Re: [qubes-users] Upgrade from RC3 to final release

2018-04-04 Thread kototamo

> Sure, if it still doesn't work after you do the above. :)

:) I managed to get the updates from testing but still see `fc25` instead of 
`fc26` in the repo file.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8e392ef6-7c9b-495e-9aff-a63ad8231100%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Upgrade from RC3 to final release

2018-04-04 Thread kototamo
Thanks for the link. I see I have still some references to fc25 in the repo 
file. How do I upgrade to fc26?

Could you paste the content of your repo file?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/785b3571-9cd9-41e4-863f-b14ab995fea0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Upgrade from RC3 to final release

2018-04-03 Thread kototamo
I used RC3 and always update from stable repo, never from testing. Do I have 
now the good repos in yum? I think I have outdated yum repos and cannot update 
to final.

Can somebody paste the content of its /etc/yum.repos.d/qubes-dom0.repo file?

How am I supposed to ugprade to the final candidate?

UpdateVM to download updates for Dom0; this may take some time...
Last metadata expiration check: 0:28:30 ago on Tue Apr  3 10:07:04 2018.
Dependencies resolved.

 Package Arch VersionRepositorySize

Reinstalling:
 qubes-release   noarch   4.0-0.4qubes-dom0-current50 k

Transaction Summary


Total download size: 50 k
DNF will only download packages for the transaction.
Downloading Packages:
[MIRROR] qubes-release-4.0-0.4.noarch.rpm: Curl error (7): Couldn't connect to 
server for 
http://yum.qubes-os.org/r4.0/current/dom0/fc25/rpm/qubes-release-4.0-0.4.noarch.rpm
 [Failed to connect to yum.qubes-os.org port 80: Connection refused]
[FAILED] qubes-release-4.0-0.4.noarch.rpm: No more mirrors to try - All mirrors 
were already tried without success

The downloaded packages were saved in cache until the next successful 
transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: Error downloading packages:
  Cannot download rpm/qubes-release-4.0-0.4.noarch.rpm: All mirrors were tried
[user@dom0 ~]$ ls /etc/yum.repos.d/ 
fedora.repo  fedora-updates.repo  qubes-dom0.repo  qubes-templates.repo
[user@dom0 ~]$ sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing
Using sys-net as UpdateVM to download updates for Dom0; this may take some 
time...
Failed to synchronize cache for repo 'qubes-dom0-current', disabling.
Failed to synchronize cache for repo 'qubes-dom0-current-testing', disabling.
Last metadata expiration check: 0:32:26 ago on Tue Apr  3 10:07:04 2018.
Dependencies resolved.
Nothing to do.
Complete!
No packages downloaded
Qubes OS Repository for Dom0
   108 MB/s | 244 kB 00:00
[user@dom0 ~]$ sudo qubes-dom0-update 
Using sys-net as UpdateVM to download updates for Dom0; this may take some 
time...
Last metadata expiration check: 0:32:37 ago on Tue Apr  3 10:07:04 2018.
Dependencies resolved.
Nothing to do.
Complete!
No packages downloaded
Qubes OS Repository for Dom0
   112 MB/s | 244 kB 00:00

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/54e64a8d-6c3b-4abc-b59b-f16365fdeefc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Do allowing USB Keyboard expose to badusb attacks?

2018-01-24 Thread kototamo
If a USB keyboard is allowed with /etc/qubes-rpc/policy/qubes.InputKeyboard, 
does it increase the risk for badusb kind of attacks?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/82d5f838-6efe-42a1-a68e-f3e4094421d3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Q4RC3: fedora 26 dvm not displayed as disposable

2018-01-10 Thread kototamo
After following the instructions for using the fedora 26 template, it does not 
show in the app menu as disposable, only as "Domain: fedora-26-dvm".

I executed: 

sudo qubes-dom0-update qubes-template-fedora-26
qvm-create -l red -t fedora-26 fedora-26-dvm
qvm-prefs fedora-26-dvm template_for_dispvms True
qvm-features fedora-26-dvm appmenus-dispm 1
qubes-prefs default-dispvm fedora-26-dvm


How can I fix it?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/88891b2c-5c51-4593-ba8e-128fe5603f86%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] New HCL Entry: Lenovo ThinkPad T470 (20HDCTO1WW)

2018-01-07 Thread kototamo
Thanks everyone for the replies. I finally opted for RC3 and after fixing the 
iso with a live fedora and livecd-tools it went almost almost without problems. 
The only problem was that the keyboard layout chosen during the installation 
was not taken in account for promting the encryption password when booting.

I hope I will not encounter too much bugs with it and be able to work. It seems 
okay for the few hours I had to use it and even more resistant to usb devices 
being physically disconnected without detaching them than 3.2. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/05645d61-3235-4a1e-99e6-5a17eef97d5e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Q4: Enabling updates for templates restored from Qubes 3

2018-01-05 Thread kototamo
Maybe it is necessary to $ apt-get install qubes-core-agent
in the VM after update, not sure.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/542f0132-383d-435c-94f3-a374877c7e74%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Q4: Enabling updates for templates restored from Qubes 3

2018-01-05 Thread kototamo
I just spent a good time getting my backuped templates from Qubes 3 to work in 
Qubes 4 RC3. I'm posting here what I did (roughly) to get it work, in the hope 
it can help somebody.

After running qvm-backup-restore, starts a terminal for your VM:

$ qvm-run mytemplate gnome-terminal

In the VM, 

- Rename /etc/apt/sources.list.d/qubes-r3.list to 
/etc/apt/sources.list.d/qubes-r4.list
   
- Replace mention of "3.2" to "4.0" qubes-r4.list

Now we will import the new GPG keys used to sign the packages.

- Start one of the official template:

 $ qvm-run debian-8 gnome-terminal

In the debian-8 VM:

$ apt-ket exportall > /tmp/keys.txt
$ qvm-copy-to-vm /tmp/keys.txt

Choose "mytemplate" as destination.

In the mytemplate VM:

$ apt-key import ~/QubesIncoming/debian-8/keys.txt

Now enable networking in the mytemplate settings by specifying sys-net as a 
network VM.

Updates the packages:

$ apt-get update
$ apt-get upgrade

When prompted, choose to use the qubes-r4.list from the maintainer (or merge 
manually).

Disable network in the mytemplate VM.
Restart.

Now the proxy updates should work again.

Good luck.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c8acfaed-97e7-4acf-8a94-aa8fc729695f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] New HCL Entry: Lenovo ThinkPad T470 (20HDCTO1WW)

2017-12-15 Thread kototamo
Thank you for your reply.

Could you explain to me why using EFI would solve the problem of the X server 
not starting?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/84284e0a-7269-44d7-ab95-98395b9330a8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] New HCL Entry: Lenovo ThinkPad T470 (20HDCTO1WW)

2017-12-15 Thread kototamo
Hello everyone,

I tried to install Qubes 3.2 on a T470s without success. I have the version 
with the Intel graphics. I did everything in Legacy Mode (no EFI). It does boot 
but the X server cannot start. Text installation did not work.

Stephan Marwedel says in this thread he managed to install 3.2. How?

I cannot wait for version 4 to come in January or later and installing RC 
version is risky since I need the laptop for work and no migration path from RC 
to candidate is guaranteed by the Qubes OS team.

Any help will be highly appreciated!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ea610d39-36d7-4c0e-94c6-24fdf1be8d12%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Using software installed in /rw/usrconfig/bin

2017-09-29 Thread kototamo
After adding some private debian repositories for erlang and elixir in the VM 
template and installing them, I noticed that they get installed in 
/rw/usrlocal/bin and /rw/usrlocal/lib.

- What are these directories for?

- How can I use the software in the app VM?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/eaf5d11a-4349-449d-92f4-668b57cf1eda%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Massive performance improvement after disabling power management in the BIOS

2016-12-01 Thread kototamo

> Hi, might I ask what manufacturer/model your laptop is?

Lenovo X240.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8d0d85d6-b032-4db9-8f00-abe346bc6df9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Massive performance improvement after disabling power management in the BIOS

2016-11-17 Thread kototamo
Hello community,

I was wondering why one of my program was taking ~15 seconds to compile when my 
colleague compiled it within ~3 seconds on his system. I know there are a 
performance price to pay for the virtualisation but nonetheless. I was super 
annoyed and I vaguely thinking about switching back to another distribution but 
at the same time I was reading about DNS rebinding attacks and I really wanted 
to stay on Qubes.

I gave a look at the BIOS settings, in the power management section. There are 
options like "Maximize performance on AC" and also options for when the laptop 
is on battery. I already had the "Maximize performance on AC" on. I disabled 
the whole power management section. Performance are better! 

The program mentioned above now compiles in ~5 seconds. The whole systems seems 
more responsive, Firefox and Youtube video (HTML5) seems also better. The only 
drawback is that the laptop is definitively generating more heat (and probably 
consuming more energy) but that's okay because I spend most of the time 
connected to the AC.

Is there a bug somewhere in the kernel, in Xen or Qubes which prevent them to 
properly use this BIOS power management system correctly?

Have other users experience something similar?


When googling I found this article from VMWare with similar problems / solutions

https://blogs.vmware.com/vsphere/2012/01/having-a-performance-problem-hard-to-resolve-have-you-checked-your-host-bios-lately.html


Best regards,
K.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/08ea779a-9f41-435c-805f-fa1e0c18a3f5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Google Maps producing a very high CPU usage

2016-10-13 Thread kototamo
I found a solution by disabling WebGL. There were errors in the console 
indicating that the operation executed by the page are slow.

It is possible to set webgl.disable to true in about:config.

Now it's acceptably slow :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6d132bd8-03d4-4718-92e6-4d15e9c88cf3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Google Maps producing a very high CPU usage

2016-10-13 Thread kototamo
Hello,

I have consistently issues when accessing Google Maps from a DispVM (or VM) 
with Firefox: the site becomes unresponsive or extremely slow and the CPU usage 
is between 70 and 99%.

Do other users have a similar experience?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c695b001-43fa-4503-b855-0a71fd9db352%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Start VM automatically on boot not working

2016-09-11 Thread kototamo
Hum thank you. I didn't do that but somehow it works now.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ea6b21c7-68f3-4e2a-9a3d-819a626feade%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Start VM automatically on boot not working

2016-09-09 Thread kototamo
BTW, i didn't cloned the sys-firewall as mentioned earlier, I just created a 
new one.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0fc956cf-ceda-42d8-b52a-8d7600db50d7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Start VM automatically on boot not working

2016-09-09 Thread kototamo
and further:

libvirt.libvirtError: Requested operation is not valid: Domain is already 
running.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a473a522-c780-498c-b110-493a375d5c88%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Start VM automatically on boot not working

2016-09-09 Thread kototamo
Searching in the output of journactl gives the following errors:

Failed to start Start Qubes VM
Unit entered failed state
Failed with result 'exit-code'
internal error: Unable to reset PCI device [...]  no FLR, PM reset or bus reset 
available. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f9666048-3e6b-4a2f-84e6-d574335d504f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Start VM automatically on boot not working

2016-09-09 Thread kototamo
> Try un-setting and re-setting it again:

It didn't helped.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/460de117-0299-4fd6-a82e-a79d57233d5e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Start VM automatically on boot not working

2016-09-09 Thread kototamo
Hello,

After cloning sys-firewall into sys-vpn-firewall with qvm-clone in dom0, and 
selection "Start VM automatically on boot not working " in the preferences of 
sys-vpn-firewall, the VM does not start automatically after reboot/ new starts.

It does however start when a VM using it as a NetVM is started.

What is happening here?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5c6778c1-a5b8-4313-98c9-9f944d809d77%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] seafile applet integration with the panel is not working

2016-09-04 Thread kototamo
Thanks for listing these bugs. It is probably something else: the icon neither 
appear/disappear nor is being transparent. It is just not being shown.

There is something specific to the seafile-applet: it is an application that 
can be minimized in the system tray, not only an "applet". Maybe there is a 
difference with "pure" applets such as the network-manager? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b3740aa4-6ad1-46ce-b5ef-087d7483b409%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] seafile applet integration with the panel is not working

2016-09-03 Thread kototamo
Hello,

The seafile-applet (a kind of open-souce dropbox) is not being displayed in the 
xfce panel when started.

Is there something specific to check or fix to get it working?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b785e4dd-5eb9-4f02-b25b-5117c929165b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] No DNS with ProxyVM + OpenVPN

2016-08-17 Thread kototamo
I found the culprit thanks to your very helpful instructions: the 
network-manager service was running in the VM. 

It happened because I did first test my VPN with the instructions 
(https://www.qubes-os.org/doc/vpn/) following the "Using NetworkManager" 
section as a quick test, to only later set it up without it.

Thanks again. I hope this thread will be useful for others facing similar 
problems.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f35d90b9-2632-4f91-afff-3e1f8ac26302%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] No DNS with ProxyVM + OpenVPN

2016-08-16 Thread kototamo

> To test this theory, you could put a 7sec delay in qubes-vpn-handler.sh 
> right before the line 'iptables -t nat -F PR-QBS'. Then the right IPs 
> should appear in PR-QBS.

It did work. Thank you again!

I wonder what is changing the NAT rules. I only see one 'up' directive in the 
openvpn configuration, the one calling the qubes script. Maybe something from 
Qubes itself? It's correct that the ProxyVM should be connected to sys-firewall 
right?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0b146266-ed8f-43fc-a0d3-f933d3c49f6a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] No DNS with ProxyVM + OpenVPN

2016-08-15 Thread kototamo
Thank you very much for your help. The DNS are transmitted but the rules in the 
firewall seems to be missing:

Chain PR-QBS (1 references)
 pkts bytes target prot opt in out source   destination 

0 0 DNAT   udp  --  anyany anywhere 10.137.5.1  
 udp dpt:domain to:10.137.2.1
0 0 DNAT   tcp  --  anyany anywhere 10.137.5.1  
 tcp dpt:domain to:10.137.2.1
0 0 DNAT   udp  --  anyany anywhere 
10.137.5.254 udp dpt:domain to:10.137.2.254
0 0 DNAT   tcp  --  anyany anywhere 
10.137.5.254 tcp dpt:domain to:10.137.2.254

The qubes script is nonetheless correctly started because I see the 
notification "VPN is up".

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5f8f693e-6e55-4b81-b415-14ac99108c34%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] No DNS with ProxyVM + OpenVPN

2016-08-15 Thread kototamo
Hi,


I set up a proxyVM with openvpn following the instructions from 
https://www.qubes-os.org/doc/vpn/.

 I cannot do DNS query over the VPN, for example this command executed from a 
VM connected to the Proxy:


[user@fedora-23-dvm ~]$ dig www.google.com

; <<>> DiG 9.10.3-P4-RedHat-9.10.3-13.P4.fc23 <<>> www.google.com
;; global options: +cmd
;; connection timed out; no servers could be reached


Executing 'dig @8.8.8.8 www.google.com' works well.

What am I doing wrong?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/343a725e-e386-4f54-8745-0ad8b9e4c1ea%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] VPN with PPTP failing

2016-08-14 Thread kototamo

> modprobe ip_conntrack_pptp
> modprobe ip_nat_pptp
> iptables -I FORWARD -p 47 -s X.X.X.X -J ACCEPT
> 

What setup do I need for a ProxyVM?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/158c26eb-7ab2-4249-aa84-eb84640e2d36%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] VPN with PPTP failing

2016-08-13 Thread kototamo
Hi,

I'm trying to setup a VPN connection with PPTP from sys-net (first tried with 
the ProxyVM but it also didn't work) without success.

Any help is welcome, here below the logs.
I also tried

$ sudo modprobe nf_conntrack_pptp

without success.

I'm using the fedora template.

Plugin /usr/lib64/pppd/2.4.7/nm-pptp-pppd-plugin.so loaded.
using channel 9
Using interface ppp0
Connect: ppp0 <--> /dev/pts/1
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
sent [LCP ConfReq id=0x1]
LCP: timeout sending Config-Requests
Connection terminated.
Modem hangup
Script /sbin/pptp 91.233.116.223 --nolaunchpppd --loglevel 2 --logstring 
nm-pptp-service-5272 finished (pid 5281), status = 0x0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be1af660-c2b7-4b03-82c6-1ee416919a68%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] How does "Allow DNS queries" work?

2016-08-08 Thread kototamo
Hello,

I would like to know how the "Allow DNS queries" in the firewall settings 
works. Specially, are all DNS queries allowed or only the one targetting the 
DNS of the sys-net VM? 

If DNS queries on arbitrary servers are allowed, wouldn't it make it easy for 
an attacker to exfiltrate information via a covert channel on the DNS protocol 
and emitting queries on a server controlled by the attacker (in the case of 
other non-DNS servers being blocked by the firewall)?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/325efa9d-0bfc-4697-bcae-6178685ac7c7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes R3.2 Failed to Load Kernel Modules

2016-08-07 Thread kototamo
I experience the same. It is slightly disturbing since this one of the first 
message appearing in the console with big red letters: FAILED. :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/974abb0f-4d54-4e0e-a8b7-7d6570cddf2d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: i3wm tiling window manager - is qubes-manager supposed to work?

2016-08-06 Thread kototamo
I had the same problem but after killing the qube-manager that was in the 
background and restarting it it worked. Also after reboot it works. 

Hope this helps.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/40b632dc-0f3e-4e3b-a515-b0640018ccf0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] USB keyboard with trackpad and trackpoint recognized as mouse

2016-08-06 Thread kototamo
Hi,

I have a USB keyboard with an integrated trackpad and trackpoint. When 
connecting it Qubes if sys-usb can execute Qubes.InputMouse. 

How can I get it recognized as a keyboard + mouse?

thanks in advance.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9b90b2db-1c40-428b-b13f-d973f8fc53e4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Device attached failed with USB3

2016-08-05 Thread kototamo
Hi,

When attaching a USB3 hard-drive to the untrusted VM I get the following error:

dom0$ qvm-usb -a untrusted sys-usb:4-1
ERROR: Device attach failed: sh: printf: I/O error

untrusted$ dmesg
<...>
[ 7482.281057] vhci_hcd: connection closed
[ 7482.281166] vhci_hcd: stop threads
[ 7482.281197] vhci_hcd: release socket
[ 7482.281219] vhci_hcd: disconnect device
[ 7489.228732] vhci_hcd: Failed attach request for unsupported USB speed: 
super-speed

sys-usb$ dmesg
<...>
[ 7627.651333] usbip-host 3-2: recv a header, 0
[ 7627.651449] usbip-host 3-2: lock for reset
[ 7634.596562] usbip-host 4-1: stub up
[ 7634.601226] usbip-host 4-1: recv a header, 0
[ 7634.705358] usbip-host 4-1: reset SuperSpeed USB device number 3 using 
xhci_hcd
[ 7634.716919] usbip-host 4-1: device reset

Any ideas? I'm using Qubes 3.2RC2.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6a089818-9785-4311-991a-d4a57b7391f5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Poor performance when reading external DVD

2016-08-05 Thread kototamo
> In VLC try to change output mode to x11,  that dropped my cpu use by 60% to 
> 20%.

It did help. Thank you so much!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c2ea6dbb-d7f0-4bab-b1d7-bb0ac7aa9383%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Poor performance when reading external DVD

2016-08-05 Thread kototamo
When testing with Xine I got bad performance and this error message:

"The amount of dropped frame is too high, your system might be slow, not 
properly optimized or just too loaded".

I have an integrated intel card for video, how can I check it is properly 
configured?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c4eaa723-e0ec-42d7-9a22-88c63edd10ff%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Poor performance when reading external DVD

2016-08-05 Thread kototamo
It seems to be related to VLC because mplayer works nicely! Very good news. 
Here the command for history:

$ mplayer -zoom -fs -vo x11 dvd:// -dvd-device /dev/sr0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/62f785d0-4368-467c-8e9d-4b53170dd3be%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Poor performance when reading external DVD

2016-08-05 Thread kototamo
I tried to copy the DVD as an iso on the disk and read it. It works and the 
performance are a bit better but still no good enough to watch, specially full 
screen.

Ouput from the console:

user@untrusted:~$ vlc
VLC media player 2.2.4 Weatherwax (revision 2.2.3-37-g888b7e89)
[006d6118] core libvlc: Running vlc with the default interface. Use 
'cvlc' to use vlc without interface.
libdvdnav: Using dvdnav version 5.0.1
libdvdread: Attempting to use device /dev/loop0 mounted on /mnt/removable for 
CSS authentication
libdvdread: Could not open /dev/loop0 with libdvdcss.
libdvdread: Can't open /dev/loop0 for reading
libdvdread: Device /dev/loop0 inaccessible, CSS authentication not available.
libdvdnav: DVD disk reports itself with Region mask 0x00fd. Regions: 2
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object 
file: No such file or directory
Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object 
file: No such file or directory
[7f1e0c000d58] xcb_xv vout display error: no available XVideo adaptor
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
[7f1e1400a118] core input error: ES_OUT_SET_(GROUP_)PCR  is called too late 
(pts_delay increased to 300 ms)
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object 
file: No such file or directory
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object 
file: No such file or directory
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called
Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object 
file: No such file or directory
[7f1e1400a118] core input error: ES_OUT_RESET_PCR called

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/893c396e-f7c1-4e41-950b-4733931da0aa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Poor performance when reading external DVD

2016-08-05 Thread kototamo
Hi,

I experience poor performance (lagging) when reading a DVD on an external USB 
player, even more when playing full screen.

Any ideas?

Here is the output from VLC:

[7f4d580009b8] core input error: ES_OUT_RESET_PCR called
[7f4d580009b8] core input error: ES_OUT_RESET_PCR called
[7f4d580009b8] core input error: ES_OUT_RESET_PCR called
[7f4d580009b8] core input error: ES_OUT_RESET_PCR called
Failed to open VDPAU backend libvdpau_nvidia.so: cannot open shared object 
file: No such file or directory
[7f4d580009b8] core input error: ES_OUT_RESET_PCR called

[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)
[7f4d4c179398] avcodec decoder error: more than 5 seconds of late video -> 
dropping frame (computer too slow ?)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a7478d10-e676-482b-ba03-5dad011cbb29%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: External USB DVD fails to attach to the VM

2016-08-05 Thread kototamo
I found the solution by reading this: https://www.qubes-os.org/doc/usb/

and not this https://www.qubes-os.org/doc/assigning-devices/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/337ac69b-c527-4ead-964c-c45a60aeb9cf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] External USB DVD fails to attach to the VM

2016-08-05 Thread kototamo
Hi,

I'm using an optical DVD reader/burner and attached it to one of the VM:

dom0$ qvm-block -l
sys-usb:sr0 Slim_USB_Burner (0782852) 6GiB (attached to 'my-new-vm' as 'xvdi')

It fails to show up in the VM:

[user@my-new-vm ~]$ ls -alh /dev/xvdi
ls: cannot access /dev/xvdi: No such file or directory

Also lsusb returns nothing:
dom0$ lsub -v
dom0$

I also tried to attach the whole USB controller to the VM, it didn't solve the 
problem.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5f9edb83-9e5b-474c-a90a-17af48beec44%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] [3.2rc2] Default VMs failed to get created after installation

2016-07-31 Thread kototamo
Hi,

I gave up on installing on a USB stick and managed to get my hands on a second 
disk and installed Qubes on it. Everything went fine but after the first boot 
when configuring the VMs the following error appeared "A VM with the name 
'sys-firewall' does not exist in the system".

Can I somehow restart this configuration process without reinstalling 
everything? Or how can I create the default VMs (personal, work, vault etc)? 
Has someone experience the same error?

Thanks for your help & thanks for your work! 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/47676b1d-7728-4969-99e6-b4728498ab80%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] [3.2rc2] Cannot execute Qubes configuration after installing

2016-07-31 Thread kototamo
Yes it was the same before. The option was unchecked. I would have expect the 
option to be enabled if the message is "blabla disabled" and the checked option 
off.

Anyway, not sure how to investigate further from here.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/710bd8b5-5797-45ef-bf25-d176555a2328%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] [3.2rc2] Cannot execute Qubes configuration after installing

2016-07-31 Thread kototamo
I retried, booting with a USB keyboard plugged in, without success. Even if the 
keyboard works, I cannot check the option "USB Qube configuration disabled".

I have the option 'default system qubes', 'default applications VMs' and 
'create Whonix' checked.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c13a8ad6-43e7-4f0d-8497-76676d16ce10%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] [3.2rc2] Cannot execute Qubes configuration after installing

2016-07-31 Thread kototamo
> What settings have you enabled in that step?

During the installation I setup one administrator user with encryption for the 
disk.

After reboot I used the default options to create the default VMs. Also I think 
the USB isolation was on (because Qubes noticed that I didn't have a USB 
keyboard).

Is it possible that the USB isolation locked me out of the usb stick on which 
Qubes is installed? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1ff4e3c1-40fc-4226-985c-1110cd5df4ca%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] [3.2rc2] Cannot execute Qubes configuration after installing

2016-07-31 Thread kototamo
Hello,

After installing Qubes OS on a 32giga USB2 stick - it was slow! - and 
rebooting, I selected the default options and Qubes began to install the VMs. 
When the prompt "Executing Qubes configuration" appears after a while, the 
loading bar stops. The mouse still works but nothing happens. Pressing 
Ctrl-Alt-F1 allowed me to take photos of the screen:

https://postimg.org/image/7je7ki9fr/
https://postimg.org/image/7r12opjsn/

I could not see any shell on the other virtual terminals, so no debugging was 
possible.

I'm using a Lenovo X240 laptop with Core i7 vPro.

Thanks in advance for your help.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2c1d7036-1fb0-4e04-a344-c55b0e328387%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.