Re: [qubes-users] Upgrade from RC3 to final release
> Sure, if it still doesn't work after you do the above. :) :) I managed to get the updates from testing but still see `fc25` instead of `fc26` in the repo file. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8e392ef6-7c9b-495e-9aff-a63ad8231100%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Upgrade from RC3 to final release
Thanks for the link. I see I have still some references to fc25 in the repo file. How do I upgrade to fc26? Could you paste the content of your repo file? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/785b3571-9cd9-41e4-863f-b14ab995fea0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Upgrade from RC3 to final release
I used RC3 and always update from stable repo, never from testing. Do I have now the good repos in yum? I think I have outdated yum repos and cannot update to final. Can somebody paste the content of its /etc/yum.repos.d/qubes-dom0.repo file? How am I supposed to ugprade to the final candidate? UpdateVM to download updates for Dom0; this may take some time... Last metadata expiration check: 0:28:30 ago on Tue Apr 3 10:07:04 2018. Dependencies resolved. Package Arch VersionRepositorySize Reinstalling: qubes-release noarch 4.0-0.4qubes-dom0-current50 k Transaction Summary Total download size: 50 k DNF will only download packages for the transaction. Downloading Packages: [MIRROR] qubes-release-4.0-0.4.noarch.rpm: Curl error (7): Couldn't connect to server for http://yum.qubes-os.org/r4.0/current/dom0/fc25/rpm/qubes-release-4.0-0.4.noarch.rpm [Failed to connect to yum.qubes-os.org port 80: Connection refused] [FAILED] qubes-release-4.0-0.4.noarch.rpm: No more mirrors to try - All mirrors were already tried without success The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'dnf clean packages'. Error: Error downloading packages: Cannot download rpm/qubes-release-4.0-0.4.noarch.rpm: All mirrors were tried [user@dom0 ~]$ ls /etc/yum.repos.d/ fedora.repo fedora-updates.repo qubes-dom0.repo qubes-templates.repo [user@dom0 ~]$ sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing Using sys-net as UpdateVM to download updates for Dom0; this may take some time... Failed to synchronize cache for repo 'qubes-dom0-current', disabling. Failed to synchronize cache for repo 'qubes-dom0-current-testing', disabling. Last metadata expiration check: 0:32:26 ago on Tue Apr 3 10:07:04 2018. Dependencies resolved. Nothing to do. Complete! No packages downloaded Qubes OS Repository for Dom0 108 MB/s | 244 kB 00:00 [user@dom0 ~]$ sudo qubes-dom0-update Using sys-net as UpdateVM to download updates for Dom0; this may take some time... Last metadata expiration check: 0:32:37 ago on Tue Apr 3 10:07:04 2018. Dependencies resolved. Nothing to do. Complete! No packages downloaded Qubes OS Repository for Dom0 112 MB/s | 244 kB 00:00 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/54e64a8d-6c3b-4abc-b59b-f16365fdeefc%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Do allowing USB Keyboard expose to badusb attacks?
If a USB keyboard is allowed with /etc/qubes-rpc/policy/qubes.InputKeyboard, does it increase the risk for badusb kind of attacks? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/82d5f838-6efe-42a1-a68e-f3e4094421d3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Q4RC3: fedora 26 dvm not displayed as disposable
After following the instructions for using the fedora 26 template, it does not show in the app menu as disposable, only as "Domain: fedora-26-dvm". I executed: sudo qubes-dom0-update qubes-template-fedora-26 qvm-create -l red -t fedora-26 fedora-26-dvm qvm-prefs fedora-26-dvm template_for_dispvms True qvm-features fedora-26-dvm appmenus-dispm 1 qubes-prefs default-dispvm fedora-26-dvm How can I fix it? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/88891b2c-5c51-4593-ba8e-128fe5603f86%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] New HCL Entry: Lenovo ThinkPad T470 (20HDCTO1WW)
Thanks everyone for the replies. I finally opted for RC3 and after fixing the iso with a live fedora and livecd-tools it went almost almost without problems. The only problem was that the keyboard layout chosen during the installation was not taken in account for promting the encryption password when booting. I hope I will not encounter too much bugs with it and be able to work. It seems okay for the few hours I had to use it and even more resistant to usb devices being physically disconnected without detaching them than 3.2. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/05645d61-3235-4a1e-99e6-5a17eef97d5e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Q4: Enabling updates for templates restored from Qubes 3
Maybe it is necessary to $ apt-get install qubes-core-agent in the VM after update, not sure. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/542f0132-383d-435c-94f3-a374877c7e74%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Q4: Enabling updates for templates restored from Qubes 3
I just spent a good time getting my backuped templates from Qubes 3 to work in Qubes 4 RC3. I'm posting here what I did (roughly) to get it work, in the hope it can help somebody. After running qvm-backup-restore, starts a terminal for your VM: $ qvm-run mytemplate gnome-terminal In the VM, - Rename /etc/apt/sources.list.d/qubes-r3.list to /etc/apt/sources.list.d/qubes-r4.list - Replace mention of "3.2" to "4.0" qubes-r4.list Now we will import the new GPG keys used to sign the packages. - Start one of the official template: $ qvm-run debian-8 gnome-terminal In the debian-8 VM: $ apt-ket exportall > /tmp/keys.txt $ qvm-copy-to-vm /tmp/keys.txt Choose "mytemplate" as destination. In the mytemplate VM: $ apt-key import ~/QubesIncoming/debian-8/keys.txt Now enable networking in the mytemplate settings by specifying sys-net as a network VM. Updates the packages: $ apt-get update $ apt-get upgrade When prompted, choose to use the qubes-r4.list from the maintainer (or merge manually). Disable network in the mytemplate VM. Restart. Now the proxy updates should work again. Good luck. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c8acfaed-97e7-4acf-8a94-aa8fc729695f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] New HCL Entry: Lenovo ThinkPad T470 (20HDCTO1WW)
Thank you for your reply. Could you explain to me why using EFI would solve the problem of the X server not starting? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/84284e0a-7269-44d7-ab95-98395b9330a8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] New HCL Entry: Lenovo ThinkPad T470 (20HDCTO1WW)
Hello everyone, I tried to install Qubes 3.2 on a T470s without success. I have the version with the Intel graphics. I did everything in Legacy Mode (no EFI). It does boot but the X server cannot start. Text installation did not work. Stephan Marwedel says in this thread he managed to install 3.2. How? I cannot wait for version 4 to come in January or later and installing RC version is risky since I need the laptop for work and no migration path from RC to candidate is guaranteed by the Qubes OS team. Any help will be highly appreciated! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ea610d39-36d7-4c0e-94c6-24fdf1be8d12%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Using software installed in /rw/usrconfig/bin
After adding some private debian repositories for erlang and elixir in the VM template and installing them, I noticed that they get installed in /rw/usrlocal/bin and /rw/usrlocal/lib. - What are these directories for? - How can I use the software in the app VM? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/eaf5d11a-4349-449d-92f4-668b57cf1eda%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Massive performance improvement after disabling power management in the BIOS
> Hi, might I ask what manufacturer/model your laptop is? Lenovo X240. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8d0d85d6-b032-4db9-8f00-abe346bc6df9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Massive performance improvement after disabling power management in the BIOS
Hello community, I was wondering why one of my program was taking ~15 seconds to compile when my colleague compiled it within ~3 seconds on his system. I know there are a performance price to pay for the virtualisation but nonetheless. I was super annoyed and I vaguely thinking about switching back to another distribution but at the same time I was reading about DNS rebinding attacks and I really wanted to stay on Qubes. I gave a look at the BIOS settings, in the power management section. There are options like "Maximize performance on AC" and also options for when the laptop is on battery. I already had the "Maximize performance on AC" on. I disabled the whole power management section. Performance are better! The program mentioned above now compiles in ~5 seconds. The whole systems seems more responsive, Firefox and Youtube video (HTML5) seems also better. The only drawback is that the laptop is definitively generating more heat (and probably consuming more energy) but that's okay because I spend most of the time connected to the AC. Is there a bug somewhere in the kernel, in Xen or Qubes which prevent them to properly use this BIOS power management system correctly? Have other users experience something similar? When googling I found this article from VMWare with similar problems / solutions https://blogs.vmware.com/vsphere/2012/01/having-a-performance-problem-hard-to-resolve-have-you-checked-your-host-bios-lately.html Best regards, K. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/08ea779a-9f41-435c-805f-fa1e0c18a3f5%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Google Maps producing a very high CPU usage
I found a solution by disabling WebGL. There were errors in the console indicating that the operation executed by the page are slow. It is possible to set webgl.disable to true in about:config. Now it's acceptably slow :) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/6d132bd8-03d4-4718-92e6-4d15e9c88cf3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Google Maps producing a very high CPU usage
Hello, I have consistently issues when accessing Google Maps from a DispVM (or VM) with Firefox: the site becomes unresponsive or extremely slow and the CPU usage is between 70 and 99%. Do other users have a similar experience? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c695b001-43fa-4503-b855-0a71fd9db352%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Start VM automatically on boot not working
Hum thank you. I didn't do that but somehow it works now. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ea6b21c7-68f3-4e2a-9a3d-819a626feade%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Start VM automatically on boot not working
BTW, i didn't cloned the sys-firewall as mentioned earlier, I just created a new one. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0fc956cf-ceda-42d8-b52a-8d7600db50d7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Start VM automatically on boot not working
and further: libvirt.libvirtError: Requested operation is not valid: Domain is already running. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a473a522-c780-498c-b110-493a375d5c88%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Start VM automatically on boot not working
Searching in the output of journactl gives the following errors: Failed to start Start Qubes VM Unit entered failed state Failed with result 'exit-code' internal error: Unable to reset PCI device [...] no FLR, PM reset or bus reset available. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f9666048-3e6b-4a2f-84e6-d574335d504f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Start VM automatically on boot not working
> Try un-setting and re-setting it again: It didn't helped. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/460de117-0299-4fd6-a82e-a79d57233d5e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Start VM automatically on boot not working
Hello, After cloning sys-firewall into sys-vpn-firewall with qvm-clone in dom0, and selection "Start VM automatically on boot not working " in the preferences of sys-vpn-firewall, the VM does not start automatically after reboot/ new starts. It does however start when a VM using it as a NetVM is started. What is happening here? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5c6778c1-a5b8-4313-98c9-9f944d809d77%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] seafile applet integration with the panel is not working
Thanks for listing these bugs. It is probably something else: the icon neither appear/disappear nor is being transparent. It is just not being shown. There is something specific to the seafile-applet: it is an application that can be minimized in the system tray, not only an "applet". Maybe there is a difference with "pure" applets such as the network-manager? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b3740aa4-6ad1-46ce-b5ef-087d7483b409%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] seafile applet integration with the panel is not working
Hello, The seafile-applet (a kind of open-souce dropbox) is not being displayed in the xfce panel when started. Is there something specific to check or fix to get it working? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b785e4dd-5eb9-4f02-b25b-5117c929165b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] No DNS with ProxyVM + OpenVPN
I found the culprit thanks to your very helpful instructions: the network-manager service was running in the VM. It happened because I did first test my VPN with the instructions (https://www.qubes-os.org/doc/vpn/) following the "Using NetworkManager" section as a quick test, to only later set it up without it. Thanks again. I hope this thread will be useful for others facing similar problems. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f35d90b9-2632-4f91-afff-3e1f8ac26302%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] No DNS with ProxyVM + OpenVPN
> To test this theory, you could put a 7sec delay in qubes-vpn-handler.sh > right before the line 'iptables -t nat -F PR-QBS'. Then the right IPs > should appear in PR-QBS. It did work. Thank you again! I wonder what is changing the NAT rules. I only see one 'up' directive in the openvpn configuration, the one calling the qubes script. Maybe something from Qubes itself? It's correct that the ProxyVM should be connected to sys-firewall right? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0b146266-ed8f-43fc-a0d3-f933d3c49f6a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] No DNS with ProxyVM + OpenVPN
Thank you very much for your help. The DNS are transmitted but the rules in the firewall seems to be missing: Chain PR-QBS (1 references) pkts bytes target prot opt in out source destination 0 0 DNAT udp -- anyany anywhere 10.137.5.1 udp dpt:domain to:10.137.2.1 0 0 DNAT tcp -- anyany anywhere 10.137.5.1 tcp dpt:domain to:10.137.2.1 0 0 DNAT udp -- anyany anywhere 10.137.5.254 udp dpt:domain to:10.137.2.254 0 0 DNAT tcp -- anyany anywhere 10.137.5.254 tcp dpt:domain to:10.137.2.254 The qubes script is nonetheless correctly started because I see the notification "VPN is up". -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5f8f693e-6e55-4b81-b415-14ac99108c34%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] No DNS with ProxyVM + OpenVPN
Hi, I set up a proxyVM with openvpn following the instructions from https://www.qubes-os.org/doc/vpn/. I cannot do DNS query over the VPN, for example this command executed from a VM connected to the Proxy: [user@fedora-23-dvm ~]$ dig www.google.com ; <<>> DiG 9.10.3-P4-RedHat-9.10.3-13.P4.fc23 <<>> www.google.com ;; global options: +cmd ;; connection timed out; no servers could be reached Executing 'dig @8.8.8.8 www.google.com' works well. What am I doing wrong? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/343a725e-e386-4f54-8745-0ad8b9e4c1ea%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] VPN with PPTP failing
> modprobe ip_conntrack_pptp > modprobe ip_nat_pptp > iptables -I FORWARD -p 47 -s X.X.X.X -J ACCEPT > What setup do I need for a ProxyVM? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/158c26eb-7ab2-4249-aa84-eb84640e2d36%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] VPN with PPTP failing
Hi, I'm trying to setup a VPN connection with PPTP from sys-net (first tried with the ProxyVM but it also didn't work) without success. Any help is welcome, here below the logs. I also tried $ sudo modprobe nf_conntrack_pptp without success. I'm using the fedora template. Plugin /usr/lib64/pppd/2.4.7/nm-pptp-pppd-plugin.so loaded. using channel 9 Using interface ppp0 Connect: ppp0 <--> /dev/pts/1 sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] sent [LCP ConfReq id=0x1] LCP: timeout sending Config-Requests Connection terminated. Modem hangup Script /sbin/pptp 91.233.116.223 --nolaunchpppd --loglevel 2 --logstring nm-pptp-service-5272 finished (pid 5281), status = 0x0 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/be1af660-c2b7-4b03-82c6-1ee416919a68%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] How does "Allow DNS queries" work?
Hello, I would like to know how the "Allow DNS queries" in the firewall settings works. Specially, are all DNS queries allowed or only the one targetting the DNS of the sys-net VM? If DNS queries on arbitrary servers are allowed, wouldn't it make it easy for an attacker to exfiltrate information via a covert channel on the DNS protocol and emitting queries on a server controlled by the attacker (in the case of other non-DNS servers being blocked by the firewall)? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/325efa9d-0bfc-4697-bcae-6178685ac7c7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Qubes R3.2 Failed to Load Kernel Modules
I experience the same. It is slightly disturbing since this one of the first message appearing in the console with big red letters: FAILED. :) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/974abb0f-4d54-4e0e-a8b7-7d6570cddf2d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: i3wm tiling window manager - is qubes-manager supposed to work?
I had the same problem but after killing the qube-manager that was in the background and restarting it it worked. Also after reboot it works. Hope this helps. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/40b632dc-0f3e-4e3b-a515-b0640018ccf0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] USB keyboard with trackpad and trackpoint recognized as mouse
Hi, I have a USB keyboard with an integrated trackpad and trackpoint. When connecting it Qubes if sys-usb can execute Qubes.InputMouse. How can I get it recognized as a keyboard + mouse? thanks in advance. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9b90b2db-1c40-428b-b13f-d973f8fc53e4%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Device attached failed with USB3
Hi, When attaching a USB3 hard-drive to the untrusted VM I get the following error: dom0$ qvm-usb -a untrusted sys-usb:4-1 ERROR: Device attach failed: sh: printf: I/O error untrusted$ dmesg <...> [ 7482.281057] vhci_hcd: connection closed [ 7482.281166] vhci_hcd: stop threads [ 7482.281197] vhci_hcd: release socket [ 7482.281219] vhci_hcd: disconnect device [ 7489.228732] vhci_hcd: Failed attach request for unsupported USB speed: super-speed sys-usb$ dmesg <...> [ 7627.651333] usbip-host 3-2: recv a header, 0 [ 7627.651449] usbip-host 3-2: lock for reset [ 7634.596562] usbip-host 4-1: stub up [ 7634.601226] usbip-host 4-1: recv a header, 0 [ 7634.705358] usbip-host 4-1: reset SuperSpeed USB device number 3 using xhci_hcd [ 7634.716919] usbip-host 4-1: device reset Any ideas? I'm using Qubes 3.2RC2. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/6a089818-9785-4311-991a-d4a57b7391f5%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Poor performance when reading external DVD
> In VLC try to change output mode to x11, that dropped my cpu use by 60% to > 20%. It did help. Thank you so much! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c2ea6dbb-d7f0-4bab-b1d7-bb0ac7aa9383%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Poor performance when reading external DVD
When testing with Xine I got bad performance and this error message: "The amount of dropped frame is too high, your system might be slow, not properly optimized or just too loaded". I have an integrated intel card for video, how can I check it is properly configured? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c4eaa723-e0ec-42d7-9a22-88c63edd10ff%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Poor performance when reading external DVD
It seems to be related to VLC because mplayer works nicely! Very good news. Here the command for history: $ mplayer -zoom -fs -vo x11 dvd:// -dvd-device /dev/sr0 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/62f785d0-4368-467c-8e9d-4b53170dd3be%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Poor performance when reading external DVD
I tried to copy the DVD as an iso on the disk and read it. It works and the performance are a bit better but still no good enough to watch, specially full screen. Ouput from the console: user@untrusted:~$ vlc VLC media player 2.2.4 Weatherwax (revision 2.2.3-37-g888b7e89) [006d6118] core libvlc: Running vlc with the default interface. Use 'cvlc' to use vlc without interface. libdvdnav: Using dvdnav version 5.0.1 libdvdread: Attempting to use device /dev/loop0 mounted on /mnt/removable for CSS authentication libdvdread: Could not open /dev/loop0 with libdvdcss. libdvdread: Can't open /dev/loop0 for reading libdvdread: Device /dev/loop0 inaccessible, CSS authentication not available. libdvdnav: DVD disk reports itself with Region mask 0x00fd. Regions: 2 [7f1e1400a118] core input error: ES_OUT_RESET_PCR called [7f1e1400a118] core input error: ES_OUT_RESET_PCR called Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object file: No such file or directory Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object file: No such file or directory [7f1e0c000d58] xcb_xv vout display error: no available XVideo adaptor [7f1e1400a118] core input error: ES_OUT_RESET_PCR called [7f1e1400a118] core input error: ES_OUT_RESET_PCR called [7f1e1400a118] core input error: ES_OUT_SET_(GROUP_)PCR is called too late (pts_delay increased to 300 ms) [7f1e1400a118] core input error: ES_OUT_RESET_PCR called [7f1e1400a118] core input error: ES_OUT_RESET_PCR called [7f1e1400a118] core input error: ES_OUT_RESET_PCR called [7f1e1400a118] core input error: ES_OUT_RESET_PCR called Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object file: No such file or directory [7f1e1400a118] core input error: ES_OUT_RESET_PCR called Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object file: No such file or directory [7f1e1400a118] core input error: ES_OUT_RESET_PCR called [7f1e1400a118] core input error: ES_OUT_RESET_PCR called Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object file: No such file or directory [7f1e1400a118] core input error: ES_OUT_RESET_PCR called -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/893c396e-f7c1-4e41-950b-4733931da0aa%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Poor performance when reading external DVD
Hi, I experience poor performance (lagging) when reading a DVD on an external USB player, even more when playing full screen. Any ideas? Here is the output from VLC: [7f4d580009b8] core input error: ES_OUT_RESET_PCR called [7f4d580009b8] core input error: ES_OUT_RESET_PCR called [7f4d580009b8] core input error: ES_OUT_RESET_PCR called [7f4d580009b8] core input error: ES_OUT_RESET_PCR called Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object file: No such file or directory [7f4d580009b8] core input error: ES_OUT_RESET_PCR called [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) [7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> dropping frame (computer too slow ?) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a7478d10-e676-482b-ba03-5dad011cbb29%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: External USB DVD fails to attach to the VM
I found the solution by reading this: https://www.qubes-os.org/doc/usb/ and not this https://www.qubes-os.org/doc/assigning-devices/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/337ac69b-c527-4ead-964c-c45a60aeb9cf%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] External USB DVD fails to attach to the VM
Hi, I'm using an optical DVD reader/burner and attached it to one of the VM: dom0$ qvm-block -l sys-usb:sr0 Slim_USB_Burner (0782852) 6GiB (attached to 'my-new-vm' as 'xvdi') It fails to show up in the VM: [user@my-new-vm ~]$ ls -alh /dev/xvdi ls: cannot access /dev/xvdi: No such file or directory Also lsusb returns nothing: dom0$ lsub -v dom0$ I also tried to attach the whole USB controller to the VM, it didn't solve the problem. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5f9edb83-9e5b-474c-a90a-17af48beec44%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] [3.2rc2] Default VMs failed to get created after installation
Hi, I gave up on installing on a USB stick and managed to get my hands on a second disk and installed Qubes on it. Everything went fine but after the first boot when configuring the VMs the following error appeared "A VM with the name 'sys-firewall' does not exist in the system". Can I somehow restart this configuration process without reinstalling everything? Or how can I create the default VMs (personal, work, vault etc)? Has someone experience the same error? Thanks for your help & thanks for your work! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/47676b1d-7728-4969-99e6-b4728498ab80%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] [3.2rc2] Cannot execute Qubes configuration after installing
Yes it was the same before. The option was unchecked. I would have expect the option to be enabled if the message is "blabla disabled" and the checked option off. Anyway, not sure how to investigate further from here. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/710bd8b5-5797-45ef-bf25-d176555a2328%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] [3.2rc2] Cannot execute Qubes configuration after installing
I retried, booting with a USB keyboard plugged in, without success. Even if the keyboard works, I cannot check the option "USB Qube configuration disabled". I have the option 'default system qubes', 'default applications VMs' and 'create Whonix' checked. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c13a8ad6-43e7-4f0d-8497-76676d16ce10%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] [3.2rc2] Cannot execute Qubes configuration after installing
> What settings have you enabled in that step? During the installation I setup one administrator user with encryption for the disk. After reboot I used the default options to create the default VMs. Also I think the USB isolation was on (because Qubes noticed that I didn't have a USB keyboard). Is it possible that the USB isolation locked me out of the usb stick on which Qubes is installed? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1ff4e3c1-40fc-4226-985c-1110cd5df4ca%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] [3.2rc2] Cannot execute Qubes configuration after installing
Hello, After installing Qubes OS on a 32giga USB2 stick - it was slow! - and rebooting, I selected the default options and Qubes began to install the VMs. When the prompt "Executing Qubes configuration" appears after a while, the loading bar stops. The mouse still works but nothing happens. Pressing Ctrl-Alt-F1 allowed me to take photos of the screen: https://postimg.org/image/7je7ki9fr/ https://postimg.org/image/7r12opjsn/ I could not see any shell on the other virtual terminals, so no debugging was possible. I'm using a Lenovo X240 laptop with Core i7 vPro. Thanks in advance for your help. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2c1d7036-1fb0-4e04-a344-c55b0e328387%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.