Re: [qubes-users] [bug] Inter-VM Copy/Paste Broken After Long Uptime

2016-07-20 Thread Holger Levsen
Hi, On Tue, Jul 19, 2016 at 09:54:19PM +0200, Marek Marczykowski-Górecki wrote: > > I have one particular Qubes instance with an uptime >60 days. Aside [...] > > Any suggestions on how to debug? > > Yes, remove /var/run/qubes/qubes-clipboard.bin.xevent > > The file contains X event timestamp

Re: [qubes-users] Qubes-users forum - Please, moderate this guy

2016-07-09 Thread Holger Levsen
On Sat, Jul 09, 2016 at 10:31:16AM -0700, bur...@gmail.com wrote: > I don't think those characterizations hold up. A person arriving at this > venue will be sensitive to social signals of acceptance or intolerance. They > may arrive here from links in the documentation. And it channels important

[qubes-users] disposable VMs: several different ones, and preconfigured

2017-02-06 Thread Holger Levsen
Hi, please excuse me if these are FAQs, RTFM pointers welcome! :) - (how) can I have several different disposable VMs? (eg Debian 8+9 and Fedora based ones) - (how) can I preconfigure disposable VMs? AIUI the home directory is always created freshly, how can I put stuff in there? (eg always

Re: wlan with kernel 4.8 (Re: [qubes-users] HCL - Lenovo ThinkPad X1 Yoga 2016 (20FQ005UGE))

2017-02-06 Thread Holger Levsen
On Fri, Feb 03, 2017 at 11:48:38AM +, Holger Levsen wrote: > awesome! just tested this and indeed this works nicely! Yay Yay Yay, thanks a > lot! I've now scripted this using the attached script in dom0… > (still looking forward to fix this properly but for now, this will work

wlan with kernel 4.8 (Re: [qubes-users] HCL - Lenovo ThinkPad X1 Yoga 2016 (20FQ005UGE))

2017-02-02 Thread Holger Levsen
Hi, On Sun, Jan 15, 2017 at 10:24:01PM +0100, Robin Schneider wrote: > Adding to the reports about the Thinkpad X1 Carbon 4th gen (20FB), here are my > experiences with the ThinkPad X1 Yoga 20FQ005UGE: another skylake system here… > ### Kernel update the default 4.4.38-11 kernel worked

[qubes-users] untar'ing an archive with /dev files crashes qrexec

2017-02-02 Thread Holger Levsen
Hi, so, I've started to use Qubes for real, and I can say I'm already quite very happy how nicely it works (VM seperation etc) and also how "easy" it is to use. Kudos & thanks to all involved making this happen! That said, I will now write a serious of mails with some small issues I'm having.

Re: [qubes-users] disposable VMs: several different ones, and preconfigured

2017-02-06 Thread Holger Levsen
On Mon, Feb 06, 2017 at 06:07:03AM -0800, Andrew David Wong wrote: > > please excuse me if these are FAQs, RTFM pointers welcome! :) > https://groups.google.com/d/msg/qubes-users/2uN9ybLTqHQ/XMy6d5UkDwAJ > https://www.qubes-os.org/doc/dispvm-customization/ thanks, Andrew! (I the meantime I had

Re: [qubes-users] Kernel 4.9 in Qubes

2017-02-05 Thread Holger Levsen
On Mon, Dec 12, 2016 at 10:25:01PM +0100, Marek Marczykowski-Górecki wrote: > > Kernel 4.9 has just been released > > How much work is it to port Qubes specific code to a new kernel? > Probably not much, as we already have it ported to 4.8. But on the other > hand, there are a lot of changes, so

Re: wlan with kernel 4.8 (Re: [qubes-users] HCL - Lenovo ThinkPad X1 Yoga 2016 (20FQ005UGE))

2017-02-03 Thread Holger Levsen
Hi Robin, On Thu, Feb 02, 2017 at 07:22:47PM +0100, Robin Schneider wrote: > You don’t have to restart all the VMs, luckily, which I learned shortly after > posting this. There is a pretty simple trick going around. Just set your > sys-firewall to no net vm, restart your net vm and reattach your

Re: [qubes-users] Redshift in dom0?

2017-01-23 Thread Holger Levsen
On Mon, Jan 23, 2017 at 06:52:47AM -0800, Andrew David Wong wrote: > > What's the best way to install something like Redshift in dom0? just install it like any other package in dom0… :) -- cheers, Holger -- You received this message because you are subscribed to the Google Groups

Re: [qubes-users] Archlinux template system update

2017-02-20 Thread Holger Levsen
On Mon, Feb 20, 2017 at 03:25:23PM -0300, Franz wrote: > > Also, you should clone the template, and try the forced upgrade in > > the clone. > This seems very safe to try thanks nice howto from Unman indeed! > > If it does not work and you are short of time the you can simply > > switch back to

Re: [qubes-users] Archlinux template system update

2017-02-20 Thread Holger Levsen
On Mon, Feb 20, 2017 at 05:19:52PM -0300, Franz wrote: > looking for conflicting packages... > :: xorg-server and xf86-input-joystick are in conflict > (X-ABI-XINPUT_VERSION). Remove xf86-input-joystick? [y/N] n do you really need xf86-input-joystick? -- cheers, Holger -- You

Re: [qubes-users] Qubes and ram

2017-02-24 Thread Holger Levsen
On Wed, Feb 22, 2017 at 05:37:17PM +, Holger Levsen wrote: > echo $(((`(for VM in $(xl list|egrep -v "(Name|dom0)"|cut -d " " -f1) ; do > /usr/lib/qubes/qrexec-client -d $VM user:"/usr/bin/vmstat -s -S K" -t -T|grep > "used memory"|cut -d &qu

Re: [qubes-users] Qubes and ram

2017-02-22 Thread Holger Levsen
Hi, both in qubes-manager as well as in the i3 status bar, Qubes only displays the allocated memory, which pretty much always is 95% of the available memory, so I came up with this one-liner to calculate the really used memory: echo $(((`(for VM in $(xl list|egrep -v "(Name|dom0)"|cut -d " "

Re: [qubes-users] qvm-run --dispvm in dom0

2017-02-12 Thread Holger Levsen
On Fri, Feb 03, 2017 at 04:44:14PM +, Unman wrote: > echo xterm |/usr/lib/qubes/qfile-daemon-dvm qubes.VMShell dom0 DEFAULT red > > will open term in new dispVM > > I have this as keyboard shortcut - you can obviously script it to take > input for command to run. thanks, this is very handy!

Re: [qubes-users] qvm-run --dispvm in dom0

2017-02-12 Thread Holger Levsen
On Sun, Feb 12, 2017 at 02:23:20PM +, Unman wrote: > > I'm just puzzled that this doesnt work: > > echo gnome-terminal |/usr/lib/qubes/qfile-daemon-dvm qubes.VMShell dom0 > > DEFAULT red > This comes up quite often - perhaps it should be in the FAQ. probably, though best with a

Re: [qubes-users] qvm-run --dispvm in dom0

2017-02-12 Thread Holger Levsen
On Sun, Feb 12, 2017 at 03:11:59PM +, Holger Levsen wrote: > hm, xfce4-terminal is a somewhat better terminal, IMHO, but what I really > want is one which I can easily configure to support font-size-resizing > via keyboard-ctrols (ctrl +- works out of the box in gnome-terminal) an

Re: [qubes-users] Re: HCL - Lenovo Thinkpad X1 Carbon 4th gen (20FB)

2017-02-28 Thread Holger Levsen
On Mon, Feb 27, 2017 at 03:42:51PM -0500, Chris Laprise wrote: > Do either of you use anti-evil-maid? not yet. -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails

Re: [qubes-users] Re: HCL - Lenovo Thinkpad X1 Carbon 4th gen (20FB)

2017-02-27 Thread Holger Levsen
On Sun, Feb 26, 2017 at 02:56:53PM -0500, Jean-Philippe Ouellet wrote: > In the interest of maximizing list archive utility, I'm attaching a > new HCL here (bumped kernel to 4.8.12-12 & xen to 4.6.4). > > I still have issues with suspend/resume. Sometimes it fails to resume, > and sometimes it

Re: [qubes-users] Re: Does anyone use a dedicated Tor router box..?

2016-09-10 Thread Holger Levsen
On Sat, Sep 10, 2016 at 03:23:54PM -0400, Chris Laprise wrote: > That also misses the point. yes, somewhat - thanks for making "the point" clearer! :-) > Xen is far smaller and simpler than the kernels that protect Windows and > Linux, and it has fewer vulnerabilities as a result. Its also

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-05 Thread Holger Levsen
On Sat, Nov 05, 2016 at 03:58:21PM +0100, Marek Marczykowski-Górecki wrote: > Oh, indeed qubes-release were only in testing repository for "fc20" base > distribution - which is the case in the first stage of in-place upgrade. > Fixed. so that means the docs are correct now? > Check status of

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-05 Thread Holger Levsen
On Sat, Nov 05, 2016 at 05:20:32PM +0100, Marek Marczykowski-Górecki wrote: > Looks like it can't connect to syslog/journald. Does /dev/log exist? yes, but it's color is purple?! > Does anyone listen on it (netstat -nlpx)? netstat is not installed. >On my system it's a symlink to >

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-05 Thread Holger Levsen
On Sat, Nov 05, 2016 at 05:45:05PM +0100, Marek Marczykowski-Górecki wrote: > > yes, but it's color is purple?! > Should be - it's a socket. ah > Ok, lets try to replace /dev/log with a symlink to > /run/systemd/journal/dev-log. Maybe this is the part that was > interrupted. didnt survive a

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-04 Thread Holger Levsen
Hi Marek, On Sat, Nov 05, 2016 at 01:57:44AM +0100, Marek Marczykowski-Górecki wrote: > > I believe I also found a workaround: > > sudo qubes-dom0-update enablerepo=qubes-dom0-current-testing > > --releasever=3.2 qubes-release > > sudo qubes-dom0-update enablerepo=qubes-dom0-current

Re: [qubes-users] Re: Qubes R3.2, cannot find redshift{-gtk} packages on dom0

2016-10-22 Thread Holger Levsen
On Sat, Oct 22, 2016 at 05:15:27AM -0700, srhgr wrote: > when I install the redshift-gtk it tries to find the geolocation but it > fails. how can I simply dimm the light like adjusting the audio volume with > redshift? AFAIK redshift cannot do this, but: $ cat bin/my_redshift #!/bin/sh #

Re: [qubes-users] Re: Trying to do an in-place upgrade from 3.1.17 to 3.2

2016-11-19 Thread Holger Levsen
On Sat, Nov 05, 2016 at 03:58:21PM +0100, Marek Marczykowski-Górecki wrote: > > > > p.s./btw: https://www.qubes-os.org/doc/upgrade-to-r3.1/ advices one to > > > > install qubes-mgmt-salt-admin-tools but this package does not exist?! > > > That's interesting, this step should be in 3.1->3.2

Re: [qubes-users] Re: Maybe a provocative question

2016-10-17 Thread Holger Levsen
On Mon, Oct 17, 2016 at 02:12:52PM -, johnyju...@sigaint.org wrote: > Lines of code added/removed: interesting numbers, thanks for posting them here. > Now, about 4.7. Note that the page for only lists individual names, does > not list any company affiliations or employers at all. An odd >

Re: [qubes-users] Can't start my StandaloneVM anymore

2017-03-18 Thread Holger Levsen
On Sat, Mar 18, 2017 at 11:14:07AM -0700, cooloutac wrote: > On Saturday, March 18, 2017 at 2:11:50 PM UTC-4, cooloutac wrote: > > I'm starting to think you're the joke. > Instead of arrogantly telling someone to do a simple search if you are too > lazy to give a solution. Do everyone a favor

Re: [qubes-users] usability major bug?

2017-03-22 Thread Holger Levsen
Hi Oleg, you missed on important bit of information: On Wed, Mar 22, 2017 at 12:12:58PM +0300, Oleg Artemiev wrote: > I have to reboot Qubes R3.2 a few times a day. What do I do wrong? why do you have to reboot? > reproduceable: daily on my workstation > > impact: ability to run 10-15 VMs is

Re: [qubes-users] usability major bug?

2017-03-22 Thread Holger Levsen
On Wed, Mar 22, 2017 at 03:08:00PM +0300, Oleg Artemiev wrote: > > why do you have to reboot? > Cost of reboot in __understanding__ what the hell is the reason is > less than cost of restoring correct state after reboot. > > I feel like queue in some code is failing to grow. > Usually I detect

Re: [qubes-users] qubes boot repair

2017-04-12 Thread Holger Levsen
On Wed, Apr 12, 2017 at 08:42:49AM -0700, jacoblorenzipo...@gmail.com wrote: > bios update resulted in loosing qubes option in efi boot menu > I can boot into qubes boot repair but not sure what to do after > Any suggestions? after you chrooted into the system as suggested by the repair script,

Re: [qubes-users] Re: qubes manager add start terminal

2017-04-17 Thread Holger Levsen
On Sun, Apr 16, 2017 at 05:44:12PM -0600, Reg Tiangha wrote: > That said, being able to right-click in Qubes Manager and quickly launch > any kind of terminal program would be a super useful feature to have. absolutly. should also have a customisable default list of terminals to try as well as a

Re: [qubes-users] say it out (loud) - Qubes OS Stickers

2017-04-20 Thread Holger Levsen
On Wed, Apr 19, 2017 at 08:49:12AM -0700, sackerbo...@gmail.com wrote: > I would love to have a few of these!! printing them is easy, even if getting them printed for free. what's harder is getting a design. does someone have one? -- cheers, Holger -- You received this message

Re: [qubes-users] How to install kernel headers in debian 9?

2017-04-19 Thread Holger Levsen
On Wed, Apr 19, 2017 at 11:42:16AM +0200, c...@company.com wrote: > I've upgraded my debian-8 template to debian-9 (stretch). Now I want to > install vmware player and it asks me where the kernel headers are located. > I could not find them in /usr/src and I also can't find them via apt-cache >

[qubes-users] salt, getting started (to disable CAPS LOCK and configure basic tools everywhere)

2017-03-03 Thread Holger Levsen
Hi, so I've read qubes-doc.git/configuration/salt.md and wonder, /srv/salt is installed by the qubes packages and the document says the Qubes salt API is supposed to change between minor release - so where am I supposed to put *my* salt config? Also what best practices / tools exist to maintain

Re: [qubes-users] Feedback request: Incremental file-based backup PoC

2017-03-03 Thread Holger Levsen
On Fri, Mar 03, 2017 at 12:42:56PM -0800, Vít Šesták wrote: > Well, I don't see any problem with restore. This is roughly what dom0 does > (or initiates): Vít, please design and *test* your restore. Nobody wants backup, everybody wants restore. -- cheers, Holger -- You received this

please, learn to quote…! Re: [qubes-users] Re: Videostream with Qubes??

2017-03-10 Thread Holger Levsen
On Thu, Mar 09, 2017 at 02:26:29PM -0800, Grzesiek Chodzicki wrote: > W dniu czwartek, 9 marca 2017 23:19:23 UTC+1 użytkownik evo napisał: > > Am 03/09/2017 um 11:12 PM schrieb Grzesiek Chodzicki: > > > W dniu czwartek, 9 marca 2017 21:41:02 UTC+1 użytkownik evo napisał: > > >> On 03/09/2017 09:11

Re: [qubes-users] Re: SystemD sucks - qubes shouldn't use it

2017-03-10 Thread Holger Levsen
On Thu, Mar 09, 2017 at 10:06:24PM -0800, Drew White wrote: > systemd is bad, things were simpler and easier without it. you think having a 1000 ways to start deamons (written and maintained by a 1000 people) is more secure and simpler? That's a curious POV… -- cheers, Holger -- You

[qubes-users] Re: salt, getting started (to disable CAPS LOCK and configure basic tools everywhere)

2017-03-06 Thread Holger Levsen
On Fri, Mar 03, 2017 at 10:38:04PM +, Holger Levsen wrote: > so I've read qubes-doc.git/configuration/salt.md and wonder, /srv/salt is > installed by the qubes packages and the document says the Qubes salt API is > supposed to change between minor release - so where am I supposed to

Re: [qubes-users] Feedback request: Incremental file-based backup PoC

2017-03-06 Thread Holger Levsen
Hi Vít, On Sat, Mar 04, 2017 at 09:53:31AM -0800, Vít Šesták wrote: > Holger, restore is already implemented in some basic form. (I havre mentioned > it here on Mar 1.) I'm sorry, I was wrong indeed and a bit too sarcastic too. I guess this was due to your initial mail where there was no

Re: [qubes-users] can't install kernel-qubes-vm from qubes-dom0-unstable repo

2017-04-08 Thread Holger Levsen
On Sat, Apr 08, 2017 at 12:03:55AM -0400, Chris Laprise wrote: > I think 'rpm -qa' is essentially saying the package is installed. I think you misread the output I posted, it was: [user@dom0 ~]$ rpm -qa |grep kernel qubes-core-dom0-linux-kernel-install-3.2.12-1.fc23.x86_64

[qubes-users] can't install kernel-qubes-vm from qubes-dom0-unstable repo

2017-04-07 Thread Holger Levsen
Hi, "long ago" I successfully installed kernel-4.8.12-12 from the qubes-dom0-unstable repo and today I realized that maybe Qubes would be more stable for me, if I'd also install kernel-qubes-vm 4.8.12-12 instead of still using 4.4.38 in the VMs… But… [user@dom0 ~]$ sudo qubes-dom0-update

[qubes-users] cannot install kernel 4.9.35 from …-current-testing

2017-07-31 Thread Holger Levsen
Hi, I fail to install kernel 4.9.35 on Qubes 3.2, any hints how I can accomplish this? [user@dom0 ~]$ LANG=C sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing kernel kernel-qubes-vm Using sys-firewall as UpdateVM to download updates for Dom0; this may take some time... Running

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-07-31 Thread Holger Levsen
On Mon, Jul 31, 2017 at 01:43:20PM +0200, Marek Marczykowski-Górecki wrote: > We have just released Qubes 4.0-rc1: awesome! I've installed it on a lenovo x260 and upon the end of the installation I had some error concerning sys-firewall stating "could not find capabilities for arch=x86_64",

Re: [qubes-users] Re: [qubes-devel] Qubes Security Bulletin #32: Xen hypervisor and Linux kernel vulnerabilities (XSA-226 through XSA-230)

2017-08-15 Thread Holger Levsen
On Tue, Aug 15, 2017 at 04:05:27PM +0200, Marek Marczykowski-Górecki wrote: > Actually: > sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing done this now, worked nicely, also rebooted into it and everything seems to be fine. thanks! -- cheers, Holger -- You received

[qubes-users] Re: [qubes-devel] Qubes Security Bulletin #32: Xen hypervisor and Linux kernel vulnerabilities (XSA-226 through XSA-230)

2017-08-15 Thread Holger Levsen
On Tue, Aug 15, 2017 at 04:05:27PM +0200, Marek Marczykowski-Górecki wrote: > Actually: > sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing q.e.d. & thanks! -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users"

[qubes-users] Re: [qubes-devel] Qubes Security Bulletin #32: Xen hypervisor and Linux kernel vulnerabilities (XSA-226 through XSA-230)

2017-08-15 Thread Holger Levsen
Hi, first of all: thanks for this handling this update! On Tue, Aug 15, 2017 at 08:31:31AM -0500, Andrew David Wong wrote: > Patching > = [...] > The packages are to be installed in dom0 via the qubes-dom0-update command or > via the Qubes VM Manager. A system restart will be required

Re: [qubes-users] cannot install kernel 4.9.35 from …-current-testing

2017-08-04 Thread Holger Levsen
On Tue, Aug 01, 2017 at 01:06:24PM +0200, Marek Marczykowski-Górecki wrote: > > I fail to install kernel 4.9.35 on Qubes 3.2, any hints how I can > > accomplish this? > > [user@dom0 ~]$ LANG=C sudo qubes-dom0-update > > --enablerepo=qubes-dom0-current-testing kernel kernel-qubes-vm > Try

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-07-31 Thread Holger Levsen
On Mon, Jul 31, 2017 at 10:46:19PM +0200, Marek Marczykowski-Górecki wrote: > Do you have VT-x enabled in BIOS? doh, indeed it was disabled. (Which slightly puzzles me as I had running Qubes 3.2 running on this machine before…) Now I get another error OTOH, but I'll try a fresh reinstallation

[qubes-users] Re: cannot install kernel 4.9.35 from …-current-testing

2017-08-01 Thread Holger Levsen
On Mon, Jul 31, 2017 at 10:53:31PM -0700, Foppe de Haan wrote: > 'sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing --best > --allowerasing' shouldn't error like that. sadly no: [user@dom0 ~]$ LANG=C sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing kernel --best

Re: [qubes-users] Qubes OS 4.0 first release candidate (rc1) has been released!

2017-07-31 Thread Holger Levsen
On Mon, Jul 31, 2017 at 09:17:43PM +, Holger Levsen wrote: > Now I get another error OTOH, but I'll try a fresh reinstallation of 4.0rc1 > first, before > reporting that exact error… whoohooo - that fresh installation on an x260 for the first time showed reliable suspend+resumes,

[qubes-users] Re: cannot install kernel 4.9.35 from …-current-testing

2017-07-31 Thread Holger Levsen
On Mon, Jul 31, 2017 at 10:11:56PM -0700, Foppe de Haan wrote: > and if you add --best --allowerasing to the command? commandline error, no such option :( -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] ANN: qubes-pass — an inter-VM password manager and store for Qubes OS

2017-05-14 Thread Holger Levsen
On Sat, May 13, 2017 at 02:55:12PM -0500, Andrew David Wong wrote: > > you really dont protect your gpg key with a passphrase?? > See: https://www.qubes-os.org/doc/split-gpg/ oh wow :( > Why is that a problem? It's only visible in dom0. If an attacker is in > dom0, it's already game over. no,

Re: [qubes-users] Re: The issue of non-proprietary BIOS and Qubes OS

2017-06-21 Thread Holger Levsen
On Wed, Jun 21, 2017 at 10:00:00AM +, Michael Carbone wrote: > FYI x220 also has heads support: > https://github.com/osresearch/heads/pull/190 oh nice! (so they should update their docs… :) -- cheers, Holger -- You received this message because you are subscribed to the Google

Re: [qubes-users] Re: The issue of non-proprietary BIOS and Qubes OS

2017-06-21 Thread Holger Levsen
On Wed, Jun 21, 2017 at 09:57:25AM +0200, math blanc wrote: > Installing Qubes OS 3.x on a X200 sounds like a bad idea to me, isn't ? I'd rather choose an x220 or x230, where you can also clean the ME. Plus, an x230 is supported by heads, which you might also like to use. (see

Re: [qubes-users] Lenovo X1 Carbon 1.gen

2017-05-22 Thread Holger Levsen
On Sun, May 21, 2017 at 07:00:04AM -0700, Finsh wrote: > i recently got interested in the Qubes and i'm thinking on installing it > on a Lenovo X1 Carbon 1gen Type: 3460-1F4. > > I couldn't find this specific Model in the HCL, are there any known issues? I've installed Qubes on mine before it

Re: [qubes-users] Thank you to unman and magicadu!

2017-05-31 Thread Holger Levsen
On Tue, May 30, 2017 at 10:52:10PM -0500, Andrew David Wong wrote: > Please join me in thanking two invaluable members of our community -- > unman and magicadu -- for donating their time and talents. They have > just finished rigorously and painstakingly testing Milestone 3.1 > issues in order to

[qubes-users] Re: [qubes-announce] QSB #30: Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214)

2017-05-02 Thread Holger Levsen
On Tue, May 02, 2017 at 07:10:05AM -0500, Andrew David Wong wrote: > We have just published Qubes Security Bulletin (QSB) #30: > Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214). sad news, but very well written, thanks a lot for taking the time to do so! > Commentary >

[qubes-users] kswapd0 using 100% CPU with not even a MB swap in use

2017-10-07 Thread Holger Levsen
Hi, so kswapd0 is using 100% CPU in one of my Qubes and this makes the fan spin and noisy… and that Qube is hardly using any swap at all: $ free totalusedfree shared buff/cache available Mem:1888212 776484 640712 70296 471016

Re: [qubes-users] After updating Debian Kernel in VM, initramfs can't init

2017-10-14 Thread Holger Levsen
On Sat, Oct 14, 2017 at 03:03:39PM +, Holger Levsen wrote: > I've done the same… just with a slightly different result, though the same > outcome, the VM > in question doesnt boot :( running "sudo update-initramfs -c -k all" fixed this for me… -- cheers, Holge

Re: [qubes-users] After updating Debian Kernel in VM, initramfs can't init

2017-10-14 Thread Holger Levsen
On Wed, Feb 08, 2017 at 03:58:57PM -0800, nicholas roveda wrote: > I've just update the Kernel inside of the Debian Template to the 4.9.2 > version and now, the machine can't start. > > - I installed grub2-xen in dom0 > > - I installed 'qubes-kernel-vm-support', 'kernel-package' and

Re: [qubes-users] Use another Window Manager (awesome) with Qubes OS

2017-09-28 Thread Holger Levsen
On Thu, Sep 28, 2017 at 10:24:54AM -0400, 'One7two99' via qubes-users wrote: > I've recently seen the window manager "awesome" in action which I haven't > heard of before.I would like to give it a try on my Qubes 3.2 installation. I've been using awesome for almost 10 years and when I switched

[qubes-users] auto-restarting nm-applet (on 3.2)

2017-09-27 Thread Holger Levsen
Hi, I've just realized that (almost) everytime after my laptop resumes, I run qvm-run sys-net "killall nm-applet ; nm-applet" manually and that's a bit silly, so I want to automate this this workaround (certainly hoping nm-applet will behave better in 4.0…) so I wonder if there's a better way

Re: [qubes-users] Re: Adding a second monitor fails

2017-09-28 Thread Holger Levsen
On Thu, Sep 28, 2017 at 01:21:52AM -0700, Coracle wrote: > I'm getting the message here and elsewhere that Qubes OS doesn't yet support > extended desktops or multiple monitors. no, that's wrong. Qubes supports multiple displays just fine, it's just based on an 1-2 year old version of Fedora,

Re: [qubes-users] Informational videos about Qubes

2017-08-28 Thread Holger Levsen
On Sun, Aug 27, 2017 at 10:33:16PM -0500, Andrew David Wong wrote: > > That sounds reasonable. Could we perhaps have a link to these > > videos (as well as all other third-party materials about Qubes) > > somewhere on the mailing group/IRC channel so that newcomers can > > get acquainted with

Re: [qubes-users] kswapd0 using 100% CPU with not even a MB swap in use

2017-10-11 Thread Holger Levsen
On Sun, Oct 08, 2017 at 02:18:06PM +0200, Marek Marczykowski-Górecki wrote: > I've seen this some time ago and `echo 3 > /proc/sys/vm/drop_caches` > helped. No idea why it is spinning... I decided to better use 'echo 3 | sudo tee /proc/sys/vm/drop_caches' and that that worked nicely indeed, I got

Re: [qubes-users] 4.0-rc1 - No 'qvm-trim-template'?

2017-09-27 Thread Holger Levsen
On Tue, Aug 15, 2017 at 07:28:58AM +0200, Graumann, Johannes wrote: > Can anyone enlighten me why 4.0-rc1 does not (yet?) have > 'qvm-trim-template'? Is this not yet implemented or not needed any longer > given the new infrastructure? I'm curious about this as well. There is

[qubes-users] template VMs loosing connectivity

2017-10-18 Thread Holger Levsen
Hi, I'm running 3.2 and this week for the first time template VMs lost connectivity, as in they couldnt connect to their software repos anymore. A reboot "fixed" this and I could update them again. Then, yesterday, they lost connectivity again… apt gets: cannot connect to 10.137.255.254… and

Re: [qubes-users] Docker & dev embbeded on Qubes OS on P51

2017-10-19 Thread Holger Levsen
On Thu, Oct 19, 2017 at 01:55:08PM +0200, deadbrain wrote: > thanks for the answer I may use a Debian/sid plus siduction kernel > inside this VM For my use case standard headers are sufficient , I don't > see the value added to install its own kernel, could you give more details > please?

Re: [qubes-users] Docker & dev embbeded on Qubes OS on P51

2017-10-19 Thread Holger Levsen
On Thu, Oct 19, 2017 at 04:29:51AM -0700, jerome.moli...@gmail.com wrote: > -> 2) From time to time I am providing Java consulting, and now many > customers use docker containers (no comments -) ) ... Is it possible inside a > VM to run Docker ? No problem with firewalling & other stuff... yes,

Re: [qubes-users] template VMs loosing connectivity

2017-10-18 Thread Holger Levsen
On Wed, Oct 18, 2017 at 10:59:52AM +, Holger Levsen wrote: > apt gets: cannot connect to 10.137.255.254… still not sure why this happened (and why now), but running systemctl on sys-net made it obvious what the fix was: sudo service qubes-updates-proxy restart -- cheers, Hol

Re: [qubes-users] qvm-convert-img: ValueError: No icon received

2017-11-28 Thread Holger Levsen
On Sun, Nov 26, 2017 at 05:50:17PM +, Unman wrote: > > > It's a bug Holger. > > > Scoot on over to GitHub and raise an issue > > is it really? I cannot believe it's broken (in 3.2) and noone has raised > > an issue yet… > Well someone has to be first :-) > > truth , I dont think that many

[qubes-users] qvm-convert-img: ValueError: No icon received

2017-11-26 Thread Holger Levsen
hi, on 3.2: $ qvm-convert-img image.jpg image_clean.jpg Traceback (most recent call last): File "/usr/lib/qubes/qimg-convert-client", line 47, in main() File "/usr/lib/qubes/qimg-convert-client", line 41, in main img = qubes.imgconverter.Image.get_through_dvm(args.src) File

Re: [qubes-users] qvm-convert-img: ValueError: No icon received

2017-11-26 Thread Holger Levsen
On Sun, Nov 26, 2017 at 04:40:08PM +, Unman wrote: > On Sun, Nov 26, 2017 at 04:22:04PM +0000, Holger Levsen wrote: > > on 3.2: using debian-9 I should have said too… > > $ qvm-convert-img image.jpg image_clean.jpg [...] > > ValueError: No icon received > >

Re: [qubes-users] Atheros AR928X & Q4.0rc3 Passthrough

2017-12-17 Thread Holger Levsen
On Sat, Dec 16, 2017 at 02:21:30PM -, 'awokd' via qubes-users wrote: > Getting crashes on domU boot with an assigned Atheros wireless PCIe card > under Qubes 4.0rc3 with both PV and HVM. Any suggestions how to accomplish > it? Some of the posts/threads I find go back to 2010 but I'm still >

Re: [qubes-users] Re: Attempting to securely wipe drives, running into issue.

2017-12-20 Thread Holger Levsen
On Wed, Dec 20, 2017 at 12:50:38AM +0100, Ángel wrote: > openssl enc -aes-256-ctr -pass pass:"$(dd if=/dev/urandom bs=128 count=1 > 2>/dev/null | base64)" -nosalt | pv -bartpes | sudo dd bs=64K of=/dev/sd"X" on Debian this is much easier done with sudo apt install wipe sudo wipe /dev/sda

Re: [qubes-users] Upgrading from rc2 to release.

2017-11-07 Thread Holger Levsen
On Mon, Nov 06, 2017 at 07:35:58PM -0800, jkitt wrote: > Is this just a case of running a Dom0 update? Or would I have to manually > install the stable release? > FYI: I'm still on 3.2. you need to backup 3.2, install 4.0 and restore the backup. this is described in the release notes. --

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users wrote: > What is the difference between Coreboot and Libreboot ? Libreboot is Coreboot with all the non-free blobs removed (and no free software added instead). So if you happen to have hardware which needs those blobs, you

Re: [qubes-users] Coreboot VS Libreboot :: Which is better for Qubes OS ?

2017-11-04 Thread Holger Levsen
On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users wrote: > so from my understanding, "blobs" is a synonym for proprietary code, right ? it's a synonym for "binary object" where in general you don't have the source code. > I mean if it doesn't really matter for security I

Re: [qubes-users] Boot QUBES with kexec

2017-12-10 Thread Holger Levsen
On Sun, Dec 10, 2017 at 03:05:11PM +0100, Robert Walz wrote: > Does anybody know how to kexec the xen hypervisor? http://osresearch.net/ uses kexec to boot Qubes. -- cheers, Holger -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

Re: [qubes-users] Re: Attempting to securely wipe drives, running into issue.

2017-12-20 Thread Holger Levsen
On Wed, Dec 20, 2017 at 01:15:23PM +0100, 'Tom Zander' via qubes-users wrote: > On Wednesday, 20 December 2017 11:59:26 CET Holger Levsen wrote: > > oh, and if you want to securly erase data, use /dev/random, not > > /dev/urandom. > > This is not good advice, your /dev/rando

Re: [qubes-users] qubes-mirage-firewall 0.4

2017-12-21 Thread Holger Levsen
On Wed, Dec 20, 2017 at 10:04:57PM +0100, donoban wrote: > If I'm not wrong you have to configure the rules for the firewall before > building the kernel image? Once you start it you have no way for change > rules? yes, this is true currently. but then I have been using Qubes for nearly a year

Re: [qubes-users] VM maximum size is too small

2018-05-04 Thread Holger Levsen
On Fri, May 04, 2018 at 09:01:13AM -0700, Reza wrote: > 3) I click on "settings" icon (the wheel)and I increase the "private storage > max size" from 2048 to its max value 10240 (written right below as 'system > storage max size'). you want to increase the private storage size, not the system

Re: [qubes-users] Run "cd /path/to/file" Command with qvm-run

2018-05-14 Thread Holger Levsen
On Mon, May 14, 2018 at 03:34:00AM -0700, cr33dc0...@gmail.com wrote: > Does anyone know how to use cd command with qvm-run? qvm-run --pass-io personal "cd /home/user/Desktop/ ; ls" -- cheers, Holger -- You received this message because you are subscribed to the Google Groups

[qubes-users] sweethome3d (java app) on Qubes

2018-05-23 Thread Holger Levsen
hi, I've been trying to use sweethome3d from Debian stretch (so "apt install sweethome3d") but I cannot draw any walls or rooms, the tool immediatly stops with a 0cm length wall. I tried this with Qubes and the i3 window-manager, while I know that a friend uses sweethome3d and i3 on plain Debian

[qubes-users] Re: [qubes-devel] Fedora 26 and Debian 8 approaching EOL

2018-05-24 Thread Holger Levsen
On Wed, May 23, 2018 at 08:21:12PM -0500, Andrew David Wong wrote: > Fedora 26 will reach EOL ([end-of-life]) on 2018-06-01, and Debian 8 > (["Jessie" full, not LTS][debian-releases]) will reach EOL on > 2018-06-06. We strongly recommend that all Qubes users upgrade their > Fedora 26 and Debian 8

[qubes-users] Re: [qubes-devel] Fedora 26 and Debian 8 approaching EOL

2018-05-25 Thread Holger Levsen
On Thu, May 24, 2018 at 07:29:18PM -0500, Andrew David Wong wrote: > Thank you for the correction. I've updated the announcement on the > website to clarify this: > https://github.com/QubesOS/qubes-posts/commit/3db9a35e297b3defa0863f8ab02ebd56e8384053 thank you, looks good! -- cheers,

[qubes-users] -> Backing up files: 78%... ERROR: Failed to perform backup: error in addproc

2018-01-19 Thread Holger Levsen
hi, I was just doing a backup (using the qvm-backup cli tool on 3.2) which then suddenly crashed with this line: -> Backing up files: 78%... ERROR: Failed to perform backup: error in addproc I couldn't investigate further yet, but I suppose it failed to backup a specific VM - which is bad - and

Re: [qubes-users] Re: Qubes OS 4.0-rc4 has been released!

2018-02-01 Thread Holger Levsen
On Thu, Feb 01, 2018 at 09:58:34AM -0800, alexclay...@gmail.com wrote: > Are there plans for the final 4.0 release to have a direct upgrade path from > 3.2? Or do we just backup all of our VMs, fresh install 4.0, then restore our > VMs? the latter. -- cheers, Holger -- You

[qubes-users] size difference between 4.9 and 4.14 kernels

2018-02-06 Thread Holger Levsen
hi, on 3.2 I ran "sudo qubes-dom0-update" this morning, followed by "sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing --action=upgrade kernel-qubes-vm" which then prompted me with this: Installing: kernel x86_64 1000:4.14.13-3.pvops.qubes

Re: [qubes-users] size difference between 4.9 and 4.14 kernels

2018-02-08 Thread Holger Levsen
On Wed, Feb 07, 2018 at 11:01:33AM +0100, Marek Marczykowski-Górecki wrote: > I think this is just about estimation of used disk space - one package > is already installed and rpm know how much disk space is really used, > the other one have only some estimation in rpm metadata. ah, right. I'm a

Re: [qubes-users] Re: Duplicate MAC address error

2017-12-22 Thread Holger Levsen
On Fri, Dec 22, 2017 at 02:34:41AM -0800, Reynir Björnsson wrote: > It may be a coincidence, but when it happened to me I got sys-net running by > shutting down sys-whonix first. I've since disabled sys-whonix and haven't > had the issue again, although I haven't been rebooting much since. I

Re: [qubes-users] Is Qubes effected by the Intel kernel memory leaking bug?

2018-01-04 Thread Holger Levsen
On Thu, Jan 04, 2018 at 05:40:27AM -0800, stephenatve...@gmail.com wrote: > On Thursday, 4 January 2018 13:39:46 UTC+1, eva...@openmailbox.org wrote: > > 3.2 affected? When patch will be available? :( > My impression is that 3.2 isn't being patched pending 4.0, but I could be > wrong there. you

Re: [qubes-users] Guide: Monero wallet/daemon isolation w/qubes+whonix

2018-08-14 Thread Holger Levsen
On Tue, Aug 14, 2018 at 07:42:00PM +, Patrick Schleizer wrote: > Now reference here: > https://www.whonix.org/wiki/Monero > > > I am wondering how to save users from as many manual steps as possible. since a bit more than 2 weeks monero can be installed on stretch with 'sudo apt install -t

Re: [qubes-users] Qubes 4.0-rc3

2018-01-12 Thread Holger Levsen
On Fri, Jan 12, 2018 at 01:04:23PM +, 'Tom Zander' via qubes-users wrote: > On Friday, 12 January 2018 11:18:19 GMT 'awokd' via qubes-users wrote: > > Would it be of value if I went through the published Docs and added these > > version headers? Should newer versions be added at the top (so

Re: [qubes-users] bash autocomplete

2018-03-11 Thread Holger Levsen
On Sun, Mar 11, 2018 at 02:11:02PM +0100, haaber wrote: > I don't know what this 3D-thing, is I'll learn it. I have, in the > meanwhile, tested the attached file, that distinguishes also running, > paused and halted VM's. For the moment this is completely sufficient for > me. Maybe I'll add the

Re: [qubes-users] bash autocomplete

2018-03-11 Thread Holger Levsen
On Fri, Mar 02, 2018 at 07:10:22PM +, Holger Levsen wrote: > On Tue, Feb 27, 2018 at 03:23:50PM +0100, haaber wrote: > > to have the shell behave nicer. If I have some free time, I might > > customize this stub to suggest available options to all qvm-* and > > qubes-* com

Re: [qubes-users] Guide on installing Qubes and Coreboot with encrypted boot on thinkpads

2018-04-06 Thread Holger Levsen
hi, On Fri, Apr 06, 2018 at 09:22:52AM +, 799 wrote: > As mentioned I have also drafted a how-to to setup Coreboot on a X230, > including building the pi, flashrom and extracting Blobs. out of curiosity: does resume work reliably for you? For me it didnt with coreboot (and the free VGA bios)

Re: [qubes-users] Guide on installing Qubes and Coreboot with encrypted boot on thinkpads

2018-04-13 Thread Holger Levsen
Hi, On Fri, Apr 06, 2018 at 08:25:37PM +0200, 799 wrote: > as described in the howto I have extracted the vga.rom from my own > BIOS-files. > I can use resume and the laptop reconnects its network adapters as soon as > it wakes up. > So far no issues at all. thanks for explaining. > > The

Re: [qubes-users] How do I load firmware-atheros into Qubes 4.0 R5?

2018-03-30 Thread Holger Levsen
On Thu, Mar 29, 2018 at 03:38:34PM -0400, taii...@gmx.com wrote: > My issue is with purisms incredibly dishonest marketing, their pressure > campaigns on the FSF, their insulting of their competitors - not their > existence in general or the practice of selling of laptops that are only > slightly

  1   2   >