Re: [qubes-users] Grsecurity+Debian 10 has issues when PCI devices are being attached

[drw...@gmail.com]

No idea.

On Tuesday, October 13, 2020 at 8:01:57 PM UTC+2 lama...@gmail.com wrote:

> On Sunday, October 11, 2020 at 12:26:46 AM UTC+2 drw...@gmail.com wrote:
>
>> Offtopic: I suggest you contact them to buy it, that's what we did. 
>> Support your local and only noteworthy linux kernel security project.
>>
>
> It is now possible for individuals to buy a license? 
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fe8bb0d4-2825-4708-8af1-1cb944265c74n%40googlegroups.com.

Re: [qubes-users] Grsecurity+Debian 10 has issues when PCI devices are being attached

[lama...@gmail.com]

On Sunday, October 11, 2020 at 12:26:46 AM UTC+2 drw...@gmail.com wrote:

> Offtopic: I suggest you contact them to buy it, that's what we did. 
> Support your local and only noteworthy linux kernel security project.
>

It is now possible for individuals to buy a license? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/021836f6-23d0-4d67-8c9b-fc7cef6987cdn%40googlegroups.com.

Re: [qubes-users] Grsecurity+Debian 10 has issues when PCI devices are being attached

[drw...@gmail.com]

OK, I got a lot further with this. It was, surprisingly ;-))), PEBKAC.

Started sys-net with HVM and the kernel as "none" worked in the sense that 
the VM boots and no PCI errors are thrown around.

What doesn't work at the moment, is that no connections seems to be 
possible through qrexec in HVM mode and so since there is no GUI connection 
possible and so the VM shuts down.

In PVH mode, everything works very smoothly and without issues for VM's 
without needing pci passthrough.

Will have a closer look...

Best,
Jurre
On Sunday, October 11, 2020 at 12:26:46 AM UTC+2 drw...@gmail.com wrote:

> Offtopic: I suggest you contact them to buy it, that's what we did. 
> Support your local and only noteworthy linux kernel security project.
>
> Op za 10 okt. 2020 om 13:52 schreef 54th Parallel  >:
>
>>
>> On Friday, 9 October 2020 at 18:07:56 UTC+8 drw...@gmail.com wrote:
>>
>>> I should've been a bit more clear but yes by PVH I meant virt_mode == 
>>> hvm.
>>>
>>> On Friday, October 9, 2020 at 3:18:35 AM UTC+2 Jarrah wrote:
>>>

 > I've been trying to get a Debian 10 sys-net running with grsecurity 
 as a 
 > kernel. However, i've been running into some trouble when the PCI 
 devices 
 > are being attached to it. libxenlight is giving me errors and the PVH 
 VM 
 > will never even attempt to boot. 


 Just to check, are you trying to boot a PVH VM with PCI devices? That's 
 only supported on HVM (and PV). Try changing 'virt_mode' to 'hvm' 



>> Hi Jurre,
>>
>> How were you able to get a grsec kernel? I though grsec is 
>> propietary/paid-for only now. Would love to get my hands on it if possible. 
>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "qubes-users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to qubes-users...@googlegroups.com.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/qubes-users/92dcfe29-03f4-41d7-9902-be7934c7d3f1n%40googlegroups.com
>>  
>> 
>> .
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0d062760-15f9-4d68-be02-4f82c2937108n%40googlegroups.com.

Re: [qubes-users] Grsecurity+Debian 10 has issues when PCI devices are being attached

[Jurre van Bergen]

Offtopic: I suggest you contact them to buy it, that's what we did. Support
your local and only noteworthy linux kernel security project.

Op za 10 okt. 2020 om 13:52 schreef 54th Parallel <
fiftyfourthparal...@gmail.com>:

>
> On Friday, 9 October 2020 at 18:07:56 UTC+8 drw...@gmail.com wrote:
>
>> I should've been a bit more clear but yes by PVH I meant virt_mode == hvm.
>>
>> On Friday, October 9, 2020 at 3:18:35 AM UTC+2 Jarrah wrote:
>>
>>>
>>> > I've been trying to get a Debian 10 sys-net running with grsecurity as
>>> a
>>> > kernel. However, i've been running into some trouble when the PCI
>>> devices
>>> > are being attached to it. libxenlight is giving me errors and the PVH
>>> VM
>>> > will never even attempt to boot.
>>>
>>>
>>> Just to check, are you trying to boot a PVH VM with PCI devices? That's
>>> only supported on HVM (and PV). Try changing 'virt_mode' to 'hvm'
>>>
>>>
>>>
> Hi Jurre,
>
> How were you able to get a grsec kernel? I though grsec is
> propietary/paid-for only now. Would love to get my hands on it if possible.
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/92dcfe29-03f4-41d7-9902-be7934c7d3f1n%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABa6M9q10xvyJ6RECJG%3DSUBu-r5fjcARKkLf%2BGxKWXcAZKQoUA%40mail.gmail.com.

Re: [qubes-users] Grsecurity+Debian 10 has issues when PCI devices are being attached

[54th Parallel]

On Friday, 9 October 2020 at 18:07:56 UTC+8 drw...@gmail.com wrote:

> I should've been a bit more clear but yes by PVH I meant virt_mode == hvm.
>
> On Friday, October 9, 2020 at 3:18:35 AM UTC+2 Jarrah wrote:
>
>>
>> > I've been trying to get a Debian 10 sys-net running with grsecurity as 
>> a 
>> > kernel. However, i've been running into some trouble when the PCI 
>> devices 
>> > are being attached to it. libxenlight is giving me errors and the PVH 
>> VM 
>> > will never even attempt to boot. 
>>
>>
>> Just to check, are you trying to boot a PVH VM with PCI devices? That's 
>> only supported on HVM (and PV). Try changing 'virt_mode' to 'hvm' 
>>
>>
>>
Hi Jurre,

How were you able to get a grsec kernel? I though grsec is 
propietary/paid-for only now. Would love to get my hands on it if possible. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/92dcfe29-03f4-41d7-9902-be7934c7d3f1n%40googlegroups.com.

Re: [qubes-users] Grsecurity+Debian 10 has issues when PCI devices are being attached

[drw...@gmail.com]

I should've been a bit more clear but yes by PVH I meant virt_mode == hvm.

On Friday, October 9, 2020 at 3:18:35 AM UTC+2 Jarrah wrote:

>
> > I've been trying to get a Debian 10 sys-net running with grsecurity as a 
> > kernel. However, i've been running into some trouble when the PCI 
> devices 
> > are being attached to it. libxenlight is giving me errors and the PVH VM 
> > will never even attempt to boot. 
>
>
> Just to check, are you trying to boot a PVH VM with PCI devices? That's
> only supported on HVM (and PV). Try changing 'virt_mode' to 'hvm'
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f0039ce1-5ebb-4087-acc5-751704e1b957n%40googlegroups.com.

Re: [qubes-users] Grsecurity+Debian 10 has issues when PCI devices are being attached

[Jarrah]

> I've been trying to get a Debian 10 sys-net running with grsecurity as a 
> kernel. However, i've been running into some trouble when the PCI devices 
> are being attached to it. libxenlight is giving me errors and the PVH VM 
> will never even attempt to boot. 


Just to check, are you trying to boot a PVH VM with PCI devices? That's
only supported on HVM (and PV). Try changing 'virt_mode' to 'hvm'


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b5587fb8-9aed-f5cc-7320-d32fe9cd8a2c%40undef.tools.