Re: [qubes-users] issues with i3, xrandr and keyboard

2021-01-20 Thread Patrik Hagara
On 1/19/21 6:27 PM, 'qtpie' via qubes-users wrote: Hi, A few questions about using Qubes with i3. I think the idea behind i3 is great, but getting everything to work is a bit of a struggle. I'm using the i3 window manager with Qubes in a multi-monitor setup. The laptop monitor is 1920x1080,

Re: [qubes-users] AEM pcr sanity check failed

2019-05-25 Thread Patrik Hagara
On 5/26/19 2:32 AM, Patrik Hagara wrote: > as the one in Fedora repos is quite > ancient with multiple - even security - bugs Actually, scratch that. You can get an up-to-date Fedora tboot package (newer than Ubuntu!) from a more recent release [1], manually verify the signatures [2] and i

Re: [qubes-users] AEM pcr sanity check failed

2019-05-25 Thread Patrik Hagara
On 5/22/19 1:56 PM, m...@peterihasz.com wrote: > I renamed the sinit module to the right one. I think it is loaded but the > system continously reboots. > Here are the logs: > https://photos.app.goo.gl/MtYNRYf8uduy1Ukn8 Try appending "min_ram=0x200" [1] to tboot params. If it's still stuck

Re: [qubes-users] AEM pcr sanity check failed

2019-05-21 Thread Patrik Hagara
On 5/17/19 10:31 PM, m...@peterihasz.com wrote: > Hi! > > Can anybody translate the output of the tboot? What is the problem? I > downloaded the right sinit module and strictly followed the aem tutorial. In > my case it is the sinit-79 because my laptop has an intel i5 6300u cpu with > txt. >

Re: [qubes-users] Qubes 4.0.x - Linux kernel 4.19.15 package available in testing repository

2019-01-29 Thread Patrik Hagara
On 1/25/19 3:16 PM, Marek Marczykowski-Górecki wrote: > On Fri, Jan 25, 2019 at 01:58:59PM +0100, Patrik Hagara wrote: >> On 1/24/19 5:18 PM, Patrik Hagara wrote: >>> On 1/20/19 1:57 AM, Marek Marczykowski-Górecki wrote: >>>> Hi all, >>>> >>>>

Re: [qubes-users] Qubes 4.0.x - Linux kernel 4.19.15 package available in testing repository

2019-01-25 Thread Patrik Hagara
On 1/24/19 5:18 PM, Patrik Hagara wrote: > On 1/20/19 1:57 AM, Marek Marczykowski-Górecki wrote: >> Hi all, >> >> There is updated "kernel" package available in current-testing >> repository - it's a Linux long term support 4.19.x series, as an update >

Re: [qubes-users] Qubes 4.0.x - Linux kernel 4.19.15 package available in testing repository

2019-01-24 Thread Patrik Hagara
On 1/20/19 1:57 AM, Marek Marczykowski-Górecki wrote: > Hi all, > > There is updated "kernel" package available in current-testing > repository - it's a Linux long term support 4.19.x series, as an update > over 4.14.x before. Since the upgrade switches to the next major LTS > branch, I'll keep

Re: [qubes-users] 2FA AEM (anti-evil-maid) fails: "All key slots full"

2018-12-19 Thread Patrik Hagara
On 12/17/18 2:38 PM, 'qubeslover' via qubes-users wrote: > Hi, > I am trying to configure 2FA AEM (usb stick + TOTP) on my computer. I've > done several attempts and I've probably messed up with something somewhere. > > Now when I run: > > "anti-evil-maid-install -m /dev/sdb1"  > > * A new ext4

Re: [qubes-users] port filtering using Qubes firewall?

2018-02-05 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/05/2018 01:40 PM, Patrick Schleizer wrote: > https://www.qubes-os.org/doc/firewall/ > > Is it possible to use "any" as address? > > In other words, is it possible to do simple port filtering? As in > block port XX or allow port YY only?

Re: [qubes-users] Turn off quiet boot?

2017-10-12 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/12/2017 01:42 AM, Ron Hunter-Duvar wrote: > Does anyone know how to turn off QubesOs' quiet boot (splash > screen instead of kernel messages)? > > I like to see the messages during boot (and shutdown). More than > once I've caught a lurking

Re: [qubes-users] Options for securing /boot

2017-09-07 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 09/07/2017 03:21 PM, cooloutac wrote: > On Tuesday, August 29, 2017 at 12:46:04 PM UTC-4, Patrik Hagara > wrote: On 08/29/2017 06:25 PM, cooloutac wrote: >>>> On Tuesday, August 29, 2017 at 11:38:59 AM UTC-4, Patrik >>&

Re: [qubes-users] Options for securing /boot

2017-08-30 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/30/2017 05:46 PM, wordswithn...@gmail.com wrote: >> Plus, you always need to disconnect all untrusted USB devices >> while rebooting Qubes, regardless of whether you have USB qube >> set up or not. >> > > I just want to make sure that this

Re: [qubes-users] Options for securing /boot

2017-08-29 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/29/2017 07:38 PM, David Hobach wrote: > On 08/29/2017 06:32 PM, cooloutac wrote: >> On Tuesday, August 29, 2017 at 12:25:51 PM UTC-4, cooloutac >> wrote: >>> On Tuesday, August 29, 2017 at 11:38:59 AM UTC-4,

Re: [qubes-users] Options for securing /boot

2017-08-29 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/29/2017 06:25 PM, cooloutac wrote: > On Tuesday, August 29, 2017 at 11:38:59 AM UTC-4, Patrik Hagara > wrote: On 08/29/2017 04:50 PM, cyberian@national.shitposting.agency > wrote: >>>> Leo Gaspard, >>>> &g

Re: [qubes-users] Options for securing /boot

2017-08-29 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/29/2017 04:50 PM, cyberian@national.shitposting.agency wrote: > Leo Gaspard, > > I have read about AEM but have never used it, it seems like it is > geared towards protecting from USB's with malicious firmware on > them. > > Does AEM

Re: [qubes-users] Re: X1 carbon vs X230

2017-08-09 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/09/2017 10:04 PM, Finsh wrote: > Yes, that was the plan, using the HDD for things like Films , > SafeVault and so on :).However, i dont know yet how easy > /complicated it is under qubes to specify the storage place etc of > the different vms(

Re: [qubes-users] Re: X1 carbon vs X230

2017-08-09 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/09/2017 07:14 PM, Finsh wrote: > Thanks a lot.So i think i will go for the x230... i will use the > SSD for the OS and the second drive (HDD) for the data, this should > be also boost perfomance right? > > btw the x1c ssd is this one >

Re: [qubes-users] Re: X1 carbon vs X230

2017-08-09 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/09/2017 05:57 PM, Finsh wrote: > So the x1 carbon should be the faster one, however, only if im not > using to much VMs (cant say i had this problem so far, i normally > dont use more than aprox. 7-10 vms) > > On one handy, i obviously would

Re: [qubes-users] Re: X1 carbon vs X230

2017-08-09 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/09/2017 04:56 PM, Finsh wrote: > unfortunately, upgrading the ram of the X1 is not possible, i have > to stick with 8 gb(already looked that up, on the x1 carbon i have > running qubes currently) > Ah well... Then it depends on your expected

Re: [qubes-users] X1 carbon vs X230

2017-08-09 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/09/2017 04:47 PM, Finsh wrote: > Hello, i would like to know which one of the following Computer > would be better/faster for Qubes os > > Lenovo x1 Carbon 1gen 3460 Intel Core i7-3667U vPro 2x 2GHz 8gb > Ram SSD > > or: > > Lenovo x230

Re: [qubes-users] Re: Forgot Login Password

2017-08-07 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/07/2017 08:07 AM, rohan kumbhar wrote: > On Thursday, 3 August 2017 11:37:01 UTC+5:30, rohan kumbhar > wrote: >> Hello, >> >> I am Unable to login. I have forgotten the login password. What >> is the procedure to reset login user password? >>

Re: [qubes-users] Re: Forgot Login Password

2017-08-03 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/03/2017 11:23 AM, rohan kumbhar wrote: > No. It doesn't accept root : root, to or, password combination Then there's tmux running on one of the TTYs... You'll recognize it by the green bar at the bottom. Once you see it, create a new "window"

Re: [qubes-users] Re: Forgot Login Password

2017-08-03 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/03/2017 10:33 AM, rohan kumbhar wrote: > After I press ctrl+alt+f* it again blocks me. asks for dom0 login > id-passwd > Log in as "root", there should be no password set IIRC. If there is, try entering "root" there, too (or "toor" or

Re: [qubes-users] Forgot Login Password

2017-08-03 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/03/2017 08:22 AM, Patrik Hagara wrote: > On 08/03/2017 08:07 AM, rohan kumbhar wrote: >> Hello, > >> I am Unable to login. I have forgotten the login password. What >> is the procedure to reset login user passwor

Re: [qubes-users] Forgot Login Password

2017-08-03 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/03/2017 08:07 AM, rohan kumbhar wrote: > Hello, > > I am Unable to login. I have forgotten the login password. What is > the procedure to reset login user password? > > Thanks! Regards. > Assuming you left the root account disabled (as is

Re: [qubes-users] dvm starting extremly slow -> guid

2017-07-26 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/26/2017 11:07 AM, 'P R' via qubes-users wrote: > Any idea where to look further and was is happening exactly > between "qrexec done" and "guid done"? Try running systemd-analyze blame in the DispVM for both old and new template, maybe

Re: [qubes-users] Printing and scanning with Qubes - a love story

2017-07-21 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/21/2017 04:05 PM, Patrik Hagara wrote: >> Qubes is still worth it anyway, and I can always copy files over >> to my other machine via USB stick when I need to print >> something. This might be a pretty nice attack vec

Re: [qubes-users] Printing and scanning with Qubes - a love story

2017-07-21 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/21/2017 03:28 PM, js...@riseup.net wrote: > Jean-Philippe Ouellet: >> On Thu, Jul 20, 2017 at 12:32 PM, js...@riseup.net >> wrote: >>> Hi, >>> >>> I've been having some problems with this myself. Specifically, >>> I'm not

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-21 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/21/2017 05:00 AM, loke...@gmail.com wrote: > On Thursday, 20 July 2017 20:29:11 UTC+8, Patrik Hagara wrote: > >> On 07/20/2017 02:08 PM, Patrik Hagara wrote: >>> As for the Linux kernel, you want to use the earlypri

Re: [qubes-users] 2 vm screens on windows? This normal?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 03:21 PM, jakis2...@gmail.com wrote: > I had a few issues installing windows tools. Now when I open I get > two windows. One regular that says desktop. The other smaller that > is just stuck on starting windows. > > Image here.

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 02:08 PM, Patrik Hagara wrote: > As for the Linux kernel, you want to use the earlyprintk param, > either "earlyprintk=vga,keep" or "earlyprintk=xen,keep" should > work. Again, the full (and fairly long) l

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 01:13 PM, Elias Mårtenson wrote: > On 20 July 2017 at 17:49, Patrik Hagara <patriha...@gmail.com > <mailto:patriha...@gmail.com>> wrote: > > > Oh yes, now I remember! This was definitely a Linux kernel iss

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 11:44 AM, Elias Mårtenson wrote: > On 20 July 2017 at 17:31, Patrik Hagara <patriha...@gmail.com > <mailto:patriha...@gmail.com>> wrote: > > Now that I tried removing min_ram from my setup it still work

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 11:21 AM, Elias Mårtenson wrote: > On 20 July 2017 at 16:51, Patrik Hagara <patriha...@gmail.com > <mailto:patriha...@gmail.com>> wrote: > > >> Thank you! You were right of course. There was a

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 10:46 AM, loke...@gmail.com wrote: > On Thursday, 20 July 2017 16:22:22 UTC+8, Patrik Hagara wrote: > >> That's a non-fatal error, I have that in my log too. >> >> What's more interesting is the last photo, i

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 10:09 AM, Elias Mårtenson wrote: > On 20 July 2017 at 15:58, Patrik Hagara <patriha...@gmail.com > <mailto:patriha...@gmail.com>> wrote: > > > This looks to me like tboot either wasn't loaded at all or me

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 09:42 AM, loke...@gmail.com wrote: > On Thursday, 20 July 2017 15:18:26 UTC+8, Patrik Hagara wrote: > >> Try checking the tboot log (from dom0) for any obvious error >> messages: sudo txt-stat > > Tha

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-20 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/20/2017 07:32 AM, loke...@gmail.com wrote: > On Friday, 14 July 2017 16:16:21 UTC+8, Patrik Hagara wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> On 07/14/2017 09:45 AM, loke...@gmail.com wrote: >&g

Re: [qubes-users] Re: Working with a BTC hardware wallet on Qubes

2017-07-15 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/15/2017 11:51 AM, Mr. DONG wrote: > Isn't possible to attach only my HW wallet to an AppVM instead of > assigning the whole USB controller? (I've tested this option, and > once I assign my USB PCI device to another AppVM all my USB ports >

Re: [qubes-users] Re: Working with a BTC hardware wallet on Qubes

2017-07-14 Thread Patrik Hagara
t output shows no difference either I attach or not > the HW wallet. The only way I can attach to another appvm is if I > attach the entire PCI controller, via the usb-passthrough does not > work. > > > Any alternatives? > > > > > On 14 July 2017 at 10:48 Pat

Re: [qubes-users] Re: Working with a BTC hardware wallet on Qubes

2017-07-14 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/14/2017 02:54 AM, 'Essax' via qubes-users wrote: > Have you tried these steps: > > 1) Attach hardware wallet to sys-usb 2) Go to the dom0 Gui and and > right click on the appVM you want to attach it to. 3) In the box > that opens scroll down

Re: [qubes-users] How can I test that my AEM configuration is correct?

2017-07-14 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/14/2017 09:45 AM, loke...@gmail.com wrote: > On Friday, 30 June 2017 04:17:08 UTC+8, Marek Marczykowski-Górecki > wrote: > >> Oh, it isn't listed in updates-status[1], so I completely forgot. >> Probably it was uploaded to testing before

Re: [qubes-users] RAM available

2017-06-11 Thread Patrik Hagara
On 06/11/2017 09:57 PM, nimrod@gmail.com wrote: > Is there any way to make sure that the Qubes OS system can recognize all the > RAM in my system? Issuing `xl info` from a dom0 terminal will output the total system RAM size usable by Xen, look for the "total_memory" line. Cheers, Patrik

Re: [qubes-users] Yubikey, luks disk encryption password, and usb-vm ?

2017-06-04 Thread Patrik Hagara
On 06/04/2017 10:03 PM, hawk...@bitmessage.ch wrote: > When using a usb-vm, my usb keyboard is not accessible at boot time, > and thus my disk encryption password must be typed on the built-in > keyboard. > > When not using a usb-vm, a usb keyboard can be used to enter the disk > encryption

[qubes-users] Re: Making 2 or more NetVMs available to one Qube

2017-06-04 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sunday, June 4, 2017 at 8:02:46 PM UTC+2, michael.v...@gmail.com wrote: > For obvious reasons, I would prefer to torrent over Tor. Please, don't do that. You'll not only be degrading performance of the Tor network but also leaking your real IP

[qubes-users] Re: [qubes-devel] Re: Request for feedback: 4.9 Kernel

2017-06-01 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Jun 1, 2017 at 4:00 PM, Pablo Di Noto wrote: >> >> 4) General feedback on the 4.9 kernel. >> > >> > Oh, yeah... I have started experiencing quite annoying internet >> > connectivity issues, very, very difficulty to

[qubes-users] Re: [qubes-devel] Re: Request for feedback: 4.9 Kernel

2017-06-01 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Jun 1, 2017 at 2:55 PM, Pablo Di Noto wrote: > Hello, > >> 1) Hardware that used to work with 4.4 or 4.8 no longer works with 4.9. > > Using it on a Lenovo X250 (i3-5010U), and other desktops. > > Experiencing

Re: [qubes-users] Accessing available applications from CLI?

2017-05-16 Thread Patrik Hagara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, 2017-05-12 at 08:39 +0200, Johannes Graumann wrote: > Is there a way to use the CLI to > > 1) access what apps a VM has available You can find the .desktop files for all available programs here: /var/lib/qubes/vm-templates//apps.templates/