Re: [qubes-users] help updating dom0 - no network - stuck with lots of pending updates

2016-12-16 Thread Marek Marczykowski-Górecki
status of systemd unit providing it: systemctl status systemd-journcald-dev-log.socket You may want to remove /dev/log and restart above unit (sudo systemctl restart systemd-journcald-dev-log.socket). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up t

Re: [qubes-users] How to completely remove a template ?

2016-12-16 Thread Marek Marczykowski-Górecki
b.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-012-2014.txt But Fedora 23 (which is used in dom0) still have 4.13.0-rc1 There is already fix in Fedora testing repository: https://bodhi.fedoraproject.org/updates/FEDORA-2016-0906f64ec8 - -- Best Regards, Marek Marczykowski-Górecki Invisible Thin

Re: [qubes-users] help updating dom0 - no network - stuck with lots of pending updates

2016-12-12 Thread Marek Marczykowski-Górecki
> > http://pastebin.com/Em0W21YV > > Any help to properly update my dom0 will be very appreciated. If updates are already downloaded (it looks so), you can try running "sudo dnf update" in dom0 - maybe it will be better at resolving dependencies. - -- Best Regards, Marek Mar

Re: [qubes-users] Trouble booting Qubes in UEFI mode alongside Windows (dual-booting)

2016-12-13 Thread Marek Marczykowski-Górecki
That's really new CPU. I'm not sure if it will be well supported... But if installer worked, there is a hope. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE

Re: [qubes-users] Kernel 4.9 in Qubes

2016-12-12 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Dec 12, 2016 at 08:32:21AM -0800, Grzesiek Chodzicki wrote: > W dniu sobota, 19 listopada 2016 11:58:21 UTC+1 użytkownik Marek > Marczykowski-Górecki napisał: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 >

Re: [qubes-users] Kali VM no longer responding

2016-12-12 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Dec 12, 2016 at 05:10:00PM +, qubenix wrote: > Marek Marczykowski-Górecki: > > Looks like this issue: > > https://github.com/QubesOS/qubes-issues/issues/2514 > > > > Rebuilt package just uploaded to testin

Re: [qubes-users] How to move/migrate a VM with a Fedora-23 custom template from 3.1 to 3.2?

2016-12-12 Thread Marek Marczykowski-Górecki
n, or, alternatively, if I can "migrate" or > point the new system to create a new Template and a new AppVM by pointing it > to a folder on the old disk to use as a template for the creation. > How can this be done? You can copy appropriate directories from /var/lib/qubes/ relate

Re: [qubes-users] help updating dom0 - no network - stuck with lots of pending updates

2016-12-12 Thread Marek Marczykowski-Górecki
esolving > > dependencies. > > [user@dom0 ~]$ sudo dnf update > sudo: dnf: command not found Is your sys-firewall based on Debian template? If so, there is additional step in the upgrade procedure. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up

Re: [qubes-users] Re: Asus ROG GL752VW-GS71-HID6 Install

2016-12-06 Thread Marek Marczykowski-Górecki
e with no grub delay. No grub - you're probably using UEFI. See above. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG

Re: [qubes-users] qvm-create-default-dvm running out of space

2016-12-15 Thread Marek Marczykowski-Górecki
d in /tmp - maybe some old unused stuff. But if it still does not fit, you can disable this optimization by: touch /var/lib/qubes/dvmdata/dont-use-shm - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people norm

Re: [qubes-users] Qubes-manager refuses to launch

2016-12-14 Thread Marek Marczykowski-Górecki
; mainly about how to avoid this situation from recurring in the future. At every system startup backup of qubes.xml is created in /var/lib/qubes/backup - you can restore it from there, then remove template using correct tools. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: B

Re: [qubes-users] help updating dom0 - no network - stuck with lots of pending updates

2016-12-16 Thread Marek Marczykowski-Górecki
atus systemd-journcald-dev-log.socket > Loaded: not-found (Reason: No such file or directory) > Active: inactive (dead) > [user@dom0 ~]$ > > - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read

Re: [qubes-users] Split GPG: thunderbird+enigmail stopped cache password

2016-12-16 Thread Marek Marczykowski-Górecki
n is automatic > > Any reasons for the above behavior? Make sure you use gpg2, not gpg. > + then changing vault VM back to debian 8 > >   - password removed and I can now read email and attachments without being > bothered when looking at each and every email. - -- Best Regards,

Re: [qubes-users] Re: Qubes-manager refuses to launch

2016-12-16 Thread Marek Marczykowski-Górecki
en record somewhere in conf. files or smth. Check "internal" VMs - you can show then using View->Show/Hide internal VMs. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-po

Re: [qubes-users] Install the same template with other name

2016-12-16 Thread Marek Marczykowski-Górecki
without any modifications to make my own > fedora-24-custom. Want to start from fresh template. > Thanks Clone your existing fedora-24 (and possibly switch existing VMs to this clone), then reinstall it using: https://www.qubes-os.org/doc/reinstall-template/ - -- Best Regards, Marek Marczykowski

Re: [qubes-users] Re: Atheros ath9k wireless pci-e not functional in Fedora-24 template

2016-12-17 Thread Marek Marczykowski-Górecki
89 e5 e8 1d fe ff ff 5d c3 0f 1f 00 > > <89> 3e c3 0f 1f 44 00 00 48 81 ff ff ff 03 00 77 37 48 81 ff 00 > > [2.314996] RIP [] iowrite32+0x38/0x40 > > [2.314999] RSP > > [2.315001] CR2: c96c0040 > > [2.315001] ---[ end trace 4b490f5

Re: [qubes-users] Broken dependencies in plasma desktop dom0 - qubes 3.2

2016-12-08 Thread Marek Marczykowski-Górecki
s://bugzilla.redhat.com/show_bug.cgi?id=1402940 And an update on the way: https://bodhi.fedoraproject.org/updates/FEDORA-2016-22b09070a2 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-p

Re: [qubes-users] cjdns

2016-12-07 Thread Marek Marczykowski-Górecki
st (simply create /etc/systemd/system/cjdns.service.d/50_user.conf with just [Service] and ExecStartPost=... there). 2a. Or alternatively - place ip6tables command in /rw/config/rc.local [1] https://www.qubes-os.org/doc/bind-dirs/ - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A

Re: [qubes-users] CPU hangs during installation to Shuttle XS35V4

2016-12-07 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Dec 07, 2016 at 06:31:12PM -0600, FuntooHacker wrote: > On Wed, Dec 07, 2016 at 10:05:49PM +0100, Marek Marczykowski-Górecki wrote: > > > > Looks like Xen bug. Or EFI firmware bug (but less likely). > > I'd start w

Re: [qubes-users] USB hardware firewall (was: epoxy on ram to prevent cold boot attacks?)

2016-12-09 Thread Marek Marczykowski-Górecki
attacks are currently. Such device could introduce artificial delay (like - inject queued events every 50ms) to at least partially mitigate such attacks. What do you think about it? I think the hardware you've designed is perfect for this! [1] https://github.com/QubesOS/qubes-issue

Re: [qubes-users] Re: FYI: Experimental Qubes coldkernel support now available

2017-01-13 Thread Marek Marczykowski-Górecki
h benefit it gives? Anyway, I think in the end we need some packages in the repository for this. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN

Re: [qubes-users] Use an remote PULSE Audio server

2017-01-12 Thread Marek Marczykowski-Górecki
seaudio does remove/not reconnect to > Qubes VSINK? Depends on what you want to accomplish ;) - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGN

Re: [qubes-users] [Security] Anti-evil-maid didn't notice Xen update ?

2017-01-12 Thread Marek Marczykowski-Górecki
s Security Team that the current behaviour of AEM could be misleading. AEM should refuse to work if TXT isn't really working - otherwise it's easy to not notice it and have false sense of security. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the orde

Re: [qubes-users] console window manager

2016-12-03 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sat, Dec 03, 2016 at 02:58:48AM +0300, Eva Star wrote: > On 12/03/2016 02:50 AM, Marek Marczykowski-Górecki wrote: > > > > > > > And additional question, how to get the new created window ID f

Re: [qubes-users] Yubikeys in Qubes

2016-12-03 Thread Marek Marczykowski-Górecki
at is no protection of the data itself - - USB VM can intercept the communication and replace/capture what you want to sign/decrypt. If there is some protocol to use smartcard over the network, such protocol probably handle this problem. Not sure if it's possible to use it here, especially when limited to

Re: [qubes-users] Cannot start qubes-guid

2016-12-03 Thread Marek Marczykowski-Górecki
Is it fresh install, or upgraded from previous Qubes release? Also, take a look at guid log - it's in /var/log/qubes/guid.VMNAME.log (replace VMNAME with actual VM name) - also accessible from Qubes Manager - right click on the VM). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things

Re: [qubes-users] Any plans for a CCC meeting?

2016-12-02 Thread Marek Marczykowski-Górecki
talk! [1] https://events.ccc.de/congress/2016/wiki/Assembly:Secure_Desktops - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE-

Re: [qubes-users] How do I get Qubes 4.0 pre-release/dev build?

2016-12-01 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Dec 01, 2016 at 02:06:16PM +, C. L. Martinez wrote: > On Thu 1.Dec'16 at 14:50:59 +0100, Marek Marczykowski-Górecki wrote: > > On Thu, Dec 01, 2016 at 04:26:38PM +0300, Eva Star wrote: > > > On 12/01/2016 02:47 PM,

Re: [qubes-users] How do I get Qubes 4.0 pre-release/dev build?

2016-12-01 Thread Marek Marczykowski-Górecki
ns deserve separate thread(s), but generally the answer is: nice ideas, but not easy to implement in practice. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN

Re: [qubes-users] How do I get Qubes 4.0 pre-release/dev build?

2016-12-01 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Dec 01, 2016 at 04:26:38PM +0300, Eva Star wrote: > On 12/01/2016 02:47 PM, Marek Marczykowski-Górecki wrote: > > > > R4 Will be fedora-23 based for dom0 right? > > > > This is the plan right now. > > &

Re: [qubes-users] [3.2, bugs] Xen 4.6.3 seems failed

2016-11-30 Thread Marek Marczykowski-Górecki
... What exactly do you mean? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYPxXPAAoJE

Re: [qubes-users] [3.2, bugs] Xen 4.6.3 seems failed

2016-11-30 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Nov 30, 2016 at 10:24:39PM +0300, Eva Star wrote: > On 11/30/2016 10:11 PM, Marek Marczykowski-Górecki wrote: > > > Are you using AEM, or have /boot on some external device (not plugged in > > during update)? > >

Re: [qubes-users] [3.2, bugs] Xen 4.6.3 seems failed

2016-11-30 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Nov 30, 2016 at 09:23:45PM +0300, Eva Star wrote: > On 11/30/2016 09:09 PM, Marek Marczykowski-Górecki wrote: > > > > On Wed, Nov 30, 2016 at 09:07:39PM +0300, Eva Star wrote: > > > 1) > > > I instal

Re: [qubes-users] [3.2, bugs] Xen 4.6.3 seems failed

2016-11-30 Thread Marek Marczykowski-Górecki
p mount old partition. Maybe because old and new cloned > cryptsetup partitions have the same id... Yes, most likely - if you have two partitions (possibly on different disks) with the same UUID, the first detected will be used. - -- Best Regards, Marek Marczykowski-Górecki Invisible Thing

Re: [qubes-users] [3.2, bugs] Xen 4.6.3 seems failed

2016-11-30 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Nov 30, 2016 at 11:54:42PM +0300, Eva Star wrote: > On 11/30/2016 11:48 PM, Marek Marczykowski-Górecki wrote: > > > Yes, most likely - if you have two partitions (possibly on different > > disks) with the same UUID,

Re: [qubes-users] PAM errors after disabling password-less root

2016-11-30 Thread Marek Marczykowski-Górecki
log very noisy. > I think the auth requests are originating from dom0. I'd like to find a way > to squelch them. It's a "feature" of systemd-journald: https://github.com/systemd/systemd/issues/959 In short: add "audit=0" to VM kernel command options, or run "auditd -s

Re: [qubes-users] sys-net will not start after windows installed as a templateHVM

2016-11-30 Thread Marek Marczykowski-Górecki
not exist (domain sys-net) > lspci confirms the device 01:00.0 does not in fact exist Detach this device from sys-net using qvm-pci tool. Other question is how you've got non-existing device attached to sys-net in the first place... - -- Best Regards, Marek Marczykowski-Górecki Invisible Things La

[qubes-users] Re: [qubes-devel] Announcement: Qubes OS Begins Commercialization and Community Funding Efforts

2016-12-01 Thread Marek Marczykowski-Górecki
eatures as in commercial version, and announcing it anywhere. This is how open source works (which is great that we have this freedom!). But we'd like to ask the community to not compromise the business model - as explained above I think the use cases are different and this shouldn't conflict with

Re: [qubes-users] qubes large volume inter-vm file copy fails

2016-12-01 Thread Marek Marczykowski-Górecki
M, for example using: sudo journalctl -b -u qubes-qrexec-agent.service "connect: connection refused." suggests problem on connecting to it - maybe it's dead? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people

Re: [qubes-users] Yubikeys in Qubes

2016-12-01 Thread Marek Marczykowski-Górecki
nly alternative is protecting the data at individual device protocol level (like you do with encrypted USB sticks for example). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting s

Re: [qubes-users] console window manager

2016-12-02 Thread Marek Marczykowski-Górecki
; already available at dom0. When this user wrote about it then I check and > > it was there (at dom0 already installeted) > > > > Oh, really? I would be interested in using that, as well. Please let me know > if you find it. :) Is that about wmctl or xdotool? - -- Best Re

Re: [qubes-users] Re: custom kernel doesn't work installed in debian cloned template

2016-12-03 Thread Marek Marczykowski-Górecki
ake a look at dkms manual page - there is `dkms install` command for manual operation. Get u2mfn module version from /usr/src. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally re

Re: [qubes-users] qga.exe 100% CPU load (Windows Tools)

2016-12-03 Thread Marek Marczykowski-Górecki
oking for problems? Any log-files that are recommended > to look at? Take a look here: https://www.qubes-os.org/doc/windows-tools-3/ - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -

Re: [qubes-users] Re: Asus Transformer 3 Pro T303UA, Thunderbolt issues

2016-12-03 Thread Marek Marczykowski-Górecki
; Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub Indeed above there is a place for USB controller - 00:04.0. Check kernel messages (dmesg) in sys-net - maybe there you'll find something interesting about it. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things La

Re: [qubes-users] Re: Asus Transformer 3 Pro T303UA, Thunderbolt issues

2016-12-03 Thread Marek Marczykowski-Górecki
ethernet device is not there, nor the usb ethernet dongle that's also > connected to the usb hub. Both show up on dom0 if I connect them, but since > dom0 has no networking, I cannot say if they would work. Maybe those are on the other USB controller - 00:14.0 ? Try attaching that too to th

Re: [qubes-users] Re: Asus Transformer 3 Pro T303UA, Thunderbolt issues

2016-12-03 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sat, Dec 03, 2016 at 04:24:05PM -0800, Benjamin Richter wrote: > Am Sonntag, 4. Dezember 2016 01:19:45 UTC+1 schrieb Marek > Marczykowski-Górecki: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > >

Re: [qubes-users] GUI Daemon error with new fedora-24-minimal template

2016-11-29 Thread Marek Marczykowski-Górecki
to 3.1 repository was built for Qubes 3.2, so this is why it's incompatible. I've just removed this faulty template, building new one - will be ready in few hours. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally rea

Re: [qubes-users] Persistent audio issues in a particular appvm (Qubes 3.1)

2016-12-05 Thread Marek Marczykowski-Górecki
icking pulseaudio incorrectly and > there is a better way etc? There is 'module-vchan-sink' providing it. start-pulseaudio-with-vchan script take care of loading the right module. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in w

Re: [qubes-users] 2/3 of VMs randomly lose network access; sys-net, sys-firewall, and others normal

2016-12-04 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Nov 30, 2016 at 09:19:06PM +0300, Eva Star wrote: > On 11/27/2016 02:04 AM, Marek Marczykowski-Górecki wrote: > > > Do you see some correlation with: > > - starting/stopping another VM? > > - affected VMs ha

Re: [qubes-users] Re: Install on Dell XPS 13 (9350)

2016-12-04 Thread Marek Marczykowski-Górecki
d execute: sudo qubes-dom0-update --enablerepo=qubes*unstable kernel-qubes-vm - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGI

Re: [qubes-users] Re: Asus Transformer 3 Pro T303UA, Thunderbolt issues

2016-12-04 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Dec 04, 2016 at 12:18:23AM -0800, Benjamin Richter wrote: > Am Sonntag, 4. Dezember 2016 01:33:31 UTC+1 schrieb Marek > Marczykowski-Górecki: > > > > I've attached the ethernet dongle to the same port as the logite

Re: [qubes-users] AEM boot doesn't load serviceVM's since Xen 4.6.3

2016-12-04 Thread Marek Marczykowski-Górecki
s-net manually, to see what messages will show up there: sudo tail -f /var/log/libvirt/libxl/libxl-driver.log /var/log/xen/console/hypervisor.log - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is t

Re: Bluetooth locking (was Re: [qubes-users] safer typing in public places)

2016-11-30 Thread Marek Marczykowski-Górecki
SB VM would not be able to do that without the device actually being present (assuming that device is safe enough to not be cloned, and resistant to proxy attacks etc.). But better don't do that. [1] https://www.qubes-os.org/doc/yubi-key/ - -- Best Regards, Marek Marczykowski-Górecki Invisi

Re: [qubes-users] How do I get Qubes 4.0 pre-release/dev build?

2016-12-01 Thread Marek Marczykowski-Górecki
working right now on moving remaining code to "master" branch. > Hope someone can explain how I can build myself a good r4.0 iso. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people

Re: [qubes-users] Dom0 Update failed.

2017-01-05 Thread Marek Marczykowski-Górecki
ed arbitrary subset of update, apparently excluding packages required by those you've selected. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE-

Re: [qubes-users] Re: A really nice guide on installing Coreboot on a X220 with a Raspberry Pi

2017-01-06 Thread Marek Marczykowski-Górecki
all (after installing the tool first) should be enough. You can boot from installation image to do that (choose rescue mode). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why i

Re: [qubes-users] Re: Archlinux template instruction leads to failed recipe on target "core-agent-linux-vm"

2017-01-06 Thread Marek Marczykowski-Górecki
in any way. After that the template creation was successful for > me. Fixes for both issues already merged: https://github.com/QubesOS/qubes-app-linux-split-gpg/pull/7 https://github.com/QubesOS/qubes-core-agent-linux/pull/32 Thanks Nicklaus! - -- Best Regards,

Re: [qubes-users] My Intel system doesn't have Vt-x and Vt-d, please help me understand the implications.

2017-01-06 Thread Marek Marczykowski-Górecki
scried, or using some remote attack directly on NetVM - because NetVM is what is facing external network directly. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text.

Re: [qubes-users] Dom0 Update failed.

2017-01-06 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Jan 05, 2017 at 07:51:49PM -0800, Drew White wrote: > On Friday, 6 January 2017 11:39:36 UTC+11, Marek Marczykowski-Górecki wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > On Thu, Jan 0

Re: [qubes-users] Re: How do I get Qubes 4.0 pre-release/dev build?

2017-01-03 Thread Marek Marczykowski-Górecki
ave you seen this message: https://groups.google.com/d/topic/qubes-devel/2DMBT2eBbyw/discussion ? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP S

Re: [qubes-users] Dom0 (System tools) shortcuts suddenly disappeared

2017-01-03 Thread Marek Marczykowski-Górecki
ee if it fixed the > issue, without success. > > What is the recommended course of action? Try running `xdg-desktop-menu forceupdate`. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is

Re: [qubes-users] Re: trying to pass usb-headset to arch based standalone vm

2016-12-29 Thread Marek Marczykowski-Górecki
. when I try to use qvm-usb to transfer > using the command: > > qvm-usb -a sys-usb:4-2 > > it tells me that qubes-usb-proxy is not installed in the VM. Check if you have /etc/qubes-rpc/qubes.USBAttach in that VM. It should be part qubes-usb-proxy package. - -- Best Regards, Marek

Re: [qubes-users] Qubes Security Bulletin #28

2016-12-20 Thread Marek Marczykowski-Górecki
ume being compromised anyway) it's ok to ust "alternative" method. For example I have one template which I use only for stuff distributed as not signed tarballs only. I'm fairly sure there were far easier methods to compromise this template in the past. And I use it only for some testing VM

Re: [qubes-users] Anti Evil Maid Idea

2016-12-20 Thread Marek Marczykowski-Górecki
mputer to its user (before entering the password), not the other way around. Adding some sort of 2FA may make sense, but it's orthogonal to AEM. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-po

Re: [qubes-users] using salt to install software in template-vms

2016-12-18 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Dec 18, 2016 at 11:41:20PM +, john.david.r.smith wrote: > On 18/12/16 23:04, Marek Marczykowski-Górecki wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > On Sun, Dec 18, 2016 at 10:47:36P

Re: [qubes-users] using salt to install software in template-vms

2016-12-18 Thread Marek Marczykowski-Górecki
there? This is expected. Configuration is copied temporarily there, into /tmp. This is how salt-ssh works. And thanks to salt-ssh, you don't have to install salt in every template to use it to manage VMs. Just default template is enough. - -- Best Regards, Marek Marczykowski-Górecki Invisible Thin

Re: [qubes-users] Re: FYI: Experimental Qubes coldkernel support now available

2016-12-18 Thread Marek Marczykowski-Górecki
st' failed > make: *** [qubes-guest] Error 2 > user@debian-8-coldkernel:~/coldkernel$ Relevant error is probably earlier. I guess it's about disk space - it require 4GB or so to build. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order

Re: [qubes-users] Debian 9 installation problem

2016-12-19 Thread Marek Marczykowski-Górecki
package. Fixed package was in testing repository, until now - it's already uploaded to stable. You may need to call apt-get update first. To access VM console, use virsh -c xen:/// console VMNAME - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order i

[qubes-users] Qubes Security Bulletin #28

2016-12-20 Thread Marek Marczykowski-Górecki
sudo apt-get dist-upgrade Repeat this procedure for every non-critical affected TemplateVM. Credits This bug was found by Jonn Horn of Google Project Zero and reported to the Debian Security Team. Discussion of the bug and exploitation provided by Marek Marczykowski-Górecki of the Q

Re: [qubes-users] Qubes as Server OS?

2016-12-22 Thread Marek Marczykowski-Górecki
nfrastructure make it easier to keep it that way - think twice when you send/receive something from 3rd-party service, put some script etc. Running own infrastructure would make it tempting have some trust in it. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes u

Re: [qubes-users] How to search, reinstall or remove qubes-templates installed via rpm?

2016-12-23 Thread Marek Marczykowski-Górecki
-update operation. Mostly to not accidentally upgrade such package - which would override all the changes made inside (including installed packages, applied updates etc). Currently the only exception is "reinstall" action, with one specific template given as an argument. There is a plan to exten

Re: [qubes-users] Re: HCL - LENOVO X1 Carbon 20BSCTO1WW

2016-12-23 Thread Marek Marczykowski-Górecki
(AFAIR it's the second partition). Note that changing anything on installation disk will fail media verification, so you may want to first start the installer just to verify it, then apply above change and while starting for actual installation, go with just "install" option, not &quo

Re: [qubes-users] Re: Unable to set coherent dma mask: disabling DMA

2016-12-23 Thread Marek Marczykowski-Górecki
this particular device (whatever it is) is incompatible with Xen. If you don't observe any negative effects, nothing to worry about. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting

Re: [qubes-users] How to use bonjour (mDNS/DNS-SD) in a Qube?

2016-12-28 Thread Marek Marczykowski-Górecki
est solve the issue of > Qubes consuming services which require cross-subnet or multicast > support. I'd imagine this could also be a problem with other similar > services (video, voice). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order i

Re: [qubes-users] Re: Q3.2 installation issues - x not starting on XPS13 HVW8J

2016-12-28 Thread Marek Marczykowski-Górecki
es-users/-9qRHSkwfy8/CCx08nnTVEAJ > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1020345 > > [2] > > https://groups.google.com/forum/#!msg/qubes-users/-9qRHSkwfy8/CCx08nnTVEAJ > > > - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes

Re: [qubes-users] Synaptic touchpad not working through usbVM

2016-12-28 Thread Marek Marczykowski-Górecki
e more information: 1. Install 'evtest' tool in your template. 2. Restart sys-usb (or the whole system). 3. Launch terminal in sys-usb and call evtest on everything you find in /dev/input - one of those should be your touchpad - post what you've got there. - -- Best Regards, Marek Marczykowski

Re: [qubes-users] VMs die when screen is locked for too long

2016-12-28 Thread Marek Marczykowski-Górecki
issue? Is it about some specific VM, every time different one, or all of them? I'd guess it may be about automatic system suspend after and on this particular hardware sys-net does not survive it. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order

Re: [qubes-users] New Lenovo laptops: X1 (4th Gen), T460/p, and T560

2016-12-26 Thread Marek Marczykowski-Górecki
kernel, then maybe release updated installation disk with it. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: Gn

Re: [qubes-users] config-vm and inter vm file transfer

2016-12-21 Thread Marek Marczykowski-Górecki
ssues/issues/1541#issuecomment-188697805 The service is the arrow at its left edge ;) - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Versi

Re: [qubes-users] help updating dom0 - no network - stuck with lots of pending updates

2016-12-22 Thread Marek Marczykowski-Górecki
ice > :00:19:.0 is in use by driver xenlight, domain sys-net" > > Is there something to do to access those VMs ? Check what netvm is set for those VMs. I guess currently you have two of them: sys-net and (just restored) sys-net1. Choose which one you want to use and remove the other.

Re: Archlinux template – dend early Christmas gifts to Marek ASAP! Re: [qubes-users] Arch-template and Firefox (49.0.2)

2016-12-19 Thread Marek Marczykowski-Górecki
hy getting > more Genies is not a good idea. If you wonder what could be useful, a big, fast SSD disk, like 1TB. That would really speed up some things (like test-building templates), as currently the only storage>500GB I have is not-so-fast HDD... - -- Best Regards, Marek Marczykowski-Góre

Re: [qubes-users] How to manually remove a VM?

2016-12-19 Thread Marek Marczykowski-Górecki
in this context, Marek? I think this is bug in help message. It's about qubes.xml. Do we have some other term for it? - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting s

[qubes-users] T-shirts at 33C3!

2016-12-26 Thread Marek Marczykowski-Górecki
[*] GreenAddress.it wallet with instant confirmations is recommended, but others will do too. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE

Re: [qubes-users] Chainloading to the Qubes bootloader

2016-12-06 Thread Marek Marczykowski-Górecki
Is /dev/sda7 your ESP? If so, remove 'set root' line. Generally take a look at issue 794[1], long story short - xen.efi does not work when loaded by grub using grub filesystem driver (instead of EFI filesystem handling). Not setting 'root' variable should trigger EFI internal filesystem handling. [

Re: [qubes-users] Thoughts on Qubes OS Security... Could be improved.

2016-12-22 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Dec 22, 2016 at 05:16:15AM -0800, Grzesiek Chodzicki wrote: > W dniu poniedziałek, 14 listopada 2016 21:25:32 UTC+1 użytkownik Marek > Marczykowski-Górecki napisał: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA2

Re: [qubes-users] help updating dom0 - no network - stuck with lots of pending updates

2016-12-22 Thread Marek Marczykowski-Górecki
and line version of restore tool (qvm-backup-restore) allow you to rename conflicting VMs (--rename-conflicting). The template will be restored under different name (with "1" at the end), then you can switch your VMs to that template. And after you switch all the VMs, you can remove old te

Re: [qubes-users] Salt / qubesctl errors when configuring USB

2017-01-15 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, Jan 15, 2017 at 08:02:17PM -0500, Chris Laprise wrote: > On 01/15/2017 05:02 PM, Marek Marczykowski-Górecki wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > On Sun, Jan 15, 2017 at 04:10:49PM

Re: [qubes-users] New Qubes installer image?

2017-03-20 Thread Marek Marczykowski-Górecki
t will have updated templates, especially newer default Fedora template, and also updated kernel. We haven't decided for specific versions yet, but I'd like to have Fedora 25 and kernel 4.9.x there. Both need some testing first and need to hit stable repository before building new ISO image (ke

[qubes-users] Re: [qubes-devel] Re: Announcing the Xen Security Advisory (XSA) Tracker

2017-03-21 Thread Marek Marczykowski-Górecki
lease provide any feedback (positive or negative) about the update. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcB

[qubes-users] Re: [qubes-devel] Re: QSB #29: Critical Xen bug in PV memory virtualization code (XSA-212)

2017-04-04 Thread Marek Marczykowski-Górecki
or is that an oversight? Packages by default are uploaded to current-testing repository. Moving to security-testing require maintainer decision. Done now, you can see it here: https://github.com/QubesOS/updates-status/issues/26 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: B

Re: [qubes-users] Re: [qubes-devel] Re: QSB #29: Critical Xen bug in PV memory virtualization code (XSA-212)

2017-04-04 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Apr 04, 2017 at 09:53:02AM -0600, Reg Tiangha wrote: > On 04/04/2017 08:14 AM, Marek Marczykowski-Górecki wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > Packages by default are uploaded to

Re: [qubes-users] HOWTO: Compiling Kernels for dom0

2017-04-16 Thread Marek Marczykowski-Górecki
d stuff in it (it > won't touch the rpm directory though so your output will still be saved). > > > Compiling and customizing Linux kernels isn't too difficult. The main > costs are in disk space and compilation time, especially if you're > working with older or slower hardware. B

Re: [qubes-users] UEFI installation issue

2017-04-19 Thread Marek Marczykowski-Górecki
/swap. Or the other way around. And also adjust root= accordingly (may require using UUID=... notation, but I cannot tell based on the above info, before decrypting it). - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally

Re: [qubes-users] UEFI installation issue

2017-04-19 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Apr 19, 2017 at 09:21:10PM +0200, Marek Marczykowski-Górecki wrote: > On Wed, Apr 19, 2017 at 02:07:37PM +, Wim Vervoorn wrote: > > Hello Marek, > > > > I also tried booting using the xen.cfg file. > > >

Re: [qubes-users] UEFI installation issue

2017-04-19 Thread Marek Marczykowski-Górecki
3 Hmm, this actually may be a problem. I'm not sure what status=8003 is, but if accessing efivars does not work, efibootmgr would not work, so can't add Qubes entry. Does `efibootmgr - -v` show anything? Other than that, I also can't see anything interesting. - -- Best Regards, Mar

Re: [qubes-users] feedback for todays kernel-qubes-vm update (4.4.55-11)

2017-04-18 Thread Marek Marczykowski-Górecki
e default (4.4.55). > > This was mainly an UI thing. qvm-ls -k displayed it correctly. These > affected VMs used to have the now-removed kernel version 4.4.14-11. > Qubes Manager just can not display not installed kernels. So, Qubes Manager shows still old kernel? Have you tried res

Re: [qubes-users] do I really need these packages in dom0 :?

2017-03-03 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, Mar 03, 2017 at 03:15:59PM +0300, Oleg Artemiev wrote: > On Fri, Mar 3, 2017 at 12:34 AM, Oleg Artemiev <grey.o...@gmail.com> wrote: > > On Thu, Mar 2, 2017 at 11:01 PM, Marek Marczykowski-Górecki > > <marma...@invis

Re: [qubes-users] Upgrading from Qubes 3 to 4.

2017-03-07 Thread Marek Marczykowski-Górecki
es.xml format. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJYvyLSAAoJENuP0xzK19csi50IAJLk598lUZDTEpE2Ok

[qubes-users] Re: [qubes-devel] Qubes Canary #11

2017-03-12 Thread Marek Marczykowski-Górecki
> I will interpret the a lack of a properly-signed quickly-delivered > official answer as "Yes, we should be interested" and attempt to > investigate further. It is there, just moved to "Disclaimers and notes" section, as it isn't really special - given it's in every canar

Re: [qubes-users] Feedback request: Incremental file-based backup PoC

2017-03-02 Thread Marek Marczykowski-Górecki
bes-issues/issues/2340#issuecomment-263562644 - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAE

<    1   2   3   4   5   6   7   8   >