, November 11, 2017 at 1:45:07 PM UTC, Chris Laprise wrote: On 11/11/2017 07:54 AM, Yuraeitha wrote: On Saturday, November 11, 2017 at 12:23:28 PM UTC, JPL wrote: For some reason the debian template didn't install when I

Re: [qubes-users] Qubes & Quantum decryption Immunity

2017-11-11 Thread Chris Laprise
On 11/11/2017 08:31 AM, Yuraeitha wrote: On Saturday, November 11, 2017 at 12:44:54 PM UTC, Chris Laprise wrote: On 11/10/2017 05:51 PM, taii...@gmx.com wrote: In this case you should ask the luks/dmcrypt mailinglist as that is what qubes uses for disk crypto. Would be simpler off the bat

Re: [qubes-users] Experimenting with Wireguard VPN @Mullvad.net

2017-11-11 Thread Chris Laprise
in-template kernel, per the link I sent. If you're using Qubes 4.0 the kernel switch process is simpler: qvm-prefs vmname kernel '' -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received

Re: [qubes-users] /var/log excessive filesystem usage

2017-11-11 Thread Chris Laprise
. Lack of repo signatures allows an attacker to selectively prevent individual updates from being installed. On a typical non-Fedora distro, the attacker can only hold back the entire repository (and they can't change the timestamp to make it appear current). -- Chris Laprise, tas

Re: [qubes-users] Experimenting with Wireguard VPN @Mullvad.net

2017-11-11 Thread Chris Laprise
ted but easy to adapt for Fedora. Chris Laprise,tas...@posteo.net <mailto:tas...@posteo.net> https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 You received this message because you are subscribed to the Google G

Re: [qubes-users] Re: Installing Debian template 4.0rc2

2017-11-11 Thread Chris Laprise
90sec run a terminal and enter 'sudo rm /etc/systemd/system/multi-user.target.wants/wpa_supplicant@.service'. (Make sure you include the at-sign.) -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 18

Re: [qubes-users] Qubes & Quantum decryption Immunity

2017-11-11 Thread Chris Laprise
and most other disk encryption uses symmetric crypto. I believe qvm-backup crypto is also symmetric (although IIRC it may have specific security issues that need to be addressed). Finally, there is anti-evil-maid; I think it uses symmetric but not certain. -- Chris Laprise, tas...@posteo.net https

Re: [qubes-users] /var/log excessive filesystem usage

2017-11-11 Thread Chris Laprise
dora (can't compete with RHEL on update security!), No certification of PCs... They'll wait 7-10 years until their boys get around to doing it over. Redhat are the Knights Who Say NIH (Not Invented Here). Now Canonical is taking their business and they are flailing about. -- Chris La

Re: [qubes-users] installing a clean template

2017-11-09 Thread Chris Laprise
ing from the ITL repository. You can also download the template from yum.qubes-os.org, copy it to dom0 and install it there. If you're on Qubes 3.2, you can reinstall a template in one step: https://www.qubes-os.org/doc/reinstall-template/ This function doesn't work yet in R4.0. -- Chris Laprise, t

Re: [qubes-users] Recommendations for VPN on the debian8 template ?

2017-11-09 Thread Chris Laprise
On 11/09/2017 06:57 PM, brutellealexan...@gmail.com wrote: On Friday, 10 November 2017 00:39:32 UTC+1, Chris Laprise wrote: On 11/09/2017 05:51 PM,wrote: I've successfully installed a VPN Tunnel as a proxy-VM (on a Fedora 23 template) in my set up. However I don't seem to able to reproduce

Re: [qubes-users] Recommendations for VPN on the debian8 template ?

2017-11-09 Thread Chris Laprise
? When trying I get a TLS Error. Hope someone can help ! Setup is the same on the different templates (only variation is in Qubes R4.0 which isn't in the doc yet). How does the connection go when you start it manually from the terminal? -- Chris Laprise, tas...@posteo.net https://github.com

Re: [qubes-users] work: volume qubes dom0/vm-work-private missing

2017-11-09 Thread Chris Laprise
with 'sudo lvs'? -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this grou

Re: [qubes-users] reboot and shutdown qubes 4 rc2

2017-11-08 Thread Chris Laprise
? Roy I think its a common problem. What I use is this: qvm-shutdown --all --wait --timeout=20 sudo poweroff -f -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because

[qubes-users] How to make /lib/modules/* writable on R4.0 standalone?

2017-11-05 Thread Chris Laprise
of dependencies like modprobe does). Is there a way to do this permanently? -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups

[qubes-users] How to change updates proxy VM on Qubes R4

2017-11-03 Thread Chris Laprise
I tried setting the global updatevm to the VM I created to handle updates, and I enabled 'qubes-updates-proxy' on it. However all the update traffic appears to go through sys-net anyway. How to configure this properly? -- Chris Laprise, tas...@posteo.net https://github.com/tasket https

Re: [qubes-users] Re: I can't remove VM

2017-11-02 Thread Chris Laprise
On 11/02/17 12:41, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Nov 02, 2017 at 12:31:11PM -0400, Chris Laprise wrote: On 11/02/17 12:15, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Nov 02, 2017 at 11

Re: [qubes-users] Re: I can't remove VM

2017-11-02 Thread Chris Laprise
On 11/02/17 12:15, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Nov 02, 2017 at 11:34:01AM -0400, Chris Laprise wrote: On 11/02/17 11:28, yuraei...@gmail.com wrote: On Thursday, November 2, 2017 at 3:11:03 PM UTC, bm-2ctrx1tl5lg8cfa

Re: [qubes-users] Re: I can't remove VM

2017-11-02 Thread Chris Laprise
On 11/02/17 11:56, yuraei...@gmail.com wrote: On Thursday, November 2, 2017 at 3:34:21 PM UTC, Chris Laprise wrote: On 11/02/17 11:28, yuraei...@gmail.com wrote: On Thursday, November 2, 2017 at 3:11:03 PM UTC, bm-2ctrx1tl5lg8cfa...@bitmessage.ch wrote: Hi, I restore my backup from Qubes OS

Re: [qubes-users] Re: I can't remove VM

2017-11-02 Thread Chris Laprise
and 'disp-no-netvm1' after restoring R3.2 backups. I've made sure no VMs use those... its easy to do with 'qvm-ls' command. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this

Re: [qubes-users] Re: How to qvm-attach VM volume to another VM?

2017-11-02 Thread Chris Laprise
On 11/02/17 00:13, aphidfar...@gmail.com wrote: On Wednesday, November 1, 2017 at 7:40:01 PM UTC-7, Chris Laprise wrote: I'm trying to repair a debian-9 root volume by first attaching it to an appVM, but the new syntax doesn't seem to allow it. I tried the following so far: qvm-block attach

[qubes-users] Debian 9 running on R4rc2 (was: How to qvm-attach...)

2017-11-02 Thread Chris Laprise
On 11/02/17 03:33, Marek Marczykowski-Górecki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Nov 01, 2017 at 10:39:36PM -0400, Chris Laprise wrote: I'm trying to repair a debian-9 root volume by first attaching it to an appVM, but the new syntax doesn't seem to allow it. I

[qubes-users] How to qvm-attach VM volume to another VM?

2017-11-01 Thread Chris Laprise
dom0:/dev/mapper/qubes_dom0-vm--debian--9--root -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users&q

Re: [qubes-users] Re: Qubes 4.0-rc2 :: VMs fail to start

2017-10-31 Thread Chris Laprise
on from me.) -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this grou

Re: [qubes-users] Re: Qubes 4.0-rc2 :: VMs fail to start

2017-10-30 Thread Chris Laprise
days, this has usually worked: 1. Close any appVMs that appear to be using lots of RAM and are not giving it back. 2. Start an isolated (network setting is "none") appVM... it should start up. Leave it running... 3. Start the VMs you intend to use; they should also start now.

Re: [qubes-users] Qubes 4.0-rc2 :: VMs fail to start

2017-10-27 Thread Chris Laprise
, there is a RAM allocation problem that (so far) hasn't shown up after I re-start sys-net. Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed

Re: [qubes-users] Qubes 4.0 Display free disk space

2017-10-26 Thread Chris Laprise
On 10/26/17 15:32, Chris Laprise wrote: I'm looking for an easy way to show free drive space in Qubes R4, since Xfce's widget doesn't handle lvm. There is lots of advice for checking lvm space that doesn't seem to apply to thin-provisioned volumes, which is what R4 uses. (As a side-note, lvm

Re: [qubes-users] Qubes 4.0RC2 KDE - NO SDDM

2017-10-26 Thread Chris Laprise
On 10/26/17 13:00, Chris Laprise wrote: On 10/26/17 12:35, Outback Dingo wrote: seems kde plasma isnt even installable right now, i tried based on the doc yet its missing dependencies in 4.0RC2 https://www.qubes-os.org/doc/kde/ Would be best to open an issue for this. See here: https

Re: [qubes-users] Qubes 4.0RC2 KDE - NO SDDM

2017-10-26 Thread Chris Laprise
On 10/26/17 12:35, Outback Dingo wrote: seems kde plasma isnt even installable right now, i tried based on the doc yet its missing dependencies in 4.0RC2 https://www.qubes-os.org/doc/kde/ Would be best to open an issue for this. -- Chris Laprise, tas...@posteo.net https://github.com

Re: [qubes-users] Qubes 4.0RC2 KDE - NO SDDM

2017-10-26 Thread Chris Laprise
before I try :) Have you tried manually installing sddm? -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-

[qubes-users] R4rc2 debian-9 template not working at all

2017-10-25 Thread Chris Laprise
rting a second or third time. -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To uns

Re: [qubes-users] XEN)QUBES END POINT SECYRITY

2017-10-19 Thread Chris Laprise
first you can review the actual domain name of the link. And email clients like Thunderbird try to detect phishing scams. -- Chris Laprise, tas...@posteo.net https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed

Re: [qubes-users] Read-only file system in applVM

2017-10-12 Thread Chris Laprise
On 10/12/2017 06:42 AM, Foppe de Haan wrote: On Wednesday, October 11, 2017 at 10:08:18 PM UTC+2, Chris Laprise wrote: On 10/11/2017 04:05 PM, Chris Laprise wrote: I can explain the steps. You may wish to backup your appVM before continuing. 1. Start a dispVM (I'll call it disp1). Your appVM

Re: [qubes-users] Read-only file system in applVM

2017-10-11 Thread Chris Laprise
On 10/11/2017 04:05 PM, Chris Laprise wrote: On 10/11/2017 11:00 AM, Franz wrote: On Tue, Oct 10, 2017 at 2:18 PM, Chris Laprise <tas...@posteo.net <mailto:tas...@posteo.net>> wrote:     On 10/10/2017 02:31 AM, Franz wrote:     On Mon, Oct 9, 2017 at 9:36 PM, C

Re: [qubes-users] Read-only file system in applVM

2017-10-11 Thread Chris Laprise
On 10/11/2017 11:00 AM, Franz wrote: On Tue, Oct 10, 2017 at 2:18 PM, Chris Laprise <tas...@posteo.net <mailto:tas...@posteo.net>> wrote: On 10/10/2017 02:31 AM, Franz wrote: On Mon, Oct 9, 2017 at 9:36 PM, Chris Laprise <tas...@posteo.net <mailto

Re: [qubes-users] Read-only file system in applVM

2017-10-10 Thread Chris Laprise
On 10/10/2017 02:31 AM, Franz wrote: On Mon, Oct 9, 2017 at 9:36 PM, Chris Laprise <tas...@posteo.net <mailto:tas...@posteo.net>> wrote: On 10/09/2017 08:48 AM, Franz wrote: Hello, Trying to save a long document I got an error. So tried to open a

Re: [qubes-users] (Urgent) How do I uninstall qubes or install anything else over it

2017-10-09 Thread Chris Laprise
.11).aspx -- Chris Laprise, tas...@posteo.net https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving e

Re: [qubes-users] Read-only file system in applVM

2017-10-09 Thread Chris Laprise
? and if  is there a fix other than rebooting? Best Fran It probably means there is a logical inconsistency (corruption) in that filesystem, or it filled-up. You can avoid the latter by expanding the Private storage max size in the VM's settings. -- Chris Laprise, tas...@posteo.net https://twitter.com

Re: [qubes-users] Mac-Spoofing Doesn’t Work

2017-10-08 Thread Chris Laprise
On 10/08/2017 05:34 AM, Sean Hunter wrote: On Fri, Oct 06, 2017 at 11:55:04PM -0400, Chris Laprise wrote: On 10/06/2017 11:26 PM, Person wrote: Cloning VMs is quite troublesome right now, so it is hard to update Fedora and Debian in order to use NetworkManager. You can easily install

Re: [qubes-users] kswapd0 using 100% CPU with not even a MB swap in use

2017-10-08 Thread Chris Laprise
in this problem when I upgraded to the latest 4.9 kernels; currently using 4.9.45-21 and the problem isn't reappearing. -- Chris Laprise, tas...@posteo.net https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscrib

Re: [qubes-users] Mac-Spoofing Doesn’t Work

2017-10-06 Thread Chris Laprise
-template-fedora-25 -- Chris Laprise, tas...@posteo.net https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving e

Re: [qubes-users] Mac-Spoofing Doesn’t Work

2017-10-02 Thread Chris Laprise
. -- Chris Laprise, tas...@posteo.net https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, sen

Re: [qubes-users] HCL — ASUS Q325UA

2017-10-02 Thread Chris Laprise
R3.2 Kernel: Supports the one in unstable (4.8.12-12), and in fact requires it for proper screen resolution support Remark: What I wrote above, including all relevant links Hi Tao, Could you post the report's yml file? Thanks... -- Chris Laprise, tas...@posteo.net https://twitter.com/ttaskett PG

<    2   3   4   5   6   7   8   9   10   11   >