Re: [qubes-users] HCL - Lenovo Thinkpad P52

2020-11-18 Thread Zrubi
us <796d> > [ 21.104136] PHY 1000BASE-T Status <3800> > [ 21.104136] PHY Extended Status<3000> > [ 21.104136] PCI Status <10> tried with kernel latest, and kernel 4.19 Can you give me some details how are you menaged to use it? Given

Re: [qubes-users] PCIE gen 4 m.2 cards supported?

2020-11-10 Thread Zrubi
faster? In practice (like appvm startup times), you can't even tell if your system runs from a SATA SSD or from an NVME m.2 SSD. Imagine the much less theoretical speed difference you may get using a PCI gen 4 device -- Zrubi -- You received this message because you are subscribed to the G

Re: [qubes-users] Qubes User Forum

2019-05-01 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/26/18 1:17 PM, Zrubi wrote: > Currently it's just a one man show :) And remained such... > The domain, and the hosting is paid for 12 months. While there is a few (paid) moths left, it seems there is no need for this service, a

Re: [qubes-users] ThinkPad T480

2019-04-30 Thread Zrubi
B-c port, - - I also have to hold back the kernel version on the 4.14 line, - - the power management part needs (heavy) tuning if you want to use it from battery... - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlzILn8ACgkQVjGlenYH FQ3AphAAqt4lWnwIvSfK/C

Re: [qubes-users] Log qubes firewall packets

2019-04-21 Thread Zrubi
nfortunately, Qubes firewall was not designed for such use case. If you are familiar with the iptables (and nftables too), you may be able to workraound this limitation. But it really not trivial to achieve . - -- Zrubi -BEGIN P

Re: [qubes-users] installing databases on templates and they need updates.

2019-04-17 Thread Zrubi
sed VM would be able to compromise the template -> then all the VMs based on that template... - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAly3J94ACgkQVjGlenYH FQ2Ifw//e1+p9zExtJnmcuRbIQ4Hn5nQBvwkdFxZzufulbQJP4PGvze

Re: [qubes-users] Logging Drop Packets

2019-03-08 Thread Zrubi
o replace the whole default firewall set, which is not trivial. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlyCvXsACgkQVjGlenYH FQ0wmA/+MIoylSBSYbkrztGdPdJTlCGN83cnE9+xnuv/oE3dPXai0r7jKSVCxqq+ bZqLXVFh32O/hBZQKlpV3dGmU9q1ZPYys/S6NZl2WW1pGQ/+zdrrC1wHSQt

Re: [qubes-users] openvpn issues

2019-02-19 Thread Zrubi
hat? Remote server can push a default route too. In this case all* traffic will go that way. *Except qubes specific DNS resolution You can ignore the pushed routes, by modifying the openvpn config: IPv4->Routes - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEm

Re: [qubes-users] not enough memory to start domain "xyz"

2019-02-17 Thread Zrubi
tions depending on your available RAM, experience, and application needs. Search the archives for suggestions and examples. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxpWXkACgkQVjGlenYH FQ0mUQ//bDBnMuecKgomPWZ8i/fi1oNgvcXPCwx7W7Y0ls8nhLYrBz3u9N

Re: [qubes-users] not enough memory to start domain "xyz"

2019-02-17 Thread Zrubi
ry (8G or less) you will be limited to a very few number of domains to start. > By the way, how can i check up how much RAM i have in the whole > laptop? (I forgot it :D ) Open a terminal in dom0, then: xl info "total memory" will tell you the amount of RAM your machine has.

Re: [qubes-users] How secure is a VM if a user tries to tampers it?

2019-02-08 Thread Zrubi
(enterprise) control was planned for qubes 4.x - however I don't hear about real life usage. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxdnxUACgkQVjGlenYH FQ1VgBAAve0JczYJCKLgBvI2VI+BNBneioWbHW5I1uAEnXh5iCU7Xlf1q/by9k2e F+8lbRV2ZcUrvp0AhN

Re: [qubes-users] How secure is a VM if a user tries to tampers it?

2019-02-08 Thread Zrubi
, no audio, no xen drivers, no file transfer, no USB attach, no copy paste. The network is painfully slow, probably because of the ancient virtual hardware provided by the HVM(?) (The window7 was much more usable in production, thanks to the qubes-windows-tools package) - -- Zrubi -B

Re: [qubes-users] How secure is a VM if a user tries to tampers it?

2019-02-08 Thread Zrubi
Currently there is no such feature I'm aware of. The one who control the hypervisor (dom0) is in "god mode" for all the guest VMs. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxdS6kACgkQVjGlenYH FQ1R3g//dBVnG68+O8OZZMEfRdskweSi0J7lQ3Pe1CQz3

Re: [qubes-users] Re: SECURITY ALERT

2019-02-06 Thread Zrubi
u should be able to connect this digital identity to my real life identity. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxbNhoACgkQVjGlenYH FQ0O8A/+K4gpkBxBhn7aUxySGcHODqTyNOK7nZlNwTa6+f/73JlPf6buX0Te4Tmb IbmT1R82dXcATLZA99Etnk2s8wSrUl9Tj4sJ73jjj1AdL/e5

Re: [qubes-users] Forum Sync Test - please ignore.

2019-02-02 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 2/2/19 1:13 PM, Zrubi via Forum wrote: > Hope this is the last one. Now it woks as I expected :) This modification should eliminate the mail delays caused by a strict SPF policy used by many of the public mailing domains by not using a fa

[qubes-users] Re: Forum Sync Test - please ignore.

2019-02-02 Thread Zrubi via Forum
Hope this is the last one. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to

[qubes-users] Re: Re: Forum Sync Test - please ignore.

2019-02-02 Thread Zrubi via
If you are really interested: the From header should look like this: Zrubi via If it's still just the forum address, I still not found the right place to modify... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubs

[qubes-users] Forum Sync Test - please ignore.

2019-02-02 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This is a post to the mailing list via normal mail message. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxVfuYACgkQVjGlenYH FQ32qhAAoAlQndPESuA5zxRW6JTOCDRFrcqhDjM2ZK93UD5bWBBdjX1kG8E4M7F

Re: [qubes-users] Re: hcl for qubes 4.0 or 4.0.1 is it good?

2019-01-31 Thread Zrubi
price difference is is also not an issue, totally worth it. I would say: today, a newly built desktop PC without SSD is a bad decision. Even if running a conventional OS. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxTOnAACgkQVjGlenYH

Re: [qubes-users] Re: hcl for qubes 4.0 or 4.0.1 is it good?

2019-01-31 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 1/31/19 11:45 AM, Panini Panini wrote: > 16GB RAM doesnt work fine? and a ssd with 500gb instead of hdd will > be more good? 16GB is fine, but the more is the better ;) SSD is a must. - -- Zrubi -BEGIN PGP SIG

Re: [qubes-users] why mail-list?

2019-01-30 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 1/31/19 12:32 AM, marmot-te wrote: > So, the real question is : There is someone who takes care about it > and optionally, Qubes_dev? There is an unofficial, PoC Qubes User Forum project: https://qubes-os.info/ - -- Zrubi -BEG

Re: [qubes-users] clock nightmare

2019-01-25 Thread Zrubi
2019-01-02 18:44:41 > CET; 3 weeks 1 days ago Hope that's help. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxLKO4ACgkQVjGlenYH FQ1qFQ/+IsDL24RLJ3ENF8I2IQyQsi+YZyK9+6BXVVhHUVAUflpOzmT2PNgyZyXg EZmSziocLTK6gNJitYbOlw

Re: [qubes-users] clock nightmare

2019-01-25 Thread Zrubi
different timezone for dom0, for every template, or every single VM if you really want. If you do not want to use any real timezone, you can choose the UTC. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxKxDQACgk

Re: [qubes-users] clock nightmare

2019-01-25 Thread Zrubi
itional packages. That template is just a base for advanced users to create their own special purpose templates. If you are just starting to learn Qubes, I would suggest to keep using the default normal template, till you feel confortable using Qubes. - -- Zrubi -BEG

Re: [qubes-users] ssh giving me locale error

2019-01-24 Thread Zrubi
O locale set in the default template. You can check this by the localectl command. As this is used in a lot of place, it is wise to correct it by setting a valid locale in a template. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlxJyuYACgkQVjG

Re: [qubes-users] Re: Lenovo T480 freezes after resume on suspend

2019-01-15 Thread Zrubi
subject states. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlw9zRAACgkQVjGlenYH FQ0kmg//bda6o6S7U9GE2FhQOVD9EYC1SHZkv33bk4Mkb7GHZPmRzq4uaQdRgkQL mvCUvQOO3Q4kFUufkEVc24+/oRbQ91RfW4PK1Us1NoKJ5PsDC0iSQn9s9LnfXCAf o9QbC1jiakGBCPKXEMJRsKf6DQPc/CU3DRFgItSLhqUjdhrWE

Re: [qubes-users] Re: Lenovo T480 freezes after resume on suspend

2019-01-13 Thread Zrubi
ou have 2 options to solve this issue: a, - - Make sure, you have the latest BIOS firmware. - - enable Thunderbolt Assist in BIOS b, - - disable Thunderbolt in BIOS (Hence, you will loose the USB-C connector) - -- Zrubi -BEGIN PGP

Re: [qubes-users] Debian minimal template

2019-01-11 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 1/10/19 1:14 AM, unman wrote: > If any one is interested there's a prebuilt debian-9-minimal > template currently available in itl-testing. would you mind sending the output of dpkg -l Thanks. - -- Zrubi -BEGIN PGP SIG

Re: [qubes-users] HCL - Lenovo Thinkpad T480

2019-01-04 Thread Zrubi
rks without problems. Confirmation needed: As I do not have any Type-C devices, I can't check if that is still working in this case or not. Moreover, if you don't need the thunderbolt at all, it can be disabled completely from BIOS. Hence then the USB-C connector lost its

[qubes-users] Re: How risky is GPU pass-through?

2018-12-23 Thread Zrubi
n QubesOS is not an > option for them. Short answer: Qubes OS is not an option for them. The risk part would come only after this feature exists in practice ;) Search back for the details. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlwgIk0ACgkQVjG

[qubes-users] HCL - Lenovo T480

2018-12-23 Thread Zrubi
FHD panel in 14" size. So everything is tiny now. DPI scaling helps in dom0, but every AppVM should need to use that settings... - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlwgHqAACgkQVjGlenYH FQ2Szg//X+M49jix1zg9G8MB7Jud/12g7e84UA2VqLP002dzGDa

Re: [qubes-users] Possible to use WindowsVM as a NetVM?

2018-11-23 Thread Zrubi
t just plain impossible for a WindowsVM to be a NetVM or I'm > missing something? I would not say impossible, but not working out of the box for sure. In practice: it would need a lot of development to make it work. - -- Zrubi -BEGIN PGP

[qubes-users] Re: Qubes User Forum

2018-11-10 Thread Zrubi
uld be very useful if the software > would become GPG/PGP aware (as in verifying signatures and hiding > the actual signatures) That's would be awesome! This forum engine is open source, and prepared for plugins. So, contributions are welcome ;) - -- Zrubi

Re: [qubes-users] Re: Qubes User Forum

2018-11-07 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/30/18 1:59 PM, Zrubi wrote: > Yeah, you are one of the many users affected by this issue: > https://www.spamresource.com/2014/04/google-groups-rewriting-from-addr es > > ses.html > > So your email address have been repla

Re: [qubes-users] Test message, please ignore.

2018-11-06 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/22/18 11:10 PM, Zrubi wrote: > This is the message. > I just need more tests. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlvhX5QACgkQVjGlenYH FQ39QBAApSAgoaTk/5HpVaMs16KZC+JGuQ3MnTAcSkDdFJ

[qubes-users] Re: Any ideas about blank white video in Simplescreenrecorder and OBS in appvm (including standalone)

2018-11-06 Thread Zrubi
See this issue for details: https://github.com/QubesOS/qubes-issues/issues/4351 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

[qubes-users] Re: Donating to qubes

2018-11-05 Thread Zrubi
Hope this help: https://www.qubes-os.org/donate/ If not, use the "contact us" link (mail address) on that page. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

[qubes-users] Re: Re: Re: Qubes User Forum

2018-10-30 Thread Zrubi
I would say it is not a problen until the mail gets delivered :) But, this is one of the reasons that this is a PoC project: we well only see - if start testing it. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group

Re: [qubes-users] Re: Qubes User Forum

2018-10-30 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/30/18 1:54 PM, 'awokd' via qubes-users wrote: > Zrubi wrote on 10/30/18 12:02 PM: >> I just wondering If my instructions was not clear about how to >> get access to the forum interface? Or just nobody cares? >> >>

[qubes-users] Re: Qubes User Forum

2018-10-30 Thread Zrubi
I just wondering If my instructions was not clear about how to get access to the forum interface? Or just nobody cares? I would accept if nobody is interested, but I see a lot of registration "attempt" in the logs... -- You received this message because you are subscribed to the Google Groups

Re: [qubes-users] Qubes User Forum

2018-10-27 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/26/18 10:18 PM, Zrubi wrote: > On 10/26/18 9:52 PM, Zrubi wrote: >> It seems if you using the google "forum" interface, then the from >> header looks like this: > >> From: "'Raffaele Florio' via qube

Re: [qubes-users] Qubes User Forum

2018-10-26 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/26/18 9:52 PM, Zrubi wrote: > It seems if you using the google "forum" interface, then the from > header looks like this: > > From: "'Raffaele Florio' via qubes-users" > Or probably not even the forum

Re: [qubes-users] Qubes User Forum

2018-10-26 Thread Zrubi
m: "'Raffaele Florio' via qubes-users" This seems to trick the forum engine, and creating a user using the mailing list address :o bummer. So if you want to use the forum, please post a "real mail" to the list first ;) - -

[qubes-users] Re: Qubes User Forum

2018-10-26 Thread Zrubi
Achim Patzner wrote on Fri, 26 October 2018 12:32 > Even with 1&1 being quite cheap: How expensive is it? I have paid only $12 - with the domain included. So the first year was a gift :) The next year would cost more for sure, but we should not worry about this at least for the next 10 monts ;)

[qubes-users] Re: Qubes User Forum

2018-10-26 Thread Zrubi
Achim Patzner wrote on Fri, 26 October 2018 12:32 > And then sends out the password for that account by mail > to the mailing > list? 8) Nope :d It should send it to your mail addres. But, let's try it: https://qubes-os.info/index.php?t=reset; -- You received this message because you are

[qubes-users] Re: Qubes User Forum

2018-10-26 Thread Zrubi
Achim Patzner wrote on Fri, 26 October 2018 12:32 > How well is it dealing with the endemic "I can earn > 8000$ an hour by > selling all my grandmothers and so can you"-type forum > spam (besides > having a houskeeping department consisting of more mods > than users)? Only registered ussers can

[qubes-users] Qubes User Forum

2018-10-26 Thread Zrubi
nd "seems to be" working. However I would really need help to: - - test this solution, by using it :) - - forum administrators also welcome. - - some voluntary moderators would be nice also. - - create any better design :) - - creating a privacy policy, and such pages... -

[qubes-users] Re: Test message, please ignore.

2018-10-23 Thread Zrubi
Zrubi wrote on Mon, 22 October 2018 21:10 > This is the message. Forum reply with quote. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-u

Re: [qubes-users] Test message, please ignore.

2018-10-23 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/23/18 1:15 PM, Zrubi wrote: > On 10/22/18 11:10 PM, Zrubi wrote: >> This is the message. > > ..and a reply. one more reply. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlvPBfIACgkQ

Re: [qubes-users] Test message, please ignore.

2018-10-23 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/22/18 11:10 PM, Zrubi wrote: > This is the message. ..and a reply. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlvPAr4ACgkQVjGlenYH FQ3KCQ//Z9w+6Zw7mlSIEOdJuzbKHk59KYjbEudGUlhvbfqTPtAeRvs1eN/lU

[qubes-users] Test message, please ignore.

2018-10-22 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This is the message. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlvOPMcACgkQVjGlenYH FQ0lQQ/8Dp3dl+pkiwA109NvJ+n57ZEUh4hxQkSBR/AK5AUT+dontt3dBvdQG8D+ MhrRytCKkx8fZjeU//92Vyx9elE3+VvNX644sFxzzBgUvvJi7+V+K

Re: [qubes-users] nftables vs iptables

2018-10-02 Thread Zrubi
needed to be reloaded all the time. But: until nftables is not a complete iptables replacement, Qubes is still needs iptables too. My personal opinion that this mixed setup causing more confusion, and do not provide any real benefits at all. - -- Zrubi -BEGIN PGP SIG

Re: [qubes-users] Qubes SIEM Using SOF-ELK

2018-09-20 Thread Zrubi
log collecting, parsing (and a very basic web based interface with graphs) are working on my NAS which has only 512 Mb of RAM. :) As the Qubes internal network is very similar to a home LAN, it would be easy to implement it inside a Qubes VM. I also made a PoC about an IDS inside Qubes: http:

Re: [qubes-users] Gaming with qubes

2018-09-20 Thread Zrubi
switching, and/or blacklisting the noveau driver in Qubes. You can also make your life easier if you using separate disks for Qubes and Windows... - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlujUFwACgkQVjGlenYH FQ2dgw//Zi6x2a3ewW+piqjTHh+AFTmk7ZjF30exDFM

Re: [qubes-users] Offtopic :: reasonable secure routers?

2018-04-12 Thread Zrubi
E/OpenWRT. and they promise to removing non-free parts. In my opinion non-free is a legal definition, and there is no direct relation to security and/or privacy. If you really care, you may build your own firmware, and then you can decide what to include... - -- Zrubi -BEGIN PGP SIGNATURE-

Re: [qubes-users] network issues on R4.0

2018-04-03 Thread Zrubi
rewall it will not be able to access > the network. so if I have a running disposable VMs when net-vm > needs a restart they will not be able to access the network after > the restart > You probably have hit by several bugs, including this one: https://github.com/QubesOS/qubes-issues/is

Re: [qubes-users] Cannot load R4.0 installer: "Not asking for VNC because we don't have a network"; " X startup failed[Xorg:12xx]."

2018-03-29 Thread Zrubi
ing the integrated VGA. in general: Optimus was never* working under Linux. nVidia 10xx cards are working only with the binary drivers. * Back in time, there was a project called: Bumblebee. But that is dead for ages. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEw39Thm3r

Re: [qubes-users] Is Template concept unique to Qubes?

2018-03-25 Thread Zrubi
hing like this often > replicated when using other hypervisor systems? VMware using similar solution for handling snapshots, and non-persistent disk images. VMware VDI also using this for provisioning new (disposable) desktops. Don't know about the others. - -- Zrubi -BEGIN P

Re: [qubes-users] Re: [Q4-rc5] Custom VPN/ProxyVM problem. Please, help

2018-03-21 Thread Zrubi
please check your kernels, and report back. Thanks. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEw39Thm3rBIO+xeXXGjNaC1SPN2QFAlqyrtoACgkQGjNaC1SP N2SwQA/+ML/cbUQM8LxwbPaNvUgo2wotTBmK90aKe7oBnCH3HXpYk5odi8Sr9VZ4 h/96rHwg1SAfki0tuau2kwl3Qsmy1CZtLcaeAqwXOI55ASGPZSi3nTBK8y

Re: [qubes-users] Netvm reassignment blocks network traffic - 4.0rc4

2018-03-02 Thread Zrubi
4.14.12 As I reported here: https://groups.google.com/d/msgid/qubes-devel/05031ade-b019-986e-e378-32 cc8fff916e%40zrubi.hu - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEw39Thm3rBIO+xeXXGjNaC1SPN2QFAlqZG1UACgkQGjNaC1SP N2RvbRAAsq5QPJe6U35nmxKvMkQGxEYVN9r3Kl9kncO5y8Btsa9kTFeiYNd7IxcQ Noc

Re: [qubes-users] Qubes in a corporate network behind HTTP proxy

2018-03-02 Thread Zrubi
proxy") is misleading. Beside from that it is a good collection of all the possible proxy settings locations. - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEw39Thm3rBIO+xeXXGjNaC1SPN2QFAlqZGWQACgkQGjNaC1SP N2QDHA/+KDsuGTavjimlA3nd6W0Wh7zmV7G8E7SFrF/NaY4ntftREKew8wPAR

Re: [qubes-users] For community by community - A way to preserve/focus everyones work going into Qubes, bottom-up

2018-03-01 Thread Zrubi
ed method. First though, a location might be ideal > starting place, where to keep everything updated? > > Initial thoughts - A https://www.qubes-os.org/doc/ page listing all > the unofficial projects. The most simple and easy way. Have you seen this page: https://www.qubes-

Re: [qubes-users] Strange error: mouse can no longer select anything

2018-02-12 Thread Zrubi
ll, since > RC-2. Asked because I have similar issue (using R3.2), caused by wrong monitor layout definitions. Means the actual window placed out of the screen known by the affected VM. The resolution is to run this script manually from dom0: qubes-monitor-layout-notify - -- Zrubi -BEGIN P

Re: [qubes-users] Strange error: mouse can no longer select anything

2018-02-12 Thread Zrubi
e's any solution other than reinstalling, but > if anyone has ideas, I'd love to hear it. Is this issue can be related to multiple monitor setup changes (for example attaching/detaching external monitors) by any chance? - -- Zrubi -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEEw39Thm3rBIO+xeXXGj

Re: [qubes-users] Re: Troubleshooting IOMMU compatibility

2018-01-17 Thread Zrubi
to ask your device manufacturer. As the proper IOMMU support is depends on : - - CPU - - motherboard chipset - - BIOS all of those are just a "black box" for us. (I have seen some cheap devices where the BIOS was hiding the virtualization features intentionally) - -- Zrubi --

[qubes-users] Re: [qubes-devel] Qubes Controller as the new Qubes-Manager

2018-01-05 Thread Zrubi
no time to write a new manager for the Qubes 4.x I just shared my use case. Feel free to ignore them if you don't like 'em ;) - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJaUA23AAoJEBozWgtUjzdkZ9IP/32ydmOQ28Y2DkIMHXU131Gs Vjk5dnhZ77kAwKA6vDKrfXaCyKA5ut07dSnzPkcunj

Re: [qubes-users] How to copy-paste into Terminal from global clipboard?

2017-12-07 Thread Zrubi
in most terminals. (Of course you can also reassign these defaults according to your needs) - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJaKRC5AAoJEBozWgtUjzdkq8YP/1W4gOsnMrRHwmqaePDFdU2C +jlMI0fnkm3I+YusGfV3Z2Xj9jgaVatoSz8rNUzvAIt5kpF269frUmNAp9xA6dJr JbVX7hksOmmnG

Re: [qubes-users] What happened to domain manager in 4?

2017-12-07 Thread Zrubi
elease. So there is no point to bury it because of a missing feature in the latest release candidate... Saying it while I'm also think that removing the Qubes Manager was a big mistake. Thant new thing in the info bar is buggy and useless in my use case too. - -- Zrubi -BEGIN PGP SIG

Re: [qubes-users] How to copy-paste into Terminal from global clipboard?

2017-12-07 Thread Zrubi
is Ctrl-Shift-c / Ctrl-Shift-v > > In a Terminal window, these shortcuts are mapped to normal copy > paste, rather than inter-vm copy pasting so it doesn't work out of > the box. Shift-Insert is the "magic key" you searching for ;) - -- Zrubi -BEGIN

Re: [qubes-users] Baffled About Passphrases

2017-11-16 Thread Zrubi
p_actions_specific_for_LUKS https://unix.stackexchange.com/questions/252672/how-do-i-change-a-luks-p assword - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJaDViJAAoJEBozWgtUjzdkjEgP/0YJaJx02wCw58jXYDOFf3xY sa3VASFf9lNtWz3B9JSK8hM+mn4aIh402zS2oGu+OQLaE9oG4H+c2e2oNDwHih

Re: [qubes-users] Relation between increasing RAM and the increased need for display memory

2017-11-13 Thread Zrubi
r should one also verify that > the display card meet some kind of minimum specifications (for the > scenario where we are going to run a LOT of VMs, only limited by > the available RAM)? See my note above. > + How is this different with Qubes 4.x compared to 3

Re: [qubes-users] Relation between increasing RAM and the increased need for display memory

2017-09-28 Thread Zrubi
d more VRAM to render all your pixels in your screens. These can be multiplied if you start using multi-monitor setups . But these needs are not growing as fast as your conventional RAM needs. I'm using 3xHD screens, and the 512Mb VRAM used by the int

Re: [qubes-users] Lenovo X230 - List of USB-Ports and USB-Controllers (Layout)

2017-09-07 Thread Zrubi
ed up which USB-devices are recognized ('lsusb' in > sys-net) and tested out which USB-Ports work. > > Any idea what is happening with the first Controller? Probably it is connected to the optional docking station, and it's ports . - -- Zrubi -BEGIN PGP SIGNATUR

Re: [qubes-users] GPU is deal-breaker

2017-08-22 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/22/2017 10:18 AM, cdgam...@gmail.com wrote: > Summary: Deal-breaker probably is down to getting VLC working > properly > did you tried to switch video output? I would start with X11 instead of automatic. - -- Zrubi -

Re: [qubes-users] usb qube with one of two usb buses?

2017-08-21 Thread Zrubi
to find out which physical USB "connector" attached to which PCI device. (It is mainboard specific) Then you can decide which should be remain in dom0. - - you have to remove the "rd.qubes.hide_all_usb" from the GRUB cmd line. - -- Zrubi -BEGIN PGP

Re: [qubes-users] Problem installing Qubes on Lenovo Thinkpad T450s

2017-08-09 Thread Zrubi
should be ebale to install/use Qubes 3.2 as well. As I have this setup too. - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZigXfAAoJEH7adOMCkunmMKsP/0ynjy/tGo9eHcnENDijf6ru 0N5oHi2EgDJBzVfLkiWXuADGGpCAiWFw+oXjiHRwvJxM1HdX7fi15nIiIYoU6

Re: [qubes-users] Problem installing Qubes on Lenovo Thinkpad T450s

2017-08-08 Thread Zrubi
can install and run every Qubes OS release. Including the latest 4.0-rc1. All you have to do is disable UEFI boot, and set "legacy boot only" in BIOS. - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZiWc/AAoJEH7adOMCkunm1H4P/1myU3LkL7S93AlTwMYxFqGi Rn5TeOxSaMS

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-04 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/04/2017 02:20 PM, Marek Marczykowski-Górecki wrote: > On Fri, Aug 04, 2017 at 01:12:29PM +0200, Zrubi wrote: >> Can't see the networking stuff. The most important is (at least >> for me) the actual NetVM used by a Qube. >

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-04 Thread Zrubi
ticket to track: https://github.com/QubesOS/qubes-issues/issues/2969 - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZhHB7AAoJEH7adOMCkunmi/YP/RqQnkvTFedQmEI3GC64oebG OvtHdsfxqOkecdPQyug7qTTImpN6IB3w7WwdoS09FcYq4FepOx08e672JQpMZeaT nA1jMmgkS/

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-04 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/01/2017 01:02 PM, Marek Marczykowski-Górecki wrote: > On Tue, Aug 01, 2017 at 11:25:11AM +0200, Zrubi wrote: >> - The isntall process is really long. Not debugged jet but >> the creating initramfs seems to be running foreve

Re: [qubes-users] Unable to install KDE desktop

2017-08-04 Thread Zrubi
ices tray icon coming from dom0 is invisible too. I know that nobody cares about KDE related bugs. This is just a status report, to save hours for other users try to use KDE :) - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZhErQAAoJEH7adOMCkunmFGcQAJ+

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-08-01 Thread Zrubi
screen is just ugly. I know that this is not the first priority, and not even a technical issue. But new users will see that ugly thing first. So it's should be a Qubes skinned one. at least. - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZgEjuAAoJEH7adOMCkunmiz8QAIESj31RZi

Re: [qubes-users] Unable to install KDE desktop

2017-07-26 Thread Zrubi
ts." > > Am I doing something wrong? No, you are right. Seems we just lost that group somewhere... @Marek do you have any idea about what happened? - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZeD9JAAoJEH7adOMCkunmr9cP/0mraqhevxTisjaolny9Uqam

Re: [qubes-devel] Re: [qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-29 Thread Zrubi
After changing the kernel, you need to regenerate DispVM savefile. - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZVKz/AAoJEH7adOMCkunmqjgP/0mTXBtVPu+5aKUBp8PeK+Uu qDopO/xn1r9gacDaddXQjoB8GYZwtM6W7Idr11AlvKaNVytbDJquZNY+EK

Re: [qubes-users] How much inital and max memory for sys and template VMs?

2017-06-28 Thread Zrubi
I give only: - - 300Mb to net VMs - - 300-512 to firewall VM's and all are running fine. The AppVMs are fine with 2048Mb - but surely depends on the apps you want to start. (for example my USB VM are happy with only 512Mb of RAM) - -- Zrubi -BEGIN PGP SIGNATURE- Versi

Re: [qubes-devel] Re: [qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-19 Thread Zrubi
preliminary_hw_support=0 > I've seen some graphics issues (different than yours) on > Broadwell-based hardware, on 4.9 kernel. Adding iommu=no-igfx to > Xen cmdline helped. See here: > https://github.com/QubesOS/qubes-issues/issues/2836 Thanks, will try both xen and the mention

Re: [qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-15 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 06/15/2017 10:02 PM, Reg Tiangha wrote: > On 06/15/2017 01:53 PM, Zrubi wrote: >> Maybe it is a know issue, but: online netvm change on a >> disposable VM is also broken on the latest 4.9 VM kernel. (Qubes >> Manage

Re: [qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-15 Thread Zrubi
y, but in the > meantime, what graphics hardware are you running, Zrubi? And which > version of 4.4 are you running where things work fine? And finally > if you can, if it's an Intel card, can you try booting with this > kernel option to see if it makes a difference? > >

Re: [qubes-users] tools for "burning" bootable USB to install qubes

2017-06-15 Thread Zrubi
st simple and reliable one: https://www.netbsd.org/~martin/rawrite32/download.html - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZQoUGAAoJEH7adOMCkunmD8sP/2g7w5799vrMfTOwBzOIJF9+ QqYS8A/DjC2hz9q43RvPnJDPbfI7EjgCuk0I7wzxGh4NU+eMfLhOw+q

[qubes-users] Use your multi-button mouse - for easy inter-vm copy paste

2017-05-19 Thread Zrubi
-paste operation :) Feel free to use this article - as a whole, or parts of it, or any derived work - for the Qubes Documentation Project. - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZHr9aAAoJEH7adOMCkunmHLMQAIZ/eOZRetYdwCLN50cU50XE

Re: [qubes-users] which things are, and which things are not encrypted on the disk.

2017-05-18 Thread Zrubi
m0 kernel (located in /boot) are both unencrypted. This can be the reason using TPM and AEM: https://blog.invisiblethings.org/2011/09/07/anti-evil-maid.html https://www.qubes-os.org/doc/anti-evil-maid/ - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGB

Re: [qubes-users] Help adding documentation to Qubes Repository

2017-05-12 Thread Zrubi
pull request part. - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJZFWaVAAoJEH7adOMCkunmwXIP/0UQyl6MHuZ3SS3g8RwD9Keb B94S5E7dXbadpkr91wJhmvLPg7Zki+hQM3NaLMbYywpoTtS0XNqWm3nqLHOhMPv3 LEUYJ8BmV6nzk0JdDfW0NQ9+XKJ1qS5Vf8W+vzmpwKUHHo2HfZk/

Re: [qubes-users] Re: can we have debian-minimal?

2017-04-25 Thread Zrubi
course it will not save disk space unless you free it using: qvm-trim-template (from dom0) Now my debian template is much closer to fedora-minimal - while still booting and working :) - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJY/058AAoJEH7adOMCkunmlTkP/jpnhbBHDzAIqG1bCv

Re: [qubes-users] Intrusion detection daemons in VMs

2017-04-24 Thread Zrubi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 11/04/2016 10:35 AM, Zrubi wrote: > Another - currently implementable - way to use a proxy VM (as it > is currently used as a dnf/yum proxy) and install your desired > intrusion detection software there. Suricata is a good

Re: [qubes-users] How to handle untrusted applications?

2017-04-18 Thread Zrubi
y general template (which I do > not want ) or create a dedicated template just for the app vm that > is supposed to run that app ... is that correct? Yes, this is the two way I know. Moreover the best is to not use it at all, if you not trust that app ;) - -- Zrubi -BEGIN PGP SIGNATURE-

Re: [qubes-users] Big problem?

2017-04-13 Thread Zrubi
ew pc and > this is already a big problem... > It can be a keyboard layout problem, if you not using the default US - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJY7yp7AAoJEH7adOMCkunmo7MP/jIsvK3g9Ltl82ix/md9bJ2p yG79shhf5hbAfhueEKvBPssPrGOhlHY

Re: [qubes-users] Breaking the Security Model of Subgraph OS

2017-04-12 Thread Zrubi
gh free time :( - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJY7e5NAAoJEH7adOMCkunmtEIP/1KGn93gd3WdfC1on3+//f4e /ht1q6yVosHXypBT0WpRLrdWWEy+oBRfiMTbxq9xi/1CIwvMIcvOZHj0+rb+XHnZ 3j8qmmUFQQtVqyazlJuyJZYiDU1DFQl+CEA1NP/31TWNsv5bClH3jTgks68D8dr5 eUQml9KZBIgMTUfuwAJh3

Re: [qubes-users] Re: dnf over VPN with qubes-updates-proxy

2017-03-29 Thread Zrubi
dnf/dnf.conf in your template, and comment out the qubes proxy line. Of course this will disable the original "template protection" where you can only reach the updates proxy. - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJY23AqAAoJEH7adOMCkunmBJMP/RL0i7xF/tY

Re: [qubes-users] Re: HCL - Sony SVF15A1C5E

2017-03-09 Thread Zrubi
atasheet.pdf So Xen (and qubes HCL script) reports about vt-d is seems to be true :) - -- Zrubi -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJYwQ2HAAoJEH7adOMCkunmJfMP/3y5Em90X88vXVA3LvQ7GnQy SQ9ORhyB9Q5g8G5Q5zos8lZg8qjUb3o2fNCWJwtBKn/Bx9XXH

Re: [qubes-users] Re: HCL - Sony SVF15A1C5E

2017-03-08 Thread Zrubi
the HCL script is pretty easy to read. You can check how it is decide vt-d support. it is actually relaying on xen, and parsing the output of these commands : xl info xl dmesd If you believe it is a false report, send us the support files as well for further investigation. - -- Zrubi -

  1   2   >