[qubes-users] rebuilding xorg-x11-drv-intel to fix graphics problem

2020-05-23 Thread Holger Levsen
hi, so I think I'm experiencing https://bugs.freedesktop.org/show_bug.cgi?id=112296 when running Qubes 4.0 with a 4.19 kernel on a x230, that is, since the following line appeared in Xorg.0.log: ==> /var/log/Xorg.0.log <== [ 19271.994] (EE) intel(0): Failed to submit rendering commands (No such

[qubes-users] good bye, qubes-users list

2019-02-28 Thread Holger Levsen
hi, unman wrote today: Please consider the guidelines and be respectful and polite to others. None of these accusations of trolling help build the commmunity, or advance Qubes. and while I totally agree with this I've also decided that the latest conspirancies and insults on

Re: [qubes-users] Re: why mail-list?

2019-02-06 Thread Holger Levsen
On Wed, Feb 06, 2019 at 12:51:04PM -0600, John Goold wrote: > It's an interesting discussion. yes, but it's also entirely off-topic for this list. please stop it. -- tschau, Holger ---

Re: [qubes-users] Re: why mail-list?

2019-02-06 Thread Holger Levsen
On Wed, Feb 06, 2019 at 11:34:57AM -0500, kitchm via Forum wrote: > [...] BTW, you are certainly not polite, > but you are obviously such a whiner since you continue to > whine about me and make this personal. can you all please stop your ad-hominem attacks and off-topic discussions and keep

getting rid of ME on modern CPUs (Re: [qubes-users] QSB #46: APT update mechanism vulnerability)

2019-01-28 Thread Holger Levsen
On Mon, Jan 28, 2019 at 11:46:55AM -0600, Stuart Perkins wrote: > Up to a certain manufacture, you can go to coreboot and lose the ME entirely. > After that point, setting the HAP bit may be your best option. We need > someone to to reverse engineer the ME and implement enough of it in

Re: [qubes-users] QSB #46: APT update mechanism vulnerability

2019-01-27 Thread Holger Levsen
On Sun, Jan 27, 2019 at 12:54:26AM +, unman wrote: > > Keep in mind that all PGP Debian/Ubuntu signing keys have been stolen > Do you have *any* evidence for this claim? I *believe* they probably misunderstood evil32.com and it's fallout. -- tschüß, Holger

Re: [qubes-users] Debian Template APT Vulnerability - A ticking bomb?

2019-01-27 Thread Holger Levsen
On Sun, Jan 27, 2019 at 02:37:16AM -0800, goldsm...@riseup.net wrote: > > 2/ > > Imagine that apt-transport-https *had* been adopted - have you actually > > looked at the list of vulnerabilities in libcurlnd the various > > breakages in the TLS CA system? that. plus, apt is running as root and

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-15 Thread Holger Levsen
On Thu, Nov 15, 2018 at 10:07:31AM +0100, qubes-...@tutanota.com wrote: > > has this (updating the HCL for Librem 13v2) happend now? this was and is my point, here+now. -- cheers, Holger ---

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-14 Thread Holger Levsen
On Sat, Nov 10, 2018 at 09:24:40AM -0800, Kyle Rankin wrote: > It's a shame this thread got hijacked by people... [...discussing other stuff...] > Could someone who is responsible for the HCL please update it with the data > I've provided in this thread? This would update the HCL with a version

'invisible' blobs are blobs too (Re: [qubes-users] HCL - Purism Librem 13 v2)

2018-11-12 Thread Holger Levsen
On Sun, Nov 11, 2018 at 03:45:21PM +, unman wrote: > lenovo x230s are still widely available, and great for Qubes. while I agree with that, I want to point out that they contain several non free blobs which cannot be changed. just because there was so much purism bashing in this thread. :-D

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-10 Thread Holger Levsen
On Sat, Nov 10, 2018 at 09:24:40AM -0800, Kyle Rankin wrote: > It's a shame this thread got hijacked by people slandering the company. indeed. > PS. For what it's worth we continue to work earnestly behind the scenes to > liberate the remaining binary blobs (FSP and what remains of the ME after

Re: [qubes-users] Re: SSD hardware encryption vulnerabilities (Radbound University)

2018-11-06 Thread Holger Levsen
On Tue, Nov 06, 2018 at 07:09:52AM -0800, jonbrownmaste...@gmail.com wrote: > Does this effect Qubes OS? no. (Qubes OS uses software encryption. You can however manually enable hardware encryption like you can on any OS.) -- cheers, Holger

Re: [qubes-users] Replacement for Lenovo x230 (coreboot'able + high res)

2018-10-27 Thread Holger Levsen
On Sat, Oct 27, 2018 at 03:08:22AM +0200, Maillist wrote: > Unfortunately, with coreboot (assuming you mean a security relevant > coreboot), there are none which fit your specs.However, its possible to > hack a 13.3 FHD display in an x230. https://forum.thinkpads.com/viewtopic.php?t=122640

Re: [qubes-users] Qubes and i3 window manager

2018-10-24 Thread Holger Levsen
On Wed, Oct 24, 2018 at 02:13:58AM -0700, mike wrote: > Could anyone please share some Qubes + i3 tips and tricks? > For instance, how do you launch applications from different qubes using dmenu? > What is the actual command to launch an application in a qube? > Where can I find a source/config

Re: [qubes-users] unable to install enigmail in debian-9 template

2018-10-22 Thread Holger Levsen
hi, On Sun, Oct 21, 2018 at 05:05:54PM -0700, Josefa Hays wrote: > I've been using the Enigmail-plugin for many years. However I just > realized it had disappeared from Thunderbird. When trying to reinstall > it in the Debian-9 template I get the following error: [...] > I realize this is

Re: [qubes-users] Whonix support ending for Qubes 3.2

2018-10-06 Thread Holger Levsen
On Fri, Oct 05, 2018 at 10:26:18PM -0500, Andrew David Wong wrote: > the Qubes OS > Project will continue to support Qubes 3.2 as planned until 2019-03-28. [6] thank you, Qubes OS! > [...] Users who decide to continue using Whonix on Qubes 3.2 do so > at their own risk. this has been the case

Re: [qubes-users] External monitor resolution

2018-09-25 Thread Holger Levsen
On Mon, Sep 24, 2018 at 06:52:30PM -0300, Franz wrote: > I understand that the Lenovo x230 does not have the power to properly set > the two displays each with the correct resolution, but in mirror mode, they > are exactly the same and it works. I use an x230 here with an external 4k display and

Re: [qubes-users] Re: dom0 uses 105%+ of cpu

2018-09-18 Thread Holger Levsen
On Tue, Sep 18, 2018 at 03:11:10PM -0700, Guy Frank wrote: > Could someone clue me in on whether it's unusual for dom0 to be perpetually > running the processor at at least 105% all the time according to xentop? 13% here, when not displaying anything else on the screen. 27% when playing music...

[qubes-users] Re: [qubes-devel] Whonix version support policy

2018-09-14 Thread Holger Levsen
On Thu, Sep 13, 2018 at 09:00:40PM -0500, Andrew David Wong wrote: > * One month after a new stable version of Qubes OS is released, Whonix >TemplateVMs will no longer be supported on any older version of Qubes >OS. I'm quite disappointed by this. -- cheers, Holger

Re: [qubes-users] Guide: Monero wallet/daemon isolation w/qubes+whonix

2018-08-14 Thread Holger Levsen
On Tue, Aug 14, 2018 at 07:42:00PM +, Patrick Schleizer wrote: > Now reference here: > https://www.whonix.org/wiki/Monero > > > I am wondering how to save users from as many manual steps as possible. since a bit more than 2 weeks monero can be installed on stretch with 'sudo apt install -t

[qubes-users] Re: [qubes-devel] Fedora 26 and Debian 8 approaching EOL

2018-05-25 Thread Holger Levsen
On Thu, May 24, 2018 at 07:29:18PM -0500, Andrew David Wong wrote: > Thank you for the correction. I've updated the announcement on the > website to clarify this: > https://github.com/QubesOS/qubes-posts/commit/3db9a35e297b3defa0863f8ab02ebd56e8384053 thank you, looks good! -- cheers,

[qubes-users] Re: [qubes-devel] Fedora 26 and Debian 8 approaching EOL

2018-05-24 Thread Holger Levsen
On Wed, May 23, 2018 at 08:21:12PM -0500, Andrew David Wong wrote: > Fedora 26 will reach EOL ([end-of-life]) on 2018-06-01, and Debian 8 > (["Jessie" full, not LTS][debian-releases]) will reach EOL on > 2018-06-06. We strongly recommend that all Qubes users upgrade their > Fedora 26 and Debian 8

[qubes-users] sweethome3d (java app) on Qubes

2018-05-23 Thread Holger Levsen
hi, I've been trying to use sweethome3d from Debian stretch (so "apt install sweethome3d") but I cannot draw any walls or rooms, the tool immediatly stops with a 0cm length wall. I tried this with Qubes and the i3 window-manager, while I know that a friend uses sweethome3d and i3 on plain Debian

Re: [qubes-users] Run "cd /path/to/file" Command with qvm-run

2018-05-14 Thread Holger Levsen
On Mon, May 14, 2018 at 03:34:00AM -0700, cr33dc0...@gmail.com wrote: > Does anyone know how to use cd command with qvm-run? qvm-run --pass-io personal "cd /home/user/Desktop/ ; ls" -- cheers, Holger -- You received this message because you are subscribed to the Google Groups

Re: [qubes-users] VM maximum size is too small

2018-05-04 Thread Holger Levsen
On Fri, May 04, 2018 at 09:01:13AM -0700, Reza wrote: > 3) I click on "settings" icon (the wheel)and I increase the "private storage > max size" from 2048 to its max value 10240 (written right below as 'system > storage max size'). you want to increase the private storage size, not the system

Re: [qubes-users] Guide on installing Qubes and Coreboot with encrypted boot on thinkpads

2018-04-13 Thread Holger Levsen
Hi, On Fri, Apr 06, 2018 at 08:25:37PM +0200, 799 wrote: > as described in the howto I have extracted the vga.rom from my own > BIOS-files. > I can use resume and the laptop reconnects its network adapters as soon as > it wakes up. > So far no issues at all. thanks for explaining. > > The

Re: [qubes-users] Guide on installing Qubes and Coreboot with encrypted boot on thinkpads

2018-04-06 Thread Holger Levsen
hi, On Fri, Apr 06, 2018 at 09:22:52AM +, 799 wrote: > As mentioned I have also drafted a how-to to setup Coreboot on a X230, > including building the pi, flashrom and extracting Blobs. out of curiosity: does resume work reliably for you? For me it didnt with coreboot (and the free VGA bios)

Re: [qubes-users] How do I load firmware-atheros into Qubes 4.0 R5?

2018-03-30 Thread Holger Levsen
On Thu, Mar 29, 2018 at 03:38:34PM -0400, taii...@gmx.com wrote: > My issue is with purisms incredibly dishonest marketing, their pressure > campaigns on the FSF, their insulting of their competitors - not their > existence in general or the practice of selling of laptops that are only > slightly

Re: [qubes-users] bash autocomplete

2018-03-11 Thread Holger Levsen
On Sun, Mar 11, 2018 at 02:11:02PM +0100, haaber wrote: > I don't know what this 3D-thing, is I'll learn it. I have, in the > meanwhile, tested the attached file, that distinguishes also running, > paused and halted VM's. For the moment this is completely sufficient for > me. Maybe I'll add the

Re: [qubes-users] bash autocomplete

2018-03-11 Thread Holger Levsen
On Fri, Mar 02, 2018 at 07:10:22PM +, Holger Levsen wrote: > On Tue, Feb 27, 2018 at 03:23:50PM +0100, haaber wrote: > > to have the shell behave nicer. If I have some free time, I might > > customize this stub to suggest available options to all qvm-* and > > qubes-* com

Re: [qubes-users] bash autocomplete

2018-03-02 Thread Holger Levsen
On Tue, Feb 27, 2018 at 03:23:50PM +0100, haaber wrote: > to have the shell behave nicer. If I have some free time, I might > customize this stub to suggest available options to all qvm-* and > qubes-* commands. I am surprised that I might be the first one to > discuss this subject (?!)

Re: [qubes-users] size difference between 4.9 and 4.14 kernels

2018-02-08 Thread Holger Levsen
On Wed, Feb 07, 2018 at 11:01:33AM +0100, Marek Marczykowski-Górecki wrote: > I think this is just about estimation of used disk space - one package > is already installed and rpm know how much disk space is really used, > the other one have only some estimation in rpm metadata. ah, right. I'm a

[qubes-users] size difference between 4.9 and 4.14 kernels

2018-02-06 Thread Holger Levsen
hi, on 3.2 I ran "sudo qubes-dom0-update" this morning, followed by "sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing --action=upgrade kernel-qubes-vm" which then prompted me with this: Installing: kernel x86_64 1000:4.14.13-3.pvops.qubes

Re: [qubes-users] Re: Qubes OS 4.0-rc4 has been released!

2018-02-01 Thread Holger Levsen
On Thu, Feb 01, 2018 at 09:58:34AM -0800, alexclay...@gmail.com wrote: > Are there plans for the final 4.0 release to have a direct upgrade path from > 3.2? Or do we just backup all of our VMs, fresh install 4.0, then restore our > VMs? the latter. -- cheers, Holger -- You

[qubes-users] -> Backing up files: 78%... ERROR: Failed to perform backup: error in addproc

2018-01-19 Thread Holger Levsen
hi, I was just doing a backup (using the qvm-backup cli tool on 3.2) which then suddenly crashed with this line: -> Backing up files: 78%... ERROR: Failed to perform backup: error in addproc I couldn't investigate further yet, but I suppose it failed to backup a specific VM - which is bad - and

Re: [qubes-users] Qubes 4.0-rc3

2018-01-12 Thread Holger Levsen
On Fri, Jan 12, 2018 at 01:04:23PM +, 'Tom Zander' via qubes-users wrote: > On Friday, 12 January 2018 11:18:19 GMT 'awokd' via qubes-users wrote: > > Would it be of value if I went through the published Docs and added these > > version headers? Should newer versions be added at the top (so

Re: [qubes-users] Is Qubes effected by the Intel kernel memory leaking bug?

2018-01-04 Thread Holger Levsen
On Thu, Jan 04, 2018 at 05:40:27AM -0800, stephenatve...@gmail.com wrote: > On Thursday, 4 January 2018 13:39:46 UTC+1, eva...@openmailbox.org wrote: > > 3.2 affected? When patch will be available? :( > My impression is that 3.2 isn't being patched pending 4.0, but I could be > wrong there. you

Re: [qubes-users] Re: Duplicate MAC address error

2017-12-22 Thread Holger Levsen
On Fri, Dec 22, 2017 at 02:34:41AM -0800, Reynir Björnsson wrote: > It may be a coincidence, but when it happened to me I got sys-net running by > shutting down sys-whonix first. I've since disabled sys-whonix and haven't > had the issue again, although I haven't been rebooting much since. I

Re: [qubes-users] qubes-mirage-firewall 0.4

2017-12-21 Thread Holger Levsen
On Wed, Dec 20, 2017 at 10:04:57PM +0100, donoban wrote: > If I'm not wrong you have to configure the rules for the firewall before > building the kernel image? Once you start it you have no way for change > rules? yes, this is true currently. but then I have been using Qubes for nearly a year

Re: [qubes-users] Re: Attempting to securely wipe drives, running into issue.

2017-12-20 Thread Holger Levsen
On Wed, Dec 20, 2017 at 01:15:23PM +0100, 'Tom Zander' via qubes-users wrote: > On Wednesday, 20 December 2017 11:59:26 CET Holger Levsen wrote: > > oh, and if you want to securly erase data, use /dev/random, not > > /dev/urandom. > > This is not good advice, your /dev/rando

Re: [qubes-users] Re: Attempting to securely wipe drives, running into issue.

2017-12-20 Thread Holger Levsen
On Wed, Dec 20, 2017 at 12:50:38AM +0100, Ángel wrote: > openssl enc -aes-256-ctr -pass pass:"$(dd if=/dev/urandom bs=128 count=1 > 2>/dev/null | base64)" -nosalt | pv -bartpes | sudo dd bs=64K of=/dev/sd"X" on Debian this is much easier done with sudo apt install wipe sudo wipe /dev/sda

Re: [qubes-users] Atheros AR928X & Q4.0rc3 Passthrough

2017-12-17 Thread Holger Levsen
On Sat, Dec 16, 2017 at 02:21:30PM -, 'awokd' via qubes-users wrote: > Getting crashes on domU boot with an assigned Atheros wireless PCIe card > under Qubes 4.0rc3 with both PV and HVM. Any suggestions how to accomplish > it? Some of the posts/threads I find go back to 2010 but I'm still >

Re: [qubes-users] Boot QUBES with kexec

2017-12-10 Thread Holger Levsen
On Sun, Dec 10, 2017 at 03:05:11PM +0100, Robert Walz wrote: > Does anybody know how to kexec the xen hypervisor? http://osresearch.net/ uses kexec to boot Qubes. -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] qvm-convert-img: ValueError: No icon received

2017-11-28 Thread Holger Levsen
On Sun, Nov 26, 2017 at 05:50:17PM +, Unman wrote: > > > It's a bug Holger. > > > Scoot on over to GitHub and raise an issue > > is it really? I cannot believe it's broken (in 3.2) and noone has raised > > an issue yet… > Well someone has to be first :-) > > truth , I dont think that many

Re: [qubes-users] qvm-convert-img: ValueError: No icon received

2017-11-26 Thread Holger Levsen
On Sun, Nov 26, 2017 at 04:40:08PM +, Unman wrote: > On Sun, Nov 26, 2017 at 04:22:04PM +0000, Holger Levsen wrote: > > on 3.2: using debian-9 I should have said too… > > $ qvm-convert-img image.jpg image_clean.jpg [...] > > ValueError: No icon received > >

[qubes-users] qvm-convert-img: ValueError: No icon received

2017-11-26 Thread Holger Levsen
hi, on 3.2: $ qvm-convert-img image.jpg image_clean.jpg Traceback (most recent call last): File "/usr/lib/qubes/qimg-convert-client", line 47, in main() File "/usr/lib/qubes/qimg-convert-client", line 41, in main img = qubes.imgconverter.Image.get_through_dvm(args.src) File

Re: [qubes-users] Upgrading from rc2 to release.

2017-11-07 Thread Holger Levsen
On Mon, Nov 06, 2017 at 07:35:58PM -0800, jkitt wrote: > Is this just a case of running a Dom0 update? Or would I have to manually > install the stable release? > FYI: I'm still on 3.2. you need to backup 3.2, install 4.0 and restore the backup. this is described in the release notes. --

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users wrote: > so from my understanding, "blobs" is a synonym for proprietary code, right ? it's a synonym for "binary object" where in general you don't have the source code. > I mean if it doesn't really matter for security I

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users wrote: > What is the difference between Coreboot and Libreboot ? Libreboot is Coreboot with all the non-free blobs removed (and no free software added instead). So if you happen to have hardware which needs those blobs, you

Re: [qubes-users] Docker & dev embbeded on Qubes OS on P51

2017-10-19 Thread Holger Levsen
On Thu, Oct 19, 2017 at 01:55:08PM +0200, deadbrain wrote: > thanks for the answer I may use a Debian/sid plus siduction kernel > inside this VM For my use case standard headers are sufficient , I don't > see the value added to install its own kernel, could you give more details > please?

Re: [qubes-users] Docker & dev embbeded on Qubes OS on P51

2017-10-19 Thread Holger Levsen
On Thu, Oct 19, 2017 at 04:29:51AM -0700, jerome.moli...@gmail.com wrote: > -> 2) From time to time I am providing Java consulting, and now many > customers use docker containers (no comments -) ) ... Is it possible inside a > VM to run Docker ? No problem with firewalling & other stuff... yes,

Re: [qubes-users] template VMs loosing connectivity

2017-10-18 Thread Holger Levsen
On Wed, Oct 18, 2017 at 10:59:52AM +, Holger Levsen wrote: > apt gets: cannot connect to 10.137.255.254… still not sure why this happened (and why now), but running systemctl on sys-net made it obvious what the fix was: sudo service qubes-updates-proxy restart -- cheers, Hol

[qubes-users] template VMs loosing connectivity

2017-10-18 Thread Holger Levsen
Hi, I'm running 3.2 and this week for the first time template VMs lost connectivity, as in they couldnt connect to their software repos anymore. A reboot "fixed" this and I could update them again. Then, yesterday, they lost connectivity again… apt gets: cannot connect to 10.137.255.254… and

Re: [qubes-users] After updating Debian Kernel in VM, initramfs can't init

2017-10-14 Thread Holger Levsen
On Sat, Oct 14, 2017 at 03:03:39PM +, Holger Levsen wrote: > I've done the same… just with a slightly different result, though the same > outcome, the VM > in question doesnt boot :( running "sudo update-initramfs -c -k all" fixed this for me… -- cheers, Holge

Re: [qubes-users] After updating Debian Kernel in VM, initramfs can't init

2017-10-14 Thread Holger Levsen
On Wed, Feb 08, 2017 at 03:58:57PM -0800, nicholas roveda wrote: > I've just update the Kernel inside of the Debian Template to the 4.9.2 > version and now, the machine can't start. > > - I installed grub2-xen in dom0 > > - I installed 'qubes-kernel-vm-support', 'kernel-package' and

Re: [qubes-users] kswapd0 using 100% CPU with not even a MB swap in use

2017-10-11 Thread Holger Levsen
On Sun, Oct 08, 2017 at 02:18:06PM +0200, Marek Marczykowski-Górecki wrote: > I've seen this some time ago and `echo 3 > /proc/sys/vm/drop_caches` > helped. No idea why it is spinning... I decided to better use 'echo 3 | sudo tee /proc/sys/vm/drop_caches' and that that worked nicely indeed, I got

[qubes-users] kswapd0 using 100% CPU with not even a MB swap in use

2017-10-07 Thread Holger Levsen
Hi, so kswapd0 is using 100% CPU in one of my Qubes and this makes the fan spin and noisy… and that Qube is hardly using any swap at all: $ free totalusedfree shared buff/cache available Mem:1888212 776484 640712 70296 471016

Re: [qubes-users] Use another Window Manager (awesome) with Qubes OS

2017-09-28 Thread Holger Levsen
On Thu, Sep 28, 2017 at 10:24:54AM -0400, 'One7two99' via qubes-users wrote: > I've recently seen the window manager "awesome" in action which I haven't > heard of before.I would like to give it a try on my Qubes 3.2 installation. I've been using awesome for almost 10 years and when I switched

Re: [qubes-users] Re: Adding a second monitor fails

2017-09-28 Thread Holger Levsen
On Thu, Sep 28, 2017 at 01:21:52AM -0700, Coracle wrote: > I'm getting the message here and elsewhere that Qubes OS doesn't yet support > extended desktops or multiple monitors. no, that's wrong. Qubes supports multiple displays just fine, it's just based on an 1-2 year old version of Fedora,

[qubes-users] auto-restarting nm-applet (on 3.2)

2017-09-27 Thread Holger Levsen
Hi, I've just realized that (almost) everytime after my laptop resumes, I run qvm-run sys-net "killall nm-applet ; nm-applet" manually and that's a bit silly, so I want to automate this this workaround (certainly hoping nm-applet will behave better in 4.0…) so I wonder if there's a better way

Re: [qubes-users] 4.0-rc1 - No 'qvm-trim-template'?

2017-09-27 Thread Holger Levsen
On Tue, Aug 15, 2017 at 07:28:58AM +0200, Graumann, Johannes wrote: > Can anyone enlighten me why 4.0-rc1 does not (yet?) have > 'qvm-trim-template'? Is this not yet implemented or not needed any longer > given the new infrastructure? I'm curious about this as well. There is

Re: [qubes-users] Informational videos about Qubes

2017-08-28 Thread Holger Levsen
On Sun, Aug 27, 2017 at 10:33:16PM -0500, Andrew David Wong wrote: > > That sounds reasonable. Could we perhaps have a link to these > > videos (as well as all other third-party materials about Qubes) > > somewhere on the mailing group/IRC channel so that newcomers can > > get acquainted with

Re: [qubes-users] Re: [qubes-devel] Qubes Security Bulletin #32: Xen hypervisor and Linux kernel vulnerabilities (XSA-226 through XSA-230)

2017-08-15 Thread Holger Levsen
On Tue, Aug 15, 2017 at 04:05:27PM +0200, Marek Marczykowski-Górecki wrote: > Actually: > sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing done this now, worked nicely, also rebooted into it and everything seems to be fine. thanks! -- cheers, Holger -- You received

[qubes-users] Re: [qubes-devel] Qubes Security Bulletin #32: Xen hypervisor and Linux kernel vulnerabilities (XSA-226 through XSA-230)

2017-08-15 Thread Holger Levsen
On Tue, Aug 15, 2017 at 04:05:27PM +0200, Marek Marczykowski-Górecki wrote: > Actually: > sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing q.e.d. & thanks! -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users"

[qubes-users] Re: [qubes-devel] Qubes Security Bulletin #32: Xen hypervisor and Linux kernel vulnerabilities (XSA-226 through XSA-230)

2017-08-15 Thread Holger Levsen
Hi, first of all: thanks for this handling this update! On Tue, Aug 15, 2017 at 08:31:31AM -0500, Andrew David Wong wrote: > Patching > = [...] > The packages are to be installed in dom0 via the qubes-dom0-update command or > via the Qubes VM Manager. A system restart will be required

Re: [qubes-users] cannot install kernel 4.9.35 from …-current-testing

2017-08-04 Thread Holger Levsen
On Tue, Aug 01, 2017 at 01:06:24PM +0200, Marek Marczykowski-Górecki wrote: > > I fail to install kernel 4.9.35 on Qubes 3.2, any hints how I can > > accomplish this? > > [user@dom0 ~]$ LANG=C sudo qubes-dom0-update > > --enablerepo=qubes-dom0-current-testing kernel kernel-qubes-vm > Try

[qubes-users] Re: cannot install kernel 4.9.35 from …-current-testing

2017-08-01 Thread Holger Levsen
On Mon, Jul 31, 2017 at 10:53:31PM -0700, Foppe de Haan wrote: > 'sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing --best > --allowerasing' shouldn't error like that. sadly no: [user@dom0 ~]$ LANG=C sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing kernel --best

[qubes-users] Re: cannot install kernel 4.9.35 from …-current-testing

2017-07-31 Thread Holger Levsen
On Mon, Jul 31, 2017 at 10:11:56PM -0700, Foppe de Haan wrote: > and if you add --best --allowerasing to the command? commandline error, no such option :( -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-07-31 Thread Holger Levsen
On Mon, Jul 31, 2017 at 09:17:43PM +, Holger Levsen wrote: > Now I get another error OTOH, but I'll try a fresh reinstallation of 4.0rc1 > first, before > reporting that exact error… whoohooo - that fresh installation on an x260 for the first time showed reliable suspend+resumes,

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-07-31 Thread Holger Levsen
On Mon, Jul 31, 2017 at 10:46:19PM +0200, Marek Marczykowski-Górecki wrote: > Do you have VT-x enabled in BIOS? doh, indeed it was disabled. (Which slightly puzzles me as I had running Qubes 3.2 running on this machine before…) Now I get another error OTOH, but I'll try a fresh reinstallation

[qubes-users] cannot install kernel 4.9.35 from …-current-testing

2017-07-31 Thread Holger Levsen
Hi, I fail to install kernel 4.9.35 on Qubes 3.2, any hints how I can accomplish this? [user@dom0 ~]$ LANG=C sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing kernel kernel-qubes-vm Using sys-firewall as UpdateVM to download updates for Dom0; this may take some time... Running

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-07-31 Thread Holger Levsen
On Mon, Jul 31, 2017 at 01:43:20PM +0200, Marek Marczykowski-Górecki wrote: > We have just released Qubes 4.0-rc1: awesome! I've installed it on a lenovo x260 and upon the end of the installation I had some error concerning sys-firewall stating "could not find capabilities for arch=x86_64",

Re: [qubes-users] Re: The issue of non-proprietary BIOS and Qubes OS

2017-06-21 Thread Holger Levsen
On Wed, Jun 21, 2017 at 10:00:00AM +, Michael Carbone wrote: > FYI x220 also has heads support: > https://github.com/osresearch/heads/pull/190 oh nice! (so they should update their docs… :) -- cheers, Holger -- You received this message because you are subscribed to the Google

Re: [qubes-users] Re: The issue of non-proprietary BIOS and Qubes OS

2017-06-21 Thread Holger Levsen
On Wed, Jun 21, 2017 at 09:57:25AM +0200, math blanc wrote: > Installing Qubes OS 3.x on a X200 sounds like a bad idea to me, isn't ? I'd rather choose an x220 or x230, where you can also clean the ME. Plus, an x230 is supported by heads, which you might also like to use. (see

Re: [qubes-users] Thank you to unman and magicadu!

2017-05-31 Thread Holger Levsen
On Tue, May 30, 2017 at 10:52:10PM -0500, Andrew David Wong wrote: > Please join me in thanking two invaluable members of our community -- > unman and magicadu -- for donating their time and talents. They have > just finished rigorously and painstakingly testing Milestone 3.1 > issues in order to

Re: [qubes-users] Lenovo X1 Carbon 1.gen

2017-05-22 Thread Holger Levsen
On Sun, May 21, 2017 at 07:00:04AM -0700, Finsh wrote: > i recently got interested in the Qubes and i'm thinking on installing it > on a Lenovo X1 Carbon 1gen Type: 3460-1F4. > > I couldn't find this specific Model in the HCL, are there any known issues? I've installed Qubes on mine before it

Re: [qubes-users] ANN: qubes-pass — an inter-VM password manager and store for Qubes OS

2017-05-14 Thread Holger Levsen
On Sat, May 13, 2017 at 02:55:12PM -0500, Andrew David Wong wrote: > > you really dont protect your gpg key with a passphrase?? > See: https://www.qubes-os.org/doc/split-gpg/ oh wow :( > Why is that a problem? It's only visible in dom0. If an attacker is in > dom0, it's already game over. no,

[qubes-users] Re: [qubes-announce] QSB #30: Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214)

2017-05-02 Thread Holger Levsen
On Tue, May 02, 2017 at 07:10:05AM -0500, Andrew David Wong wrote: > We have just published Qubes Security Bulletin (QSB) #30: > Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214). sad news, but very well written, thanks a lot for taking the time to do so! > Commentary >

Re: [qubes-users] say it out (loud) - Qubes OS Stickers

2017-04-20 Thread Holger Levsen
On Wed, Apr 19, 2017 at 08:49:12AM -0700, sackerbo...@gmail.com wrote: > I would love to have a few of these!! printing them is easy, even if getting them printed for free. what's harder is getting a design. does someone have one? -- cheers, Holger -- You received this message

Re: [qubes-users] How to install kernel headers in debian 9?

2017-04-19 Thread Holger Levsen
On Wed, Apr 19, 2017 at 11:42:16AM +0200, c...@company.com wrote: > I've upgraded my debian-8 template to debian-9 (stretch). Now I want to > install vmware player and it asks me where the kernel headers are located. > I could not find them in /usr/src and I also can't find them via apt-cache >

Re: [qubes-users] Re: qubes manager add start terminal

2017-04-17 Thread Holger Levsen
On Sun, Apr 16, 2017 at 05:44:12PM -0600, Reg Tiangha wrote: > That said, being able to right-click in Qubes Manager and quickly launch > any kind of terminal program would be a super useful feature to have. absolutly. should also have a customisable default list of terminals to try as well as a

Re: [qubes-users] qubes boot repair

2017-04-12 Thread Holger Levsen
On Wed, Apr 12, 2017 at 08:42:49AM -0700, jacoblorenzipo...@gmail.com wrote: > bios update resulted in loosing qubes option in efi boot menu > I can boot into qubes boot repair but not sure what to do after > Any suggestions? after you chrooted into the system as suggested by the repair script,

Re: [qubes-users] can't install kernel-qubes-vm from qubes-dom0-unstable repo

2017-04-08 Thread Holger Levsen
On Sat, Apr 08, 2017 at 12:03:55AM -0400, Chris Laprise wrote: > I think 'rpm -qa' is essentially saying the package is installed. I think you misread the output I posted, it was: [user@dom0 ~]$ rpm -qa |grep kernel qubes-core-dom0-linux-kernel-install-3.2.12-1.fc23.x86_64

[qubes-users] can't install kernel-qubes-vm from qubes-dom0-unstable repo

2017-04-07 Thread Holger Levsen
Hi, "long ago" I successfully installed kernel-4.8.12-12 from the qubes-dom0-unstable repo and today I realized that maybe Qubes would be more stable for me, if I'd also install kernel-qubes-vm 4.8.12-12 instead of still using 4.4.38 in the VMs… But… [user@dom0 ~]$ sudo qubes-dom0-update

Re: [qubes-users] usability major bug?

2017-03-22 Thread Holger Levsen
On Wed, Mar 22, 2017 at 03:08:00PM +0300, Oleg Artemiev wrote: > > why do you have to reboot? > Cost of reboot in __understanding__ what the hell is the reason is > less than cost of restoring correct state after reboot. > > I feel like queue in some code is failing to grow. > Usually I detect

Re: [qubes-users] usability major bug?

2017-03-22 Thread Holger Levsen
Hi Oleg, you missed on important bit of information: On Wed, Mar 22, 2017 at 12:12:58PM +0300, Oleg Artemiev wrote: > I have to reboot Qubes R3.2 a few times a day. What do I do wrong? why do you have to reboot? > reproduceable: daily on my workstation > > impact: ability to run 10-15 VMs is

Re: [qubes-users] Can't start my StandaloneVM anymore

2017-03-18 Thread Holger Levsen
On Sat, Mar 18, 2017 at 11:14:07AM -0700, cooloutac wrote: > On Saturday, March 18, 2017 at 2:11:50 PM UTC-4, cooloutac wrote: > > I'm starting to think you're the joke. > Instead of arrogantly telling someone to do a simple search if you are too > lazy to give a solution. Do everyone a favor

Re: [qubes-users] Re: SystemD sucks - qubes shouldn't use it

2017-03-10 Thread Holger Levsen
On Thu, Mar 09, 2017 at 10:06:24PM -0800, Drew White wrote: > systemd is bad, things were simpler and easier without it. you think having a 1000 ways to start deamons (written and maintained by a 1000 people) is more secure and simpler? That's a curious POV… -- cheers, Holger -- You

please, learn to quote…! Re: [qubes-users] Re: Videostream with Qubes??

2017-03-10 Thread Holger Levsen
On Thu, Mar 09, 2017 at 02:26:29PM -0800, Grzesiek Chodzicki wrote: > W dniu czwartek, 9 marca 2017 23:19:23 UTC+1 użytkownik evo napisał: > > Am 03/09/2017 um 11:12 PM schrieb Grzesiek Chodzicki: > > > W dniu czwartek, 9 marca 2017 21:41:02 UTC+1 użytkownik evo napisał: > > >> On 03/09/2017 09:11

[qubes-users] Re: salt, getting started (to disable CAPS LOCK and configure basic tools everywhere)

2017-03-06 Thread Holger Levsen
On Fri, Mar 03, 2017 at 10:38:04PM +, Holger Levsen wrote: > so I've read qubes-doc.git/configuration/salt.md and wonder, /srv/salt is > installed by the qubes packages and the document says the Qubes salt API is > supposed to change between minor release - so where am I supposed to

Re: [qubes-users] Feedback request: Incremental file-based backup PoC

2017-03-06 Thread Holger Levsen
Hi Vít, On Sat, Mar 04, 2017 at 09:53:31AM -0800, Vít Šesták wrote: > Holger, restore is already implemented in some basic form. (I havre mentioned > it here on Mar 1.) I'm sorry, I was wrong indeed and a bit too sarcastic too. I guess this was due to your initial mail where there was no

[qubes-users] salt, getting started (to disable CAPS LOCK and configure basic tools everywhere)

2017-03-03 Thread Holger Levsen
Hi, so I've read qubes-doc.git/configuration/salt.md and wonder, /srv/salt is installed by the qubes packages and the document says the Qubes salt API is supposed to change between minor release - so where am I supposed to put *my* salt config? Also what best practices / tools exist to maintain

Re: [qubes-users] Feedback request: Incremental file-based backup PoC

2017-03-03 Thread Holger Levsen
On Fri, Mar 03, 2017 at 12:42:56PM -0800, Vít Šesták wrote: > Well, I don't see any problem with restore. This is roughly what dom0 does > (or initiates): Vít, please design and *test* your restore. Nobody wants backup, everybody wants restore. -- cheers, Holger -- You received this

Re: [qubes-users] Re: HCL - Lenovo Thinkpad X1 Carbon 4th gen (20FB)

2017-02-28 Thread Holger Levsen
On Mon, Feb 27, 2017 at 03:42:51PM -0500, Chris Laprise wrote: > Do either of you use anti-evil-maid? not yet. -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails

Re: [qubes-users] Re: HCL - Lenovo Thinkpad X1 Carbon 4th gen (20FB)

2017-02-27 Thread Holger Levsen
On Sun, Feb 26, 2017 at 02:56:53PM -0500, Jean-Philippe Ouellet wrote: > In the interest of maximizing list archive utility, I'm attaching a > new HCL here (bumped kernel to 4.8.12-12 & xen to 4.6.4). > > I still have issues with suspend/resume. Sometimes it fails to resume, > and sometimes it

Re: [qubes-users] Qubes and ram

2017-02-24 Thread Holger Levsen
On Wed, Feb 22, 2017 at 05:37:17PM +, Holger Levsen wrote: > echo $(((`(for VM in $(xl list|egrep -v "(Name|dom0)"|cut -d " " -f1) ; do > /usr/lib/qubes/qrexec-client -d $VM user:"/usr/bin/vmstat -s -S K" -t -T|grep > "used memory"|cut -d &qu

Re: [qubes-users] Qubes and ram

2017-02-22 Thread Holger Levsen
Hi, both in qubes-manager as well as in the i3 status bar, Qubes only displays the allocated memory, which pretty much always is 95% of the available memory, so I came up with this one-liner to calculate the really used memory: echo $(((`(for VM in $(xl list|egrep -v "(Name|dom0)"|cut -d " "

Re: [qubes-users] Archlinux template system update

2017-02-20 Thread Holger Levsen
On Mon, Feb 20, 2017 at 05:19:52PM -0300, Franz wrote: > looking for conflicting packages... > :: xorg-server and xf86-input-joystick are in conflict > (X-ABI-XINPUT_VERSION). Remove xf86-input-joystick? [y/N] n do you really need xf86-input-joystick? -- cheers, Holger -- You

Re: [qubes-users] Archlinux template system update

2017-02-20 Thread Holger Levsen
On Mon, Feb 20, 2017 at 03:25:23PM -0300, Franz wrote: > > Also, you should clone the template, and try the forced upgrade in > > the clone. > This seems very safe to try thanks nice howto from Unman indeed! > > If it does not work and you are short of time the you can simply > > switch back to

Re: [qubes-users] qvm-run --dispvm in dom0

2017-02-12 Thread Holger Levsen
On Sun, Feb 12, 2017 at 03:11:59PM +, Holger Levsen wrote: > hm, xfce4-terminal is a somewhat better terminal, IMHO, but what I really > want is one which I can easily configure to support font-size-resizing > via keyboard-ctrols (ctrl +- works out of the box in gnome-terminal) an

  1   2   >