Re: [qubes-users] Re: qubes 4.0rc2 - debian appvm fails with qrexec-daemon message

2017-11-23 Thread haaber
On 11/23/17 00:14, Yuraeitha wrote: > On Monday, November 20, 2017 at 12:14:16 PM UTC, Bernhard wrote: >> Hello, >> with your nice help I happily installed Q4.0rc2. Then I created a bunch >> of debian-8 based appvm's, to copy my data back from the backup. But >> they don't start, finishing with "C

Re: [qubes-users] Re: Qubes installation hangs at 717/930

2017-11-23 Thread haaber
> Same problem here. > ASUS with I7-7700HQ CPU. > Qubesos 4.0rc2, now I'm going to try 3.2 Probably you are right. I admit that I have no precise memory about 717 from my install last week (sorry for that :)) However, I remember that in the 700-750 the template vm-s are copied and appvm's created.

Re: [qubes-users] Re: sys-whonix / tor / thunderbird

2017-11-25 Thread haaber
On 11/24/17 13:47, entr0py wrote: > Yuraeitha: >> On Friday, November 24, 2017 at 9:01:24 AM UTC, Bernhard wrote: >>> Hello, >>> >>> one of the most useful features of tor-browser is Ctl-Shift-L to change >>> the tor-path (and so, with high proba, the exit node IP) : this way, >>> websites that blo

Re: [qubes-users] Qubes OS 4.0-rc3 has been released!

2017-11-28 Thread haaber
> Current users of Qubes 4.0-rc2 can upgrade in-place by downloading the > latest updates from the testing repositories in both > [dom0][dom0-testing] and [TemplateVMs][domU-testing]. Further details, > including full installation instructions, are available in the [Qubes > 4.0 release notes][rele

Re: [qubes-users] mount root.img files

2017-12-03 Thread haaber
> > I see you've already managed to fix the issue, but for anyone else: you > can access root using qvm-run command. For example: > > qvm-run -u root debian-8 xterm > That is pretty cool and quick I admit. Notice however that my solution works even in a no-longer starting template (if this p

[qubes-users] Q4: vm-templates and updates

2017-12-11 Thread haaber
Hello, I try t understand the update process in Q4: according to qvm-ls the vm-templates have *no* SYSNET. How do they update (they do!) ? I came to this question since a dist-upgrade to stretch in a debian-8-clone is (a) slow (suggesting sys-whonix as connections) and (b) looses 1 out of 4 pack

[qubes-users] Q4: clocks in appvms are random.

2017-12-11 Thread haaber
I have another question: I recall there was a "clock" setting somewhere in Q3.2. In the sys-net VM settings, "clock sync" is checked. Do I need to add this to every appVM ? Thank you, Bernhard -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To u

Re: [qubes-users] Q4: vm-templates and updates

2017-12-11 Thread haaber
On 12/11/2017 06:31 AM, Connor Page wrote: > did you update it in R4 before cloning and upgrading? > > templates establish a connection to a proxy running in some netvm defined in > dom0 over a vchan. > yes, I did. I had to run apt-get dist-upgrade -d a dozen times (and spread over half a day)

[qubes-users] Q4R3 - debian-stable

2017-12-12 Thread haaber
Hello, I cloned the out-of-the-box debian-8 and brought it to debian-9 with apt-get distupgrade. I halted it. After reboot no way to get a shell, or anything else (not by qvm-run within dom0 either). Is there a way to get error messages somewhere? Thank you, Bernhard -- You received this message

Re: [qubes-users] Re: Q4R3 - debian-stable

2017-12-13 Thread haaber
17 02:00 PM, Chris Laprise wrote: > On 12/13/2017 11:02 AM, Westley Argentum Hennigh-Palermo wrote: >> On Tuesday, December 12, 2017 at 3:14:17 PM UTC-5, haaber wrote: >>> Hello, >>> I cloned the out-of-the-box debian-8 and brought it to debian-9 with >>> apt-get

Re: [qubes-users] qubes won't boot, how to rescue system or save my data?

2017-12-16 Thread haaber
On 12/14/2017 04:16 PM, jerr...@openmailbox.org wrote: > i first tried setup for my printer which has USB connected to PC... > using the guide in Using and Managing USB Devices in qubes-os website in > docs.. > enabled sys-sub using the command > sudo qubesctl top.enable qvm.sys-usb > > then the

[qubes-users] Q4rc3 debian-9 template fails to update.

2017-12-16 Thread haaber
I freshly installed debian-9 ; when installing packages, apt-get hangs for days(!) with 81% [waiting for headers] ... followed by Err:XX Connection failed. Has someone an idea where to look / how to procede? (there is definitely no other apt* running ). Thank you, Bernhard -- You received this

Re: [qubes-users] Re: Q4rc3 debian-9 template fails to update.

2017-12-16 Thread haaber
>> I freshly installed debian-9 ; when installing packages, apt-get hangs >> for days(!) with >> >> 81% [waiting for headers] ... >> followed by Err:XX Connection failed. >> > 2) Does restarting all of Qubes, and immediately update debian-9 after full > startup, make any difference? I.e. I've exp

[qubes-users] Q4.0 rc3 (current testing) - power off/ suspend issues.

2018-01-06 Thread haaber
Happy new year! I experience since Q4.rc2 some problems connected to power-off or suspends. They are of minor annoyance, but maybe they can be improved ... 1) after 0-10 succesful suspends (on a HP zbook 14 laptop) the hdd will no longer power off any more at a new lid-down suspend. After lid-reop

Re: [qubes-users] Intel ME Backdoor, called Odin's Eye

2018-01-07 Thread haaber
> https://i.redditmedia.com/5mA7LrMiwgmmhrwfYF8Jks0WEng66fxWoCcGw33dhCA.jpg?w=597&s=339d919645f1de31a42913c748d1d7fb > > > Summary: > > Intel Whistleblower leaks details about his role in backdooring all IME chips > on behalf of Intelligence Agencies. The post is unspecific. Of course ME is a

Re: [qubes-users] Intel ME Backdoor, called Odin's Eye

2018-01-07 Thread haaber
> воскресенье, 7 января 2018 г., 18:14:26 UTC пользователь haaber написал: >>> https://i.redditmedia.com/5mA7LrMiwgmmhrwfYF8Jks0WEng66fxWoCcGw33dhCA.jpg?w=597&s=339d919645f1de31a42913c748d1d7fb >>> >>> >>> Summary: >>> >>> Intel Whis

Re: [qubes-users] Re: QSB #37: Information leaks due to processor speculative execution bugs (XSA-254, Meltdown & Sepctre)

2018-01-12 Thread haaber
>> >> so people saying the intel meltdown bios patch slows performance. I got an >> increase in performance lmao. probably depends on os though. > > but also in my particular case they also addressed other bugs, but intel > pushed the bios patch for meltdown, so worth a check from your boar

Re: [qubes-users] How to play videos in qubes? says needs codec H.264, Mpeg-4 something

2018-01-16 Thread haaber
On 01/16/2018 11:50 AM, jerr...@disroot.org wrote: > i can't install this codec from fedora 26 from software add ons.. also > i've tried doing yum search h.264, there's nothing that seems like this > codec.. > I think, most easy is to use a debian instead of a fedora template and to install vlc or

Re: AW: Re: [qubes-users] Using fedora-26-minimal sys-vms

2018-01-21 Thread haaber
On 01/20/2018 07:53 PM, '[799]' via qubes-users wrote: > Hello, > > --- --- --- 8< --- --- --- > # Install default minimal template in dom0 > sudo qubes-dom0-update qubes-template-fedora-26-minimal > > # Clone template to keep the original template > qvm-clone fedora-26-minimal t-sys > > # Launc

Re: [qubes-users] Re: XFCE Settings menu gone

2018-01-21 Thread haaber
On 01/21/2018 07:47 AM, 'Tom Zander' via qubes-users wrote: > On Saturday, 20 January 2018 23:25:55 CET Unman wrote: >> You are probably missing the desktop files from /usr/share/applications >> You can copy the files from out of a Fedora based qube if you have one. > > Ohh, smart, I didn't think

[qubes-users] whonix-?? update

2018-01-23 Thread haaber
I was used to start templates from time to time & update them with apt-get. However my out-of-the-box Q4rc3 wnonix-xx systems complain Cannot initiate connection to 127.0.0.1:8082 although I can update other appvm templates (debian, fedora) and dom0 via sys-whonix. Do I miss something on how to u

Re: [qubes-users] whonix-?? update

2018-01-24 Thread haaber
> On 01/24/2018 08:47 AM, haaber wrote: >> I was used to start templates from time to time & update them with >> apt-get. However my out-of-the-box Q4rc3 wnonix-xx systems complain >> >> Cannot initiate connection to 127.0.0.1:8082 >> >> although I can u

Re: [qubes-users] Network turns off when I close laptop lid, and I can't restart it

2018-01-27 Thread haaber
On 01/27/2018 12:26 PM, billol...@gmail.com wrote: > I recently installed Qubes 4 rc3 on my Dell laptop, and it seems to working > well. However, there's a little bit of a problem with my networking. It > comes up fine when I reboot the machine, and runs like a charm... but when I > close the

[qubes-users] clock VM

2018-01-27 Thread haaber
Hello, all of my appVMs run on random times. I reall having had this issue on Q3.2 but it comes back on Q4.3 - I forgot the solution in the meantime. Qumes-Manager indicates sys-net is ClockVM. How do I configure all AppVM's to fetch time there?? Thank you !! Bernhard -- You received this messag

Re: [qubes-users] clock VM

2018-01-27 Thread haaber
> On 01/27/18 22:12, haaber wrote: >> Hello, all of my appVMs run on random times. I reall having had this >> issue on Q3.2 but it comes back on Q4.3 - I forgot the solution in the >> meantime. Qumes-Manager indicates sys-net is ClockVM. How do I configure >> all

[qubes-users] dom0 autocomplete in dom0 terminal

2018-01-31 Thread haaber
Hi, did someone try to program qubes-* and qvm-* specific "autocompletes" in the terminal, like qvm-start w[TAB] to obtain qvm-start work qvm-shutdown v[TAB] to obatin qvm-shutdown vault Since Q4 trained me to use a terminal for everything, I think that an autocomplete really speeds up daily

Re: [qubes-users] reboot sys-net

2018-02-07 Thread haaber
> I remember some issues with reattaching in the past, but recently, the > qvm-shutdown --wait --force sys-net && qvm-start sys-net seems to be working. This sounded even more interesting than the script. But: It does not work in my Q4rc4 install. last experience of this type was with sys-whonix

Re: [qubes-users] Re: [qubes-devel] Re: [qubes-announce] QSB #38: Qrexec policy bypass and possible information leak

2018-02-21 Thread haaber
On 02/21/2018 05:41 PM, qubenix wrote: >> So let me be blunt as this is likely the last email from me to qubes > anyway; > > Bye, I'm happy to see you go away finally. It was killing me inside that > you were working on the new gui controller. Fuck off back to bcash. > I really hope that you will

[qubes-users] bash autocomplete

2018-03-01 Thread haaber
Since Q4 much admin work is done on the command line. So it makes sense to learn bash to autocomplete nicely. I tried this in dom0: _qvm() { local cur VMS COMPREPLY=() cur="${COMP_WORDS[COMP_CWORD]}" VMS=`qvm-ls | cut -f1 -d" "| grep -v NAME` COMPREPLY=( $(compgen -W "${APPVMS}"

Re: [qubes-users] bash autocomplete

2018-03-01 Thread haaber
> Since Q4 much admin work is done on the command line. So it makes sense > to learn bash to autocomplete nicely. I tried this in dom0: > > _qvm() > { local cur VMS > COMPREPLY=() > cur="${COMP_WORDS[COMP_CWORD]}" > VMS=`qvm-ls | cut -f1 -d" "| grep -v NAME` > COMPREPLY=( $(compg

Re: [qubes-users] bash autocomplete

2018-03-02 Thread haaber
On 03/02/2018 10:22 AM, Unman wrote: > > Try this: > > _qvm() > { local cur > COMPREPLY=() > cur="${COMP_WORDS[COMP_CWORD]}" > VMS=`qvm-ls --raw-list` > COMPREPLY=( $(compgen -W "${VMS}" -- ${cur}) ) > } works perfectly, thank you. Should be completed (haha) by complete -F _qvm

[qubes-users] funny "bug"

2018-03-07 Thread haaber
on my Q4rc5 install I get the little black notification "Domain .. is halting" when I actually start it. I guess this is just a copy-paste thing inside a script ... cheees, Bernhard -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe

Re: [qubes-users] Re: Qubes OS 4.0-rc5 has been released!

2018-03-07 Thread haaber
> Le mercredi 7 mars 2018 22:21:58 UTC+2, sevas a écrit : >> Whoo hoo! >> >> I went to download qvm-dom0-update and it says no new updates available > > Same thing for me ... > and sudo qubes-dom0-update --enablerepo=qubes*testing ? -- You received this message because you are subscribed

Re: [qubes-users] Re: funny "bug"

2018-03-08 Thread haaber
> @Bernhard > On Wednesday, March 7, 2018 at 9:25:45 PM UTC+1, haaber wrote: >> on my Q4rc5 install I get the little black notification "Domain .. is >> halting" when I actually start it. I guess this is just a copy-paste >> thing inside a script ... cheees,

Re: [qubes-users] bash autocomplete

2018-03-11 Thread haaber
Thank you Holger, I don't know what this 3D-thing, is I'll learn it. I have, in the meanwhile, tested the attached file, that distinguishes also running, paused and halted VM's. For the moment this is completely sufficient for me. Maybe I'll add the completion "root" when I complete "qvm-run -u", s

[qubes-users] strange message in qubes-dom0-update

2018-03-22 Thread haaber
When I run in Q4rc(4,5) the update command sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing I get the message /usr/lib/qubes/qubes-rpc-multiplexer: 14: /etc/profile.d/20_power_savings_disable_in_vms.sh: shopt: not found followed by "no new updates available". Do you experience th

Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-23 Thread haaber
> I'm talking for people right now who use qubes 3.2 as their sole operating > machine for everything in their life. > Which probably almost noone in this thread does. Yuraitha included. Here is a counterexample: I did it for one year, now I use exclusively Q4 on my sole machine. > Maybe Um

Re: [qubes-users] can't download qubes 4.0 how to raise 4.3gb download limit.

2018-03-23 Thread haaber
Dear Coolotac, I have trouble to imagine that the guy named cooloutac who was patiently helping many people here for longtime should be the cooloutac that employs such speech again and again. I do not know what happened to you. I have the impression that you suffer and I am really sorry about that.

[qubes-users] Install Problem // existing lvms

2017-01-04 Thread haaber
Hi, I have for years debian running on my machine: /boot on a usb key, the /root on a 32g SSD and /home on a HDD. All filesystems are fully encrypted. I want to give qubes a try, at least, if I can install it :) So I first made a full home backup, and a full dd take of the SSD drive. That way I hop

[qubes-users] migration std. linux -> qubes : how integrate "old" user data

2017-01-05 Thread haaber
Hello, the question is in the title. I want to migrate from a standard linux distro (debian) to qubes. I have an internal with my old /home/ and I have the same content on an external hdd. The experimental qubes install went on an SDD. I guess that within qubes I should separate my old /home conte

[qubes-users] after install - how use network (esp. wireless) ?

2017-01-06 Thread haaber
Hello, sorry to annoy you with stupid beginner questions. I just got to install Qubes. I feel quite helpless, which after 15 years of running "standard linux" is an unusual thing :) First, I am stuck with an easy sounding problem : network. The help in "documentation" is still a stub (I could wr

[qubes-users] fedora - mplayer (command line)

2017-01-07 Thread haaber
Hello, I wanted to provide my fedora template with mplayer (command line version). But according to dnf / yum that does not exist (?). This seems a subject on its own in stand-alone fedora (f22 at least), and have qubes-fedora won't make it more easy, I fear. I could live with vlc as well, bu

Re: [qubes-users] installing on VM retention

2017-01-07 Thread haaber
I am far away from being expert, but as I read the doc (and tested myself), the procedure is 1) start template VM 2) install software in template VM 3) shutdown template VM 4) restart your user VM and the software will persist. Bernhard On 01/07/2017 09:18 PM, 5w8ntn+1zzdj5znb09fg via qub

[qubes-users] compose key

2017-01-08 Thread haaber
Hello, for foreign languages (accents, etc) I used to have a compose key configured. I have no idea how to do this within qubes. Has anyone had/solven this problem already? Thank you! Bernhard -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To

[qubes-users] debian-8 template problem

2017-01-09 Thread haaber
Hello, I come back to my video-player problem. While I understand that qubes won't ship fedora software that fedore accepts only in rpmfusion, there seems an easy solution to my concrete problem: use the debian8 template since they ship mplayer2 for example without trouble ... However, when I shut

Re: [qubes-users] Tor Client

2017-01-10 Thread haaber
Hello, please be aware that, as explained here, https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea you should think twice before using torrent over tor. It can DE-anonymize you. Bernhard On 01/10/2017 06:03 PM, 'Thebigthing' via qubes-users wrote: > Hey, > how i can install tor

Re: [qubes-users] How i can play video?

2017-01-11 Thread haaber
There may be an alternate solution : play videos with debian8. It should ship ffmpeg related players, right? Bernhard On 01/11/2017 04:14 PM, Unman wrote: > On Wed, Jan 11, 2017 at 09:07:17AM -0500, 'Repairing' via qubes-users wrote: >> Still trying to figure out Qubes, >> >> When i open movies

Re: [qubes-users] Qubes using Cloudflare - Why?

2017-01-12 Thread haaber
On 01/12/2017 08:24 AM, taii...@gmx.com wrote: > On 01/12/2017 12:33 AM, Andrew David Wong wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA512 >> >> On 2017-01-11 12:34, Andrew David Wong wrote: >>> On 01/11/17 11:04, taii...@gmx.com wrote: https://www.eff.org/deeplinks/2017/01/final

[qubes-users] DVM savefile creation failed

2017-01-14 Thread haaber
Hello, I get the error message in the title when trying to open a DispVM. It is my firt try to play with disposable VMs in and out-of-the-box install. Where do I find log files on that? Thank you,Bernhard -- You received this message because you are subscribed to the Google Groups "qubes-u

Re: [qubes-users] DVM savefile creation failed

2017-01-15 Thread haaber
> On 01/14/2017 10:13 AM, haaber wrote: >> Hello, >> I get the error message in the title when trying to open a DispVM. >> It is my firt try to play with disposable VMs in and out-of-the-box >> install. Where do I find log files on that? Thank you,Bernhar

Re: [qubes-users] Re: create new sys-net

2017-01-27 Thread haaber
On 01/27/2017 09:47 PM, taii...@gmx.com wrote: > On 01/27/2017 10:11 AM, '01v3g4n10' via qubes-users wrote: >> On Friday, January 27, 2017 at 7:19:10 AM UTC-6, Bernhard wrote: >>> Hello, >>> >>> I still have my system bricked due to a dead sys-net. >>> >>> Could somebody help me to generate a new o

[qubes-users] traveling - best practice

2017-02-07 Thread haaber
Hello, I wonder how you behave when traveling, for example in places with cameras all around. I feel uncomfortable to enter my passwords in such situations. Of course I can simply not turn my computer on. But sometimes you have several hours in an airport .. I thought about 3 options. 0) Change

Re: [qubes-users] qvm-run fails silently with chromium

2017-02-08 Thread haaber
On 02/09/2017 03:31 AM, Unman wrote: > On Wed, Feb 08, 2017 at 01:42:44PM -0800, Andrew David Wong wrote: > On 2017-02-07 06:35, m...@lamarciana.com wrote: > >>> Hi, > >>> > >>> I installed chromium browser in a debian-8 based standalone VM > called 'work'. If I run, from dom0: > >>> > >>> ``` > >>

Re: [qubes-users] Problem with a Privacy Guide

2017-02-09 Thread haaber
> Hello qubes-team, > > I'm actually facing a problem with a guide of yours. I've used the > Privacy Guide "Tor Onion Repos" entering the following two commands: > > sudo sed -i 's/yum.qubes-os.org/yum.qubesos4z6n4.onion/' > /etc/yum.repos.d/qubes-dom0.repo && cat /etc/yum.repos.d/qubes-dom0.r

[qubes-users] backup failes

2017-02-09 Thread haaber
Hello, I tried the built-in backup procedure in qubes3.2 -- it fails (from qubes VM manager). The procedure I follow: I select only shutdown qubes, I select sys-usb as appvm (in which the ext. harddisc is mouted on /media/user/hexstring/ and in which I manually created a qubes-backup folder that I

Re: [qubes-users] backup failes

2017-02-11 Thread haaber
haaber: > > Cannot create /media/user/hexstring/qubes-backup/2017-02... : permission > > denied. > > Try "sudo chown user:user /media/user/hexstring/qubes-backup". > > Rusty Thank you that worked! Bernhard -- You received this message because you are subscribed

[qubes-users] pb with fedora templates

2017-02-19 Thread haaber
Hello, I ask about some help to get fedora running again. Some history of my "accident". I had installed qubes 3.2 around Christmas with f23 on board. I installed f24 from scratch, it worked well, and deleted then f23 manually (brutally, I regret). For some time all was fine. Then something strang

[qubes-users] tox & webcam

2017-02-20 Thread haaber
Hello, did anyone try out uTox (for example)? I had this in my pre-qubes life. I wonder whether a specific cloned & enriched fedora-24-minimal VM would be a better solution, so I tried. Of course there is no binaries available for fedora :) So question one would be how to obtain a required packa

[qubes-users] two-factor authentication thoughts

2017-02-21 Thread haaber
Hi everyone, seeing all these yubikey mails, I was thinking about the hardware of 2 factor auth. I admit a small usb-key is handy, but so widespread as it is, it will also be in the focus of government spy agencies. Even with open source software : who knows what happens in the hardware? On the ot

[qubes-users] emergency help

2017-02-21 Thread haaber
Hello, I made a big big error. I wanted to play with i2c: there is one in the external vga ... I though it is a nice starting point to avaoid usb in certain situations. Anyhow:  Since dom0 has no i2c tools, I installed them in an fedora-24-minimal test VM. Then, since I had no acces to the vga, I

Re: [qubes-users] emergency help

2017-02-21 Thread haaber
Hello, problem solved. Live-system, mount SSD, rename corresponding template-vm (-> genearet file not fund), and qubes boots again :) Happysmile! Bernhard On 02/21/2017 09:11 PM, haa...@web.de wrote: > Hello, > I made a big big error. I wanted to play with i2c: there is one in the > external

[qubes-users] two factor authentication

2017-02-23 Thread haaber
Hello, inspired by many yubikey mails here I have thought a moment about 2fa. To my pov the best thing would be to avoid usb as communication device (I guess many agree here :)) So what else? I see in the moment 3 frequently available objects on a notebook that may be used creatively: a) the sou

Re: [qubes-users] Anonymizing hostname

2017-02-28 Thread haaber
On 02/28/2017 05:24 PM, Steve Coleman wrote: > On 02/27/2017 03:48 PM, Dominique St-Pierre Boucher wrote: >> Hello, >> >> I have setup the mac address change for qubes 3.2 with debian 9 as my >> sys-net. >> >> I am trying to figure out a way to randomize the hostname that is >> sent to the DHCP ser

Re: [qubes-users] do I really need these packages in dom0 :?

2017-03-03 Thread haaber
> Marek wrote: > Yes. You can start with 'dnf remove initial-setup-gui' - it will propose > additional packages not needed anymore. But carefully review that > list before confirming. While this is true, it is of no help for a lot of people, myself included. The following packets are proposed for

[qubes-users] qubes wallpaper

2017-03-04 Thread haaber
Hello, I understand that importing a custom wallpaper may open a security breach for exploits against the image decoder inside dom0. On the other hand side, people (me inclusive) like to customize a little bit their system. Nothing would be more natural as to 'sanitize' pictures that should go to

[qubes-users] qvm-create-default-dvm fails

2017-03-05 Thread haaber
Hello, I want to base my disp-vm's on debian-8. So I run in dom0 > [me@dom0 dvmdata]$ sudo qvm-create-default-dvm debian-8 > A VM with the name 'debian-8-dvm' does not exist in the system. this is strange, since /var/lib.qubes/appvms/debian-8-dvm DOES exist. Running it with "sh -x" prefix, I fi

Re: [qubes-users] qvm-create-default-dvm fails

2017-03-06 Thread haaber
On 03/06/2017 12:49 AM, Unman wrote: > On Sat, Mar 04, 2017 at 04:18:56AM +0100, haaber wrote: >> Hello, >> >> I want to base my disp-vm's on debian-8. So I run in dom0 >> >>> [me@dom0 dvmdata]$ sudo qvm-create-default-dvm debian-8 >>> A VM

Re: [qubes-users] qvm-create-default-dvm fails

2017-03-06 Thread haaber
On Mon, Mar 06, 2017 at 03:49:30PM +0100, Bernhard wrote: >> On 03/06/2017 02:55 PM, Unman wrote: self._update_libvirt_domain() File "/usr/lib64/python2.7/site-packages/qubes/modules/000QubesVm.py", line 755, in _update_libvirt_domain raise e libvirt.libvirtError:

[qubes-users] qubes-usb-proxy problem

2017-03-08 Thread haaber
Hello, My sys-usb is based on a modified fedora-24-minimal template. I did of course install qubes-usb-proxy in it, but --contradicting the qubes doc-- the qvm-usb command is not available. What might go on there? Thanks you, Bernhard -- You received this message because you are subscribed to th

[qubes-users] problem with qubes xfce menu

2017-03-09 Thread haaber
Hello, I realise with surprise that some items in the "Q"-symbol that gives the xfce menu have disappeared: the settings menu (!), the link to a dom0 termnal & the link to debian-8 template. Is there a way to recreate these items? Bernhard -- You received this message because you are subscribed

[qubes-users] Anon-whoix

2017-03-09 Thread haaber
Hello, I have a out-of-the-box R3.2. I am surprised about the large size of anon-whonix : even the gateway has 3.9G and packages like imagemagick installed ... is there a more lightweight solution as a tor-proxy-gateway template? Same remark for the anon-whonix template based on whonix-ws which h

Re: [qubes-users] Re: problem with qubes xfce menu

2017-03-09 Thread haaber
On 03/10/2017 05:51 AM, cooloutac wrote: > On Thursday, March 9, 2017 at 3:04:34 PM UTC-5, haaber wrote: >> Hello, >> I realise with surprise that some items in the "Q"-symbol that gives the >> xfce menu have disappeared: the settings menu (!), the link to a dom0 >

Re: [qubes-users] Re: problem with qubes xfce menu

2017-03-10 Thread haaber
On 03/10/2017 08:05 PM, cooloutac wrote: >> Hello, >> I realise with surprise that some items in the "Q"-symbol that gives the >> xfce menu have disappeared: the settings menu (!), the link to a dom0 >> termnal & the link to debian-8 template. >> >> Is there a way to recrea

Re: [qubes-users] Re: problem with qubes xfce menu

2017-03-11 Thread haaber
On 03/11/2017 01:44 PM, Unman wrote: Hello, I realise with surprise that some items in the "Q"-symbol that gives the xfce menu have disappeared: the settings menu (!), the link to a dom0 termnal & the link to debian-8 template. Is the

[qubes-users] whonix / tor question

2017-03-12 Thread haaber
Hello, I have a question on the behavior of whonix-gw. Most of us will use multiple mailboxes, for example one for this list, maybe one private mails, one for shopping and one work. If they connect via sys-firewall directly to the , e.g. MAC-spoofing is a surveyed place (a café for example) is jus

[qubes-users] qvm-clone option -p not working

2017-03-12 Thread haaber
For reasons of disk space I need to clone experimental VM's on the HDD and not on /var/lib/qubes sitting in my small SSD. So I try in dom0 qvm-clone -p /path-to-HDD/ existing-vm new-name However, the -p option is ignored: --> Creating directory /var/lib/qubes/vm-templates/new-name Of cour

Re: [qubes-users] problems by changing template on sys-net and sys-firewall

2017-03-12 Thread haaber
> i killed my fedora23 template, so it won't start because of the > non-executed qrexec-daemon. > So i decided to change to debian8. > > but the problem is, if i change to debian, i can not see any > network-connection. Just if i go to network manager of the sys-net, i > can see them, but i can no

[qubes-users] disp-vms were great - if they worked.

2017-03-13 Thread haaber
The DispVM's make me crazy. Last week (with your generous help) finally dispVM with debian template worked. Now --without any change that I am aware of-- it does again not. I tried to start it within dom0 - that way I get a max of error messages. ("the DVM savefile creation failed" is kind of unsp

Re: [qubes-users] disp-vms were great - if they worked.

2017-03-13 Thread haaber
Update: >> The DispVM's make me crazy. Last week (with your generous help) >> finally dispVM with debian template worked. Now --without any change >> that I am aware of-- it does again not. I tried to start it within >> dom0 - that way I get a max of error messages. ("the DVM savefile >> creation

Re: [qubes-users] Re: Kicking the sudoers dead horse

2017-03-14 Thread haaber
Unman wrote: > (You can configure the mime and default associations to use > qvm-open-in-dvm, so you can double click on a file and it will > automatically open disposableVM and display it there.) If you ensure the > disposableVM is spawned offline there is (almost) no chance of data being > exfilt

Re: [qubes-users] Curious: https for yum repos

2017-03-15 Thread haaber
Chris, > Fedora *unfortunately* is the blacksheep here. It doesn't sign a repo > file, therefore an attacker can hold back individual packages withing > what appears to the user as a stream of normal update cycles. I read this as "fedora is less safe" since exposed to described attacks. Actually

Re: [qubes-users] Tip: How to speed up QubesOS shutdown

2017-03-18 Thread haaber
>>> Have you tried the solution suggested here before of shutting down other >>> vms first, then sys-usb and sys-net? Andrew, I think, posted a simple >>> script that he uses. I suspect that that will have more impact with >>> fewer consequences than this proposal, but user experience will be key >

Re: [qubes-users] Tip: How to speed up QubesOS shutdown

2017-03-19 Thread haaber
On 03/19/2017 01:40 AM, Jean-Philippe Ouellet wrote: > On Tue, Mar 14, 2017 at 7:11 PM, haaber wrote: >> I dont't have any e820 pci device as far as I know, but shutdown is >> definitely a problem. xfce shuts down, and then I have a black screen >> with a blinking c

Re: [qubes-users] Re: can we have debian-minimal?

2017-03-19 Thread haaber
> On 2017-03-19 11:38 AM, Dominique St-Pierre Boucher wrote: >> On Sunday, March 19, 2017 at 5:51:39 AM UTC-4, tnt_b...@keemail.me wrote: >>> hi there, >>> >>> fedora minimal is great idea to have inside Qubes, i wonder why we dont >>> have debian minimal as well inside Qubes ? >>> > You can creat

[qubes-users] again usb problems

2017-03-26 Thread haaber
Hello, I need some help with USB. I cant mount them apart in sys-usb. Concretely, I have the following contradicting informations: On one hand: [ me@dom0 ~]$ qvm-usb -l sys-usb:3-2 13fe:4100 _USB_DISK_2.0_070A273523959238 [ me@dom0 ~]$ qvm-usb -a private sys-usb:3-2 ERROR: qubes-usb-proxy not

[qubes-users] update process question

2017-03-26 Thread haaber
Hello, I have some understanding pb with updates. All my templates connect via TOR (sys-whonix) to the Internet. But normal repos. When I sudo apt-get update, say in a debain-8 template, I have a certain number of lines like Ignhttp://http.debian.net jessie InRelease Ignhttp://deb.qubes-o

Re: [qubes-users] again usb problems

2017-03-26 Thread haaber
> On Mon, Mar 20, 2017 at 10:45:26PM +0100, haaber wrote: >> Hello, >> I need some help with USB. I cant mount them apart in sys-usb. >> Concretely, I have the following contradicting informations: >> >> On one hand: >> >> [ me@

Re: [qubes-users] again usb problems

2017-03-28 Thread haaber
Hi Vit, yes, sys-usb, has it installed, 'private' VM as well. The error message is clearly not correct. This is why I ask how to find out better what goes wrong ... Thx Bernhard On 03/28/2017 05:34 PM, Vít Šesták wrote: > What about the target (“private”) VM? Does it have qubes-usb-proxy insta

Re: [qubes-users] again usb problems

2017-03-29 Thread haaber
> On Mon, Mar 20, 2017 at 11:13:12PM +0100, haaber wrote: >>> On Mon, Mar 20, 2017 at 10:45:26PM +0100, haaber wrote: >>>> Hello, >>>> I need some help with USB. I cant mount them apart in sys-usb. >>>> Concretely, I have the following c

Re: [qubes-users] HDMI-related threats in Qubes OS

2017-04-02 Thread haaber
> I think having a graphics driver that disables any auxiliary modes (on > the GPU) would be a reasonable first step in addressing the issue. It > may also be possible to disable HDMI ports in favor of simpler ones like > VGA. I'm not sure how much input DVI and Displayport allow, but I think > th

[qubes-users] debian 8 grsec vs thunderbird

2017-05-31 Thread haaber
Hello, back in March I compiled a grsec kernel (precisely 4.8.13) for my debian 8 following the nice tutorial for qubes. I put my std debian-8 on this new kernel. Since the rebranding of icedove to thunderbird, the thunderbird executable died misrably with "killed". Funnily, it work run under debia

Re: [qubes-users] debian 8 grsec vs thunderbird

2017-05-31 Thread haaber
Some update : the same happens with 4.9.20.grsec. The reason seems visible in ulimit -a: core file size (blocks, -c) 0 whereas thunderbird requests 4096 (whatsoever unit). Remains to understand /etc/security/limits.conf Bernhard On 05/31/2017 09:02 AM, haaber wrote: > Hello, > b

Re: [qubes-users] Re: debian 8 grsec vs thunderbird

2017-05-31 Thread haaber
Thank you very much Reg! That solves miraculously the problem. I was playing with -E instead and it did not help me. At least I learned some minimal experience with paxctl that way :)) Bernhard On 05/31/2017 06:20 PM, Reg Tiangha wrote: > On 05/31/2017 04:59 AM, haaber wrote: >> So

Re: [qubes-users] Re: Rmove templates complitly

2017-05-31 Thread haaber
>> Hello, how do i remove templates from the Applicatiosn list? >> i used sudo dnf remove etc etc, the template is gone, but i can still see >> "debain8" etc in the applicationslist. > did you check the vm-templates folder? Its under dom0 > /var/lib/qubes/vm-templates/ > > Delete and maybee reb

Re: [qubes-users] Re: debian 8 grsec vs thunderbird

2017-05-31 Thread haaber
> and if grsec is killing processes you actually want to run, you can look > at the logs, see what protection is being triggered, and can use > paxctl/paxctld to disable it just for that executable or library. I tried, but I dd not learn anything useful. Here, for example, is a sniplet of my syslo

[qubes-users] sys-whonix problem

2017-07-04 Thread haaber
Hello, after a bad power-loss yesterday (on qubes 3.2) my sys-whonix won't start any more. [me@dom0 ~]$ qvm-start Anon-whonix --> Starting NetVM sys-whonix... ERROR: VM kernel does not exist: /var/lib/qubes/vm-kernels/4.4.55-11/vmlinuz I am confused by this message, since in qubes manager sys-who

Re: [qubes-users] sys-whonix problem

2017-07-04 Thread haaber
10:19 AM, haaber wrote: > Hello, after a bad power-loss yesterday (on qubes 3.2) my sys-whonix > won't start any more. > > [me@dom0 ~]$ qvm-start Anon-whonix > --> Starting NetVM sys-whonix... > ERROR: VM kernel does not exist: /var/lib/qubes/vm-kernels/4.4.55-11/vmlinuz

[qubes-users] ntp in debain-VMs

2017-07-05 Thread haaber
Dear qubes-community, my debian-based VM's all have almost random date/time settings. I tried to tackle this by setting up ntp correctly in the template VM, but this does simply have no effect to the derived appVMs. Culd someone help me with that? Thank you, Bernhard -- You received this messag

Re: [qubes-users] ntp in debain-VMs

2017-07-06 Thread haaber
>> Dear qubes-community, my debian-based VM's all have almost random >> date/time settings. I tried to tackle this by setting up ntp correctly >> in the template VM, but this does simply have no effect to the derived >> appVMs. Culd someone help me with that? Thank you, Bernhard >> > > I'm getti

[qubes-users] qrexec daemon error in sys-usb

2017-09-07 Thread haaber
Hello, my sys-usb (based on f-24-minimal) on Q3.2 was running perfectly - until I decided I need rsync. First dnf suggested some updates that I accepted, the I installed rsync in the template. I got a strange message "sending to .. dom0" and then "refused". OK, sometimes I get strange messages, so

  1   2   3   4   >