Re: [qubes-users] qvm-trim-template fails (Qubes 3.2)

2016-11-24 Thread Marek Marczykowski-Górecki
e during upgrade to Qubes 3.2? https://www.qubes-os.org/doc/upgrade-to-r3.2/ - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- V

Re: [qubes-users] qvm-trim-template fails (Qubes 3.2)

2016-11-24 Thread Marek Marczykowski-Górecki
mmand pkg.uptodate: > [] does not work for god only knows what reason. Any idea? You can find details in /var/log/qubes/mgmt-fedora-23.log. Or add "--show-output" option to qubesctl to have it on stdout. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Becau

Re: [qubes-users] Re: SUCCESS: GPU passthrough on Qubes 3.1 (Xen 4.6.1) / Radeon 6950 / Win 7 & Win 8.1 (TUTORIAL + HCL)

2016-11-24 Thread Marek Marczykowski-Górecki
know if GPU passthrough is any special here, but I wouldn't be surprised if it is... - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing

Re: [qubes-users] Quickest and easiest way to manage updates via command line?

2016-11-23 Thread Marek Marczykowski-Górecki
, see here: https://groups.google.com/d/msgid/qubes-users/20161122121019.GX1145%40mail-itl - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE-

Re: [qubes-users] After cloning Fedora23 template, the same applications does not install on the clone.

2016-11-23 Thread Marek Marczykowski-Górecki
dnf/yum), see here for details: https://github.com/QubesOS/qubes-issues/issues/982 https://github.com/QubesOS/qubes-issues/issues/1399 Package installation should work from console, using `sudo dnf install`. [1] https://www.qubes-os.org/doc/software-update-vm/#updates-proxy - -- Best Regards, Ma

Re: [qubes-users] message error;invalid argument could not find capabilities for arch=x86_64

2016-11-23 Thread Marek Marczykowski-Górecki
BIOS. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYNfAnAAoJENuP0xzK

Re: [qubes-users] Qubes Security Bulletin #27

2016-11-22 Thread Marek Marczykowski-Górecki
-time disable all the PV handling code, at least not yet. But work towards PVHv2 might make it possible (in Xen 4.9 perhaps...). But still - instruction emulation in some cases still would be needed... - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the

[qubes-users] Qubes Security Bulletin #27

2016-11-22 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dear Qubes users, We have just released a new Qubes Security Bulletin (QSB #27): https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-027-2016.txt - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes

Re: [qubes-users] qvm-trim-template fails (Qubes 3.2)

2016-11-22 Thread Marek Marczykowski-Górecki
VMs when no states are defined in top file for it (the configuration mentioned in link above). But it should be easy to fix: https://github.com/QubesOS/qubes-issues/issues/2451 Currently there is no similarly easy option "global trim", but on the other hand, it will not be needed any

Re: [qubes-users] qvm-trim-template fails (Qubes 3.2)

2016-11-22 Thread Marek Marczykowski-Górecki
e? My Template VM are becoming a bit too big now... When you started to have this problem? Was previous trim operation interrupted? Anyway, try this: virsh -c xen:/// undefine fedora-23-fstrim - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order i

Re: "What does "supported" mean"? was: Re: [qubes-users] Fedora 24 Template for Qubes 3.1?

2016-11-21 Thread Marek Marczykowski-Górecki
thing was replacing tabs with spaces in one file: https://github.com/QubesOS/qubes-gui-agent-linux/commit/16c98bc7ebebc0c4025ab02ec2e5bbf4dc9a77d2 So, expect Fedora 24 template being supported in R3.1 soon too :) - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it m

Re: [qubes-users] Setup Fails to Install netvm, firewallvm, work, personal, etc - Fedora 23 Error

2016-11-21 Thread Marek Marczykowski-Górecki
t; reinstall rather than trying to set it all up manually) Are you sure about installation media integrity? Having some of templates, but not others suggests broken installation media (namely: broken/missing Packages/q/qubes-template-fedora-23-rpm file). - -- Best Regards, Marek Marczykows

Re: [qubes-users] How to update fedora-23-dvm to fedora-24?

2016-11-21 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Nov 22, 2016 at 01:27:28AM +, Gaijin wrote: > On 2016-11-21 13:28, Marek Marczykowski-Górecki wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > On Mon, Nov 21, 2016 at 05:18:39AM -0800, Op

Re: [qubes-users] Any chance the freezing could be resolved?

2016-11-21 Thread Marek Marczykowski-Górecki
ng? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYM5KJAAoJENuP0xzK19csV4UH/2bldPEzU8rgqZp4WdpcKz2b 7Xnrcl

Re: [qubes-users] Access all vm data from a backup-vm?

2016-11-21 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Nov 20, 2016 at 09:13:36PM -0800, pixel fairy wrote: > On Sunday, November 20, 2016 at 10:15:44 AM UTC-5, Marek Marczykowski-Górecki > wrote: > > > > what do you think of "qvm-copy-to-vm backupvm ." followed b

Re: [qubes-users] How to update fedora-23-dvm to fedora-24?

2016-11-21 Thread Marek Marczykowski-Górecki
to use fedora-24, it says making save file but then no > browser or terminal runs. > > What is the best way to update fedora-23-dvm? Simply don't - instead use fedora-24-dvm. To create (and use it), call: qubes-create-default-dvm fedora-24 - -- Best Regards, Marek Marczykow

Re: [qubes-users] Any chance the freezing could be resolved?

2016-11-21 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Nov 20, 2016 at 07:58:45PM -0800, Drew White wrote: > [{user}@dom0 {folder}]$ xl dmesg | head -1 > Xen 4.6.1-20.fc23 Have you tried 4.6.3-21 which is already in stable repository? - -- Best Regards, Marek Marczykowski-Górecki Inv

Re: [qubes-users] AppVMs with pci devices attached don't start

2016-11-20 Thread Marek Marczykowski-Górecki
memory for such VMs (needs coherent memory area, which may not be available after running many VMs). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNAT

Re: [qubes-users] Access all vm data from a backup-vm?

2016-11-20 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Nov 20, 2016 at 07:02:28AM -0800, pixel fairy wrote: > On Sunday, November 20, 2016 at 8:07:58 AM UTC-5, Marek Marczykowski-Górecki > wrote: > > > This is risky. If one of your VMs is compromised, it may try to exploit

Re: [qubes-users] Access all vm data from a backup-vm?

2016-11-20 Thread Marek Marczykowski-Górecki
ckups or such. > read-only didn't work though the last time I tested it (you can write anyway > - probably some bug). Yes, this one: https://github.com/QubesOS/qubes-issues/issues/2255 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up th

Re: Enigmial and Splig GPG2 (previously Re: [qubes-users] Upgrading from Split GPG1 to Split GPG2?)

2016-11-20 Thread Marek Marczykowski-Górecki
ues/issues/2170 > > > > Until this is resolved, I recommend using the Fedora template instead. > > > > Update: 3n7r0p1 has pointed out that this is not an issue, since Enigmail 1.9 > is not contained in the Debian 8 repos to begin with. Isn't it possible to insta

Re: [qubes-users] Cryptsetup Vulnerability affects QubesOS?

2016-11-19 Thread Marek Marczykowski-Górecki
pt disk password and/or infect further elements. It doesn't matter if that's whole /boot, or just stage1 of GRUB in MBR. The situation is somehow better when your firmware can handle disk encryption (like Coreboot with Linux or Grub payload can) - in this case the whole disk can be encryp

Re: [qubes-users] Kernel 4.9 in Qubes

2016-11-19 Thread Marek Marczykowski-Górecki
to be the next LTS version. Maybe not immediately, but generally yes. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version:

Re: [qubes-users] R3.2, xfce, resume and changing resolution issues

2016-11-18 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Nov 18, 2016 at 03:52:25PM +0100, yaqu wrote: > On Sun, 13 Nov 2016 22:23:08 +0100, Marek Marczykowski-Górecki > wrote: > > > > Thanks, executing qubes-monitor-layout-notify works as a workaround > > > - it is

Re: [qubes-users] disable split-gpg notifications?

2016-11-18 Thread Marek Marczykowski-Górecki
the user, so I see little security benefit. That's true indeed. I wonder if blocking split-gpg while screenlocker is engaged would make sense? Currently similar purpose have confirmation with a 5min timeout. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messe

Re: [qubes-users] Does the Standard Firewall-VM Actaully do anything?

2016-11-17 Thread Marek Marczykowski-Górecki
-VM directly to > sys-Net? I'd connect directly to sys-net. And depending on exact case, connect sys-firewall to that VPN-Proxy-VM. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-postin

Re: [qubes-users] Re: Incremental / continuous backups?

2016-11-16 Thread Marek Marczykowski-Górecki
. Simply click "Yes to all" during one backup run - it will add appropriate rule to policy to allow the same operation (same source and target VM) in the future without asking. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it me

Re: [qubes-users] Installing in basic graphics mode

2016-11-16 Thread Marek Marczykowski-Górecki
mailing list archive - there are examples ready to use. - - - - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? - - - -BEGIN PGP SIGNATURE- Version: Gnu

Re: [qubes-users] Re: Fedora 24 template available for Qubes 3.2

2016-11-16 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Nov 16, 2016 at 11:31:38AM +0100, yaqu wrote: > On Wed, 16 Nov 2016 01:14:24 +0100, Marek Marczykowski-Górecki > wrote: > > > On Wed, Nov 16, 2016 at 12:28:17AM +0100, yaqu wrote: > > > > You have tried to remove

Re: [qubes-users] Using distribution kernel in Template VM

2016-11-15 Thread Marek Marczykowski-Górecki
mfn`. If it's not there, build it using `dkms autoinstall` command (see its manual page for exact parameters). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-po

Re: [qubes-users] Re: Fedora 24 template available for Qubes 3.2

2016-11-15 Thread Marek Marczykowski-Górecki
ts just in a message. Not sure if this is a bug of a feature of DNF... - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v

Re: [qubes-users] Re: HCL - Lenovo Thinkpad X1 Carbon 4th gen (20FB)

2016-11-15 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Nov 15, 2016 at 02:47:29AM -0500, Jean-Philippe Ouellet wrote: > On Mon, Nov 14, 2016 at 4:16 PM, Marek Marczykowski-Górecki > wrote: > > You can temporarily set sys-firewall n

Re: [qubes-users] Disposable VMs are not disposed of

2016-11-15 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Nov 15, 2016 at 02:37:14PM +, IX4 Svs wrote: > On Tue, Nov 15, 2016 at 1:14 AM, Marek Marczykowski-Górecki < > marma...@invisiblethingslab.com> wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SH

Re: [qubes-users] Fresh R3.2 install, no /etc/default/grub

2016-11-15 Thread Marek Marczykowski-Górecki
to pass it on in the > future to other users. I guess you have installed the system in UEFI mode. In that case, kernel parameters are in /boot/efi/EFI/qubes/xen.cfg. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally r

Re: [qubes-users] EFI / UEFI guest

2016-11-15 Thread Marek Marczykowski-Górecki
oadmap for Qubes 4.0... - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYKtJ5AAoJENuP0xzK19

Re: [qubes-users] Disguising Qubes VMs

2016-11-14 Thread Marek Marczykowski-Górecki
ur VM - for example some remote observer. Is kernel version string something that can be leaked out? I wouldn't be surprised. In that case, instead of just pretending to run non-Qubes kernel, you can actually use non-Qubes kernel: https://www.qubes-os.org/doc/managing-vm-kernel/#using-kernel-in

Re: [qubes-users] Disposable VMs are not disposed of

2016-11-14 Thread Marek Marczykowski-Górecki
for DispVM) are owned by your user. Then recreate DispVM savefile with qvm-create-default-dvm. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BE

Re: [qubes-users] Fedora 24 template available for Qubes 3.2

2016-11-14 Thread Marek Marczykowski-Górecki
it in some other file there, like /etc/yum.repos.d/qubes-recovery.repo. You'll also need to configure network manually (as you no longer have a script which did that for you) - take a look here (procedure is very similar): https://www.qubes-os.org/doc/upgrade-to-r3.0/#upgrading-template-on-already

Re: [qubes-users] Re: One step foerward, two steps back on Macbook 11,1 - can't boot into Qubes

2016-11-14 Thread Marek Marczykowski-Górecki
s > bar on the bottom centre of the screen progresses all the way across but I > can not enter any characters into the password field. Macs have USB keyboard, which makes them incompatible with USB VM (at least in default configuration). In particular, enabling USB VM prevent USB controlle

Re: [qubes-users] Re: Please help, can't get into Qubes

2016-11-14 Thread Marek Marczykowski-Górecki
ostart' VM property really does) - qubes-vm@sys-firewall.service - and any other using sys-net for its network - or set those to not use sys-net. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people norm

Re: [qubes-users] cannot boot into qubes: drive not detected as boot device (EFI)

2016-11-14 Thread Marek Marczykowski-Górecki
related that i can use to > reinstall the bootloader, so i'm a bit stuck. > > any advice on how to rescue my qubes installation so that i can boot into it > again? Some EFI BIOSes handle external drives differently in looking for what to boot... Try this: 1. Copy EFI/qube

Re: [qubes-users] Re: Restoring VM causes drive to fill but it isn't full..

2016-11-14 Thread Marek Marczykowski-Górecki
extract to that directory. > > Only way around it was to create the new directory and link it to a folder on > the storage drive. Yes, /var/tmp is used to restore the data and there is (currently) no option to use alternative location. So you method with symlinking /var/tmp is current

Re: [qubes-users] Re: HCL - Lenovo Thinkpad X1 Carbon 4th gen (20FB)

2016-11-14 Thread Marek Marczykowski-Górecki
he later... When it hangs, does the suspend before takes usual not-so-long time, or is significantly longer? > [1]: lspci => 00:00.0 Network controller: Intel Corporation Wireless > 8260 (rev 3a) - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messe

Re: [qubes-users] Where to bulk-download mailing list archives?

2016-11-14 Thread Marek Marczykowski-Górecki
t - some gmane alternative. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYKiMuAAoJE

Re: [qubes-users] Thoughts on Qubes OS Security... Could be improved.

2016-11-14 Thread Marek Marczykowski-Górecki
There is ongoing work on this: https://github.com/coldhakca/coldkernel/issues/35 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thin

Re: [qubes-users] Fedora 24 template available for Qubes 3.2

2016-11-13 Thread Marek Marczykowski-Górecki
rther investigation - like call `systemctl` or `journalctl -b`. > My Fedora 24 template works fine. I guess you've meant 23 here? Otherwise, what's the problem? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally r

Re: [qubes-users] Thoughts on Qubes OS Security... Could be improved.

2016-11-13 Thread Marek Marczykowski-Górecki
to transform debian-8-minimal into whonix-ws and whonix-gw - given some not-so-big additional local packages repository. Search for "apt-get install whonix" on phabricator.whonix.org. This is on the roadmap, but there are also much more higher priority tasks... - -- Best Regards, Marek Marc

Re: [qubes-users] R3.2, xfce, resume and changing resolution issues

2016-11-13 Thread Marek Marczykowski-Górecki
es process). The problem is a race condition - it is called before new configuration is actually applied, so it sends the old configuration again... I haven't found yet any way to receive notification _after_ new configuration is applied. Any idea? Source code of the tool is in https://github.

Re: [qubes-users] Re: #2 .odt files and LibreOffice Install

2016-11-13 Thread Marek Marczykowski-Górecki
will be updated using standard mechanisms. This is the case for LibreOffice. Open the template and execute: sudo dnf install libreoffice If you don't know package name, you can search for it: sudo dnf search some-program-name - -- Best Regards, Marek Marczykowski-Górecki Invis

Re: [qubes-users] Arch-template and Firefox (49.0.2)

2016-11-12 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Nov 10, 2016 at 02:21:38PM +0100, Marek Marczykowski-Górecki wrote: > On Thu, Nov 03, 2016 at 08:17:18PM +0100, Achim Patzner wrote: > > Hi! > > > > > > I just tried moving my main working environments from the

Re: [qubes-users] Re: Fedora 24 template available for Qubes 3.2

2016-11-12 Thread Marek Marczykowski-Górecki
minimal. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYJ+fSAAoJENuP0xzK19cs4MwIAIp

[qubes-users] Fedora 24 template available for Qubes 3.2

2016-11-12 Thread Marek Marczykowski-Górecki
after getting new template using any method, the next step is switching some/all qubes (VMs) to the new one. This can be done using either Qubes Manager (in qube settings), or using qvm-prefs command line tool. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it mess

Re: [qubes-users] [feature request] Shutdown template after update

2016-11-12 Thread Marek Marczykowski-Górecki
reated new issue here: https://github.com/QubesOS/qubes-issues/issues/2431 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: G

Re: [qubes-users] VM label icons

2016-11-12 Thread Marek Marczykowski-Górecki
ging windows style: settings -> window manager -> style. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG

Re: [qubes-users] proper way to autostart script in dom0

2016-11-12 Thread Marek Marczykowski-Górecki
: [Desktop Entry] Type=Application Name=My script Exec=/path/to/myfile.sh - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

Re: [qubes-users] Thoughts on Qubes OS Security... Could be improved.

2016-11-12 Thread Marek Marczykowski-Górecki
templates. The file copy protocol is specifically designed the way to avoid immediate target compromise if you copy a file there. For example files are always placed in directory named after source VM name. I hope it's obvious enough to not blindly click on files from "QubesIncoming/untr

Re: [qubes-users] Re: Please help, can't get into Qubes

2016-11-12 Thread Marek Marczykowski-Górecki
a rescue > >> shell? > Try editing /var/lib/qubes/qubes.xml and set "autostart" to False > instead of True for the sys-net vm This wont help on its own. Take a look at this thread: https://groups.google.com/forum/#!msg/qubes-users/LH_HsTRdvtY/Ii2zq78pAwAJ - -- Best Regar

Re: [qubes-users] Re: Android-x86 on Qubes

2016-11-11 Thread Marek Marczykowski-Górecki
e nice > if that could be adjusted as well. AFAIR this was the main reason to use tablet device instead of mouse there. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a b

Re: [qubes-users] input proxy: incompatible remote protocol version

2016-11-11 Thread Marek Marczykowski-Górecki
tible remote protocol version: 1600085855 > > qubes-input-proxy-1.0.7-1.fc23.x86_64 > qubes-input-proxy-sender-1.0.7-1.fc23.x86_64 Do you have the same version in sys-usb? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people nor

Re: [qubes-users] Improvement: check disk space before copy to VM

2016-11-11 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Nov 11, 2016 at 11:57:07PM +0100, Marek Marczykowski-Górecki wrote: > On Fri, Nov 11, 2016 at 02:34:16PM -0800, Andrew David Wong wrote: > > On 2016-11-10 08:16, Robert Mittendorf wrote: > > > I just copied a file from d

Re: [qubes-users] Improvement: check disk space before copy to VM

2016-11-11 Thread Marek Marczykowski-Górecki
't think it is a good idea. File copy protocol is intentionally very simple, including being unidirectional. We don't want to add any non-essential features there, to keep it as simple as possible. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up t

Re: [qubes-users] Re: Android-x86 on Qubes

2016-11-11 Thread Marek Marczykowski-Górecki
s/appvms/, but for that you need to copy it first, then pass its new location to qvm-start - --custom-config=... - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

Re: [qubes-users] Arch-template and Firefox (49.0.2)

2016-11-10 Thread Marek Marczykowski-Górecki
package, which fails the whole build. If someone know how to convince pacman to retry failed downloads, that would help. Pull request to builder-archlinux would be even better ;) - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people n

Re: [qubes-users] Display Calibration

2016-11-10 Thread Marek Marczykowski-Górecki
or > management is only achievable if the apps are using the same profile. > > For now I can configure apps (at least Darktable for sure) to use my > color profile manually. > > > (BTW: I'm about to create a "color management in Qubes" documentation soon) - --

Re: [qubes-users] Installing Windows 8 as a Standalone VM

2016-11-09 Thread Marek Marczykowski-Górecki
e problematic component is GUI agent. But just curious - have anyone tried installing Qubes Windows Tools on Win 8/8.1/10 but excluding GUI agent there? There is some chance for it to just work there. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up th

Re: [qubes-users] [feature request] Shutdown template after update

2016-11-09 Thread Marek Marczykowski-Górecki
st tools[1] - this is why we have this terminal window, instead of just some progress bar or something even less intrusive. But automatically shutting down the template (after user have a chance to see update feedback) is a good idea. Something like "Press enter to shutdown template, or Ctrl-C to j

Re: [qubes-users] Qubes on Lenovo Thinkpad X250 Issues

2016-11-09 Thread Marek Marczykowski-Górecki
nge from Xen 4.4 to Xen 4.6 there. So, probably a lot of changes... - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Versi

Re: [qubes-users] Issue #2407: Renaming VM works partially

2016-11-08 Thread Marek Marczykowski-Górecki
ame. Make copy of this file first, just in case. > I have not been able to reproduce it again by creating a few new VMs and > renaming them. Check .xsession-errors or .xsession-errors.old for some Qubes Manager error - it would really help with debugging this. - -- Best Regards, Marek Marczykows

Re: [qubes-users] entropy sources?

2016-11-08 Thread Marek Marczykowski-Górecki
additionally initial seed is obtained from dom0. But otherwise yes - haveged. > Details: https://github.com/QubesOS/qubes-issues/issues/673 > > Open related issues: > https://github.com/QubesOS/qubes-issues/issues/1752 > https://github.com/QubesOS/qubes-issues/issues/2161 >

Re: [qubes-users] Kernel Panic on sys-net

2016-11-07 Thread Marek Marczykowski-Górecki
e similar messages in dom0? Maybe your hard drive is failing? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Versio

Re: [qubes-users] Problems upgrading from Fedora-23 to 24

2016-11-06 Thread Marek Marczykowski-Górecki
ut none of the providers can be installed. > package qubes-gui-vm-3.1.7-1.fc23.x86_64 requires pulseaudio = 7.1, > but none of the providers can be installed. It looks you have Qubes 3.1, Fedora 24 template is supported only on Qubes 3.2. Please upgrade first. - -- Best Regards, Marek Marcz

Re: [qubes-users] Re: Issues after in-place 3.1.17 -> 3.2 upgrade

2016-11-06 Thread Marek Marczykowski-Górecki
anything I should be doing, before I shutdown, to fix the above errors. Just restarting the system should be enough. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BE

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-05 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sat, Nov 05, 2016 at 04:26:55PM +, Holger Levsen wrote: > On Sat, Nov 05, 2016 at 05:20:32PM +0100, Marek Marczykowski-Górecki > wrote: > > Looks like it can't connect to syslog/journald. Does /dev/log exist? > >

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-05 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sat, Nov 05, 2016 at 04:13:19PM +, Holger Levsen wrote: > On Sat, Nov 05, 2016 at 04:38:11PM +0100, Marek Marczykowski-Górecki wrote: > > > so that means the docs are correct now? > > Yes. > > cool! > >

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-05 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sat, Nov 05, 2016 at 03:22:15PM +, Holger Levsen wrote: > On Sat, Nov 05, 2016 at 03:58:21PM +0100, Marek Marczykowski-Górecki wrote: > > Oh, indeed qubes-release were only in testing repository for "fc20" base > > di

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-05 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sat, Nov 05, 2016 at 01:16:25AM +, Holger Levsen wrote: > Hi Marek, > On Sat, Nov 05, 2016 at 01:57:44AM +0100, Marek Marczykowski-Górecki wrote: > > > I believe I also found a workaround: > > > sudo qubes-dom0

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-04 Thread Marek Marczykowski-Górecki
and sys-firewall from shell? `qvm-start sys-firewall` should work just fine from text console. Of course you'll not get GUI there, but qvm-run should work. > (The system is just a test system, so I could and probably soon will > just reinstall, and I know I could copy the VMs over… but…

Re: [qubes-users] Re: No Kernel update since dirtycow (copy-on-write) exploit?

2016-11-03 Thread Marek Marczykowski-Górecki
- all the user data is in /home/user, accessible from normal user. For lengthier explanation, see /etc/sudoers.d/qubes[1] in the VM. Anyway there is updated kernel package in current-testing repository. [1] https://github.com/QubesOS/qubes-core-agent-linux/blob/master/misc/qubes.sudoers - --

Re: [qubes-users] Display Calibration and Audio Equalizer for Dom0 ?

2016-11-03 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Nov 03, 2016 at 12:01:08PM +0100, Zrubi wrote: > On 11/02/2016 07:28 PM, Marek Marczykowski-Górecki wrote: > > > I have no idea how such software works... Especially at which stage > > calibration is applied. > >

Re: [qubes-users] Your Battery is syping on you...

2016-11-02 Thread Marek Marczykowski-Górecki
r even better, a real secure-browser...) Whatever Firefox provides there, it has no access to actual (hardware) battery information. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-postin

Re: [qubes-users] Display Calibration and Audio Equalizer for Dom0 ?

2016-11-02 Thread Marek Marczykowski-Górecki
ox(0x561c58c3a230, ) lost focus even though it > didn't have it > X Error of failed request: BadMatch (invalid parameter attributes) > Major opcode of failed request: 42 (X_SetInputFocus) Strange... > Or I should connect the calibration device to dom0 and start the > calibrat

Re: [qubes-users] Re: qubes-template-debian-7 missing?

2016-11-01 Thread Marek Marczykowski-Górecki
system, since it is somehow old and still requires vsyscall legacy kernel support, which is now disabled by default... Anyway package is now available in the repository. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people nor

Re: [qubes-users] 3.2 Install: Error unpacking qubes-template-fedora-23

2016-10-28 Thread Marek Marczykowski-Górecki
;(hexdump -n 4246732800 -C /dev/sdc) where /dev/sdb and /dev/sdc are two device created using different methods. The -n parameter to hexdump is installation image size, to not compare the whole device. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the

Re: Request for test: Re: [qubes-users] Fedora 24?

2016-10-28 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Oct 28, 2016 at 12:56:28PM +0200, Zrubi wrote: > On 10/28/2016 11:44 AM, Marek Marczykowski-Górecki wrote: > > > Or maybe > > it's still at 3.1 there (and the updated one saved in .rpmnew file)? > > That was

Re: Request for test: Re: [qubes-users] Fedora 24?

2016-10-28 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Oct 28, 2016 at 11:37:02AM +0200, Laszlo Zrubecz wrote: > On 10/28/2016 11:20 AM, Marek Marczykowski-Górecki wrote: > > > It looks so... See here: > > https://www.qubes-os.org/doc/upgrade-to-r3.2/#upgrade-all-template-

Re: Request for test: Re: [qubes-users] Fedora 24?

2016-10-28 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Oct 28, 2016 at 09:28:31AM +, Manuel Amador (Rudd-O) wrote: > On 10/28/2016 01:56 AM, Marek Marczykowski-Górecki wrote: > > On Thu, Oct 27, 2016 at 03:31:46PM +0200, Marek Marczykowski-Górecki > > wrote: > > > On

Re: Request for test: Re: [qubes-users] Fedora 24?

2016-10-28 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Oct 28, 2016 at 10:51:43AM +0200, Zrubi wrote: > On 10/28/2016 10:46 AM, Marek Marczykowski-Górecki wrote: > > > Wait a sec, qubes-gui-vm-3.1.7 ? Is this Qubes 3.1? We don't have fc24 > > support there... > > W

Re: Request for test: Re: [qubes-users] Fedora 24?

2016-10-28 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Oct 28, 2016 at 10:32:12AM +0200, Zrubi wrote: > On 10/28/2016 10:06 AM, Zrubi wrote: > > On 10/27/2016 03:31 PM, Marek Marczykowski-Górecki wrote: > > > >> I haven't tried recently, but it worked before. Maybe

Re: Request for test: Re: [qubes-users] Fedora 24?

2016-10-27 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Oct 27, 2016 at 03:31:46PM +0200, Marek Marczykowski-Górecki wrote: > On Thu, Oct 27, 2016 at 09:50:56AM +0200, Zrubi wrote: > > On 09/06/2016 01:24 AM, Marek Marczykowski-Górecki wrote: > > > > > I've jus

Re: [qubes-users] Services still don't start even when they are there for starting in the list.

2016-10-27 Thread Marek Marczykowski-Górecki
ore. It's not something to be fixed, it's something you don't know how to use. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BE

Re: [qubes-users] HCL - DELL PRECISION T7400

2016-10-27 Thread Marek Marczykowski-Górecki
more convenient way: sudo qubes-dom0-update i8kutils Also, it will be much more secure, as manually downloading rpm packages (via yumdownloader) do not enforce signature being checked. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in w

Re: Request for test: Re: [qubes-users] Fedora 24?

2016-10-27 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Oct 27, 2016 at 09:50:56AM +0200, Zrubi wrote: > On 09/06/2016 01:24 AM, Marek Marczykowski-Górecki wrote: > > > I've just tried this and successfully upgraded Fedora 23 to Fedora 24 > > template. > > > >

Re: [qubes-users] Update to xen-4.6.3 doesn't appear in /boot

2016-10-25 Thread Marek Marczykowski-Górecki
eep all the xen* packages at the same version (upgrade them at the same time). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Versio

Re: [qubes-users] Import a .img file (Windows7) into Qubes?

2016-10-24 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Oct 24, 2016 at 07:12:53AM -0700, Grzesiek Chodzicki wrote: > W dniu niedziela, 23 października 2016 23:10:06 UTC+2 użytkownik Marek > Marczykowski-Górecki napisał: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA2

Re: [qubes-users] AEM, no stick ... no boot

2016-10-24 Thread Marek Marczykowski-Górecki
oad Qubes? You can keep /boot on external device (AEM). Simply - after AEM installation, wipe /boot from internal hard drive. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a

Re: [qubes-users] Future plans for KDE on Qubes?

2016-10-23 Thread Marek Marczykowski-Górecki
#x27;m not the only Qubes user out there who finds KDE to > be more usable than the alternatives. Totally agree -- I really hope > KDE continues to be supported on Qubes for those who prefer it. I think we can keep its current state. Shouldn't be a problem for Qubes 4.0 and later. At least u

Re: [qubes-users] Import a .img file (Windows7) into Qubes?

2016-10-23 Thread Marek Marczykowski-Górecki
to dd command. It will not copy unused space. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYDScp

Re: [qubes-users] Re: Persistant routes on Qubes are not persistant?!

2016-10-23 Thread Marek Marczykowski-Górecki
ated at each VM startup (or changing network options - like switching to different netvm). I thing there was a comment about it, but indeed it isn't there right now... Anyway, your options are: 1. Create new connection with different name and set routes there. 2. Modify routing table (or Netw

Re: [qubes-users] Is there a Step-By-Step Tutorial for extending the main Qubes LUKS /dev/sda2 partition?

2016-10-22 Thread Marek Marczykowski-Górecki
> Enlarge the (LVM) Physical Volume with pvresize.  > Enlarge the (root) (LVM) Logical Volume with lvresize.  > Enlarge the (root) file system with resize2fs.  > Reboot to your encrypted hard drive.  The above list looks good. You can use recovery mode from Qubes installation disk. - --

Re: [qubes-users] Inconsistent Screen Resolution for Fedora VMs

2016-10-22 Thread Marek Marczykowski-Górecki
work, and it's better to just be tiny */ #define HIDPI_MIN_HEIGHT 1200 There is also lengthy comment about it. Anyway the above looks reasonable for me for automatically turning HiDPI mode on. So, if it was incorrect, I'd guess something gone wrong with retrieving input values (DPI,

<    1   2   3   4   5   6   7   8   9   10   >