[qubes-users] R4.0-rc1 on T470: unable to boot (reboot loop)

2017-09-16 Thread rysiek
debugging output? QubesOS R3.2 does not run on T470s at all (old kernel vs. new hardware; new hardware clearly wins). Thanks! -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message becaus

Re: [qubes-users] Supercookies / Zombie cookies / Web Tracking — how effective are Qubes security domains against this

2017-09-18 Thread rysiek
Qubes, and be tracked through each of your AppVMs. You'll have three "identities", but all of them will be tracked, since regular AppVMs keep state (including browser cookies, etc, unles sthe browser is explicitly configured otherwise). To combat tracking, I would use the Incognito/Private mode

Re: [qubes-users] Supercookies / Zombie cookies / Web Tracking — how effective are Qubes security domains against this

2017-09-18 Thread rysiek
the same way you have to outside of Qubes. Or, you can do all of > your browser in DisposableVMs. Or use Tor Browser, which has taken many > steps to prevent browser tracker as a design goal. Damn, beat me to it! -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http:/

Re: [qubes-users] Supercookies / Zombie cookies / Web Tracking — how effective are Qubes security domains against this

2017-09-18 Thread rysiek
;how deep does the rabbit-hole get here" discussion on this very informative. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups &qu

Re: [qubes-users] Supercookies / Zombie cookies / Web Tracking — how effective are Qubes security domains against this

2017-09-19 Thread rysiek
ter it was discovered, but sill. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe f

Re: [qubes-users] R4.0-rc1 on T470: unable to boot (reboot loop)

2017-09-17 Thread rysiek
Dnia Saturday, September 16, 2017 3:16:16 PM CEST rysiek pisze: > Selecting any of the two options in GRUB ends up rebooting the device. Tried > removing "quiet" from kernel options, nothing changed. Any suggestions on > how can I get some debugging output? Problem solv

Re: [qubes-users] Ubuntu Template

2017-10-14 Thread rysiek
/Makefile.qubuntu:200: recipe for target 'dist-package' failed make[2]: *** [dist-package] Error 2 Using git://github.com/marmarek/qubes-builder.git master branch. What am I missing? -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transiti

Re: [qubes-users] Ubuntu Template

2017-10-15 Thread rysiek
Dnia Saturday, October 14, 2017 11:30:16 PM CEST Unman pisze: > It's the same error resported by OP. > Ubuntu template build hasnt yet been updated to 4.0 Ah, so it is. Any way I can help with debugging/testing/fixing this? -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam k

Re: [qubes-users] Ubuntu Template

2017-10-01 Thread rysiek
; Yes, I'm working on this. I'm traveliing just now but will finish off > when I get home. I have a build environment I was meaning to get back up to speed, if you need a tester, let me know! -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Tra

Re: [qubes-users] Ubuntu Template

2017-11-12 Thread rysiek
Hey, Dnia Sunday, November 12, 2017 4:51:20 PM CET rysiek pisze: > is there any movement on this? Is there any way I can jump into this and > help? Any docs I should read to get me started along the way of fixing > Ubuntu templates for R4.0? got it to start building. For this I had to

Re: [qubes-users] Anything like Split GPG for Keepass?

2017-11-13 Thread rysiek
proach, and avoid all of the cutting and pasting > > across > > domains. Any comments or suggestions? > > > > - Eric > > An inter-VM password manager for Qubes OS based on pass Should also be possible with Keyringer: https://keyringer.pw -- Pozdrawiam, Michał "rysiek"

Re: [qubes-users] When transferring file between Qubes, MD5 changes.

2017-11-16 Thread rysiek
um change back to what it was, or to something different yet? -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups "qubes-users" gr

Re: [qubes-users] Re: When transferring file between Qubes, MD5 changes.

2017-11-18 Thread rysiek
n my command line history. We've all been there. :) > Sorry guys. > (I had also been working 16+ hours at the time.) Hope you got some rest. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147

Re: [qubes-users] Ubuntu Template

2017-11-12 Thread rysiek
4.0? -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receivi

[qubes-users] R4.0, Ubuntu, and Qt4/Qt5, and Salt

2017-11-18 Thread rysiek
that. Any pointers welcome! -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from

Re: [qubes-users] Disk password

2017-11-19 Thread rysiek
30h of bruteforcing on some 20 cores to get it. Good luck! -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups "qubes-users" gro

Re: [qubes-users] Disk password

2017-11-19 Thread rysiek
an get in... So, no. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and

Re: [qubes-users] R4.0, Ubuntu, and Salt

2017-11-19 Thread rysiek
On Saturday, November 18, 2017 10:30:49 PM UTC Marek Marczykowski-Górecki wrote: > On Sat, Nov 18, 2017 at 06:36:17PM +0000, rysiek wrote: > > Also, started playing with Salt, wrote a nice sls file to install all the > > stuff I need in the Kubuntu VM, but... each time

Re: [qubes-users] Re: Disk password

2017-11-19 Thread rysiek
On Sunday, November 19, 2017 1:29:03 PM UTC tbennett1...@gmail.com wrote: > I have no idea the order any of it was put in You can still try to bruteforce it, but I would start getting used to the fact that the contents of this drive are lost for good. -- Pozdrawiam, Michał "rysiek&

Re: [qubes-users] Ubuntu Template

2017-11-15 Thread rysiek
to try Xenial in 4.0 there's a ready-built template at > qubes.3isec.org/Templates Woo! Thanks! -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed t

Re: [qubes-users] Ubuntu Template

2017-11-16 Thread rysiek
failed make: *** [template-local-xenial] Error 1 -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups "qubes-users"

Re: [qubes-users] Re: Idea for (resonable secure) cloud-storage usage with Qubes

2017-11-07 Thread rysiek
y transferred. We're not transferring the whole images back and forth. That would defeat the purpose. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to

Re: [qubes-users] Is Qubes effected by the Intel kernel memory leaking bug?

2018-01-04 Thread rysiek
m, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Transition :: http://rys.io/en/147 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it,

Re: [qubes-users] New HCL Entry: Lenovo ThinkPad T470 (20HDCTO1WW)

2018-01-08 Thread rysiek
> dom0 ... > > https://groups.google.com/d/msg/qubes-users/ZFZT7mQNeWY/xZ1AiCYOAwAJ I can confirm that T470 won't work with stock R3.2 kernel. Just go for R4.0, works pretty well. -- Pozdrawiam, Michał "rysiek" Woźniak Zmieniam klucz GPG :: http://rys.io/pl/147 GPG Key Tra

Re: [qubes-users] Is Qubes effected by the Intel kernel memory leaking bug?

2018-01-03 Thread rysiek
2MB hugepages are available to the guest, the initialization should be much faster, but that hasn't been tested.) A PoC for variant 3 that, when running with normal user privileges, can read kernel memory on the Intel Haswell Xeon CPU under some precondition. We believe that this precondition is that t

[qubes-users] R4.0 on T470, Suspend-to-RAM issues

2018-01-22 Thread rysiek
and I assume these are some temporary issues related to the current state of R4.0 pre-rc4, but thought it might be useful to put them out there. Perhaps someone else has seen such issues? Perhaps there is something I could do to debug them? -- Pozdrawiam, Michał "rysiek" Woźniak

Re: [qubes-users] Qubes 4.0.x - Linux kernel 4.19.15 package available in testing repository

2019-09-26 Thread rysiek
On 9/26/19 11:59 AM, donoban wrote: >> On 1/29/19 10:33 AM, Patrik Hagara wrote: >>> Managed to get rid of the error (and more importantly, the >>> annoying artifacts) by forcing Xorg to use the generic >>> modesetting driver instead of i915/i965. ... ... >>> >> After this procedure, do you get

Re: [qubes-users] Qubes 4.0.x - Linux kernel 4.19.15 package available in testing repository

2019-09-26 Thread rysiek
Hey, On 1/29/19 10:33 AM, Patrik Hagara wrote: > Managed to get rid of the error (and more importantly, the annoying > artifacts) by forcing Xorg to use the generic modesetting driver instead > of i915/i965. > > Steps (all commands in dom0): > > 1) check the driver currently in use (`xrandr

Re: [qubes-users] Whonix 15 has been released

2019-07-05 Thread rysiek
on-whonix, whonix-ws-14-dvm) to relevant Whonix 15 templates. Restart any modified qubes afterwards, of course, and test stuff works. 3. Remove the unneeded Whonix 14 templates: sudo dnf remove \ qubes-template-whonix-gw-14 \ qubes-template-whonix-gw-14 So far so good. -- Rega

[qubes-users] Salt Orchestration, vol.2

2020-03-17 Thread rysiek
welcome too -- I considered just putting it directly in my salt configs repo (that I then manually copy to dom0:/srv/salt/), but why would I want code that is supposed to be only running on TemplateVMs in dom0 at all, right? -- rysiek -- You received this message because you are subscribed

[qubes-users] Audio leakage?

2022-02-01 Thread rysiek
Dear List, I just had a weird issue that got me somewhat concerned about the security of audio separation between cubes. Two cubes were involved: - teams-vm, running Google Chrome with a Microsoft Teams meeting happening - dispN, running Firefox with a meet.jit.si call open I was trying to

Re: [qubes-users] Qubes 4.1 & ThinkPad P15 Gen 2 (type 20YQ): Help in Remedying Reduced Functionality?

2022-04-17 Thread rysiek
;. To no avail. Best I got was the Qubes loading screen and FDE password prompt on the external monitor -- both in "hybrid" and "discrete", only with binary driver and nVidia modesetting. Enabling nVidia binary driver and configuring it in `xorg.conf` always ends in this l

[qubes-users] nVidia binary in dom0 (ThinkPad P1 gen4)

2022-04-17 Thread rysiek
; I can get temperature readouts, for example. Tried changing UEFI settings ("discrete" vs "hybrid" mode), tried fiddling with kernel parameters (modesetting, iommu), to no avail. Not sure what I could try next. Any ideas welcome! -- Best, rysiek -- You received t

Re: [qubes-users] nVidia binary in dom0 (ThinkPad P1 gen4)

2022-04-18 Thread rysiek
On Monday, 18 April 2022 15:40:32 GMT Michał "rysiek" Woźniak wrote: > > Have you considered using sys-gui-gpu instead? > > I have not, for a very specific reason: in the laptop in question, all > external video outputs are hard-wired to the nvidia card. That is, I &

Re: [qubes-users] nVidia binary in dom0 (ThinkPad P1 gen4)

2022-04-18 Thread rysiek
Hey, On Monday, 18 April 2022 13:37:25 GMT Demi Marie Obenour wrote: > On Mon, Apr 18, 2022 at 02:57:32AM +, Michał "rysiek" Woźniak wrote: > > Hey all, > > > > I am trying to get the nVidia binary driver to work in dom0. Using the > > latest ver