Re: [qubes-users] Running rkt containers directly on zen?

2018-01-10 Thread Naja Melan
Yes,

thanks, I have installed Mirage Firewall.

Some more info that might interest people here. I got some answers from a 
developer of stage1-xen rkt:

https://github.com/rkt/stage1-xen/issues/1#issuecomment-356764768

Also in December Xen launched a new initiative for unikernals, called unikraft. 
This is an initiative to make a standard for unikernels that makes development 
and deployment of them easier:

https://www.xenproject.org/developers/teams/unikraft.html

Im looking forward to a time where most things in Qubes will be running in 
unikernels rather than in full Linux.

Imagine having a unikernel that does all sanitation and validation of data that 
gets sent cross domain, well documented, tested written in Rust for performance 
and safety, with a whitelist approach, rather than all of those python, bash 
and C scripts doing their own sanitation and validation.

It would be much more sane in terms of security, much easier to audit, ...

What about wayland in a unikernel, the graphics drivers, ...?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8a739e97-ef08-55aa-a70c-ff018d74ff58%40autistici.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] subscribe

2018-01-05 Thread Naja Melan
-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/134e0c1f-a868-bffd-cbae-010e3767c694%40autistici.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] all windows in VM just disappeared

2018-01-02 Thread Naja Melan
I have a problem which I would like to resolve (or at least recover from) 
rather than just working around by killing the vm and restarting it.

Sometimes all windows of a guest just disappear. So far what I had done in such 
case was running qvm-start-gui in dom0. This sometimes works but in this case 
it briefly flashes the windows on the screen and then they disappear again. In 
the past I had sometimes seen this in an out of memory situation where it seems 
xorg got killed, but in this case I can't find anything like that in the 
journalctl of the guest.

checking with 'ps -auxw | qubes' I see that qubes-gui is still running, as is 
Xorg and xinit. ~/.xsession-errors had nothing noteworthy and /var/log/Xorg* 
don't exist in guest.

Trying to launch another gui app from the start menu, nothing seems to happen.

it's a fedora-26 template.

I'm wondering if there is any other mechanism by which I could relaunch the 
gui, reconnect to the display to avoid losing work when this happens. 

Any help appreciated

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/63efc25b-b7f0-43c5-c3a4-0f193f0fb069%40autistici.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Running rkt containers directly on zen?

2018-01-01 Thread Naja Melan
Hi,

While searching on the internet I stumbled onto this:

https://github.com/rkt/stage1-xen

Would this work on qubes? Anyone already doing it?

Also found some stuff about rumprun unikernels allowing directly running any 
posix app on xen. It seems awfully quiet about such initiatives, which puzzles 
me because surely being able to run applications in total isolation without the 
overhead (memory, disk, cpu) of a full linux install is very interesting for 
something like qubes right?

What is the current state of affairs? 

Naja Melan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4df77270-1ac2-2d7d-63d1-9fc8eb372cbb%40autistici.org.
For more options, visit https://groups.google.com/d/optout.