Re: wlan with kernel 4.8 (Re: [qubes-users] HCL - Lenovo ThinkPad X1 Yoga 2016 (20FQ005UGE))

2017-02-06 Thread Holger Levsen
On Fri, Feb 03, 2017 at 11:48:38AM +, Holger Levsen wrote:
> awesome! just tested this and indeed this works nicely! Yay Yay Yay, thanks a 
> lot!

I've now scripted this using the attached script in dom0… 

> (still looking forward to fix this properly but for now, this will work for 
> me.)

:)


-- 
cheers,
Holger

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170206113354.GB21363%40layer-acht.org.
For more options, visit https://groups.google.com/d/optout.


restart_netvm.sh
Description: Bourne shell script


signature.asc
Description: Digital signature


Re: wlan with kernel 4.8 (Re: [qubes-users] HCL - Lenovo ThinkPad X1 Yoga 2016 (20FQ005UGE))

2017-02-03 Thread Holger Levsen
Hi Robin,

On Thu, Feb 02, 2017 at 07:22:47PM +0100, Robin Schneider wrote:
> You don’t have to restart all the VMs, luckily, which I learned shortly after
> posting this. There is a pretty simple trick going around. Just set your
> sys-firewall to no net vm, restart your net vm and reattach your sys-firewall
> back to the net vm :)

awesome! just tested this and indeed this works nicely! Yay Yay Yay, thanks a 
lot!

(still looking forward to fix this properly but for now, this will work for me.)


-- 
cheers,
Holger

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170203114815.GA27244%40layer-acht.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: Digital signature


Re: wlan with kernel 4.8 (Re: [qubes-users] HCL - Lenovo ThinkPad X1 Yoga 2016 (20FQ005UGE))

2017-02-02 Thread Robin Schneider
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 02/02/2017 03:44 PM, Holger Levsen wrote:
> Hi,
> 
> On Sun, Jan 15, 2017 at 10:24:01PM +0100, Robin Schneider wrote:
>> Adding to the reports about the Thinkpad X1 Carbon 4th gen (20FB), here
>> are my experiences with the ThinkPad X1 Yoga 20FQ005UGE:
> 
> another skylake system here…
> 
>> WLAN works after installing firmware-iwlwifi in Debian 9. The only
>> problem is that almost all times after resuming from S3, the net VM needs
>> to be restarted to get wlan working again. The following is logged in
>> sys-net:
> 
> I have the same problem with WLAN :/ After suspend I need to restart
> sys-net, which requires shutting down all VMs using it, so that's pretty
> super annoying :/ My sys-net VM still runs fedora-23…

You don’t have to restart all the VMs, luckily, which I learned shortly after
posting this. There is a pretty simple trick going around. Just set your
sys-firewall to no net vm, restart your net vm and reattach your sys-firewall
back to the net vm :)

- -- 
Live long and prosper
Robin `ypid` Schneider -- https://me.ypid.de/
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBCAAGBQJYk3j3AAoJEIb9mAu/GkD49BEP/ivBq8NePQ+4rHTXPh30ZULp
PJvc7YkKc93/NfXJH8J7V23yfPadZJCGZndcF2XkuWETFuAuM75r2Xpl1Xb1zoyQ
mWgtAKueCEwKzZ8FM/CgKpBaFeA02BcLB1OpzB9iVuFARMvV0wXhh1N1nk0jkFMB
yoY7warhbefbskTy8MKXJ/GDb7GwqhOgQrnomExW+QThJOtoOPIu12jGV63ppmRq
xUiKg7m51j1ufY4+/7FyQojytNTNmvq+LxPju1qxQI1GjT3ULTLrXlAFZ4VZnI3G
TGgR4r9DOGHHIMAul1CTuV/8NUy3sug8oAJLJUuA1q+3VPv57WPYaFWUnREN4B1S
xwjSvCXPgeHcsNoenRfOStuCVzmrG++mwOZjnegXlFEuBBq550/p3cTlqQBSDoVy
AzsY7FzRNHjm2+B+HguE2h8LDllOfdpgTTrkN+rTSNyTlwF0M9W49YnXOo9G6Xoo
xyRV0RdweIVeEEfFtBDOQ4Pa367WmgL/1h0gBIzd6xYttwVcz0D9gJLnwvoKYjgT
GXPVw50HR3EZIjX7PjftuYOSYKmlAqBOdilWJCu5VmJoanHr3nWW4ekjRwWwopW+
jNqT/d4+0Loh/T/cJyfnjDM2cxQGDuTm6ni6ghFDgy81Pfe0M7ICUxomdXuIhXWd
DHdNJ6HhkX5eiXvMvqa1
=aEbR
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/58fb74e5-eef8-1a2b-d938-4affe1de8786%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


wlan with kernel 4.8 (Re: [qubes-users] HCL - Lenovo ThinkPad X1 Yoga 2016 (20FQ005UGE))

2017-02-02 Thread Holger Levsen
Hi,

On Sun, Jan 15, 2017 at 10:24:01PM +0100, Robin Schneider wrote:
> Adding to the reports about the Thinkpad X1 Carbon 4th gen (20FB), here are my
> experiences with the ThinkPad X1 Yoga 20FQ005UGE:
 
another skylake system here…

 
> ### Kernel update

the default 4.4.38-11 kernel worked mostly nicely for me, until it suddenly
went into suspend and wouldnt wake up anymore… 

so I switched to 4.8.12-12 like this:

> `qubes-dom0-update --enablerepo=qubes-dom0-unstable kernel` and `dnf upgrade
> kernel` worked!

which gave me somewhat higher battery life and so far no sudden suspend. But:
 
> WLAN works after installing firmware-iwlwifi in Debian 9. The only problem is
> that almost all times after resuming from S3, the net VM needs to be restarted
> to get wlan working again. The following is logged in sys-net:

I have the same problem with WLAN :/ After suspend I need to restart sys-net,
which requires shutting down all VMs using it, so that's pretty super annoying 
:/
My sys-net VM still runs fedora-23…

> [14543.999216] e1000e: eth0 NIC Link is Down
> [14548.117695] e1000e: eth0 NIC Link is Down
> [14548.314301] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
> [23785.273315] e1000e: eth0 NIC Link is Down
> [23785.307940] wlan0: deauthenticating from xx:xx:xx:xx:xx:xx by local choice
> (Reason: 3=DEAUTH_LEAVING)
> [23786.152843] Freezing user space processes ... (elapsed 0.001 seconds) done.
> [23786.154342] Freezing remaining freezable tasks ... (elapsed 0.000 seconds)
> done.
> [23786.155692] PM: freeze of devices complete after 0.347 msecs
> [23786.155697] suspending xenstore...
> [23786.155764] PM: late freeze of devices complete after 0.065 msecs
> [23786.171420] PM: noirq freeze of devices complete after 15.649 msecs
> [23786.172443] xen:grant_table: Grant tables using version 1 layout
> [23786.172443] PM: noirq thaw of devices complete after 0.708 msecs
> [23786.172443] PM: early thaw of devices complete after 0.086 msecs
> [23786.172846] PM: thaw of devices complete after 0.407 msecs
> [23786.172846] Restarting tasks ... done.
> [23809.722077] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
> [23810.002035] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
> [23810.006535] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
> [23810.008657] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
> [23810.010616] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
> [23815.012114] iwlwifi :00:01.0: Failed to load firmware chunk!
> [23815.012150] iwlwifi :00:01.0: Could not load the [0] uCode section
> [23815.012182] iwlwifi :00:01.0: Failed to start INIT ucode: -110
> [23815.012208] iwlwifi :00:01.0: Failed to run INIT ucode: -110
> [23815.042145] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
> [23815.044004] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
> [23820.043139] iwlwifi :00:01.0: Failed to load firmware chunk!
> [23820.043194] iwlwifi :00:01.0: Could not load the [0] uCode section
> [23820.043230] iwlwifi :00:01.0: Failed to start INIT ucode: -110
> [23820.043249] iwlwifi :00:01.0: Failed to run INIT ucode: -110
> [23820.049489] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
> [23820.051445] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
> [23825.054064] iwlwifi :00:01.0: Failed to load firmware chunk!
> [23825.054078] iwlwifi :00:01.0: Could not load the [0] uCode section
> [23825.054088] iwlwifi :00:01.0: Failed to start INIT ucode: -110
> [23825.054093] iwlwifi :00:01.0: Failed to run INIT ucode: -110
> [23835.017335] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
> [23835.019072] iwlwifi :00:01.0: L1 Enabled - LTR Enabled

basically the same with f23:

[ 1656.511666] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
[ 1656.514413] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
[ 1661.517205] iwlwifi :00:01.0: Failed to load firmware chunk!
[ 1661.517248] iwlwifi :00:01.0: Could not load the [0] uCode section
[ 1661.517283] iwlwifi :00:01.0: Failed to start INIT ucode: -110
[ 1661.517308] iwlwifi :00:01.0: Failed to run INIT ucode: -110
[ 1661.522957] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
[ 1661.524946] iwlwifi :00:01.0: L1 Enabled - LTR Enabled
[ 1666.527193] iwlwifi :00:01.0: Failed to load firmware chunk!
[ 1666.527240] iwlwifi :00:01.0: Could not load the [0] uCode section
[ 1666.527292] iwlwifi :00:01.0: Failed to start INIT ucode: -110
[ 1666.527326] iwlwifi :00:01.0: Failed to run INIT ucode: -110

and then I noted this:

[user@sys-net ~]$ uname -a
Linux sys-net 4.4.38-11.pvops.qubes.x86_64 #1 SMP Mon Dec 12 23:24:39 UTC 2016 
x86_64 x86_64 x86_64 GNU/Linux

while uname -a in dom0 shows the 4.8.12-12.pvops.qubes.X86_64 kernel.

Could this be related? And how do I upgrade the kernel in sys-net?
"rpm -qa | egrep (kernel|linux)" doesnt show it installed, how come it's
4.4 and not 4.8?

Is the solution to upgrade the iwl$Bla-firmware package in sys-net?

Shall I file a github issue?


-- 

[qubes-users] HCL - Lenovo ThinkPad X1 Yoga 2016 (20FQ005UGE)

2017-01-15 Thread Robin Schneider
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi all

Adding to the reports about the Thinkpad X1 Carbon 4th gen (20FB), here are my
experiences with the ThinkPad X1 Yoga 20FQ005UGE:

## TL;DR

Qubes OS R3.1 works in CSM mode but the graphics becomes unusable after
suspending, switching to another vty or changing any graphics option. Some
workarounds where required for Grub and the NVMe SSD.
Qubes OS R3.2 can not be installed directly (neither in native UEFI nor CSM).
When doing an in-place upgrade from R3.1 to R3.2, only the 4.1 kernel boots
and can be used to upgrade to 4.8 which fixes the graphics issues.

I have been testing with Qubes OS R3.2 for one month and am really happy with
it. Works for me :) Awesome work!

## Long version

The graphics problems I experienced where already described here:
https://groups.google.com/forum/#!msg/qubes-users/QOINoTl1aXc/2dXut2SrBAAJ

### Qubes OS R3.1 installation

Installer finished but after the reboot Grub is not able to find its /boot.
Same as the initial post here:
https://www.reddit.com/r/Qubes/comments/4vqb3y/grub_fails_to_boot

`ls` only shows: (hd0)
So, no partitions.

Possible fix: Boot into rescue mode of the installer and install /boot and
Grub onto a USB thumb drive. I used the handy anti-evil-maid-install script
for this task which only needed to be slightly modified (attached).
Not needed when using Grub from R3.2.

### Qubes OS R3.2 installation

The platform resets when booting Linux 4.4.31 from R3.2 with CSM as described
in https://www.reddit.com/r/Qubes/comments/4vqb3y/grub_fails_to_boot/ and
https://groups.google.com/forum/#!topic/qubes-users/mOlHA2KhzLE
When debugging is enabled, you can see that Xen boots just fine and one of the
last entries is that Xen starts dom0

* i915.enable_rc6=0 did not help (suggested here
https://www.qubes-os.org/doc/thinkpad-troubleshooting/#thinkpads-with-intel-hd-3
000-graphics)
* intel_pstate=disable did not help (suggested here:
http://www.thinkwiki.org/wiki/Installing_Fedora_24_on_a_ThinkPad_X1_Yoga#Success
_Chart_-_Out_of_the_box_experience)

### UEFI boot

UEFI mode is not usable as Grub refuses to boot any menu option for some
reason for every version of Qubes OS I have tested. I disabled secure boot.

The following error message is shown:

/EndEntire
file path: //File/(\EFI\BOOT)/File(xen.efi)/EndEntire
Xen 4.6.1 (c/s) EFI loader

  Failed to boot both default and fallback entries.

I already tried the things mentioned here:
https://www.qubes-os.org/doc/uefi-troubleshooting/
as suggested in
https://groups.google.com/d/msg/qubes-users/vPDD4rgNXx4/5faeFS-RBgAJ
This does not help.

### Kernel update

4.1.24 works with graphics problems
4.4.31 does not boot (platform resets when kernel is loaded, no kernel
messages) following
https://groups.google.com/forum/#!msg/qubes-users/m8sWoyV58_E/HYdReRIYBAAJ
4.8.11-100.vanilla.knurd.fc23 boots but hangs after the root filesystem has
been mounted (FDE pw entered). A _ keeps appearing for like .5 seconds all 4
seconds.
4.8.12-12 Works without issues.

`qubes-dom0-update --enablerepo=qubes-dom0-unstable kernel` and `dnf upgrade
kernel` worked!

### Screen brightness

By default the screen brightness can not be controlled by xfce and is at
maximum. There is a workaround for this:

dom0# qubes-dom0-update bc inotify-tools

And then run
https://github.com/rickybrent/x1yoga-scripts/blob/master/x1yoga-backlight-mon.sh
in dom0.
To start the script automatically at boot you can use "Sessions and Startup"
from xfce or other means.

### Touch screen

Works without issues in the default configuration. See sys-usb for more details.

### AEM

I only got AEM working without owner nor SRK password set. As soon as I set
any one of the passwords (even after full TPM clear), the password is being
asked for at boot. But the password is not accepted (error: "Key not found in
persistent storage"). When setting both passwords to well known, then it works
with the exception that the secret message is not shown in plymouth but only
on the text console (switched with ESC).
I removed the plymouth packages from dracut again with `dnf remove
'*plymouth*' && dracut -f` which solved it.
I expect that this problem was caused by the in place upgrade from R3.1 to
R3.2 or the fact that I removed the plymouth packages previously for debugging
and later reinstalled them on R3.2.

TXT seems to not work. If enabled in the UEFI setup, the platform resets after
grub. The last message shown is that 6th_gen_i5_i7_SINIT_71.BIN has been
loaded. I updated the AEM config in /etc to use SRTM for now.

I will retry with a clean install when possible but for now it works with the
mentioned limitations.

### Grub

Grub is horribly slow in default config on this machine. You can read the few
text lines as they start appearing on the screen and are only able to make
selections when it is done.

Set `GRUB_TERMINAL=console` in `/etc/default/grub` and regen grub.cfg to
workaround this.

### sys-usb

Required the