Re: [qubes-users] Whonix: configure Torbrowser for use in DispVM

2020-03-19 Thread Patrick Schleizer
Sven Semmler: > I think torbrowser is a whonix-specific script that somehow detects that > it's running in a dispvm and then nukes the profile and replaces it with > a default. Is that true? No. https://www.whonix.org/wiki/Qubes/DisposableVM > I want only the > default search engine to change

Re: [qubes-users] Forgot to RTFM and now getting errors in whonix during update?

2020-03-16 Thread Patrick Schleizer
Note: Bisq package is at that time neither available from packages.debian.org nor deb.whonix.org. It's a third party package. Same would happen in Debian. Therefore this isn't a Whonix related issue either. Whonix only happens to provide instructions on how to install Bisq despite some issues

Re: [qubes-users] Forgot to RTFM and now getting errors in whonix during update? (and deb template "qubes-core-agent-passwordless-root" error)

2020-03-16 Thread Patrick Schleizer
Issue: >>> Setting up bisq (1.2.7) ... >>> Adding shortcut to the menu >>> xdg-desktop-menu: No writable system menu directory found. >>> dpkg: error processing package bisq (--configure): >>>   installed bisq package post-installation script subprocess returned >>> error exit status 3 >>> Errors

[qubes-users] Qubes-Whonix 15 TemplateVMs (4.0.1-202003070901) -- Testers Wanted!

2020-03-10 Thread Patrick Schleizer
https://www.whonix.org/wiki/Qubes/Install/Testing Or. https://www.whonix.org/wiki/Qubes/Reinstall/Testing Let's test these templates! * https://github.com/QubesOS/updates-status/issues/1674 * https://github.com/QubesOS/updates-status/issues/1675 Alternatively: In-place release upgrade is

Re: [qubes-users] Per-VM stream isolation in Whonix

2019-10-06 Thread Patrick Schleizer
tetrahedra via qubes-users: > On Fri, Sep 27, 2019 at 01:37:06PM +, Claudia wrote: >> Isolating apps in the same VM is a different issue, but you're saying >> traffic from different VMs is appearing to come from the same address? >> >> Hmm, that definitely should not be happening. VM isolation

[qubes-users] Any virtualizer / emulator working in Qubes OS?

2019-09-19 Thread Patrick Schleizer
Is there any virtualizer / emulator working inside Qubes OS AppVMs? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To

Re: [qubes-users] Whonix Tor Browser Starter safest setting fails

2019-09-19 Thread Patrick Schleizer
'b17b7bdb' via qubes-users: > - JavaScript is ALLOWED on selected sites. > To view these sites click on the NoScript Preferences button in the > about:addons page and then select the Per-Site Permissions tab. Whonix source code doesn't write literally googlevideo, netflix, outlook, etc.

Re: [qubes-users] whonix-15 TB in dvm on Safest has whitelisted sites in NoScript by default

2019-09-19 Thread Patrick Schleizer
Whonix source code doesn't write literally googlevideo, netflix, outlook, etc. anywhere. It does not do anything to give special treatment to any websites. By policy, for simplicity, clean implementation and whatnot, the "inside" of Tor Browser isn't modified by Whonix. This is elaborated here:

Re: [qubes-users] Is Qubes partnered with Whonix and is Whonix just as secure as Qubes if you're only using the computer for web stuff?

2019-09-06 Thread Patrick Schleizer
pixel fairy: > qubes uses xen, which has a smaller attack surface and much better track > record for vm escape vulns. if you cant use that, make sure you keep up to > date on virtualbox. if you dont like virtualbox, you might be able to > import whonix to libvirt / kvm. >

Re: [qubes-users] Re: whonix tor browser customization

2019-09-06 Thread Patrick Schleizer
panina: > On 8/9/19 9:05 AM, Patrick Schleizer wrote: >>> panina: >>> Namely, they removed NoScript from the toolbar, so that the >>> NoScript cannot be used as intended. >> >> >> We did not. Decision by upstream, The Tor Project. >> >&g

[qubes-users] Re: whonix tor browser customization

2019-08-09 Thread Patrick Schleizer
panina: > Namely, they removed NoScript from the toolbar, so that the > NoScript cannot be used as intended. We did not. Decision by upstream, The Tor Project. https://forums.whonix.org/t/workstation-15-dropped-both-noscript-and-https/7733 -- You received this message because you are

Re: [qubes-users] whonix workstation 15 browser dropped both noscript and https

2019-08-09 Thread Patrick Schleizer
drok...@gmail.com: > What are they doing over there? > Decision by upstream, The Tor Project. https://forums.whonix.org/t/workstation-15-dropped-both-noscript-and-https/7733 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from

Re: [qubes-users] Error on update on whonix-15 templates

2019-08-09 Thread Patrick Schleizer
> Hi, I made a fresh install of Qubes 4. I followed carefully the > instructions on the whonix website for fresh installation of the new > whonix-gw-15 and whonix-ws-15 (with previous complete uninstall of the > whonix-14 templates and its VMs including DVM). > > I can update any template like

[qubes-users] OpenPGP signed websites

2019-03-12 Thread Patrick Schleizer
qubes-...@tutanota.com: > Feb 23, 2019, 3:50 AM by patrick-mailingli...@whonix.org: > >> Reminds me, would be good to have OpenPGP signed websites all over the >> internet. Unfortunately there is no project working towards it. >> >> https://www.whonix.org/wiki/Dev/OpenPGP_Signed_Website >> > >

Re: [qubes-users] Valid Concerns Regarding Integrity of Whonix Project

2019-02-22 Thread Patrick Schleizer
Reminds me, would be good to have OpenPGP signed websites all over the internet. Unfortunately there is no project working towards it. https://www.whonix.org/wiki/Dev/OpenPGP_Signed_Website -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] Re: Valid Concerns Regarding Integrity of Whonix Project

2019-02-22 Thread Patrick Schleizer
cooloutac: > The reason why I say privacy and anonymity are two diff things. And way > apart from security. is For example if I log into a facebook .onion site. > Its still my identity. All that information about you is still being sold to > ad agencies. Governments are still watching it.

Re: [qubes-users] Re: Valid Concerns Regarding Integrity of Whonix Project

2019-02-21 Thread Patrick Schleizer
cooloutac: > I read that whonix thread. Still not sure why whonix doesn't have a canary. > What could it hurt? Any aspect of the project could be compromised for any > reason. Thats the same as people saying I have nothing to hide so why > worry. In the other thread Patrick says US laws

Re: [qubes-users] Valid Concerns Regarding Integrity of Whonix Project

2019-02-15 Thread Patrick Schleizer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 * I was advised in private e-mail by @mig5 about this new law before it took effect beforehand, and @mig5 offered to step aside because of it. It was my decision to not to change anything. Below I will explain why. * I might have reacted in a

Re: [qubes-users] sys-whonix-14 updates issues

2019-01-14 Thread Patrick Schleizer
Mathew: > Hello, > > Just to know if there is a solution for whonix-gw/whonix-ws updates ? > Noted that I can update/upgrade sys-whonix-14 without any problems ! I have > to do it again after rebooting though. > > $ sudo apt-get-update-plus dist-upgrade > WARNING: Execution of /usr/bin/apt-get

Re: [qubes-users] Whonix GW & WS upgrade failed (Help)

2018-12-17 Thread Patrick Schleizer
qubes123...@gmail.com: > I press upgrade at Whonix GW & WS and get this message, see Screnshoot, what > should I do? thank you in advance ;) > > https://ibb.co/XbCsJWQ > The problem probably was that Whonix wasn't setup using Qubes salt. Manual installation of Whonix is unsupported. Please use

[qubes-users] Qubes-Whonix 14 (4.0.1-201811291216) Point Release for Qubes R4

2018-12-17 Thread Patrick Schleizer
This is a [point release](https://www.whonix.org/wiki/Point_Release). > A **point release** is not a separate, new version of Whonix. Instead, it is a re-release of Whonix which is inclusive of all updates up to a certain point. > > Installing any version of Whonix 14 and fully updating it leads

[qubes-users] seven new Meltdown and Spectre attacks

2018-11-22 Thread Patrick Schleizer
https://www.zdnet.com/article/researchers-discover-seven-new-meltdown-and-spectre-attacks/ **November 14, 2018** Quote: > Experiments showed that processors from AMD, ARM, and Intel are affected. Is Qubes affected? -- You received this message because you are subscribed to the Google Groups

Re: [qubes-users] salty whonix 14 -- problems.

2018-11-22 Thread Patrick Schleizer
haaber: > Second, there is no Directory /var/lib/tor/.tor  shall I create it? > which permissions? No. Apply this: https://www.whonix.org/wiki/Tor#Permissions_Fix -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group

Re: [qubes-users] updating tor browser in whonix-ws dispvms

2018-11-21 Thread Patrick Schleizer
J.M. Porup: > Is anyone else using whonix-ws based dispvms? > > Until recently, tor browser received updates via whonix repos. For some > reason that seems to have stopped. > > The problem is that every time I open a new whonix-ws based dispvm, I'm > prompted to download a new version of TBB.

[qubes-users] Reinstall Qubes-Whonix TemplateVMs documentation revamped

2018-11-20 Thread Patrick Schleizer
https://www.whonix.org/wiki/Qubes/Reinstall -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send

Re: [qubes-users] TOR browser updates.

2018-11-20 Thread Patrick Schleizer
William Fisher: > How do I update the TOR browsers at the Template VM level? I've updated TOR > at the APP level but it doesn't stay updated. > New documentation page just now created focusing only on updating Tor Browser in Qubes-Whonix: https://www.whonix.org/wiki/Qubes/Tor_Browser -- You

Re: [qubes-users] debian-based templates (and whonix) ignore dom0 keyboard language in 4.0.1 but not 4.0

2018-11-19 Thread Patrick Schleizer
ryangr...@tuta.io: > I'm pretty sure this is a bug (linked below), but am posting here just in > case there might be something I am missing: > https://github.com/QubesOS/updates-status/issues/791 > > I set the language/keymap settings via

Re: [qubes-users] Donation costs

2018-11-19 Thread Patrick Schleizer
Achim Patzner: >> Crypto payments and cash in mail to trusted qubes people (with secret >> shoppers to help ensure honesty) are the least terrible option. > >> From my point of view on ecology: not. Besides throwing all your money > towards China, too or where do you think is most crypto mining

Re: [qubes-users] Qubes 3.2 whonix 14 connects to tor, but there is no connection

2018-11-18 Thread Patrick Schleizer
aaq via qubes-users: > lørdag den 17. november 2018 kl. 17.01.02 UTC+1 skrev Patrick Schleizer: >> Franz: >>> I succesfully updated to whonix 14, when the VM start a message tells: >>> "connected to tor" making me happy, But if I ping google I get: >>

Re: [qubes-users] whonix upgrade, qubes4

2018-11-17 Thread Patrick Schleizer
b...@damon.com: > I went thru the steps to remove any existing whonix. No errors were reported. > Then I issued the command to re-install whonix-14. > > Whonix does not work. Whenever I boot up one of the VMs based on the new > whonix, I find that qrexec-agent is crashing. > > [ 15.903799]

Re: [qubes-users] Whonix upgrade failure

2018-11-17 Thread Patrick Schleizer
Documentation was upgraded meanwhile. Black Beard: > > Hey Community, > > > i tried to following the tutorial to upgrade Whonix 13 to 14. > > https://www.whonix.org/wiki/Qubes/Install > > I first start to try uninstall the old Version of Whonix with Option B. > > When i tried to install the

Re: [qubes-users] Whonix 14 upgraded - only a couple of mis-steps

2018-11-17 Thread Patrick Schleizer
Dave: > Success! but not without a few snags... > > Using Qube-Manager to remove templateVM resulted in: > [Dom0] Error removing Qube! ERROR: Domain is in use: details in system log > > ran QVM-LS; verified Qube state halted > > found reference:

Re: [qubes-users] pEp in Enigmail-Thunderbird in Whonix-14 Qubes

2018-11-17 Thread Patrick Schleizer
qubes-...@tutanota.com: > Hi, I learned that in Whonix-14 in Qubes 4.0 there is no default support for > pEp in Enigmail-Thunderbird. Is it Qubes specific or Whonix specific? Is > there any reason for not supporting pEp in Whonix? > > In other templates after installing the Enigmail addon the

Re: [qubes-users] Whonix 14 - Update errors?

2018-11-17 Thread Patrick Schleizer
sm...@tutamail.com: > ...again I want to thank the Whonix/Qubes team for everything they do!! You > are awesome... > > In the spirit of feedback: > > I just tried updating Whonix-ws-14 and started receiving errors? I saw > another post with similar >

Re: [qubes-users] Cannot update whonix-gw-14

2018-11-17 Thread Patrick Schleizer
Probably transient issue. Documented here: https://www.whonix.org/wiki/Qubes/Update -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [qubes-users] Re: update broke whonix, can't reinstall

2018-11-17 Thread Patrick Schleizer
Stay tuned! Basically it's hopefully all been covered in news. https://www.whonix.org/wiki/Stay_Tuned Qubes-Whonix documentation: https://www.whonix.org/wiki/Qubes https://www.whonix.org/wiki/Qubes/Install https://www.whonix.org/wiki/Qubes/Reinstall

Re: [qubes-users] ERROR: Tor Bootstrap Result:

2018-11-17 Thread Patrick Schleizer
William Fisher: > Turned out to be a clock settings problem. Set the clock to UTC and poof it > works! > Host clock or VM clock? How did you do it? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop

Re: [qubes-users] Qubes 3.2 whonix 14 connects to tor, but there is no connection

2018-11-17 Thread Patrick Schleizer
Franz: > I succesfully updated to whonix 14, when the VM start a message tells: > "connected to tor" making me happy, But if I ping google I get: > > user@host:~$ ping google.com > PING google.com (216.58.207.206) 56(84) bytes of data. >>From 10.137.5.34 (10.137.5.34) icmp_seq=1 Destination Port

Re: [qubes-users] Qubes 3.2 whonix 14 connects to tor, but there is no connection

2018-11-17 Thread Patrick Schleizer
Franz: > On Thu, Nov 15, 2018 at 4:47 PM pieter lems wrote: > >> is sys-net connected to the network? >> > > yes > > And are you using an ethernet cable to connect to internet, >> > > no I am connected by wifi > Qubes-Whonix support ending for Qubes 3.2(.1) - upgrade to Qubes R4.0 or above

Re: [qubes-users] Tor still doesn't work in the new Qubes 3.2.1

2018-11-17 Thread Patrick Schleizer
Máté Kovács: > After I installed the new version of qubes, I tried everything today > afternoon to make it work but it wasn't successfull. Update every software. > Got these error messages. If you are talking about Whonix... Qubes-Whonix support ending for Qubes 3.2(.1) - upgrade to Qubes R4.0

Re: [qubes-users] Re: please stay tuned on Whonix news

2018-09-09 Thread Patrick Schleizer
John S.Recdep: > On 08/15/2018 07:23 PM, Patrick Schleizer wrote: >> It is important to read the latest Whonix news to stay in touch with >> ongoing developments. This way users benefit from notifications >> concerning important security vulnerabilities and improved rele

Re: [qubes-users] AppArmor enabled by default in templates

2018-09-09 Thread Patrick Schleizer
Chris Laprise: > Its good (and interesting) that Whonix have persevered with apparmor. > Yet even though Torbrowser is based on Firefox, I couldn't for example > take a Torbrowser apparmor profile and adapt it to Firefox. Again, this > was some time ago, but at the time it just didn't work

Re: [qubes-users] Re: Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

2018-08-29 Thread Patrick Schleizer
code9n: > Same issue but when I try to update-torbrowser (or via Tor Browser > Downloader) the install fails because ttb's signature has expired. Separate issue being discussed and answered here: https://forums.whonix.org/t/update-torbrowser-key-expired/5782 -- You received this message

Re: [qubes-users] Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

2018-08-29 Thread Patrick Schleizer
All updates regarding this issue here: https://forums.whonix.org/t/bug-tor-browser-missing-in-dispvm-tor-browser-missing-in-whonix-ws-14-templatevm/5712/4 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop

Re: [qubes-users] Re: Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

2018-08-29 Thread Patrick Schleizer
qubes-...@tutanota.com: >The dvm should just get the Tor Browser from the whonix-ws-14-dvm same as >anon-whonix for example, right? Yes. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

2018-08-16 Thread Patrick Schleizer
qubes-...@tutanota.com: > Hi Patrick, should one switch the Qubes Tor networking backed normally by the > sys-whonix to newly created sys-whonix-backup? It make sense to > update/upgrade whonix through Tor. > thx If you manage to do that, sure. -- You received this message because you are

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

2018-08-15 Thread Patrick Schleizer
Franz: > On Tue, Aug 14, 2018 at 1:55 PM, Patrick Schleizer < > patrick-mailingli...@whonix.org> wrote: > >> Franz: >>> when I try to uninstall whonix-ws >>> >>> sudo dnf remove qubes-template-whonix-ws* >>> >>> I get >>&

Re: [qubes-users] Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

2018-08-15 Thread Patrick Schleizer
Please contribute here: https://www.whonix.org/wiki/Qubes/Disposable_VM sm...@tutamail.com: > I just transitioned to the new Whonix 14 templates, everything was working > great however I just updated both the -gw and -ws templates and lost the Tor > Browser(AnonDist) from the whonix-ws-14-dvm

[qubes-users] please stay tuned on Whonix news

2018-08-15 Thread Patrick Schleizer
It is important to read the latest Whonix news to stay in touch with ongoing developments. This way users benefit from notifications concerning important security vulnerabilities and improved releases which address identified issues, like those affecting the updater or other core elements. Read

Re: [qubes-users] Guide: Monero wallet/daemon isolation w/qubes+whonix

2018-08-15 Thread Patrick Schleizer
https://getmonero.org/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.html is missing how to actually use it. I guess it is simply: run `monero-wallet-cli` or monero gui in monero-wallet-ws." 0xB44EFD8751077F97: > Patrick Schleizer: >> I didn't notice this th

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

2018-08-14 Thread Patrick Schleizer
This is completely untested. Let me know what you think and if this works for you. * A backup of all Qubes VMs using the usual Qubes backup mechanism (independent from below) is advisable anyhow. * One who mind about their contents could clone their sys-whonix to sys-whonix-backup and clone

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

2018-08-14 Thread Patrick Schleizer
Thank you for looking into this! Chris Laprise: > It was a bit confusing, but from the wiki Install page I picked out > these relevant steps for dom0 (Qubes 4.0): > > $ sudo qubes-dom0-update qubes-core-admin-addon-whonix > $ sudo qubesctl state.sls qvm.anon-whonix > > The second command will

Re: [qubes-users] Guide: Monero wallet/daemon isolation w/qubes+whonix

2018-08-14 Thread Patrick Schleizer
I didn't notice this thread until now. Interesting! Now reference here: https://www.whonix.org/wiki/Monero I am wondering how to save users from as many manual steps as possible. To save users from having to edit /rw/config/rc.local... > socat TCP-LISTEN:18081,fork,bind=127.0.0.1

Re: [qubes-users] Re: Whonix 14 installation problem...using 4.0?

2018-08-14 Thread Patrick Schleizer
sm...@tutamail.com: > Not sure it was happening in the background but waited for 1 1/2 hrs with no feedback after the "sudo qubesctl state.sls qvm.anon-whonix" command in Dom0. Created... add salt download progress indicator #4215 https://github.com/QubesOS/qubes-issues/issues/4215 ... for it.

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

2018-08-14 Thread Patrick Schleizer
Andrew David Wong: > On 2018-08-12 14:26, 'awokd' via qubes-users wrote: >> On Sun, August 12, 2018 6:16 pm, qubes-...@tutanota.com wrote: >>> I am planning to move from my Whonix 13 to Whonix 14 on Qubes. My >>> question is what way it should be easier, based on the Q user >>> experiences. What

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

2018-08-14 Thread Patrick Schleizer
Franz: > when I try to uninstall whonix-ws > > sudo dnf remove qubes-template-whonix-ws* > > I get > No match for argument: qubes-template-whonix-ws* > Error: No packages marked for removal > > I followed this guide: https://www.whonix.org/wiki/Qubes/Uninstall > Output of...? dnf list |

Re: [qubes-users] Stable Template list 06/2018? eg whonix 14

2018-08-07 Thread Patrick Schleizer
How to know when new Whonix versions are out? https://www.whonix.org/wiki/Stay_Tuned Also posted subject "Whonix 14 has been Released" on this list yesterday. Not sure how we can do better. notify Whonix 14 release on qubes-announce https://github.com/QubesOS/qubes-issues/issues/4193 799: >

Re: [qubes-users] Whonix ERROR: Systemd Clock Check Result: Unexpected results by timedatectl

2018-08-07 Thread Patrick Schleizer
> Unexpected results by timedatectl - Please enter error messages into search engines "Unexpected results by timedatectl" Then often find already existing discussions. https://github.com/QubesOS/qubes-issues/issues/3469 - Upgrade to Whonix 14 - fixed there. Cheers, Patrick -- You received

Re: [qubes-users] Delete whonix and install again

2018-08-07 Thread Patrick Schleizer
'Andrzej Andrzej' via qubes-users: > Very funny: D I've already solved the problem. I did not notice one thing. In > qvm-prefs whonix, I need to give False in option installed_by_rpm > Just now reported a bug. when restoring a VM from backup, don't restore setting installed_by_rpm

Re: [qubes-users] sys-whonix-14 won't 'bootstrap' hangs @ 25-40% etc

2018-08-07 Thread Patrick Schleizer
none: > I've noticed that sys-whonix-14 appears to fail after > suspend and resume . is this a known issue? Depends on exact terminology. Suspend or pause? Does https://www.whonix.org/wiki/Post_Install_Advice#Network_Time_Syncing clarify? -- You received this message because you are

Re: [qubes-users] whonix clock sync error on boot

2018-08-07 Thread Patrick Schleizer
cooloutac: > anyone else getting Unexpected results by timedatectl message from sys-whonix > when booting Qubes? > > Tried updating doesn't seem to be going away. > > Unexpected results by timedatectl - Please enter error messages into search engines "Unexpected results by timedatectl" Then

Re: [qubes-users] whonix doesnt sync time -> mfa totp oathtool not working?

2018-08-07 Thread Patrick Schleizer
qubes-...@tutanota.com: > Hi, I experience an issue with the mfa oathtool totp. Application similar to google authenticator? Whonix's sdwdate might not be accurate enough for it. Can you use that tool offline? Doing such code generation you're much better off doing this in a non-Whonix offline

Re: [qubes-users] Whonix and problem with Proxy Policy

2018-08-07 Thread Patrick Schleizer
Let salt do it for you. Refer to: https://www.whonix.org/wiki/Qubes/Install -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [qubes-users] How to change TemplateVM update method from Whonix to just another appvm?

2018-08-07 Thread Patrick Schleizer
Sphere: > So upon installation of Qubes I have set updating of TemplateVMs through > Whonix but now I'm actually stuck with it and I want to change it to updating > through just another AppVM. > > Could anyone guide me to what commands I need to use in order to fix this? (I > actually wish

Re: [qubes-users] Confusing whonix check error

2018-08-07 Thread Patrick Schleizer
ray242012: > Unexpected results by timedatectl - Please enter error messages into search engines "Unexpected results by timedatectl" Then often find already existing discussions. https://github.com/QubesOS/qubes-issues/issues/3469 - Upgrade to Whonix 14 - fixed there. Cheers, Patrick --

Re: [qubes-users] Whonix 14 has been Released

2018-08-07 Thread Patrick Schleizer
Franz: > Many thanks, so, following this link, the command > > sudo qubesctl state.sls qvm.anon-whonix > > should download Whonix 14, correct? > > But the same link tells that this would download templates whonix-gw and > whonix-ws. But these are the same names of the old templates. So am I >

[qubes-users] Whonix 14 has been Released

2018-08-07 Thread Patrick Schleizer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 After more than two years of development, the Whonix Project is proud to announce the release of Whonix 14. Whonix 14 is based on the Debian stretch (Debian 9) distribution which was released in June 2017. This means users have access to many new

[qubes-users] port filtering using Qubes firewall?

2018-02-05 Thread Patrick Schleizer
https://www.qubes-os.org/doc/firewall/ Is it possible to use "any" as address? In other words, is it possible to do simple port filtering? As in block port XX or allow port YY only? Cheers, Patrick -- You received this message because you are subscribed to the Google Groups "qubes-users"

[qubes-users] Qubes R4: DispVM Template vs DispVM initial startup vs startup usability bug?

2017-12-04 Thread Patrick Schleizer
When trying to start a DispVM for the first time, it actually starts the DispVM template such as whonix-ws-dvm. After shut down, using the very same shortcut to start the DispVM, it starts an actual DispVM starting Disp[...]. The user may be confusing the DispVM template for the actual DispVM

[qubes-users] Qubes R4: How to start the DispVM Template another time for reconfiguration?

2017-12-04 Thread Patrick Schleizer
How to start the DispVM Template (such as whonix-ws-dvm) for a second or subsequent time? When I start it the second time, it actually starts a DispVM named Disp[...]. Cheers, Patrick -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] Anything like Split GPG for Keepass?

2017-11-12 Thread Patrick Schleizer
Eric Shelton: > I am curious how people are making effective use of Keepass in a vault > domain. It seems like with a browser plugin, you might be able to take a > Split GPG type of approach, and avoid all of the cutting and pasting across > domains. Any comments or suggestions? > > - Eric >

[qubes-users] Anti Evil Maid (AEM) - possible to use text and picture at the same time?

2017-11-08 Thread Patrick Schleizer
Got secret.txt as well as secret.png - now it's only showing the image at plymouth but no text. Looks like both cannot be combined? Cheers, Patrick -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop

[qubes-users] Anti Evil Maid (AEM) - SRK password strength? Sane to use same password as for full disk encryption?

2017-11-08 Thread Patrick Schleizer
How strong should the SRK password strength be? Should it be as strong as a password for full disk encryption? Is it sane to use same password as SRK password as well as for full disk encryption? Cheers, Patrick -- You received this message because you are subscribed to the Google Groups

[qubes-users] Ledger Nano S works for me with Qubes OS R3.2 and R4 - now documented

2017-10-31 Thread Patrick Schleizer
Experimented with this. Documented it. Feel free to test and contribute to the instructions. https://www.whonix.org/wiki/Ledger_Hardware_Wallet -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving

Re: [qubes-users] Ledger Nano S works great with Qubes OS R3.2 [Debian 8 and Fedora 24 AppVMs]

2017-10-27 Thread Patrick Schleizer
Does it still work for your with Qubes R4? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send

[qubes-users] HIDPI - Qubes R4

2017-10-24 Thread Patrick Schleizer
Did anyone manage to get HiDPI working in Qubes R4? https://groups.google.com/forum/#!msg/qubes-users/GQOLttJeJTg/hubZ7gX8AwAJ https://github.com/QubesOS/qubes-issues/issues/1951 R.B.: > Hello, > > For the people who want to use a HIDPI display, or have one on their > laptop, Here's an easy

Re: [qubes-users] Re: How to recover Qubes when keyboard / mice is dysfunctional due to USB qube setup issues?

2017-10-19 Thread Patrick Schleizer
Trying to replace > cd /mnt/var/lib/qubes/servicevms mv sys-usb sys-usb.bak with qvm-prefs. (That may be even better than using systemctl.) Please have a look at the following instructions, modified what you wrote. I hope we could simplify/clarify for novice users and add this to the Qubes

Re: [qubes-users] Re: How to recover Qubes when keyboard / mice is dysfunctional due to USB qube setup issues?

2017-10-19 Thread Patrick Schleizer
Trying to replace > cd /mnt/var/lib/qubes/servicevms mv sys-usb sys-usb.bak with systemctl disabling the autostart of the VM. Could that work? Please have a look at the following instructions, modified what you wrote. I hope we could simplify/clarify for novice users and add this to the Qubes

[qubes-users] iommu=force - security risks?

2017-10-19 Thread Patrick Schleizer
I had to use iommu=force to make a notebook boot Qubes R4. [1] Does that pose any security risk? Cheers, Patrick [1] (Because 'BIOS did not enable IDB for VT properly. - TUXEDO InfinityBook Pro 13' [2]) [2] https://groups.google.com/forum/#!topic/qubes-users/gAKEomiulUY -- You received this

Re: [qubes-users] BIOS did not enable IDB for VT properly. - TUXEDO InfinityBook Pro 13

2017-10-19 Thread Patrick Schleizer
Patrick Schleizer: > Qubes R4 RC1 with TUXEDO InfinityBook Pro 13 [1]. Xen crashes. Boot aborts. > >> BIOS did not enable IDB for VT properly. crash Xen for security purposes > > Did anyone see this error ever before? Any idea how to fix it? > > Cheers, &g

[qubes-users] BIOS did not enable IDB for VT properly. - TUXEDO InfinityBook Pro 13

2017-10-17 Thread Patrick Schleizer
Qubes R4 RC1 with TUXEDO InfinityBook Pro 13 [1]. Xen crashes. Boot aborts. > BIOS did not enable IDB for VT properly. crash Xen for security purposes Did anyone see this error ever before? Any idea how to fix it? Cheers, Patrick [1]

[qubes-users] Qubes R4 RC1 GUI backup tool doesn't exist yet?

2017-10-09 Thread Patrick Schleizer
I guess a GUI backup tool doesn't exist as of Qubes R4 RC1 (plus all stable upgrades)? The progress in 'Qubes Manager Decomposition for Qubes 4.0' https://github.com/QubesOS/qubes-issues/issues/2132 is a bit hard to follow in such a lengthy ticket. May I suggest splitting the remaining tasks

Re: [qubes-users] Re: How to recover Qubes when keyboard / mice is dysfunctional due to USB qube setup issues?

2017-10-02 Thread Patrick Schleizer
Yethal: > W dniu środa, 27 września 2017 14:08:56 UTC+2 użytkownik Patrick Schleizer > napisał: >> cooloutac: >>> On Sunday, September 24, 2017 at 12:23:39 PM UTC-4, cooloutac wrote: >>>> On Sunday, September 24, 2017 at 12:23:23 PM UTC-4, cooloutac wrote: >>

Re: [qubes-users] Re: How to recover Qubes when keyboard / mice is dysfunctional due to USB qube setup issues?

2017-09-27 Thread Patrick Schleizer
cooloutac: > On Sunday, September 24, 2017 at 12:23:39 PM UTC-4, cooloutac wrote: >> On Sunday, September 24, 2017 at 12:23:23 PM UTC-4, cooloutac wrote: >>> On Sunday, September 24, 2017 at 9:25:24 AM UTC-4, Patrick Schleizer wrote: >>>> Quote from ht

[qubes-users] How to recover Qubes when keyboard / mice is dysfunctional due to USB qube setup issues?

2017-09-24 Thread Patrick Schleizer
Quote from https://www.qubes-os.org/doc/usb/ > Caution: By assigning a USB controller to a USB qube, it will no longer be available to dom0. This can make your system unusable if, for example, you have only one USB controller, and you are running Qubes off of a USB drive. How can one recover

Re: [qubes-users] Re: UEFI Troubleshooting workaround does not work

2017-09-17 Thread Patrick Schleizer
Mirosław Wojciechowski: > W dniu niedziela, 17 września 2017 12:35:40 UTC+2 użytkownik Patrick > Schleizer napisał: >> Hi! >> >> Got a new notebook. Tried to install Qubes R3.2 as well as Qubes R4 RC1 >> but failed so far. >> >> Got this &

[qubes-users] UEFI Troubleshooting workaround does not work

2017-09-17 Thread Patrick Schleizer
Hi! Got a new notebook. Tried to install Qubes R3.2 as well as Qubes R4 RC1 but failed so far. Got this Filepath: ACPI(a0341d0,0)/PCI(2,1f)/UnknownMessaging(12)/File(/EFI/Boot)/file(Xen.efi)/EndEntire boot loop bug. The workarround https://www.qubes-os.org/doc/uefi-troubleshooting/ does not

Re: [qubes-users] Re: coldkernel status update

2017-04-09 Thread Patrick Schleizer
Reg Tiangha: > Thanks for all the hard work! WillyPillow just pointed out to me today > on the qubes-devel mail list that installing busybox and updating > initramfs in Whonix is all you need to do to get it to boot with > coldkernel, busybox will be installed on Whonix 14 by default.

Re: [qubes-users] Re: coldkernel status update

2017-04-09 Thread Patrick Schleizer
Reg Tiangha: > On 04/08/2017 08:17 PM, Colin Childs wrote: > Thanks for all the hard work! WillyPillow just pointed out to me today > on the qubes-devel mail list that installing busybox and updating > initramfs in Whonix is all you need to do to get it to boot with > coldkernel, Source:

[qubes-users] grsecurity kernel 4.9.20 not working - Qubes ErrorHandler: BadAccess MIT-SHM

2017-04-07 Thread Patrick Schleizer
Proxying a message from torjunkie at Whonix forums here due to google group vs Tor spam false positive issues. Source: https://forums.whonix.org/t/long-wiki-edits-thread/3477/55? # Greetings, I am currently using Qubes 3.2 and have had success to date with running the 4.8 grsec

Re: [qubes-users] Re: Why doesn't whonix-gw run the latest 0.2.8.x tor?

2017-02-04 Thread Patrick Schleizer
cezg...@gmail.com: > Den søndag den 29. januar 2017 kl. 12.36.04 UTC+1 skrev Joonas > My guess is lack of time and funding. > [...] Right. Gave the upgrade low priority and I am pretty conservative when it comes to stable upgrades. It's not too hard to upload a package to the stable repository

Re: [qubes-users] How to switch to xfce in Whonix?

2017-01-19 Thread Patrick Schleizer
6057tx+48r8anehh4c4wazsony08z2dlvc via qubes-users: > Hello @all, > > I noticed that Whonix (in particular whonix-ws) uses a lot of RAM. > It seems to me that this is due in part to the fact that it is > based on KDE. So how can I disable KDE in it and switch to xfce? > > Thanks in advance.

[qubes-users] Qubes-Whonix DisposableVM documentation created

2016-12-15 Thread Patrick Schleizer
https://www.whonix.org/blog/qubes-whonix-dispvm Before we had just a [stub][1]. Now [Qubes-Whonix][2] [DisposableVMs][3] are fully [documented][4] thanks to [contributions][5] by the [community][6]. ([wiki history][7]) **What are DisposableVMs?** Under the Qubes TemplateVM model, any changes

Re: [qubes-users] Qubes VM snapshots using git / SVN

2016-12-05 Thread Patrick Schleizer
Why I used git: * I found it simpler and quicker to type to manage the whole /var/lib/qubes/vm-templates/vm-name including all files using git rather than manually that folder. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from

[qubes-users] Qubes VM snapshots using git / SVN

2016-12-05 Thread Patrick Schleizer
Has anyone used git / SVN on huge Qubes templates (in case they break during upgrades or for development purposes) for snapshot / rollback purposes and can can share some tips (for speeding git it up)? (Since qvm-revert-template-changes works only on templates and can revert only to the previews

Re: [qubes-users] PAM errors after disabling password-less root

2016-11-28 Thread Patrick Schleizer
Chris Laprise: > On 11/16/2016 01:26 PM, Andrew wrote: >> 3n7r0...@gmail.com: >>> On Wednesday, November 16, 2016 at 1:22:43 PM UTC, Chris Laprise wrote: On 11/15/2016 04:04 PM, Unman wrote: > On Tue, Nov 15, 2016 at 02:26:12PM -0500, Chris Laprise wrote: >> On 11/15/2016 07:20 AM,

Re: [qubes-users] Qubes 4 with Grsec could make a big splash

2016-11-25 Thread Patrick Schleizer
https://github.com/coldhakca/coldkernel/issues/35#issuecomment-262175541 https://www.coldhak.ca -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [qubes-users] Replacing Dolphin on Whonix-ws

2016-11-21 Thread Patrick Schleizer
Nautilus previews are still enabled unfortunately. TODO: https://github.com/QubesOS/qubes-issues/issues/1108 Dolphin [and Nautilus] previews are disabled in Qubes-Whonix, but not in other Qubes VMs. TODO: https://github.com/QubesOS/qubes-issues/issues/1885 Help welcome! Cheers, Patrick --

[qubes-users] File transfer in an out Qubes HVMs?

2016-10-08 Thread Patrick Schleizer
Which options exist to copy files in and out Qubes HVMs? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to

[qubes-users] Qubes on a dedicated server

2016-09-30 Thread Patrick Schleizer
Does anyone ever try this? Did it work? Any experiences? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to

  1   2   >