[qubes-users] Re: Intel X540-AT2 network card worked in Qubes 3.2, fails in 4.0.1?

2019-01-16 Thread Jarle Thorsen
> Having just installed Qubes 4.0.1 I am not able to get my 10Gb Intel X540-AT2 
> network card to work. It worked out of the box in Qubes 3.2.
> 
> This is what I get in the net-vm:
> 
> $ sudo dmesg |grep ixgbe
> [2.737931] ixgbe: Intel(R) 10 Gigabit PCI Express Network Driver - 
> version 5.1.0-k
> [2.737971] ixgbe: Copyright (c) 1999-2016 Intel Corporation.
> [3.045650] ixgbe :00:06.0: Failed to allocate MSI-X interrupts. Err: 
> -22
> [3.045658] ixgbe :00:06.0: Disabling SR-IOV support
> [3.045665] ixgbe :00:06.0: Disabling RSS support
> [3.049104] ixgbe :00:06.0: Multiqueue Disabled: Rx Queue count = 1, 
> Tx Queue count = 1 XDP Queue count = 0
> [3.181722] ixgbe :00:06.0: MAC: 3, PHY: 0, PBA No: G35632-015
> [3.181730] ixgbe :00:06.0: a0:36:9f:83:8c:e0
> [3.333064] ixgbe :00:06.0: Intel(R) 10 Gigabit Network Connection
> [3.347927] ixgbe :00:06.0 ens6f0: renamed from eth0
> [3.878232] ixgbe :00:06.0: registered PHC device on ens6f0
> 
> The "Failed to allocate MSI-X interrupts" doesn't look very good?
> 
> The problem is that the network link never becomes ready:
> 
> $ sudo dmesg |grep link
> [3.864405] IPv6: ADDRCONF(NETDEV_UP): ens6f0: link is not ready
> [4.013735] IPv6: ADDRCONF(NETDEV_UP): ens6f0: link is not ready
> 
> 
> Is this a known problem? What should I try next?

While waiting for a solution to this problem, can anybody recommend a 10Gb 
network card that *does* work with Qubes 4.x? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/223e-9f53-4904-9bb3-175023024f52%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Intel X540-AT2 network card worked in Qubes 3.2, fails in 4.0.1?

2019-01-16 Thread Jarle Thorsen
Having just installed Qubes 4.0.1 I am not able to get my 10Gb Intel X540-AT2 
network card to work. It worked out of the box in Qubes 3.2.

This is what I get in the net-vm:

$ sudo dmesg |grep ixgbe
[2.737931] ixgbe: Intel(R) 10 Gigabit PCI Express Network Driver - version 
5.1.0-k
[2.737971] ixgbe: Copyright (c) 1999-2016 Intel Corporation.
[3.045650] ixgbe :00:06.0: Failed to allocate MSI-X interrupts. Err: -22
[3.045658] ixgbe :00:06.0: Disabling SR-IOV support
[3.045665] ixgbe :00:06.0: Disabling RSS support
[3.049104] ixgbe :00:06.0: Multiqueue Disabled: Rx Queue count = 1, Tx 
Queue count = 1 XDP Queue count = 0
[3.181722] ixgbe :00:06.0: MAC: 3, PHY: 0, PBA No: G35632-015
[3.181730] ixgbe :00:06.0: a0:36:9f:83:8c:e0
[3.333064] ixgbe :00:06.0: Intel(R) 10 Gigabit Network Connection
[3.347927] ixgbe :00:06.0 ens6f0: renamed from eth0
[3.878232] ixgbe :00:06.0: registered PHC device on ens6f0

The "Failed to allocate MSI-X interrupts" doesn't look very good?

The problem is that the network link never becomes ready:

$ sudo dmesg |grep link
[3.864405] IPv6: ADDRCONF(NETDEV_UP): ens6f0: link is not ready
[4.013735] IPv6: ADDRCONF(NETDEV_UP): ens6f0: link is not ready


Is this a known problem? What should I try next?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/02989017-eb6f-41e1-ac2b-9a4525301d19%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Fedora 26 appvm crashes, how to debug?

2018-08-17 Thread Jarle Thorsen
> VM logs should be in /var/log/xen/console, IIRC. But note that Fedora 26
> is EOL a few months ago. You should probably upgrade to the Fedora 28
> template instead: "sudo qubes-dom0-update qubes-template-fedora-28".

Thanks a lot. Upgraded to Fedora-28 now, hopefully problem solved :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/59674e72-8242-4cc2-a76b-ef7275d1bee7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Fedora 26 appvm crashes, how to debug?

2018-08-16 Thread Jarle Thorsen
I'v been running Qubes 3.2 for a long time and never had problems with crashing 
appvms...

Suddenly one of my appvms based on Fedora 2.6 has begun to randomly shut down 
on me. It seems to be related to me using the gnome file manager (related to 
file activity on mounted samba shares?).

Does Qubes come with any debug information that can help me debug what is 
causing my vm to shut down? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e6cebcd4-6d12-45fb-8d8f-1015ebab0d19%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Slow network speed outside netvm

2018-02-02 Thread Jarle Thorsen
Ilpo Järvinen:
> > Great find Ilpo! Did you have to do some iptables-trickery for this 
> > testing? I have ping working between proxy and appvm, but iperf and nc 
> > both tell me no route to host?
> 
> Yes, I did (it replies with ICMP by default). You'll need to fill in the 
> vif IP-address to this command:
> 
> sudo iptables -I INPUT 1 -i vif+ -p tcp -d ***proxyvmIPhere*** -j ACCEPT

WOW! I can easily push 19Gbit/s from appvm to proxyvm (after turning on SG on 
appvm), but from proxyvm to netvm I can only push 3-4Gbit/s. There HAS to be 
room for some improvement here?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6cab20f3-c327-4149-a7c0-f5f31067b19f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Slow network speed outside netvm

2018-02-02 Thread Jarle Thorsen
Ilpo Järvinen:
> Can you try if you get better throughput between a proxy vm and an appvm 
> using this kind of topology?
> 
> sys-net <-> iperf-srv (proxyvm) <-> iperf-cli (appvm)
> 
> I could push ~10Gbps with one flow and slightly more with more parallel 
> flows between them.

Great find Ilpo! Did you have to do some iptables-trickery for this testing? I 
have ping working between proxy and appvm, but iperf and nc both tell me no 
route to host?

PROXY-VM:

$ ifconfig 
eth0: flags=4163  mtu 1500
inet 10.137.4.34  netmask 255.255.255.255  broadcast 10.255.255.255
inet6 fe80::216:3eff:fe5e:6c20  prefixlen 64  scopeid 0x20
ether 00:16:3e:5e:6c:20  txqueuelen 1000  (Ethernet)
RX packets 86  bytes 6193 (6.0 KiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 162  bytes 14313 (13.9 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73  mtu 65536
inet 127.0.0.1  netmask 255.0.0.0
inet6 ::1  prefixlen 128  scopeid 0x10
loop  txqueuelen 1  (Local Loopback)
RX packets 36  bytes 2016 (1.9 KiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 36  bytes 2016 (1.9 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

vif37.0: flags=4163  mtu 1500
inet 10.137.6.1  netmask 255.255.255.255  broadcast 0.0.0.0
inet6 fe80::fcff::feff:  prefixlen 64  scopeid 0x20
ether fe:ff:ff:ff:ff:ff  txqueuelen 32  (Ethernet)
RX packets 91  bytes 6489 (6.3 KiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 86  bytes 7993 (7.8 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

$ sudo iptables -L
Chain INPUT (policy DROP)
target prot opt source   destination 
DROP   udp  --  anywhere anywhere udp dpt:bootpc
ACCEPT all  --  anywhere anywhere ctstate 
RELATED,ESTABLISHED
ACCEPT icmp --  anywhere anywhere
ACCEPT all  --  anywhere anywhere
REJECT all  --  anywhere anywhere reject-with 
icmp-host-prohibited

Chain FORWARD (policy DROP)
target prot opt source   destination 
ACCEPT all  --  anywhere anywhere ctstate 
RELATED,ESTABLISHED
ACCEPT all  --  anywhere anywhere
DROP   all  --  anywhere anywhere
ACCEPT udp  --  10.137.6.35  gateway  udp dpt:domain
ACCEPT udp  --  10.137.6.35  10.137.4.254 udp dpt:domain
ACCEPT tcp  --  10.137.6.35  gateway  tcp dpt:domain
ACCEPT tcp  --  10.137.6.35  10.137.4.254 tcp dpt:domain
ACCEPT icmp --  10.137.6.35  anywhere
DROP   tcp  --  10.137.6.35  10.137.255.254   tcp dpt:us-cli
ACCEPT all  --  10.137.6.35  anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source   destination

$ route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse Iface
0.0.0.0 10.137.4.1  0.0.0.0 UG0  00 eth0
10.137.4.1  0.0.0.0 255.255.255.255 UH0  00 eth0
10.137.6.35 0.0.0.0 255.255.255.255 UH32715  00 vif37.0


APP-VM:
$ ifconfig 
eth0: flags=4163  mtu 1500
inet 10.137.6.35  netmask 255.255.255.255  broadcast 10.255.255.255
inet6 fe80::216:3eff:fe5e:6c21  prefixlen 64  scopeid 0x20
ether 00:16:3e:5e:6c:21  txqueuelen 1000  (Ethernet)
RX packets 86  bytes 6789 (6.6 KiB)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 91  bytes 7763 (7.5 KiB)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73  mtu 65536
inet 127.0.0.1  netmask 255.0.0.0
inet6 ::1  prefixlen 128  scopeid 0x10
loop  txqueuelen 1  (Local Loopback)
RX packets 0  bytes 0 (0.0 B)
RX errors 0  dropped 0  overruns 0  frame 0
TX packets 0  bytes 0 (0.0 B)
TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source   destination 
DROP   udp  --  anywhere anywhere udp dpt:bootpc
ACCEPT all  --  anywhere anywhere ctstate 
RELATED,ESTABLISHED
ACCEPT icmp --  anywhere anywhere
ACCEPT all  --  anywhere anywhere
REJECT all  --  anywhere anywhere reject-with 
icmp-host-prohibited
DROP   all  --  anywhere anywhere

Chain FORWARD (policy 

Re: [qubes-users] Re: Slow network speed outside netvm

2018-02-01 Thread Jarle Thorsen
Ilpo Järvinen:
> I found this:
> https://wiki.xenproject.org/wiki/Xen-netback_and_xen-netfront_multi-queue_performance_testing

Thanks, I'll have a look.

> It might be that roughly 4Gbps might be what you can get for cross-vm with 
> one flow (but those results are quite old).
> 
> I guess that there are by default two queues per vif (based on the kernel
> thread naming) which would explain why going beyond 2 VCPUs didn't help 
> any. ...Now we only just need to figure out how to configure the number of 
> queues to see if that has some impact on performance (ethtool seems to be 
> unable to do that).
> 
> ...And of course you'll need to use more than one flow to utilize all 
> those queues anyway but I guess you tested also the inter-vm test with 
> more than one flow?

Yes, using 2,4 or 6 flows gives the same result.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/89569c3c-70e4-41cf-9a1c-746333f16df0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Slow network speed outside netvm

2018-02-01 Thread Jarle Thorsen
Ilpo Järvinen:
> I'd next try to tweak the txqueuelen (at the netvm side):
>   sudo ifconfig vifxx.0 txqueuelen 
> 
> Appvm side (eth0) seems to have 1000 but the other side (vifxx.0) has 
> only 64 by default that seems a bit small for high-performance transfers.

Thanks a lot for your help so far!

Unfortunately setting txqueuelen to 1000 did not make any difference...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e413de61-d4b7-4714-86e7-0dee1672b379%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Slow network speed outside netvm

2018-01-31 Thread Jarle Thorsen
Mike Keehan:

> It sounds a bit ambitious to run 10gb per sec from one VM through 
> another and onto the wire.  I suspect you are memory speed limited
> if you are using a straightforward desktop pc.

I'm not sure what is the limiting factor (memory speed, xen overhead?), but I 
just did an iperf test between netvm and appvm only, and I still maxed out at 4 
Gbit/s. This test takes the network card out of the equation and only tests the 
speed between the vms. Maybe somebody can do similar tests on their system?

> Do you know if anyone has achieved this?

I don't know.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5022b631-9a83-4c15-a240-c00d620e67f0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Slow network speed outside netvm

2018-01-31 Thread Jarle Thorsen
Ilpo Järvinen: 
> Please also check that GSO (generic-segmentation-offload) is on at 
> the sending appvm eth0 (I don't remember if the depency logic causes it to 
> get toggled off when SG was off'ed and cannot check it ATM myself).

Yes, GSO is automatically turned on when SG is enabled.

> > I'm still far away from the speed I get inside the netvm though... Maybe 
> > the netvm needs more than 2 vcpus to handle the stress from appvms?
> 
> Could be.

Going from 2 to 4 vcpu in netvm does not make any difference.

> I'm not sure how your appvm is connected to netvm if there's firewall vm 
> in between that would also be relevant.

Appvm goes directly into the netvm without anything (no firewall) in between.
 
> I guess you can try e.g. vmstat 1 in all vms through which the traffic 
> passes through to see if any of them is saturating CPU.

Appvm hardly uses any cpu at all, and netvm is below 50% cpu usage.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/547a1f87-d856-4ae0-9c79-0c3831892bda%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Slow network speed outside netvm

2018-01-31 Thread Jarle Thorsen
Ilpo Järvinen: 
> Scatter-Gather.
> 
> > Are you talking about enabling sg on the virtual network device in the 
> > netvm? 
> > 
> > Something like "sudo ethtool -K vif12.0 sg on" ?
> 
> Yes. For both that and the eth0 in appvm.

This made a huge performance boost! (single threaded iperf went from 1.34 
Gbit/sec to 3.75 Gbit/sec in appvm after enabling SG)

I'm still far away from the speed I get inside the netvm though... Maybe the 
netvm needs more than 2 vcpus to handle the stress from appvms?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d6107dd7-0152-43cc-9de9-b6cf4555a8a3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Slow network speed outside netvm

2018-01-31 Thread Jarle Thorsen
Alex Duboise:
> Interested to find out too. Have you tried from FirewallVM?

Same slow performance when iperf is run from a FirewallVM that is connected to 
the netvm.

> Could you also test what happen when during the load test you start a 
> disposable VM? Does it drop 

Running iperf in the netvm, and starting a disposable vm using the same netvm 
there is no performance drop. (I get 8+ Gbit running one thread, and about 
9,5Mbit when using multiple threads)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3437fe7a-49b6-4477-a1a8-3eeaf30546b5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Slow network speed outside netvm

2018-01-31 Thread Jarle Thorsen
onsdag 31. januar 2018 11.12.33 UTC+1 skrev Ilpo Järvinen følgende:
> On Wed, 31 Jan 2018, Jarle Thorsen wrote:
> > onsdag 31. januar 2018 10.50.09 UTC+1 skrev Jarle Thorsen følgende:
> > > My netvm (Fedora 26 template) has a 10gbe network card, and from 
> > > within the netwm I have no problem saturating the 10Gbit link using 
> > > iperf to an external server.
> > > However, in any vm sending traffic through this netvm I can only get 
> > > around 2Gbit max using the same iperf command against the same server.
> > > 
> > > I have this problem both with appvms using the *same* Fedora template 
> > > as the netvm, and also in Windows HVM.
> > > 
> > > Anybody have experience with Qubes in a 10Gbe network?
> > 
> > I do notice the the process ksoftirqd in the netvm is running at 100% 
> > cpu during the iperf test from the appvm. I'm guessing this is related 
> > to my problem? 
> 
> SG being disabled for the qubes inter-vm interfaces (due to an unknown 
> reason as Marek didn't anymore remember the details for that change) might 
> have some(/huge?) impact on performance as it prevents using some 
> high-speed features of the kernel.

Not quite sure what "SG" is in this context. Is there any settings I can 
experiment with?

Are you talking about enabling sg on the virtual network device in the netvm?

Something like "sudo ethtool -K vif12.0 sg on" ?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/aa95bf82-c3fe-4d54-a7b6-a9ea6d0cfc3e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Slow network speed outside netvm

2018-01-31 Thread Jarle Thorsen
onsdag 31. januar 2018 10.50.09 UTC+1 skrev Jarle Thorsen følgende:
> My netvm (Fedora 26 template) has a 10gbe network card, and from within the 
> netwm I have no problem saturating the 10Gbit link using iperf to an external 
> server.
> 
> However, in any vm sending traffic through this netvm I can only get around 
> 2Gbit max using the same iperf command against the same server.
> 
> I have this problem both with appvms using the *same* Fedora template as the 
> netvm, and also in Windows HVM.
> 
> Anybody have experience with Qubes in a 10Gbe network?

I do notice the the process ksoftirqd in the netvm is running at 100% cpu 
during the iperf test from the appvm. I'm guessing this is related to my 
problem?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e812a2c1-29c4-48f0-bdbd-fefa1da0f00e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Slow network speed outside netvm

2018-01-31 Thread Jarle Thorsen
My netvm (Fedora 26 template) has a 10gbe network card, and from within the 
netwm I have no problem saturating the 10Gbit link using iperf to an external 
server.

However, in any vm sending traffic through this netvm I can only get around 
2Gbit max using the same iperf command against the same server.

I have this problem both with appvms using the *same* Fedora template as the 
netvm, and also in Windows HVM.

Anybody have experience with Qubes in a 10Gbe network?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2b2594f3-35c5-43b6-b5ac-72e68d261be2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Slow network speed in Windows HVM?

2017-12-22 Thread Jarle Thorsen
In Qubes 3.2 I have a Windows 7 HVM (with windows tools installed) connected to 
a NetVM with a 10Gbe network card.

The Windows VM has plenty of memory and cpu-cores allocated. I use iperf to 
test the bandwith to an external server using similar iperf settings in both 
VM's. (Trying different -w and -P settings)

In the netvm I get around 9Gbits/sec as expected, but in the Windows VM it 
maxes out at about 2Gbit/sec?

Is this a known limit in a Windows HVM?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/78add15d-31af-4961-8986-babac59508c1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Use another Window Manager (awesome) with Qubes OS

2017-09-29 Thread Jarle Thorsen
torsdag 28. september 2017 20.09.10 UTC+2 skrev One7two99 følgende:
> Hello Holger,
> 
> 
> 
> > I"ve been using awesome for almost 10 years and when I switched to Qubes
> 
> > half a year ago I wanted to continue using awesome, saw these instructions 
> > and
> 
> > gave i3 a try. (Which is a simple as "sudo qubes-dom0-update 
> > qubes-i3-settings", 
> 
> > logout, changing to i3 in the login manager and login in again.)
> 
> 
> 
> Thank you for the tip, I've watched some i3 videos and it looks good.
> 
> I'll give it a try. Just for info, the installation of i3 is possible via

As a former Awesome user I also now prefer the "simplicity" of i3.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c290dc0d-6e33-4078-b7f9-28b9f8eaa783%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] xfce4-panel - Applications menu, no icons?

2017-09-25 Thread Jarle Thorsen
Having installed i3wm in Qubes 3.2, I still wanted the xfce4-panel:

I manually start it from the i3-config:
exec xfce4-panel --disable-wm-check

The funny thing is that none of the entries in the Applications menu have an 
icon anymore?

They worked just fine with the default xfce desktop, and I see all the icons in 
System Tools -> Application Finder.

Where should I start to look for a solution?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e0363398-4e59-463e-a565-208945e44baa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Convert Fedora appvm to HVM?

2017-08-24 Thread Jarle Thorsen
When working in a specific appvm I find myself having to install new programs 
all the time.

Having to install the new programs in the template and restarting the appvm is 
getting tiresome, and ruining my workflow...

Is there an easy way to create a new HVM based on current template + appvm, or 
should I just start creating a new HVM from scratch?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4cf8557a-2f30-4ba2-97e1-556afe0b4dbf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Configuring i3 window titlebar in Qubes

2017-06-20 Thread Jarle Thorsen
jkitt:

> Strange.. because I've never had to do that, yet my title bar is 
> automagically colored. I think I'm using the package from the testing repo, 
> and also the qubes i3 config found on the wiki.

I also have automagically coloring working, I just wanted to be able to edit 
the settings to make focused windows stand out more from the non-focused 
windows.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7c20d1fc-bfd2-4274-a94d-c0f8ef26284c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Configuring i3 window titlebar in Qubes

2017-06-15 Thread Jarle Thorsen
Having Qubes automatically give the titlebar of the windows the same coulour as 
defined for the VM is a nice thing.

However I would like to make it more easy to visually identify which window is 
in focus, the change of colour for focused windows is too subtle for me.I would 
like to use bold text in the title for example, or make the change of colour 
less subtle.

Is this something I can change myself, or is this hard-coded into the qubes 
version of i3 window manager? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8e21f91f-118b-45cb-9216-0ec16e631a53%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: How can I change the root image file to be launched?

2017-06-08 Thread Jarle Thorsen
Patrick Bouldin:
> Hi,
> 
> Long story but when I launch an app VM that is pointing to the fedora-24 root 
> image (says so on the Qubes VM Manager), it actually looks in the fedora-23 
> folder. In dom0 I have verified that the image file exists in the fedora-24 
> folder, and doesn't any longer exist in the fedora-23 folder (this is 
> correct). 
> 
> Somehow the base template is simply pointing to the wrong place, how can I 
> correct?

Have you tried having a look at (edit?) 
/var/lib/qubes/appvms//.conf?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/861e8544-06d2-4e08-ad3f-6f5e6dfd3419%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Open in (disp)vm from Windows HVM?

2017-06-01 Thread Jarle Thorsen
Is it possible (from the command-line of a Windows VM with Qubes tools 
installed) to open a file in a linux appvm or dispvm?

How? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a52aae71-7468-47a7-9101-55a45f661e9f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Installing qubes-window-tools makes win7 HVM GUI unusable

2017-05-22 Thread Jarle Thorsen
> > I have now found the very slow GUI described in my previous thread 
> > https://groups.google.com/d/msg/qubes-users/gzS8Zc9StxQ/gSwEC-fdFAAJ to be 
> > a direct result of installing the qubes-windows-tools into the VM.
> > 
> > That's why I'm starting a new thread focusing on this problem here.
> > 
> > After initial install of a brand new win7 VM everything works "just fine", 
> > I can drag windows across the desktop even when running VM in max 
> > resolution, without any delay.
> > 
> > However after installing qubes-windows-tools and rebooting it is like I am 
> > running a totally different OS. If I try to drag a window from one place to 
> > the other there is a delay of more than a second before the window is moved 
> > to the new location. Using qubes-windows-tools 3.2.1 or 3.2.2 make no 
> > difference.

I totally didn't expect this, but installing i3 window manager in dom0 (instead 
of default xfce) makes the Windows VM SO much more responsive!

It is still laggy enough that I prefer doing my work via Remmina remote 
desktop, but it is a big step in the right direction!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/24d670c6-5c93-4952-aa81-414ea69f49d6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] qvm-usb -a works on old phone, hangs on new phone

2017-05-05 Thread Jarle Thorsen
Just a quick note to see if anybody have experienced similar problem:

Connecting an old Samsung Galaxy S3 phone to my app-vm using "qvm-usb -a" works 
just fine. I can connect to the phone via adb in the appvm.

Trying to connect a new Samsung Galaxy S7 Edge the same way, the "qvm-usb -a" 
command just hangs without finishing.

Any input?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/23e6cf5d-8544-4d93-b0bb-13e19b442d88%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Network Link Speed in VM?

2017-03-17 Thread Jarle Thorsen
My netVM has a 10Gb network card, and hence a 10Gb link speed on it's network 
interface.

However I notice that my Windows HVM only has a 1 Gb link speed? (I'm unable to 
list the link speed for my linux VMs for some reason?)

Is it possible to get the VMs to use 10Gb network? (or is the link speed just a 
number, and not a speed limit for the VMs?)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/688f20a6-8897-4498-a4ca-313e1f44abf4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: shrink ntfs from qubes - what do use for this?

2017-02-27 Thread Jarle Thorsen
Oleg Artemiev:
> Last time I wanted such a thing I was using a tool like partition
> magic (boot from toolset disk). It was a few years ago. Is there a
> relatively safe way to shrink a win7 partition from linux w/o
> destroyng already installed win7 or current linux tools for this are
> known to be not stable enough?
> 
> Installing windows on my laptop is a long timewaste - once did it for
> games and would like to avpoid it.

gparted should do the trick I think...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1a28edf9-6c79-4376-b594-f6afe3476faf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] NetVM without firewall, no PING from outside?

2017-02-23 Thread Jarle Thorsen
Unman:
> Jarle - there are a few things you could do. One of them would be to
> distribute a static route using your DHCP server -  implementing
> a classless static route if your server supports it would be best. You
> would need to put the external iface of the netVM as the gateway to the
> internal 10.137.0.0/16 network. This won't be easy with DHCP unless you
> put a reservation in place.
> 
> Alternatively you use proxy arp on the external interface of the netVM,
> as you suggest. You don't need it on the vif interfaces because  you
> have the relevant routing information in the netVM. (As you are
> connecting qubes directly to the netVM these routes will be set up
> automatically. You can check this with 'ip route' - If you DID use a
> firewall you would need to add a static route on the netVM with the fw
> as gateway to the qubes connected to it.)

So my local network is 10.0.0.0/16 and default GW for all DHCP clients 
(including my NetVM) is 10.0.0.7

The dynamic IP of the NetVM might be 10.0.1.23. So if a client on my "outside" 
network try to contact an AppVM (10.137.4.23 for example), will it send an 
arp-request (letting arp_proxy do it's trick), or will it just send the packet 
to default GW (who currently has no route to 10.137.4.0/24)?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b83fefb7-774a-4e46-9ada-b66c75537799%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] NetVM without firewall, no PING from outside?

2017-02-23 Thread Jarle Thorsen
Manuel Amador (Rudd-O):
> Qubes-network-server takes care of this for you.

Yes, I know about Qubes-network-server, but I was hoping to get this working 
without requiring static IPs for AppVMs, and also better support for Windows 
VMs. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a1f5c9d0-196e-4d4c-8bc9-13d0420003fa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] NetVM without firewall, no PING from outside?

2017-02-14 Thread Jarle Thorsen
> Unman:
> > I suggest you read the docs:
> > www.qubes-os.org/doc/firewall  has a section on allowing traffic in to
> > qubes.
> 
> Thank you for the link. It provided a good foundation.
> 
> > But this may not be what you want. It reads as if you want to have
> > sys-net operating as a router. You can do this quite simply by changing
> > the iptables configuration and using proxy arp to make sure that the
> > external network sees the qubes behind the router.
> > Alternatively you could use the netvm as a gateway to the network of
> > qubes, and make sure that THAT route is propagated on your internal
> > network.
> 
> Thank you, it seems like using proxy arp is the way to go for me. That way I 
> can still use a dynamic address for my NetVM.

I'm getting back to this thread, still haven't got everything working:

My NetVM is connected to a local network 10.0.0.0/16, and gets a dynamic IP via 
DHCP.

AppVMs connect directly to the NetVM, without any firewall, and all firewall 
rules has been removed from NetVM.

All networking is now working fine, both between AppVMs and from AppVMs and 
into the 10.0.0.0/16 network.

Now I need to have the AppVMs available from the 10.0.0.0/16 network...

Where do I need to enable arp_proxy to make this happen? Only on the NetVM 
interface connected to the 10.0.0.0/16 network, or also on the vif interfaces 
on the NetVM, or in the AppVMs also??

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/382450c2-11c6-40dc-9bea-03840335c104%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Trouble installing Windows SP1 7 64-bit on Qubes 3.2

2017-02-09 Thread Jarle Thorsen
> I have the same Problem :(
> When I change the model type to Cirrus,then appear a libvirtError that 
> doesn't make any sense to me:
> 
> Orignal Message: libvirt.libvirtError: Operation schlug fehl: Domain 
> 'win7x64test2' ist bereits mit UUID ----  
> definiert
> 
> In english it should be something like: libvirt.libvirtError: operation 
> failed: Domain 'win7x64test2' already exists with UUID 
> ----
> 
> The Original command that I run:
> qvm-start win7x64test2 --cdrom=/home/dave/Schreibtisch/win7_x64.iso 
> --custom-config=/home/dave/Schreibtisch/win7x64test2.conf
> 
> Can anyone help me please??

Run "virsh undefine win7x64test2" in dom0, then try again.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dc1534f6-5a9f-4ad8-9ef2-e04e4467b525%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Installing qubes-window-tools makes win7 HVM GUI unusable

2017-02-03 Thread Jarle Thorsen
I have now found the very slow GUI described in my previous thread 
https://groups.google.com/d/msg/qubes-users/gzS8Zc9StxQ/gSwEC-fdFAAJ to be a 
direct result of installing the qubes-windows-tools into the VM.

That's why I'm starting a new thread focusing on this problem here.

After initial install of a brand new win7 VM everything works "just fine", I 
can drag windows across the desktop even when running VM in max resolution, 
without any delay.

However after installing qubes-windows-tools and rebooting it is like I am 
running a totally different OS. If I try to drag a window from one place to the 
other there is a delay of more than a second before the window is moved to the 
new location. Using qubes-windows-tools 3.2.1 or 3.2.2 make no difference.

Which log files should I look into (post here?) to track this down?

 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/337b9945-aaf1-431e-81fe-0daff0cd1586%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Possible to get usable Win7 gui?

2017-02-03 Thread Jarle Thorsen
> "Is it possible to have a Windows VM without any lag".
> 
> Yes, I can confirm that it is possible. I run Windows 7 completely lag free 
> on Qubes OS, it feels very snappy and instant, just as if it was running bare 
> metal. Both with or without seamless mode. 
> 
> I've installed Qubes Windows Manager completely according to the official 
> Qubes guidelines.
> 
> My setup that runs Win7 smoothly
> - QVM instance: Windows 7 64-bit
> - CPU: i5 6500 3.2GHz (default set to two cores). 
> - Total system RAM: 24GB 
> - QVM Win7 memory allocation: 5GB.
> - Disc allocation: 100GB (Make sure Windows has plenty free space).
> - Graphics: Intel HD Graphics 530 (CPU integrated graphics)
> - Triple monitor setup, all controlled by Intel integrated graphics 
> (HDMI/HDMI/VGA).
> - Seamless mode, sometimes on, sometimes off.
> 
> In case you use VGA monitors, then VGA monitor in my case causes some issues 
> that impacts screen tearing a bit if used together with HDMI, only a slight 
> second when moving app between screens. It is slightly annoying though, and I 
> haven't looked into that yet. Though just be aware that VGA monitors might 
> not play too well with HDMI/Display monitors, in case you use a setup like 
> that.
> 
> You don't need 24GB memory, i.e. I got more than plenty, you will be fine 
> with less. How much is a good guess though, I would say total system 8k GB 
> memory is fine (Qubes 4k, Windows 4k each is fine for normal use), just don't 
> open too many memory hungry VM's at the same time.
> 
> My CPU and its integrated graphics isn't top notch, but not all bad either, 
> so if your system is anywhere near these specs, it is probably a 
> software/driver/Bios-setting issue and not hardware performance related.
> 
> I found in my early Qubes days that Nvidia with the nouveau driver was laggy 
> as hell, to put it mildly. My nvidia GPU that I first ran Qubes on was 
> GTX1060, which is now retired from my Qubes setup. The GTX 1060 with nouveau 
> ran though, barely. It was by no means smooth, neither in Dom0 or any QVM's, 
> one big hell of lag. Some older graphic cards than 1060 might do better with 
> the nouveau drivers, but the newer the card the less perfect it will likely 
> run in Qubes (i.e. might be the case in your situation). The moment I took 
> out my monitors from my nvidia card and instead plugged them to my 
> motherboard internal graphics, I became completely lag free, and everything 
> was really smooth (Shutdown Qubes first, so it can boot proper graphic 
> drivers). I get stressed by lag, so I can definitely say that the contrast 
> was big to when I used nvidia, I feel nothing now with Intel graphics, it's 
> smooth. As many has said before with Qubes, Intel or many of the AMD 
> graphics, just works. Nvidia with their monopolistic product designs is a big 
> pain in the *** as they try to shove their market fragmented profit maximized 
> proprietary garbage down our throats... *ahem*... we lack competition (Go 
> AMD!). 
> 
> Anyway, In Bios, in case you have such a setting, then make sure to check if 
> on-board graphics are set to CPU, and not GPU. Furthermore be vary of any 
> "shared" memory features between CPU/GPU in the BIOS, when I turned mine on 
> it made Qubes's graphics teary and really laggy. This might hypothetically be 
> more or less laggy depending on the hardware used, make sure to test the 
> difference by turning it off if you got it on.
> 
> So if you got multiple graphic cards, this may be a source to your problems, 
> especially if it is nvidia. If you are dual-booting (despite that it isn't 
> the best to do in terms of security), then you can still make use of your 
> nvidia card in other OS's, i.e. Windows should still detect your nvidia card. 
> If you are running it on a desktop instead of a laptop, then you can use a 
> KVM switch to switch between CPU/GPU graphic cards as you dual boot.
> 
> Qubes OS doesn't need heavy graphics anyhow, not as long as heavy graphics 
> industry users, or gamers, isn't a supported audience target group by the 
> Qubes developers. 
> 
> Off-topic: However it has me puzzled why nothing more hasn't been done to 
> support heavy graphics, it would make many more potential users interested in 
> Qubes OS if it was possible to run heavy graphics on Qubes, such as games. 
> Perhaps the security issue it creates is just too big and unfix-able or time 
> consuming *shrugh* 
> 
> Lagging (pun intended ;) a bit info on your hardware setup, so I took the 
> liberty to make guesses. I hope any of this was of help to you, I had a laggy 
> Qubes too before I found the proper setup (i.e. ditching my nvidia card).
> 
> P.s. if you haven't tried already, try experiment and reduce the resolution 
> to something less, see if it makes any difference.

Thank you very much for your very thorough answer!

OK, I'll add some more info about my HW:

I have a Dell workstation with 2 x Xeon E5-2687W CPUs with a total of 16 
physical cores, 

Re: [qubes-users] Re: Possible to get usable Win7 gui?

2017-02-02 Thread Jarle Thorsen
> hmm weird,  my windows 7 vm is a little laggy,  but I figured its normal.   
> it doesn't increase over time for me and doesn't seem that bad.  Have you 
> tried to set the windows system setting to performance mode?
> 
> If you try to do gpu intensive tasks it might be an issue though.

My system settings is already at performance mode, no GPU intensive tasks. Just 
moving windows on the screen is a pain...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ecdf25d7-76e5-4c07-97d6-713305699c26%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Possible to get usable Win7 gui?

2017-01-28 Thread Jarle Thorsen
 :



hmm weird,  my windows 7 vm is a little laggy,  but I figured its normal.
 it doesn't increase over time for me and doesn't seem that bad.  Have you
tried to set the windows system setting to performance mode?

If you try to do gpu intensive tasks it might be an issue though.


The only Windows version I have tried is Windows 7 Enterprise 64-bit, with
all default settings apart from installing Qubes Windows tools.
Tried this HVM on both a "normal" system and a performance system with
*plenty* of resources. Assigning the win 7 HVM 16 vcpu and 10GB RAM makes
no difference 

I do not see any increase in lag over time though, as observed by Robert.

Maybe I'll try a different version of Windows just to be sure...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAGFj%2Br9B%2BUxyhpYApEiLOM-sfLfby3gy-MM3BGKRM9TKFUNG3Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] NetVM without firewall, no PING from outside?

2017-01-23 Thread Jarle Thorsen
Unman:
> I suggest you read the docs:
> www.qubes-os.org/doc/firewall  has a section on allowing traffic in to
> qubes.

Thank you for the link. It provided a good foundation.

> But this may not be what you want. It reads as if you want to have
> sys-net operating as a router. You can do this quite simply by changing
> the iptables configuration and using proxy arp to make sure that the
> external network sees the qubes behind the router.
> Alternatively you could use the netvm as a gateway to the network of
> qubes, and make sure that THAT route is propagated on your internal
> network.

Thank you, it seems like using proxy arp is the way to go for me. That way I 
can still use a dynamic address for my NetVM. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8cee4116-fa0b-46b1-9c88-d71aadf00b3b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Problem adding USB controller to win7 VM

2017-01-19 Thread Jarle Thorsen
Grzesiek Chodzicki:
> > I'm trying to have my phone connected via USB to my win7 VM so that I can 
> > flash it with custom firmware.
> > 
> > I have three different USB controllers so I don't mind giving up one of the 
> > controllers to the win7 VM.
> > 
> > The controllers work just fine when connected to sys-usb, but when I 
> > connect either one to the win7 VM it will not boot...
> > 
> > How should I go about debugging this?
> 
> Run following command in dom0 terminal:
> xl dmesg|grep -i vt-d

XEN) Intel VT-d iommu 0 supported page sizes: 4kB, 2MB, 1GB.
(XEN) Intel VT-d iommu 1 supported page sizes: 4kB, 2MB, 1GB.
(XEN) Intel VT-d Snoop Control enabled.
(XEN) Intel VT-d Dom0 DMA Passthrough not enabled.
(XEN) Intel VT-d Queued Invalidation enabled.
(XEN) Intel VT-d Interrupt Remapping enabled.
(XEN) Intel VT-d Shared EPT tables enabled.

any help?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20b26354-ad19-4e49-96bb-b2ce06292d84%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Have Windows VM open and play video in Linux VM?

2017-01-02 Thread Jarle Thorsen
john.david.r.smith:
> there are two ways:
> 1) (the better way if you can get a working setup)
> for sound/video you can use streaming software (i did this some time ago).
> you have a windows vm W and some linux vm N.
> you set N as netvm for W.
> then you use some virtual soundcard (i think i used hifi cable) and some 
> streaming software to stream the sound to the linux vm (i can't remember 
> what i used.)
> on N you receive the stream.
> since you can hear all audio output of a linux vm, you will hear sound 
> from W.
> 
> my setup was fiddly and had about 2 sec audio delay. (but i did not 
> really bother to fix it, so you probably can do better)
> 
> 2)
> again have some linux vm N as netvm of a windows vm W.
> then you can use public folders on W and mount the public folder on N.
> now you can play the video from N.
> 
> i used both methods for a while (until i  completely switched to linux 
> for all my work-flows).
> in both cases i did not use the windows tools.

Thanks, I'll keep these two options in mind.
 
> if you have working windows tools, you should have a qvm-open-in-dispvm 
> command .
> you could also try this command.
> (i am not really sure whether the windows tools contain this command)

As far as I can tell there is no qvm-* tools in the windows tools directory at 
least.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/382a6b0c-b703-44f3-b3d7-fc556af8aac2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Have Windows VM open and play video in Linux VM?

2017-01-02 Thread Jarle Thorsen
Alex:
> I think the "Open in DispVM" feature would match your request; is it
> available for windows tools too? (don't know, I'd do it like that in linux)

In the right-click menu in Windows explorer you have "Send to->Edit in DispVM" 
that might do the trick, but I am looking for a command-line option to have a 
third-party program execute a commandline to open the selected file in external 
program.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d68ccf2c-ce02-44f7-b7db-e267326fe1c3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Have Windows VM open and play video in Linux VM?

2017-01-02 Thread Jarle Thorsen
As there is currently no audio support for Windows in Qubes OS:

Can I use any of the Qubes windows tools to copy a video file to a Linux vm and 
have it start playing there?

The file should only be copied to a temp directory, and not put in 
QubesIncomming.

Which tool/syntax will let me do this?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/eb1c7f07-b62d-46b3-adfe-7ae51e1c0a29%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Possible to get usable Win7 gui?

2017-01-01 Thread Jarle Thorsen
Robert Fisk:
> I run a Win7 VM on a i5 gen 4 ULV machine. I have always had problems
> with lag increasing over time. On bootup the VM is fast, but after 20
> min it is unusable with each screen redraw taking ~4 sec and associated
> high CPU usage. This has happened both on R3.0 and R3.2.
> 
> I work around the issue by using Remmina (or other RDP client) in an
> appVM, and allowing IP forwarding in the firewall vm. This solution does
> not suffer from increasing lag, and should be usable for everything
> except gaming. See instructions here:

Only problem with this solution is that it does not give you the advantage of 
seamless-mode I guess?


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/65d94f01-f7ba-44de-8f76-b5122fa8f39b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Possible to get usable Win7 gui?

2017-01-01 Thread Jarle Thorsen
> My Windows 7 and Windows 10 VM's feel reasonably responsive for
> getting work done (although I definitely wouldn't want to try gaming
> with that level of latency).  My dom0 resolution is larger than yours;
> I haven't adjusted the default resolution in the Windows VM's.
> 
> The Windows VM's have between 2 GB and 4 GB of RAM and 2 CPU logical
> cores; I'm on a Haswell i7.

Thank you for your feedback. I find that seamless mode works better than normal 
desktop mode.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/145c9dc4-157a-4746-b292-2151b09d5453%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Number of vcpus for machine with many cores?

2017-01-01 Thread Jarle Thorsen
Thank you for your detailed answer. I realise that number of vcpus to choose is 
a hot topic.

In my 32 core system,if I give a vm 3 vcpus, does this mean that this vm will 
never be able to exceed 1/10th of the system's total cpu power? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a52b4fdf-a1e1-4aa7-8681-749882172484%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Number of vcpus for machine with many cores?

2016-12-31 Thread Jarle Thorsen
I'm abut to move my Qubes OS to a new machine with 32 cpu cores. When I run 
Windows on bare metal a program like 7-zip have no problem saturating almost 
100% of all 32 cores.

To let a program like 7-zip do the same thing in a Qubes OS HVM,will I have to 
give the HVM close to 32 vcpus, or should I just give it the (recommended?) 2 
vcpus and XEN will do the job of distributing the load? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/28c62dad-a96a-4b9e-b0b8-adf575295dc4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Tip: Faster reboot

2016-12-30 Thread Jarle Thorsen
> FWIW, I've been using simple shutdown and reboot scripts to work
> around this issue (I think since I first started using Qubes). Here's
> an example:
> 
> ```
> #!/bin/bash
> qvm-shutdown --wait --all \
> - --exclude=sys-net \
> - --exclude=sys-firewall \
> - --exclude=sys-usb \
> - --exclude=sys-whonix \
> - --exclude=sys-vpn \
> - --exclude=sys-etc \
> qvm-shutdown --wait --all
> sleep 3
> shutdown now

I guess there is some formatting problems here? The '-' in the beginning of all 
the --exclude lines should be removed I think?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fa458fb2-a8e3-4985-9804-4cb33fde695a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Possible to get usable Win7 gui?

2016-12-29 Thread Jarle Thorsen
torsdag 29. desember 2016 13.14.25 UTC+1 skrev Grzesiek Chodzicki følgende:
> W dniu czwartek, 29 grudnia 2016 13:07:44 UTC+1 użytkownik Jarle Thorsen 
> napisał:
> > Currently my Windows 7 StandaloneVM feels a bit sluggish.
> > 
> > Moving windows (no phun intended) is a pain.
> > 
> > Is it possible to have a Windows VM without any lag, or is this just a part 
> > of the deal with Qubes OS?
> > 
> > What tweaks should I do to get my Windows VM as responsive as possible?
> > 
> > I have no problems with lag in dom0 or any of the Linux VMs.
> > 
> > My display is 2560x1440, maybe a large display is part of my problem?
> 
> VM Performance is largely dependent on the CPU and RAM so ensure that your 
> Windows VM has enough vCPUs and RAM assigned to it.

Throwing more vCPUs and RAM at it hasn't made a big difference so far, but I'm 
moving my system to a way more powerful system the next couple of days, hope 
that will make a difference.

Can anybody please confirm that it is indeed possible to have a lag-free 
Windows experience under QubesOS?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fd4b2bdc-f7db-4618-936d-55bc9a6d904d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Possible to get usable Win7 gui?

2016-12-29 Thread Jarle Thorsen
Currently my Windows 7 StandaloneVM feels a bit sluggish.

Moving windows (no phun intended) is a pain.

Is it possible to have a Windows VM without any lag, or is this just a part of 
the deal with Qubes OS?

What tweaks should I do to get my Windows VM as responsive as possible?

I have no problems with lag in dom0 or any of the Linux VMs.

My display is 2560x1440, maybe a large display is part of my problem?


 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/89b7dd71-6164-40a6-9a28-9db6346b2af8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Unable to install SEH UTN Manager in Win7 hvm

2016-12-23 Thread Jarle Thorsen
onsdag 23. november 2016 08.53.31 UTC+1 skrev Jarle Thorsen følgende:
> I am unable to install SEH UTN Manager 
> (https://www.seh-technology.com/fileadmin/user/downloads/deviceserver/tools/sehutnmanager-win-3.0.21.zip)
>  in my win7 hvm.
> 
> I have tried both with/without QWT installed.
> 
> The problem seems to be related to signing of the driver, see attached 
> screenshots.
> 
> I never had any problems getting this working outside of QubesOS, so I'm 
> guessing this is a QubesOS/XEN limitation?
> 
> Feel free to download and install SEH UTN Manager from the link provided.
> 
> Hope somebody is able to explain why this is failing in QubesOS, and if there 
> is a way forward?

With help from the support-team at SEH Computertechnik (the company behind the 
product) we have now figured out that this problem is limited to the latest 
version of SEH UTN Manager only. Probably related to SHA2 signing of drivers. I 
have now installed UTN Manager 3.0.18 and it works without a hitch! 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/abe0bfed-0b43-4d51-8c86-d6d2c1483a47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] [SOLVED] Trouble installing Windows SP1 7 64-bit on Qubes 3.2

2016-12-07 Thread Jarle Thorsen
> That's great ! It works for me too !
> 
> 
> 
> Quoting the interesting part  from the article :
> 
> 
> 
> I found you can pass a custom config to
>   qvm-start. I copied the config for the vm to another location
>   (from /var/lib/qubes/vm-templates/win7/win7.conf in my case) and
>   edited the line in domain->devices->video->model and
>   changed the type from 'xen' to 'cirrus'. So the result looked like
>   this:
> 
>   
> 
>   
> 
>   
> 
>   Then I started the vm with:
> 
>   qvm-start win7 --custom-config=[path to new config]
> 
>   
> 
>   This allowed me to get past the install hang. I haven't completed
>   the install yet, so don't know if it'll be necessary once the
>   install is complete.
> 
> 
> Thank you very much for the hint.

I can confirm that this also solved the problem for me. I guess this bug needs 
to be reported so that it may be fixed?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/592a8ca0-255d-4172-a36f-0b64c01cbc0a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Trouble installing Windows SP1 7 64-bit on Qubes 3.2

2016-12-06 Thread Jarle Thorsen
tirsdag 6. desember 2016 11.07.52 UTC+1 skrev Swâmi Petaramesh følgende:
> Hello,
> 
> I run Qubes 3.2 on an HP ProBook 6470b laptop
> 
> I'm trying to install Windows 7 64-bit SP1 following instructions : 
> https://www.qubes-os.org/doc/hvm/
> 
> I'm using an ISO file sitting in an AppVM.
> 
> I could create the VM and start it, it first starts in character mode 
> and displays a "Windows is loading files..." progress bar (so I'm sure 
> that the VM boots and can access the ISO image), then shifts to graphics 
> mode and displays "Starting Windows" in a nice font, and then... sits 
> there forever without any visible activity, and no error message.
> 
> Any clue ?
> 
> I know that my Qubes setup is able to run Windows 7 in an HVM as I have 
> created another Win7 HVM, with a Windows 7 converted from a VirtualBox 
> installation, and it works good. But this one is 32-bit, and I'm trying 
> to install a 64-bit version as I read that Qubes Windows tools support 
> only a 64-bit Windows installation...
> 
> Thanks in advance for your help.
> 
> Kind regards.

I have experienced the same thing (and was actually just now about to create a 
new topic when I saw you beat me to it).

As far as I can tell the problem is caused by some update to the system (using 
qubes-dom0-update) as everything works just fine on a fresh Qubes 3.2 system.

This is my experience:

1. Installed Qubes 3.2
2. Installed Windows 32-bit HVM just fine.
3. (started testing QubesOS, including updating dom0)
4. Discovered that I should have installed win7-x64 in the first place.
5. Tried installing win7-x64, but booting the install media hung at exactly the 
same place as described by thread starter.
6. Made a fresh install of Qubes 3.2 and now win7-x64 installed just fine.
7. (started testing QubesOS, including updating dom0)
8. Now I want to make a win7-x64 Template, using the same install media, and I 
am once again stuck...

How should we proceed to debug what is causing this problem?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7f10d8b5-f9e8-4705-a5cd-8de7b05aa1f3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS 3.2 Installation Issues: anaconda 'text mode' Installation Destination autopart failed LUKS

2016-11-23 Thread Jarle Thorsen
> I did exactly that; selected the Full option and it produced the error 
> message I listed. Using the Standard Partition Scheme has the same result, 
> but with a second error message that is identical to the first, except for 
> "sda3" instead of "sda2".

Did you remember to tick the little box called "use unused space" or similar? 
It seems like QubesOS is trying to re-use your previous partition-scheme?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/65d1af83-3583-4181-b69c-6c8f2d46ff86%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS 3.2 Installation Issues: anaconda 'text mode' Installation Destination autopart failed LUKS

2016-11-23 Thread Jarle Thorsen
onsdag 23. november 2016 01.16.40 UTC+1 skrev pixel...@gmail.com følgende:
> Device: Lenovo ThinkPad L450 modified with OCZ Trion 150 (480GB) SSD
> Installation Setup: USB Drive with prepared ISO, using Basic Graphics mode 
> under Troubleshooting due to system lockup in GUI mode.
> 
> Primary Problem: When trying to setup partitioning, and selecting either 
> Standard or LVM, this error occurs: "storage configuration failed: autopart 
> failed: Encryption requested for LUKS device sda2 but no encryption key 
> specified for this device.
> 
> Could this have something to do with the fact that the original SSD had OPAL 
> 2.0 and the replacement SSD does NOT have that feature? Am I unable to use 
> the OCZ drive as a result, or is this something entirely different.
> 
> Background: I am a first time user of Qubes OS and have only marginal 
> experience with installing any type of Linux disto. I'm mostly a Windows guy, 
> where things like this 'just work' usually.
> 
> Thanks for the support.

Is there a reason why you do not want to just give QubeOS the full disk, and 
let it set up the partitions automatically?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e4c34495-05e1-434a-97a6-3f6d5a081224%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Unable to install SEH UTN Manager in Win7 hvm

2016-11-22 Thread Jarle Thorsen
I am unable to install SEH UTN Manager 
(https://www.seh-technology.com/fileadmin/user/downloads/deviceserver/tools/sehutnmanager-win-3.0.21.zip)
 in my win7 hvm.

I have tried both with/without QWT installed.

The problem seems to be related to signing of the driver, see attached 
screenshots.

I never had any problems getting this working outside of QubesOS, so I'm 
guessing this is a QubesOS/XEN limitation?

Feel free to download and install SEH UTN Manager from the link provided.

Hope somebody is able to explain why this is failing in QubesOS, and if there 
is a way forward?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0f2328b4-e397-4e84-a566-c06cd3d09f2b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.