from:"Patrick Schleizer"

b...@damon.com:
> I went thru the steps to remove any existing whonix.  No errors were reported.
> Then I issued the command to re-install whonix-14.
> 
> Whonix does not work.  Whenever I boot up one of the VMs based on the new 
> whonix, I find that qrexec-agent is crashing.
> 
> [   15.903799] qrexec-agent[789]: segfault at 70d5257f6ff8 ip 
> 70d5255f3355 sp 70d5257f7000 error 6 in ld-2.24.so[70d5255dd000+23000]
> 
> This is similar to whonix-9 template issues some have seen.
> 
> 
> qubesdb-daemon also segfaults in the same manner earlier in the boot.
> 

Please report this to:

https://github.com/QubesOS/qubes-issues/issues

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/534a5c2e-b738-6c60-09e1-a3f4c9658ec7%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix upgrade failure

Documentation was upgraded meanwhile.

Black Beard:
> 
> Hey Community,
> 
> 
> i tried to following the tutorial to upgrade Whonix 13 to 14.
> 
> https://www.whonix.org/wiki/Qubes/Install
> 
> I first start to try uninstall the old Version of Whonix with Option B.
> 
> When i tried to install the dummy template with following command "sudo 
> qubes-dom0-update qubes-template-dummy" i become some error message "unable 
> to find a match".

This won't work.

Dummy template is covered in Qubes-Whonix documentation where needed.

https://www.whonix.org/wiki/Qubes/Install

https://www.whonix.org/wiki/Qubes/Reinstall

https://www.whonix.org/wiki/Qubes/Uninstall

> So i cant create the template and upgrade Whonix.
> 
> Can anybody says me how to update the Debian 9 Template? I found some 
> tutorials but always become an error message.
> 
> Did some profi how to fix the probleme?
> 
> About a message i would be happy.
> 
> regards
> 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ee899d95-5209-e5d9-0968-3d0ec8cdc200%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 upgraded - only a couple of mis-steps

Dave:
> Success! but not without a few snags...
> 
> Using Qube-Manager to remove templateVM resulted in:
> [Dom0] Error removing Qube! ERROR: Domain is in use: details in system log
> 
> ran QVM-LS; verified Qube state halted
> 
> found reference: https://github.com/QubesOS/qubes-issues/issues/3193
> and followed instructions:
> 
> I wasn't aware of the Default-Disposable-VM setting on the Advanced tab in 
> Qube Mangager GUI
> 
> The required commands are:
> qvm-prefs --set whonix-ws-dvm netvm ""
> qvm-prefs --set whonix-ws-dvm default_dispvm ""
> qvm-remove whonix-ws-dvm
> qvm-remove sys-whonix
> 
> Took these actions:
> changed netVM's to "" in appVMs using sys-whonix
> changed templateVM in appVMs using whonix-** to other
> changed global-property-updatevm to another netVM
> 
> Again attempted: sudo qvm-remove whonix-ws
> 
> Now new err msg returned: ERROR: VM installed by package manager: whonix-ws
> but the correct command was: $ sudo dnf remove qubes-template-whonix-**
> 
> REINSTALLATION ran much smoother using 
> "The recommended approach is to use salt (wrapped by the command qubesctl in 
> Qubes), as this one call automatically:" 
> i/a/w https://www.whonix.org/wiki/Qubes/Install
> 
> That ran without a hitch. Then UPDATE the new templates.
> 
> sudo apt-get update (Whonix is Debian based, so dnf doesn't work)
> 
> Now to push on and upgrade Fedora 26 to 28 (starting to get this too, Wolf 
> moon)
> 

Could you please check if Qubes-Whonix wiki documentation is complete
and consider to contribute anything missing?

https://www.whonix.org/wiki/Qubes

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8252d508-eaf3-0f05-9ae1-ab67213e83ef%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] pEp in Enigmail-Thunderbird in Whonix-14 Qubes

qubes-...@tutanota.com:
> Hi, I learned that in Whonix-14 in Qubes 4.0 there is no default support for 
> pEp in Enigmail-Thunderbird. Is it Qubes specific or Whonix specific? Is 
> there any reason for not supporting pEp in Whonix? 
> 
> In other templates after installing the Enigmail addon the support for pEp 
> jumps up automatically like Enigmail/pEp.
> 
> Thank you!
> 

Whonix uses the same package as Debian. So Debian specific and Whonix
inherits this.

This sort of question has a much higher chance of getting answered
timely in Whonix forums.

Check this out:

https://www.whonix.org/wiki/Encrypted_Email_with_Thunderbird_and_Enigmail

This may be useful later:

https://www.whonix.org/wiki/E-Mail#Pretty_Easy_Privacy

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/39206461-79ca-0d58-99a9-b08de707c2f6%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - Update errors?

sm...@tutamail.com:
> ...again I want to thank the Whonix/Qubes team for everything they do!! You 
> are awesome...
> 
> In the spirit of feedback:
> 
> I just tried updating Whonix-ws-14 and started receiving errors? I saw 
> another post with similar 
> issues(https://groups.google.com/forum/#!topic/qubes-users/ppdbaDAavRY), I 
> thought it best to call out the specific issue in the subject so it might 
> help others with this issue:
> 
> The error I get, when using the "Qubes Manager" -> "Whonix-ws-14" -> "Update 
> qube" is:
> 
> 
> Err:20
> tor+http://deb.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion
> stretch Release
>   Connection failed
> Reading package lists... Done
> 
> 
> E: The repository
> 'tor+http://deb.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion
> stretch Release' does no longer have a Release file.
> 
> N: Updating from such a repository can't be done securely, and is
> therefore disabled by default.
> 
> N: See apt-secure(8) manpage for repository creation and user
> configuration details. 
> 
> Whats strange is that I tried the update again while writing this post and it 
> appeared no updates were needed
> 
> I think I am OK but wanted to share.
>
Probably transient issue.

Documented here:

https://www.whonix.org/wiki/Qubes/Update

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/10dfe82a-22ad-741a-096f-f08779b14e05%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Cannot update whonix-gw-14

Probably transient issue.

Documented here:

https://www.whonix.org/wiki/Qubes/Update

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/14f93694-d6d5-aa09-8048-01f097f70b97%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: update broke whonix, can't reinstall

Stay tuned!

Basically it's hopefully all been covered in news.

https://www.whonix.org/wiki/Stay_Tuned

Qubes-Whonix documentation:

https://www.whonix.org/wiki/Qubes

https://www.whonix.org/wiki/Qubes/Install

https://www.whonix.org/wiki/Qubes/Reinstall

https://www.whonix.org/wiki/Qubes/Uninstall

Ryan Tate:
> qubes-template-whonix-gw
> qubes-template-whonix-ws

This is now:

qubes-template-whonix-gw-14

qubes-template-whonix-ws-14

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5df1ddc6-a1c8-d4c7-29c0-347cf0e40278%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] ERROR: Tor Bootstrap Result:

William Fisher:
> Turned out to be a clock settings problem. Set the clock to UTC and poof it 
> works!
> 

Host clock or VM clock?

How did you do it?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4920a5b8-31cc-d932-57ea-fd20ad89ace1%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes 3.2 whonix 14 connects to tor, but there is no connection

Franz:
> I succesfully updated to whonix 14, when the VM start a message tells:
> "connected to tor" making me happy, But if I ping google I get:
> 
> user@host:~$ ping google.com
> PING google.com (216.58.207.206) 56(84) bytes of data.
>>From 10.137.5.34 (10.137.5.34) icmp_seq=1 Destination Port Unreachable
> ping: sendmsg: Operation not permitted
> 
> 
> what may be wrong?
> Best
> 

ping is UDP. And Tor doesn't support UDP.

https://www.whonix.org/wiki/Tor#UDP

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d67b1aee-d43f-18b8-f0ae-5138b1d7537e%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes 3.2 whonix 14 connects to tor, but there is no connection

Franz:
> On Thu, Nov 15, 2018 at 4:47 PM pieter lems  wrote:
> 
>> is sys-net connected to the network?
>>
> 
> yes
> 
> And are you using an ethernet cable to connect to internet,
>>
> 
> no I am connected by wifi
> 

Qubes-Whonix support ending for Qubes 3.2(.1) - upgrade to Qubes R4.0 or
above required.

https://www.qubes-os.org/news/2018/10/05/whonix-support-ending-for-qubes-32/

https://forums.whonix.org/t/qubes-whonix-support-ending-for-qubes-3-2-upgrade-to-qubes-r4-0-or-above-required/6113

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e9fdb0f3-db53-4567-d30b-7bc5ba0a76d4%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Tor still doesn't work in the new Qubes 3.2.1

Máté Kovács:
> After I installed the new version of qubes, I tried everything today 
> afternoon to make it work but it wasn't successfull. Update every software.
> Got these error messages.

If you are talking about Whonix...

Qubes-Whonix support ending for Qubes 3.2(.1) - upgrade to Qubes R4.0 or
above required.

https://www.qubes-os.org/news/2018/10/05/whonix-support-ending-for-qubes-32/

https://forums.whonix.org/t/qubes-whonix-support-ending-for-qubes-3-2-upgrade-to-qubes-r4-0-or-above-required/6113

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b9063436-b6e4-85a4-950f-53a49caae097%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: please stay tuned on Whonix news

2018-09-09 Thread Patrick Schleizer

John S.Recdep:
> On 08/15/2018 07:23 PM, Patrick Schleizer wrote:
>> It is important to read the latest Whonix news to stay in touch with
>> ongoing developments. This way users benefit from notifications
>> concerning important security vulnerabilities and improved releases
>> which address identified issues, like those affecting the updater or
>> other core elements.
>>
>> Read more:
>> https://www.whonix.org/wiki/Stay_Tuned
>>
> 
> did something happen?

Nothing in particular. However, Whonix 14 release and deprecation notice
was missed by most.

> by "updater"  meaning sudo apt-get update && sudo apt-get dist-upgrade   ?

Yes, enable testers repository and that.

> seemed to be broken the other day, but seems ok
> don't see anything new on vuln issues
> https://forums.whonix.org/c/news
> 
> guess I can check again next month  :)
> 

RSS / e-mail or something would be better. A month is a long time. By
that time, testing may already be over.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f33defaa-026e-1737-de5a-7dead25cd5f6%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] AppArmor enabled by default in templates

2018-09-09 Thread Patrick Schleizer

Chris Laprise:
> Its good (and interesting) that Whonix have persevered with apparmor.
> Yet even though Torbrowser is based on Firefox, I couldn't for example
> take a Torbrowser apparmor profile and adapt it to Firefox. Again, this
> was some time ago, but at the time it just didn't work correctly.

Why not https://www.whonix.org/wiki/Tor_Browser_without_Tor would give
better security.

https://forums.whonix.org/t/todo-research-and-document-how-to-use-tor-browser-for-security-not-anonymity-how-to-use-tbb-using-clearnet

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/25f617af-e2e3-4d51-5fa3-3f70ab17acc3%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

2018-08-29 Thread Patrick Schleizer

code9n:
> Same issue but when I try to update-torbrowser (or via Tor Browser 
> Downloader) the install fails because ttb's signature has expired.

Separate issue being discussed and answered here:

https://forums.whonix.org/t/update-torbrowser-key-expired/5782

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1635f116-bd79-e53b-494f-0f82d97c2562%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

2018-08-29 Thread Patrick Schleizer

All updates regarding this issue here:

https://forums.whonix.org/t/bug-tor-browser-missing-in-dispvm-tor-browser-missing-in-whonix-ws-14-templatevm/5712/4

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1a82326c-dd83-1c70-f8f6-c3b43dc11979%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

2018-08-29 Thread Patrick Schleizer

qubes-...@tutanota.com:
>The dvm should just get the Tor Browser from the whonix-ws-14-dvm same as 
>anon-whonix for example, right?

Yes.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/df8846be-ecba-74b2-b913-b88a784dbfd0%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

2018-08-16 Thread Patrick Schleizer

qubes-...@tutanota.com:
> Hi Patrick, should one switch the Qubes Tor networking backed normally by the 
> sys-whonix to newly created sys-whonix-backup? It make sense to 
> update/upgrade whonix through Tor.
> thx

If you manage to do that, sure.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c03beeec-6dcc-1a22-f952-2d229bb4a735%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

Franz:
> On Tue, Aug 14, 2018 at 1:55 PM, Patrick Schleizer <
> patrick-mailingli...@whonix.org> wrote:
> 
>> Franz:
>>> when I try to uninstall whonix-ws
>>>
>>> sudo dnf remove qubes-template-whonix-ws*
>>>
>>> I get
>>> No match for argument: qubes-template-whonix-ws*
>>> Error: No packages marked for removal
>>>
>>> I followed this guide: https://www.whonix.org/wiki/Qubes/Uninstall
>>>
>>
>>
>> Output of...?
>>
>> dnf list | grep qubes-template-whonix
>>
> 
> 
> No output and no error. I forgot to mention I am using 3.2
> 

Output of...?

qvm-ls | grep whonix

Well, if didn't have Whonix installed yet/anymore then there is nothing
to uninstall. All ok then.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cf132bc8-e8bb-2e35-f052-6abbce1a196a%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - Updated, just lost Tor Browser for Whonix-dvm??

Please contribute here:

https://www.whonix.org/wiki/Qubes/Disposable_VM

sm...@tutamail.com:
> I just transitioned to the new Whonix 14 templates, everything was working 
> great however I just updated both the -gw and -ws templates and lost the Tor 
> Browser(AnonDist) from the whonix-ws-14-dvm after update? When I launch a 
> "whonix-ws-14-dvm" browser I get a pop-up asking: "Tor Browser not 
> installed/Start Tor Browser download?".

Will look into it.

> The problem I am having is:
> 1) The "whonix-ws-14-dvm" starts but no gnome terminal launches?

Doesn't have gnome-terminal. Use:

konsole

> 2) Since whonix doesn't use "Firefox" what would I type to launch the "Tor 
> Browser"? Assuming I eventually get a gnome terminal to launch

torbrowser

> 3) How do I install the Tor Browser safely into either the template or -dvm?

Installed by default.

https://www.whonix.org/wiki/Tor_Browser#In_Qubes-Whonix

> Other notes:
> - I created an AppVM using the updated "whonix-ws-14" template, received a 
> popup that "Tor Browser" is not installed, installed the oldest browser per 
> the recommendation on the pop-up, however after installing another pop-up 
> states: "Signature looks quite old already...check signature looks sane".

https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Notification

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/baad6309-50f7-3d8f-10c2-212a021d9dcd%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] please stay tuned on Whonix news

It is important to read the latest Whonix news to stay in touch with
ongoing developments. This way users benefit from notifications
concerning important security vulnerabilities and improved releases
which address identified issues, like those affecting the updater or
other core elements.

Read more:
https://www.whonix.org/wiki/Stay_Tuned

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b6cf495d-79e8-003f-5945-bd232b69aa83%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Guide: Monero wallet/daemon isolation w/qubes+whonix

https://getmonero.org/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.html
is missing how to actually use it.

I guess it is simply: run `monero-wallet-cli` or monero gui in
monero-wallet-ws."

0xB44EFD8751077F97:
> Patrick Schleizer:
>> I didn't notice this thread until now.
>>
>> Interesting!
>>
>> Now reference here:
>> https://www.whonix.org/wiki/Monero
>>
>>
>> I am wondering how to save users from as many manual steps as possible.
>>
>>
>> To save users from having to edit /rw/config/rc.local...
>>
>>> socat TCP-LISTEN:18081,fork,bind=127.0.0.1 EXEC:"qrexec-client-vm
>> monerod-ws user.monerod"
>>
>> Could maybe replaced by file:
>>
>> /etc/anon-ws-disable-stacked-tor.d/40_monero.conf
>>
>> content:
>>
>> $pre_command socat TCP-LISTEN:18081,fork,bind=127.0.0.1
>> EXEC:"qrexec-client-vm monerod-ws user.monerod"
>>
>> Should work after reboot (or after "sudo systemctl restart
>> anon-ws-disable-stacked-tor").
>>
>> Untested.
>>
>> Reference:
>> https://github.com/Whonix/anon-ws-disable-stacked-tor/blob/master/etc/anon-ws-disable-stacked-tor.d/30_anon-dist.conf
>>
> 
> Tested, works on Whonix 14/Qubes 4.0.
> 
> Would you consider shipping this as a default Whonix file, or maybe part
> of a package?

In package https://github.com/Whonix/qubes-whonix when using socket
activation, yes.

Similar to:

-
https://github.com/Whonix/anon-ws-disable-stacked-tor/blob/master/lib/systemd/system/anon-ws-disable-stacked-tor_autogen_port_9050.socket

-
https://github.com/Whonix/anon-ws-disable-stacked-tor/blob/master/lib/systemd/system/anon-ws-disable-stacked-tor_autogen_port_9050.service

File name should not contain "anon-ws-disable-stacked-tor" / "autogen".

File names...?

/lib/systemd/system/qubes-whonix-monerod.socket
/lib/systemd/system/qubes-whonix-monerod.service

Replace "ExecStart=/lib/systemd/systemd-socket-proxyd 10.152.152.10:9050"

with:

socat TCP-LISTEN:18081,fork,bind=127.0.0.1 EXEC:"qrexec-client-vm
monerod-ws user.monerod"

Untested. Does that work?

Would this break monerod for users not using this Monero wallet/daemon
isolation? I mean, does monerod use local port 18081 by default? In that
case we'd need to change that port.

> If not, the user will have to put this on the TemplateVM
> or config bind-dirs; which are both additional steps.
>>
>>
>> /etc/qubes-rpc/policy/user.monerod could maybe become:
>> /etc/qubes-rpc/policy/whonix.monerod
>>
>> To have users from manually creating it, could be dropped here:
>>
>> https://github.com/QubesOS/qubes-core-admin-addon-whonix/tree/master/qubes-rpc-policy
>>
>> If you like, create a pull request and see what Marek thinks.
>>
> 
> This would be useful. It's on my radar.
> 
>>
>>
>> /home/user/monerod.service would be better in /rw so only root can write
>> to it. Even better perhaps systemd user services?
>>
>> https://www.brendanlong.com/systemd-user-services-are-amazing.html
>>
>> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820111
>>
>>
> 
> Interesting, I didn't know about this. I don't see how moving the file
> from /home/user/ to /home/user/.config/systemd/user is more secure,
> though.

> I think moving it to /rw may be slightly better, but
> passwordless sudo kind of negates that.

Indeed only useful for users of these:

- https://www.qubes-os.org/doc/vm-sudo/
- https://github.com/tasket/Qubes-VM-hardening

Qubes-VM-hardening will be easily available one day probably.

https://github.com/QubesOS/qubes-issues/issues/2748

I guess password protected sudo will get more and more easy in Qubes so
very much worth going for proper access rights.

> The best would be to put it on the TemplateVM in /lib/systemd/system/,
> but, again, this is more steps for the user.
> 
> In regards to monero being in stretch-backports now, I think it might be
> an equal number of steps or more than there is now, and more confusing
> for the user, to add stretch-backports to the TemplateVM's sources and
> install via apt. If it were in stretch this would be no question.
> 

And only monerod is in Debian. monero gui is not.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/66b6ac66-17dc-64a2-b547-54246de0c46b%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

This is completely untested. Let me know what you think and if this
works for you.

* A backup of all Qubes VMs using the usual Qubes backup mechanism
(independent from below) is advisable anyhow.

* One who mind about their contents could clone their sys-whonix to
sys-whonix-backup and clone their anon-whonix to anon-whonix-backup.
Those who don't mind about their contents probably don't have this issue
anyhow?

* Then delete anon-whonix and sys-whonix.

* Then proceed as per https://www.whonix.org/wiki/Qubes/Install

* Then delete the newly created sys-whonix / anon-whonix.

* Clone sys-whonix-backup to sys-whonix.

* Clone anon-whonix-backup to anon-whonix.

* Finally delete superfluous sys-whonix-backup / anon-whonix-backup.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c99cf0c7-5fcd-f75c-cc61-3cb8ebf5a703%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

Thank you for looking into this!

Chris Laprise:
> It was a bit confusing, but from the wiki Install page I picked out
> these relevant steps for dom0 (Qubes 4.0):
> 
> $ sudo qubes-dom0-update qubes-core-admin-addon-whonix
> $ sudo qubesctl state.sls qvm.anon-whonix
> 
> The second command will start the download and install, although it does
> not give much feedback.

Created 'add salt download progress indicator' #4215
https://github.com/QubesOS/qubes-issues/issues/4215
for it.

> Also, there is no need to clone old whonix-gw in the steps I mentioned
> earlier;

Why not?

> Also, there is no need to clone old whonix-gw in the steps I mentioned
> earlier; only whonix-ws is needed. Once you have your appVMs switched
> over to whonix-ws-14 you can delete the clone.

Why needs whonix-ws to be cloned anyhow if you like to install from
Qubes repository?

whonix-ws should be ignored by salt since the template name changed to
whonix-ws-14?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/baac5869-ed98-03ea-e31b-8e155273a2ed%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Guide: Monero wallet/daemon isolation w/qubes+whonix

I didn't notice this thread until now.

Interesting!

Now reference here:
https://www.whonix.org/wiki/Monero

I am wondering how to save users from as many manual steps as possible.

To save users from having to edit /rw/config/rc.local...

> socat TCP-LISTEN:18081,fork,bind=127.0.0.1 EXEC:"qrexec-client-vm
monerod-ws user.monerod"

Could maybe replaced by file:

/etc/anon-ws-disable-stacked-tor.d/40_monero.conf

content:

$pre_command socat TCP-LISTEN:18081,fork,bind=127.0.0.1
EXEC:"qrexec-client-vm monerod-ws user.monerod"

Should work after reboot (or after "sudo systemctl restart
anon-ws-disable-stacked-tor").

Untested.

Reference:
https://github.com/Whonix/anon-ws-disable-stacked-tor/blob/master/etc/anon-ws-disable-stacked-tor.d/30_anon-dist.conf

/etc/qubes-rpc/policy/user.monerod could maybe become:
/etc/qubes-rpc/policy/whonix.monerod

To have users from manually creating it, could be dropped here:

https://github.com/QubesOS/qubes-core-admin-addon-whonix/tree/master/qubes-rpc-policy

If you like, create a pull request and see what Marek thinks.

/home/user/monerod.service would be better in /rw so only root can write
to it. Even better perhaps systemd user services?

https://www.brendanlong.com/systemd-user-services-are-amazing.html

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820111

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/e8ae85ac-5c08-fb3c-83a9-0cf752847cff%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Whonix 14 installation problem...using 4.0?

sm...@tutamail.com:
> Not sure it was happening in the background but waited for 1 1/2 hrs
with no feedback after the "sudo qubesctl state.sls qvm.anon-whonix"
command in Dom0.

Created...

add salt download progress indicator #4215
https://github.com/QubesOS/qubes-issues/issues/4215

... for it.

> Regardless I have it running...thanks Whonix/Qubes!
>

Thanks! :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/92c05694-d2c1-8574-ffb3-5b8039aedfd0%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

Andrew David Wong:
> On 2018-08-12 14:26, 'awokd' via qubes-users wrote:
>> On Sun, August 12, 2018 6:16 pm, qubes-...@tutanota.com wrote:
>>> I am planning to move from my Whonix 13 to Whonix 14 on Qubes. My
>>> question is what way it should be easier, based on the Q user
>>> experiences. What would you propose - upgrade or re-install? Are
>>> there any known issues which would call for one or other way?
>
>> Re-install is usually easier.
>
>>> I have few VMs based on the Whonix template with data and
>>> settings on it. Will the contents of these VMs remain, or will
>>> it be destroyed - re-install vs upgrade?
>
>> Contents should remain, just set them to the new Whonix template.
>> Make sure to back up everything first.
>
>
> The installation guide [1] states:
>
> "Re-installation will destroy any existing user data stored in Whonix
> VMs, unless it is backed up first. To avoid this scenario, it is
> possible to upgrade Whonix 13 to 14 instead of following these
> instructions."
>
> This was puzzling to me, too, since TemplateVM upgrades usually don't
> affect user data in TemplateBasedVMs. Could you shed some light on
> this, Patrick?
>
> [1] https://www.whonix.org/wiki/Qubes/Install

I see. Indeed it is not clear from the text alone without jumping over
to the reference and other links.

https://www.whonix.org/wiki/Qubes/Install links to
https://www.whonix.org/wiki/Qubes/Uninstall which suggests to get rid of
Whonix entirely (whonix-gw, whonix-ws TemplateVM, sys-whonix,
anon-whonix) before proceeding. Therefore all data gets lost unless
backup exists. Otherwise reinstall using salt would not be possible and
manual reinstall is too difficult (too much room for user error).

This is due to a hard to solve issue with Qubes salt:

https://github.com/QubesOS/qubes-issues/issues/4177

Help welcome with these salt issues as well as other salt issues (or any
Whonix issue):

https://github.com/QubesOS/qubes-issues/issues?q=is%3Aissue+is%3Aopen+label%3A%22C%3A+Whonix%22

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ebac22b8-1ec2-120b-b057-f1154cb8f0bd%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 - upgrade or re-install? Whats more smooth, less troublesome?

Franz:
> when I try to uninstall whonix-ws
> 
> sudo dnf remove qubes-template-whonix-ws*
> 
> I get
> No match for argument: qubes-template-whonix-ws*
> Error: No packages marked for removal
> 
> I followed this guide: https://www.whonix.org/wiki/Qubes/Uninstall
> 


Output of...?

dnf list | grep qubes-template-whonix

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be202356-226e-683a-95fc-4406279a7683%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Stable Template list 06/2018? eg whonix 14

How to know when new Whonix versions are out?

https://www.whonix.org/wiki/Stay_Tuned

Also posted subject "Whonix 14 has been Released" on this list yesterday.

Not sure how we can do better.

notify Whonix 14 release on qubes-announce

https://github.com/QubesOS/qubes-issues/issues/4193

799:
> Hello,
> 
>  schrieb am So., 3. Juni 2018, 09:47:
> 
>> 2. Jun 2018 23:54 by qubes-users@googlegroups.com:
>>
>> Is there a list of Stable Templates somewhere ,
>>
>>  https://www.whonix.org/wiki/Upgrading_Whonix_13_to_Whonix_14

Was testers-only by that time. By that time, that wiki page indicated
that. Released stable yesterday.

> I assume that we will see a Whonix 14 template in the "official qubes
> repository" soon, correct?
> 
> Or do we really need to manually upgrade from Whonix 13?

https://www.whonix.org/wiki/Qubes/Install

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/131fdf9b-5281-f7b8-b0ee-6a4b338f2ebb%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix ERROR: Systemd Clock Check Result: Unexpected results by timedatectl

> Unexpected results by timedatectl

- Please enter error messages into search engines

"Unexpected results by timedatectl"

Then often find already existing discussions.

https://github.com/QubesOS/qubes-issues/issues/3469

- Upgrade to Whonix 14 - fixed there.

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/843c8f55-4f54-0c84-0f4f-9a5ec9b477be%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Delete whonix and install again

'Andrzej Andrzej' via qubes-users:
> Very funny: D I've already solved the problem. I did not notice one thing. In 
> qvm-prefs whonix, I need to give False in option installed_by_rpm
> 

Just now reported a bug.

when restoring a VM from backup, don't restore setting installed_by_rpm

https://github.com/QubesOS/qubes-issues/issues/4192

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1b7b74bb-b729-dd3e-db0b-bb9affae1a24%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] sys-whonix-14 won't 'bootstrap' hangs @ 25-40% etc

none:
> I've noticed that sys-whonix-14  appears to fail after
> suspend and resume . is this a known issue?

Depends on exact terminology. Suspend or pause?

Does
https://www.whonix.org/wiki/Post_Install_Advice#Network_Time_Syncing
clarify?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fa20b1e1-e2e5-8d2a-ef78-75137fd15842%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] whonix clock sync error on boot

cooloutac:
> anyone else getting Unexpected results by timedatectl message from sys-whonix 
> when booting Qubes?
> 
> Tried updating doesn't seem to be going away.
> 

> Unexpected results by timedatectl

- Please enter error messages into search engines

"Unexpected results by timedatectl"

Then often find already existing discussions.

https://github.com/QubesOS/qubes-issues/issues/3469

- Upgrade to Whonix 14 - fixed there.

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ad8f0ada-336d-9382-b468-c9539939949d%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] whonix doesnt sync time -> mfa totp oathtool not working?

qubes-...@tutanota.com:
> Hi, I experience an issue with the mfa oathtool totp. 
Application similar to google authenticator?

Whonix's sdwdate might not be accurate enough for it.

Can you use that tool offline? Doing such code generation you're much
better off doing this in a non-Whonix offline (vault) VM.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b757e7eb-32ab-2041-2bfb-e7beb6f9b65d%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix and problem with Proxy Policy

Let salt do it for you.

Refer to:

https://www.whonix.org/wiki/Qubes/Install

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6e7d8eb3-3ae3-d785-3635-db3d8489bbab%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] How to change TemplateVM update method from Whonix to just another appvm?

Sphere:
> So upon installation of Qubes I have set updating of TemplateVMs through 
> Whonix but now I'm actually stuck with it and I want to change it to updating 
> through just another AppVM.
> 
> Could anyone guide me to what commands I need to use in order to fix this? (I 
> actually wish this was an option in Qubes settings UI as well)
> 

Qubes R4?

modify:

/etc/qubes-rpc/policy/qubes.UpdatesProxy

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1b28346f-8d99-1289-127a-93586110ac81%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Confusing whonix check error

ray242012:
> Unexpected results by timedatectl

- Please enter error messages into search engines

"Unexpected results by timedatectl"

Then often find already existing discussions.

https://github.com/QubesOS/qubes-issues/issues/3469

- Upgrade to Whonix 14 - fixed there.

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/43826bab-b04d-80dc-235c-44f966a8412f%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix 14 has been Released

Franz:
> Many thanks, so, following this link, the command
> 
> sudo qubesctl state.sls qvm.anon-whonix
> 
>  should download Whonix 14, correct?
> 
> But the same link tells that this would download templates whonix-gw and
> whonix-ws. But these are the same names of the old templates. So am I
> expected to rename the old templates before calling the above command?
> 

Hi,

thanks!

Please refer to:
https://www.whonix.org/wiki/Qubes/Install

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b7e1b391-e085-e274-95ce-eca5fb994634%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Whonix 14 has been Released

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

After more than two years of development, the Whonix Project is proud
to announce the release of Whonix 14.

Whonix 14 is based on the Debian stretch (Debian 9) distribution which
was released in June 2017. This means users have access to many new
software packages in concert with existing packages such as a modern
branch of GNuPG, and more. [1][2][3]

**Major Changes and New Features**

Whonix 14 contains extensive security and usability improvements, new
features and bug fixes. For a detailed description of these and other
changes, please refer to the official release notes. [4]

* Rebased Whonix on **Debian stretch** (Debian 9).
* Whonix 14 is **64-bit** (amd64) only - 32-bit (i386) images will no
longer be built and made available for download. [5]
* The new **Anon Connection Wizard** [6] feature in Whonix simplifies
connections to the Tor network via a Tor bridge and/or a proxy.
* The Tor pluggable transport **meek_lite** [7] is now supported,
making it much easier to connect to the Tor network in heavily
censored areas, like China. [8]
* **Onioncircuits** are installed by default in Whonix. [9]
* Tails' **onion-grater** program has been implemented to enable
**OnionShare, Ricochet and Zeronet** compatibility with Whonix. [10]
* **Onion sources** are now preferred for Whonix updates/upgrades for
greater security.
* Reduced the size of the default, binary Whonix images by
approximately **35 per cent** using zerofree. [11] [12]
* **Updated Tor** to version 3.3.7 (stable) release to enable full v3
onion functionality for both hosting of onion services and access to
v3 onion addresses in Tor Browser.
* Created the **grub-live package** [13] which can run Whonix as a
**live system** on non-Qubes-Whonix platforms. [14]
* Corrected and hardened various **AppArmor profiles** to ensure the
correct functioning of Tor Browser, obfsproxy and other applications.


**Known Issues**

* Desktop shortcuts are no longer available in non-Qubes-Whonix.
* OnionShare is not installed by default in Whonix 14 as it is not in
the stretch repository. [15] It can still be manually installed by
following the Whonix wiki instructions [16] or building it from source
code. [17]
* Enabling seccomp (Sandbox 1) in /usr/local/etc/torrc.d/50_user.conf
causes the Tor process to crash if a Tor version lower than 0.3.3 is
used. [18] [19]


While there may be other issues that exist in this declared stable
release, every effort has been made to address major known problems.

Please report any other issues to us in the forums, after first
searching for whether it is already known.

  https://www.whonix.org/wiki/Known_Issues

**Download Whonix 14**

Whonix is cross-platform and can be installed on the Windows, macOS,
Linux or Qubes operating systems. Choose your operating system from
the link below and follow the instructions to install it.

  https://www.whonix.org/download/

**Upgrade to Whonix 14**

Current Whonix users (or those with 32-bit hardware) who would prefer
to upgrade their existing Whonix 13 platform should follow the upgrade
instructions below.

  https://whonix.org/wiki/Upgrading_Whonix_13_to_Whonix_14

**What’s Next?**

Work on Whonix 15 is ongoing and interested users can refer to the
roadmap to see where Whonix is heading. [20]

Developer priorities are currently focused on easing the transition to
the next Debian release due in 2019 (“buster”; Debian 10) and
squashing existing bugs, rather than implementing new features.

We need your help and there are various ways to contribute to Whonix -
donating or investing your time will help the project immensely. Come
and talk with us! [21]

**References**

[1] https://www.debian.org/News/2017/20170617
[2] https://www.debian.org/releases/stable/amd64/release-notes/
[3] https://www.debian.org/releases/stable/i386/release-notes/
[4] https://whonix.org/wiki/Whonix_Release_Notes#Whonix_14
[5] Whonix 13 users with 32-bit systems can however upgrade their
platform by following the available wiki instructions, rather than
download new Whonix-WS and Whonix-GW images.
[6] https://whonix.org/wiki/Anon_Connection_Wizard
[7] https://www.whonix.org/blog/meek_lite-whonix-14
[8]
https://github.com/Yawning/obfs4/commit/611205be681322883a4d73dd00fcb13c
4352fe53
[9] https://packages.debian.org/stretch/onioncircuits
[10] https://phabricator.whonix.org/T657
[11] https://phabricator.whonix.org/T790
[12] VirtualBox .ova and libvirt qcow2 raw images. The Whonix-Gateway
is reduced from 1.7 GB to 1.1 GB, while the Whonix-Workstation is
reduced from 2 GB to 1.3 GB.
[13] https://whonix.org/wiki/Whonix_Live
[14] grub-live is optional and requires the user to first enable it
manually.
[15] https://packages.debian.org/search?searchon=names&keywords=onionsha
re
[16] https://whonix.org/wiki/Onionshare
[17] https://github.com/micahflee/onionshare/blob/master/BUILD.md#gnulin
ux
[18] https://trac.torproject.org/projects/tor/ticket/22605
[19] https://packages.debian.

[qubes-users] port filtering using Qubes firewall?

2018-02-05 Thread Patrick Schleizer

https://www.qubes-os.org/doc/firewall/

Is it possible to use "any" as address?

In other words, is it possible to do simple port filtering? As in block
port XX or allow port YY only?

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2cb05067-1cd4-4d5a--0dd71e7b9069%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes R4: DispVM Template vs DispVM initial startup vs startup usability bug?

2017-12-04 Thread Patrick Schleizer

When trying to start a DispVM for the first time, it actually starts the
DispVM template such as whonix-ws-dvm. After shut down, using the very
same shortcut to start the DispVM, it starts an actual DispVM starting
Disp[...]. The user may be confusing the DispVM template for the actual
DispVM since there is no graphical explanation what is happening. Is
that right? If so, shall we open a usability bug?

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a3400925-7e75-f97d-d724-83b6f0e07cf1%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes R4: How to start the DispVM Template another time for reconfiguration?

2017-12-04 Thread Patrick Schleizer

How to start the DispVM Template (such as whonix-ws-dvm) for a second or
subsequent time?

When I start it the second time, it actually starts a DispVM named
Disp[...].

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1b346b4c-8b23-8555-3cca-46aecd8498a1%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Anything like Split GPG for Keepass?

2017-11-12 Thread Patrick Schleizer

Eric Shelton:
> I am curious how people are making effective use of Keepass in a vault 
> domain.  It seems like with a browser plugin, you might be able to take a 
> Split GPG type of approach, and avoid all of the cutting and pasting across 
> domains.  Any comments or suggestions?
> 
> - Eric
> 


An inter-VM password manager for Qubes OS based on pass (
https://www.passwordstore.org/ )

https://github.com/Rudd-O/qubes-pass

https://groups.google.com/forum/#!topic/qubes-users/amry7Shb94o

(Adding this here since search for "Keepass" "Qubes" leads to this old
thread which claims there is no solution at all.)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2d12a34d-a034-ba4f-dbd7-b339baf7722d%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Anti Evil Maid (AEM) - possible to use text and picture at the same time?

2017-11-08 Thread Patrick Schleizer

Got secret.txt as well as secret.png - now it's only showing the image
at plymouth but no text. Looks like both cannot be combined?

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5d828548-19b1-7422-6c52-2775038e444b%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Anti Evil Maid (AEM) - SRK password strength? Sane to use same password as for full disk encryption?

2017-11-08 Thread Patrick Schleizer

How strong should the SRK password strength be? Should it be as strong
as a password for full disk encryption?

Is it sane to use same password as SRK password as well as for full disk
encryption?

Cheers,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/452590b6-339c-b1ae-233b-3260972665d4%40whonix.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Ledger Nano S works for me with Qubes OS R3.2 and R4 - now documented

2017-10-31 Thread Patrick Schleizer

Experimented with this. Documented it. Feel free to test and contribute
to the instructions.

https://www.whonix.org/wiki/Ledger_Hardware_Wallet

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e852ff07-1456-547f-11da-210a93e11203%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Ledger Nano S works great with Qubes OS R3.2 [Debian 8 and Fedora 24 AppVMs]

2017-10-27 Thread Patrick Schleizer

Does it still work for your with Qubes R4?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8b48660a-f523-33f2-c212-54f7f01ae548%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] HIDPI - Qubes R4

2017-10-24 Thread Patrick Schleizer

Did anyone manage to get HiDPI working in Qubes R4?


https://groups.google.com/forum/#!msg/qubes-users/GQOLttJeJTg/hubZ7gX8AwAJ

https://github.com/QubesOS/qubes-issues/issues/1951

R.B.:
> Hello,
> 
> For the people who want to use a HIDPI display, or have one on their
> laptop, Here's an easy way to get your vm's up to scale while issue
> #1951 is open ;-)
> 
> Settings that I use on my machine with 3.2rc1:
> gsettings set org.gnome.desktop.interface scaling-factor 2
> gsettings set org.gnome.desktop.interface text-scaling-factor 0.75
> 
> You could run it through qvm-run from dom0 for all your vm's.
> 
> Note that for some reason it won't affect templates. The
> (gnome-)terminal for instance remains the same size and scale.
> 
> For reference: https://github.com/QubesOS/qubes-issues/issues/1951
> 
> Enjoy.
> 
> Regards,
> 
> RB
> 

I tried this in a Qubes R4 AppVM. However it didn't have any effect.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/50a20835-e96b-c4b6-4869-a954139f34e2%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: How to recover Qubes when keyboard / mice is dysfunctional due to USB qube setup issues?

Trying to replace

> cd /mnt/var/lib/qubes/servicevms mv sys-usb sys-usb.bak

with qvm-prefs. (That may be even better than using systemctl.)

Please have a look at the following instructions, modified what you
wrote. I hope we could simplify/clarify for novice users and add this to
the Qubes documentation.


You should be able to fix this in grub: something like this -
Interrupt the boot process and change the parameters to remove
rd.qubeshideallusb, and add
rd.break=cleanup.

You'll be prompted to decrypt disks and then drop to shell.
The root filesystem will be mounted ro at /sysroot.

umount /sysroot

mkdir /mnt/disk

mount /dev/mapper/qubes_dom0-root /mnt/disk

chroot /mnt/disk

qvm-prefs -s sys-usb autostart false

exit

sudo umount /mnt/disk

reboot

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/469c182c-e108-954f-5540-7dcc1d80a803%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: How to recover Qubes when keyboard / mice is dysfunctional due to USB qube setup issues?

Trying to replace

> cd /mnt/var/lib/qubes/servicevms mv sys-usb sys-usb.bak

with systemctl disabling the autostart of the VM. Could that work?

Please have a look at the following instructions, modified what you
wrote. I hope we could simplify/clarify for novice users and add this to
the Qubes documentation.


You should be able to fix this in grub: something like this -
Interrupt the boot process and change the parameters to remove
rd.qubeshideallusb, and add
rd.break=cleanup.

You'll be prompted to decrypt disks and then drop to shell.
The root filesystem will be mounted ro at /sysroot.

umount /sysroot

mkdir /mnt/disk

mount /dev/mapper/qubes_dom0-root /mnt/disk

chroot /mnt/disk

systemctl disable qubes-vm@sys-usb

exit

sudo umount /mnt/disk

reboot

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3ef756af-308d-83d8-2db4-f51e36f41e4c%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] iommu=force - security risks?

I had to use iommu=force to make a notebook boot Qubes R4. [1]

Does that pose any security risk?

Cheers,
Patrick

[1] (Because 'BIOS did not enable IDB for VT properly. - TUXEDO
InfinityBook Pro 13' [2])

[2] https://groups.google.com/forum/#!topic/qubes-users/gAKEomiulUY

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2aa931c7-9076-dc1f-2c0e-0ba65f37a73c%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] BIOS did not enable IDB for VT properly. - TUXEDO InfinityBook Pro 13