Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-06-15 Thread LEVIS Cyril
Yes, I did. And same problem :(

Le mar. 13 juin 2017 à 23:53, Chris Laprise  a
écrit :

> On 06/13/2017 04:39 PM, LEVIS Cyril wrote:
> > So :(
> > I updated tboot in 1.9.5, and same problem.
> > Try to update to last 1.28 bios, same thing.
> > So Sad
> >
>
> Did you also specify the parameter min_ram=0x200 ?
>
>
> --
>
> Chris Laprise, tas...@openmailbox.org
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAMkbZqtAqwBXLadBxmb_b0s3eRN%2BYHA6vVO6bNthechuqnb5gw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-06-13 Thread Chris Laprise

On 06/13/2017 04:39 PM, LEVIS Cyril wrote:

So :(
I updated tboot in 1.9.5, and same problem.
Try to update to last 1.28 bios, same thing.
So Sad



Did you also specify the parameter min_ram=0x200 ?


--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c006df6d-5d74-e54b-13d6-a76abb84bac7%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-06-13 Thread LEVIS Cyril
So :(
I updated tboot in 1.9.5, and same problem.
Try to update to last 1.28 bios, same thing.
So Sad

Le mar. 13 juin 2017 à 03:23, Chris Laprise  a
écrit :

> On 06/12/2017 05:06 PM, cyrinux wrote:
> > Nice news,
> >
> > Alexey could you please explain how you install 1.9.4 version please?
> > Maybe you have extract deb content with dpkg -x and copy/replace with
> the content?
> >
> > Regards
>
> You could do that and replace the tboot.gz and tboot-syms files on the
> /boot partition.
>
> To get a verified copy, its probably easier to download the current
> version (1.9.5) from here:
> https://sourceforge.net/projects/tboot/files/?source=navbar
>
> ...then do normal GPG verification, and use 'make' to compile it and
> replace the two files mentioned above.
>
> --
>
> Chris Laprise, tas...@openmailbox.org
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAMkbZqtrDtk50-9gqin3G8xkvkL%2BMpg6EKHqGzwE9Wx2g32oTw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-06-12 Thread Chris Laprise

On 06/12/2017 05:06 PM, cyrinux wrote:

Nice news,

Alexey could you please explain how you install 1.9.4 version please?
Maybe you have extract deb content with dpkg -x and copy/replace with the 
content?

Regards


You could do that and replace the tboot.gz and tboot-syms files on the 
/boot partition.


To get a verified copy, its probably easier to download the current 
version (1.9.5) from here:

https://sourceforge.net/projects/tboot/files/?source=navbar

...then do normal GPG verification, and use 'make' to compile it and 
replace the two files mentioned above.


--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/35a27927-0152-9c03-d9a0-c1f04c68dca5%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-06-12 Thread cyrinux
Nice news,

Alexey could you please explain how you install 1.9.4 version please?
Maybe you have extract deb content with dpkg -x and copy/replace with the 
content?

Regards

Le jeudi 8 juin 2017 22:11:59 UTC+2, alexey@gmail.com a écrit :
> Just want to confirm that the solution suggested in [issue #2155][1] solved 
> my problem with TBOOT. Basically, when you substitute default TBOOT 1.8.2 
> from QubesOS repo with TBOOT 1.9.4 from [Ubuntu][2] my laptop boots and able 
> to seal/unseal secrets.
> 
> It would be great if TBOOT 1.9.4 is included in QubesOS repo (testing?) as I 
> was unable to verify .deb sig of ubuntu package (not sure if there is any 
> included in .deb).
> 
> Also confirming suspend/sleep issues describe by Chris...
> 
> 
> [1]: https://github.com/QubesOS/qubes-issues/issues/2155
> [2]: https://launchpad.net/ubuntu/yakkety/amd64/tboot/1.9.4-0ubuntu1
> 
> On Wednesday, June 7, 2017 at 10:48:38 PM UTC-4, Chris Laprise wrote:
> > On 06/07/2017 08:39 PM, a***o...@gmail.com wrote:
> > > Hi All,
> > >
> > > I am experiencing the same problem with AEM v3.0.4 and TBOOT v1.8.2 on 
> > > Thinkpad X1 Carbon 4th Gen (20FCS5CY00) where it reboots precisely after 
> > > executing GETSEC[SENTER]. "min_ram" option does not help.
> > >
> > > My setup:
> > > * UEFI BIOS in LegacyBoot mode with SecureBoot disabled
> > > * Discrete TPM 1.2 and Intel TXT enabled with "Physical presence" feature 
> > > disabled
> > > * Fresh Qubes3.2 installed on 1TB SSD (NVME device) with /boot on MBR 
> > > partition of a 128G USB flash drive.
> > > * Xen 4.6.1 with kernel 4.4.14
> > > * SINIT matches the platform as per the TBOOT log output
> > >
> > > Anybody had any success or ideas how to make it work?
> > >
> > > --
> > > Alex
> > >
> > 
> > Going by the comments in issue #2155, at least one person did get it to 
> > boot by upgrading tboot to version 1.9.4. I also upgraded tboot, but had 
> > already got it booting with the min_ram parameter... at this stage I 
> > don't know if the newer tboot is the factor that allows my system to 
> > boot with AEM.
> > 
> > An additional issue which I'm still experiencing with AEM is sleep/wake 
> > not working.
> > 
> > My other versions are Xen 4.6.5 and Linux 4.9.28-16 (from qubes*testing).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4e237f77-68a8-45db-a1c4-5ffd637f16ec%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-06-08 Thread alexey . kuzmenko
Just want to confirm that the solution suggested in [issue #2155][1] solved my 
problem with TBOOT. Basically, when you substitute default TBOOT 1.8.2 from 
QubesOS repo with TBOOT 1.9.4 from [Ubuntu][2] my laptop boots and able to 
seal/unseal secrets.

It would be great if TBOOT 1.9.4 is included in QubesOS repo (testing?) as I 
was unable to verify .deb sig of ubuntu package (not sure if there is any 
included in .deb).

Also confirming suspend/sleep issues describe by Chris...


[1]: https://github.com/QubesOS/qubes-issues/issues/2155
[2]: https://launchpad.net/ubuntu/yakkety/amd64/tboot/1.9.4-0ubuntu1

On Wednesday, June 7, 2017 at 10:48:38 PM UTC-4, Chris Laprise wrote:
> On 06/07/2017 08:39 PM, a***o...@gmail.com wrote:
> > Hi All,
> >
> > I am experiencing the same problem with AEM v3.0.4 and TBOOT v1.8.2 on 
> > Thinkpad X1 Carbon 4th Gen (20FCS5CY00) where it reboots precisely after 
> > executing GETSEC[SENTER]. "min_ram" option does not help.
> >
> > My setup:
> > * UEFI BIOS in LegacyBoot mode with SecureBoot disabled
> > * Discrete TPM 1.2 and Intel TXT enabled with "Physical presence" feature 
> > disabled
> > * Fresh Qubes3.2 installed on 1TB SSD (NVME device) with /boot on MBR 
> > partition of a 128G USB flash drive.
> > * Xen 4.6.1 with kernel 4.4.14
> > * SINIT matches the platform as per the TBOOT log output
> >
> > Anybody had any success or ideas how to make it work?
> >
> > --
> > Alex
> >
> 
> Going by the comments in issue #2155, at least one person did get it to 
> boot by upgrading tboot to version 1.9.4. I also upgraded tboot, but had 
> already got it booting with the min_ram parameter... at this stage I 
> don't know if the newer tboot is the factor that allows my system to 
> boot with AEM.
> 
> An additional issue which I'm still experiencing with AEM is sleep/wake 
> not working.
> 
> My other versions are Xen 4.6.5 and Linux 4.9.28-16 (from qubes*testing).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ae95305f-9618-4309-ba93-f255e57e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-06-07 Thread Chris Laprise

On 06/07/2017 08:39 PM, alexey.kuzme...@gmail.com wrote:

Hi All,

I am experiencing the same problem with AEM v3.0.4 and TBOOT v1.8.2 on Thinkpad X1 Carbon 
4th Gen (20FCS5CY00) where it reboots precisely after executing GETSEC[SENTER]. 
"min_ram" option does not help.

My setup:
* UEFI BIOS in LegacyBoot mode with SecureBoot disabled
* Discrete TPM 1.2 and Intel TXT enabled with "Physical presence" feature 
disabled
* Fresh Qubes3.2 installed on 1TB SSD (NVME device) with /boot on MBR partition 
of a 128G USB flash drive.
* Xen 4.6.1 with kernel 4.4.14
* SINIT matches the platform as per the TBOOT log output

Anybody had any success or ideas how to make it work?

--
Alex



Going by the comments in issue #2155, at least one person did get it to 
boot by upgrading tboot to version 1.9.4. I also upgraded tboot, but had 
already got it booting with the min_ram parameter... at this stage I 
don't know if the newer tboot is the factor that allows my system to 
boot with AEM.


An additional issue which I'm still experiencing with AEM is sleep/wake 
not working.


My other versions are Xen 4.6.5 and Linux 4.9.28-16 (from qubes*testing).

--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1d0c92fb-7c69-bd7e-67e4-e24cdcc3c27c%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-06-07 Thread alexey . kuzmenko
Hi All,

I am experiencing the same problem with AEM v3.0.4 and TBOOT v1.8.2 on Thinkpad 
X1 Carbon 4th Gen (20FCS5CY00) where it reboots precisely after executing 
GETSEC[SENTER]. "min_ram" option does not help.

My setup:
* UEFI BIOS in LegacyBoot mode with SecureBoot disabled
* Discrete TPM 1.2 and Intel TXT enabled with "Physical presence" feature 
disabled
* Fresh Qubes3.2 installed on 1TB SSD (NVME device) with /boot on MBR partition 
of a 128G USB flash drive.
* Xen 4.6.1 with kernel 4.4.14
* SINIT matches the platform as per the TBOOT log output

Anybody had any success or ideas how to make it work?

--
Alex

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/298d610f-14cd-43d4-b721-ac75dd69485e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2017-01-25 Thread fredletamanoir
On Friday, July 15, 2016 at 3:34:12 PM UTC+2, Chris Laprise wrote:
> On 07/13/2016 11:15 AM, Chris Laprise wrote:
> > On 07/12/2016 11:15 AM, Chris Laprise wrote:
> >> On 07/12/2016 01:48 AM, Chris Laprise wrote:
> >>> On 07/05/2016 02:21 PM, Marek Marczykowski-Górecki wrote:
>  -BEGIN PGP SIGNED MESSAGE-
>  Hash: SHA256
> 
>  On Mon, Jul 04, 2016 at 10:26:51AM -0400, Chris Laprise wrote:
> > If I replace the kernel with 4.1 from R3.1, it can make it to the 
> > AEM target
> > and the decrypt prompt. It chokes just after decrypting the 
> > volumes, but
> > that's to be expected. The 4.4 kernel appears to introduce some 
> > factor that
> > causes the crash.
>  Interesting, have you tried 4.2 kernel from R3.1 unstable repository?
>  Do you have any means of collecting kernel/xen messages? I guess 
>  you've
>  already disabled "quiet" kernel option and also removed "console=none"
>  from xen cmdline.
>  If this doesn't help, try adding "noreboot" and "sync_console" to 
>  xen cmdline.
> 
>  If you have serial console (on docking station?) if would be easier to
>  reliably get log messages.
> 
>  - -- 
> >>>
> >>> I just tried the 4.2 kernel on the stick created by AEM under 
> >>> R3.2rc1; It seems to work as well as 4.1.
> >>>
> >>> I'll try 4.4 again removing those boot options.
> >>>
> >>> Unfortunately, the only docking station here is the kind lacking 
> >>> serial ports.
> >>>
> >>> Chris
> >>>
> >>
> >> A bit more info:
> >>
> >> Removing rd.antievilmaid from 4.4.12 options doesn't help; it still 
> >> restarts. I also tried 4.4.14 in the unstable repo but that did not 
> >> help.
> >>
> >> It appears to be an incompatibility between kernel version 4.4 and 
> >> tboot.
> >>
> >> Chris
> >>
> >
> > I am able to get 4.4.* to boot now! The trick was to add 
> > 'min_ram=0x200' to the tboot options like I used to do--the AEM 
> > README describes how.
> >
> > But now I cannot get AEM to seal the secret. Nothing at all about AEM 
> > is displayed during startup, even though rd.antievilmaid is on the 
> > kernel options line.
> >
> > Chris
> >
> 
> For the record, AEM is now working on my system. The other thing that 
> was required was to update the anti-evil-maid package to version 3.0.3.
> 
> Chris

Hi Chris,

can you confirm that AEM is working now on this preceise laptop :
LENOVO T450s (20BWS01D00)

If yes, please describe what is required to be modified/setup to make it work.

And if confirmed, can someone update the line on the HCL page ?
https://www.qubes-os.org/hcl/

Regards
--
Fred

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bd3423bf-4a89-40e7-8f2f-366528a733ff%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-15 Thread Chris Laprise

On 07/13/2016 11:15 AM, Chris Laprise wrote:

On 07/12/2016 11:15 AM, Chris Laprise wrote:

On 07/12/2016 01:48 AM, Chris Laprise wrote:

On 07/05/2016 02:21 PM, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 04, 2016 at 10:26:51AM -0400, Chris Laprise wrote:
If I replace the kernel with 4.1 from R3.1, it can make it to the 
AEM target
and the decrypt prompt. It chokes just after decrypting the 
volumes, but
that's to be expected. The 4.4 kernel appears to introduce some 
factor that

causes the crash.

Interesting, have you tried 4.2 kernel from R3.1 unstable repository?
Do you have any means of collecting kernel/xen messages? I guess 
you've

already disabled "quiet" kernel option and also removed "console=none"
from xen cmdline.
If this doesn't help, try adding "noreboot" and "sync_console" to 
xen cmdline.


If you have serial console (on docking station?) if would be easier to
reliably get log messages.

- -- 


I just tried the 4.2 kernel on the stick created by AEM under 
R3.2rc1; It seems to work as well as 4.1.


I'll try 4.4 again removing those boot options.

Unfortunately, the only docking station here is the kind lacking 
serial ports.


Chris



A bit more info:

Removing rd.antievilmaid from 4.4.12 options doesn't help; it still 
restarts. I also tried 4.4.14 in the unstable repo but that did not 
help.


It appears to be an incompatibility between kernel version 4.4 and 
tboot.


Chris



I am able to get 4.4.* to boot now! The trick was to add 
'min_ram=0x200' to the tboot options like I used to do--the AEM 
README describes how.


But now I cannot get AEM to seal the secret. Nothing at all about AEM 
is displayed during startup, even though rd.antievilmaid is on the 
kernel options line.


Chris



For the record, AEM is now working on my system. The other thing that 
was required was to update the anti-evil-maid package to version 3.0.3.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/045a8d25-acd2-86f7-719f-b1cda382484d%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-13 Thread Chris Laprise

On 07/12/2016 11:15 AM, Chris Laprise wrote:

On 07/12/2016 01:48 AM, Chris Laprise wrote:

On 07/05/2016 02:21 PM, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 04, 2016 at 10:26:51AM -0400, Chris Laprise wrote:
If I replace the kernel with 4.1 from R3.1, it can make it to the 
AEM target
and the decrypt prompt. It chokes just after decrypting the 
volumes, but
that's to be expected. The 4.4 kernel appears to introduce some 
factor that

causes the crash.

Interesting, have you tried 4.2 kernel from R3.1 unstable repository?
Do you have any means of collecting kernel/xen messages? I guess you've
already disabled "quiet" kernel option and also removed "console=none"
from xen cmdline.
If this doesn't help, try adding "noreboot" and "sync_console" to 
xen cmdline.


If you have serial console (on docking station?) if would be easier to
reliably get log messages.

- -- 


I just tried the 4.2 kernel on the stick created by AEM under 
R3.2rc1; It seems to work as well as 4.1.


I'll try 4.4 again removing those boot options.

Unfortunately, the only docking station here is the kind lacking 
serial ports.


Chris



A bit more info:

Removing rd.antievilmaid from 4.4.12 options doesn't help; it still 
restarts. I also tried 4.4.14 in the unstable repo but that did not help.


It appears to be an incompatibility between kernel version 4.4 and tboot.

Chris



I am able to get 4.4.* to boot now! The trick was to add 
'min_ram=0x200' to the tboot options like I used to do--the AEM 
README describes how.


But now I cannot get AEM to seal the secret. Nothing at all about AEM is 
displayed during startup, even though rd.antievilmaid is on the kernel 
options line.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/94a77415-079f-fd21-78e1-766c0ab3303e%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-12 Thread Chris Laprise

On 07/12/2016 01:48 AM, Chris Laprise wrote:

On 07/05/2016 02:21 PM, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 04, 2016 at 10:26:51AM -0400, Chris Laprise wrote:
If I replace the kernel with 4.1 from R3.1, it can make it to the 
AEM target
and the decrypt prompt. It chokes just after decrypting the volumes, 
but
that's to be expected. The 4.4 kernel appears to introduce some 
factor that

causes the crash.

Interesting, have you tried 4.2 kernel from R3.1 unstable repository?
Do you have any means of collecting kernel/xen messages? I guess you've
already disabled "quiet" kernel option and also removed "console=none"
from xen cmdline.
If this doesn't help, try adding "noreboot" and "sync_console" to xen 
cmdline.


If you have serial console (on docking station?) if would be easier to
reliably get log messages.

- -- 


I just tried the 4.2 kernel on the stick created by AEM under R3.2rc1; 
It seems to work as well as 4.1.


I'll try 4.4 again removing those boot options.

Unfortunately, the only docking station here is the kind lacking 
serial ports.


Chris



A bit more info:

Removing rd.antievilmaid from 4.4.12 options doesn't help; it still 
restarts. I also tried 4.4.14 in the unstable repo but that did not help.


It appears to be an incompatibility between kernel version 4.4 and tboot.

Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/85ff2024-584d-a10a-d91d-70c6a5aff820%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-11 Thread Chris Laprise

On 07/05/2016 02:21 PM, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 04, 2016 at 10:26:51AM -0400, Chris Laprise wrote:

If I replace the kernel with 4.1 from R3.1, it can make it to the AEM target
and the decrypt prompt. It chokes just after decrypting the volumes, but
that's to be expected. The 4.4 kernel appears to introduce some factor that
causes the crash.

Interesting, have you tried 4.2 kernel from R3.1 unstable repository?
Do you have any means of collecting kernel/xen messages? I guess you've
already disabled "quiet" kernel option and also removed "console=none"
from xen cmdline.
If this doesn't help, try adding "noreboot" and "sync_console" to xen cmdline.

If you have serial console (on docking station?) if would be easier to
reliably get log messages.

- -- 


I just tried the 4.2 kernel on the stick created by AEM under R3.2rc1; 
It seems to work as well as 4.1.


I'll try 4.4 again removing those boot options.

Unfortunately, the only docking station here is the kind lacking serial 
ports.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7e3ad0a9-8e49-7de8-1aa9-20898f3d6bba%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-05 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-07-05 08:03, Chris Laprise wrote:
> Is there an issue open for this yet?
> 
> Chris
> 

I didn't want to open one if I was the only one experiencing the
problem, but since it appears to be affecting others now, I've opened
an issue for it here:

https://github.com/QubesOS/qubes-issues/issues/2155

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJXfDYHAAoJENtN07w5UDAwIUkP/2H+yYOQGxGw9X6hJvG5MjsZ
FIZfmRHNC5nWR9sVxvDLOdvr8yyYDAJOW2vHBHGhegY1Td1qtbc+mdqb49wVUCII
aMVHfbFRhUakNNQyVTXGNn5SsK48razcrktoPdPIsc4my4ZWtVOeKUNqq7VpzDzq
LdSIwQMG4GwVD+NxZd+7webkGPoNnX3lydZWmPWEQ70QbE8LljYd1Gs6XUrscLIh
d/Upc5d/EbMXRAbBu4RX89Nseujz/qFVpuXmddEbTeI3y9lrmQ2tXu/KuOpVOJTZ
68Pg9cogwtbggptQkzBoc/rjl8sKlB5e7MSFm3qQoUdS/3PJQEoV8owxb4ghdSDa
Nu18Yt4XI67zZaaW5cwtOD2I58f2kipUCEny7bWrlQHEzqdqIospI28fswYuwGM5
3TDEZgkLhuVlXQ2IQxONWY8tbB2B2slTVZ1gIZK7iuOFQ8o2UfGIOxSME2QS4CBz
xVrPHSkwlHwKVOtdv958pBXnuzSACpq+0w4bhizswf6kpYmzjnJW8ueJMAHpFpaC
wACj4ieyzdfpKjXI9o/a+Dxi/xxCc0duFgKaf3mod24DYnlV0OSYNHvUVFo3/xtp
ENBwkZ5MxPwLMCQPgYoc9o8Rc+xMvLRQQleJBkYRt0uol9sDcTq1ifFCPO8DjdSh
hKzqOjcBlYuumeb6TSyh
=EBfq
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/04e7abd7-247b-b290-2b23-8a9567e47f9c%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-05 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Mon, Jul 04, 2016 at 10:26:51AM -0400, Chris Laprise wrote:
> If I replace the kernel with 4.1 from R3.1, it can make it to the AEM target
> and the decrypt prompt. It chokes just after decrypting the volumes, but
> that's to be expected. The 4.4 kernel appears to introduce some factor that
> causes the crash.

Interesting, have you tried 4.2 kernel from R3.1 unstable repository?
Do you have any means of collecting kernel/xen messages? I guess you've
already disabled "quiet" kernel option and also removed "console=none"
from xen cmdline.
If this doesn't help, try adding "noreboot" and "sync_console" to xen cmdline. 

If you have serial console (on docking station?) if would be easier to
reliably get log messages.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXe/qTAAoJENuP0xzK19csNjEIAJlshr1jl/6yHL4hmLbJDxkq
fyA92UjOnMGpt2SHHKQABcEqvqpb0mbXJRCXwNEhVGFjljkYSul4Sr2CDenWdNZC
XRCr0AcxLCy8IYnv6WJAWtTbMKaE1FJozfNW7GdlnhlqdipO/SbFLYIMP6nsTDsk
ADFviMQ7qin6+nHsQYfbfFnmE0gcpX9fTOZrQMo702K77wYyT9VLIIXNiJxveCUz
G31e1IBEnCFx5GFOVdmsAacZDqTip+/UikRTFMEP+qiNrq/9ryJdZBWSHRztJySY
jgBUjlV8MyfvT1rrY01XhA6zRrHH/dJj7uk5gHW783HmlMzlOfW+s/dWdBv+Qw4=
=3sc0
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160705182107.GX4609%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-05 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Tue, Jul 05, 2016 at 11:03:10AM -0400, Chris Laprise wrote:
> Is there an issue open for this yet?

I don't see any.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXe/lNAAoJENuP0xzK19csty0H/jnIRi0v3TsLQ6v9YLSOhb2G
7fYDnIFtdc/4aTzJ8dufGkfAtT4AX0NOx4rSngUdp2adxJA9W6hrT2twrcRfkPBk
RFNrhJRiZxwScvdz0S75BW7Mr4V1JdSN8yrZ+GZ2zIhPqzoAWZY/ORxEeglQ11nv
kT3WYlKmfeGh9MiLW75+GDdwXva31FV6UWV558hOX2vMDV5XKB8i0YIDBffcTc62
7EWf0wkK5bXcaZFtpp3eNZRCwVsocqmGkCvu2PyLaPBCpEU2uYrxydlF8ORUnfXZ
X4tOC9YWLKrGtT2OG3TNueGiutOnJ+eV20p26zy4dqIOND0HW9Brn67LcpHfHeg=
=8HHF
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160705181541.GW4609%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-05 Thread Chris Laprise

Is there an issue open for this yet?

Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/82f9adc2-5510-f3f3-db1a-e6d8850a8a6f%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-04 Thread Chris Laprise
If I replace the kernel with 4.1 from R3.1, it can make it to the AEM 
target and the decrypt prompt. It chokes just after decrypting the 
volumes, but that's to be expected. The 4.4 kernel appears to introduce 
some factor that causes the crash.


Swapping xen 4.6.1 with 4.6.0 has no visible effect either way.

Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c2806248-ec97-631e-70b2-7b4d0e96fbfc%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-04 Thread Chris Laprise

On 07/04/2016 07:26 AM, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sun, Jul 03, 2016 at 09:20:47PM -0400, Chris Laprise wrote:


AEM is now causing reboots for me as well, after installing it under
R3.2rc1.

Has there been any progress on this? I don't see any signed sources of the
newer tboot versions, so I'm reluctant to try them.

Try setting `pci_e820_host` property to false on sys-net and sys-usb.

- --


I tried it anyway (without success), but the reset is occurring well 
before the decryption prompt. It happens just after the 'Loading...' 
grub screen vanishes and there is a cursor at the top of a black screen 
(before plymouth GUI screen would appear).


I still have a boot image with a working AEM. If I could use it to help 
eliminate some possible causes, like the new kernel version for instance...


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/37e04782-65ef-924e-ba17-567ca3993068%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-04 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sun, Jul 03, 2016 at 09:20:47PM -0400, Chris Laprise wrote:
> 
> 
> On 05/30/2016 03:39 AM, Marek Marczykowski-Górecki wrote:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA256
> > 
> > On Sun, May 29, 2016 at 11:10:45PM -0700, Andrew David Wong wrote:
> > > On 2016-05-29 16:34, Marek Marczykowski-Górecki wrote:
> > > > On Fri, May 27, 2016 at 03:27:50AM -0700, Andrew David Wong wrote:
> > > > > On 2016-05-19 02:34, Frank Schäckermann wrote:
> > > > > > There should be a bootable BIOS-Updater-Image that can be
> > > > > > burned to a CD and booted on the TP to get the BIOS updated. At
> > > > > > least there was one for my Lenovo W530 a couple of weeks ago.
> > > > > > Practically hassle free - not counting getting the CD burned on
> > > > > > Qubes OS. ;-) But than again... the T450 mileage may vary...
> > > > > Thanks, Frank. Unfortunately, even after successfully updating
> > > > > the BIOS to the latest version, AEM is still not working (fails
> > > > > the same way as before). I really thought updating the BIOS would
> > > > > fix it, since there's a TPM-related fix in the BIOS patch notes.
> > > > > Marek, I noticed that the version of tboot being used is somewhat
> > > > > old (July 2014). Would upgrading tboot itself break compatibility
> > > > > with AEM? If so, are there any plans to upgrade AEM to be
> > > > > compatible with a newer version of tboot?
> > > > I think newer tboot shouldn't break anything. The only reason for
> > > > this particular version (1.8.2) is a package in Fedora. And I see
> > > > even in Fedora 23 (planned as dom0 for Qubes 3.2), it's still at
> > > > 1.8.2.
> > > > 
> > > Would it be as simple as "qubes-dom0-update tboot" or more complicated?
> > It will not help, as there is no newer package for Fedora (even for
> > upcoming Fedora 24).
> > 
> > - --
> 
> AEM is now causing reboots for me as well, after installing it under
> R3.2rc1.
> 
> Has there been any progress on this? I don't see any signed sources of the
> newer tboot versions, so I'm reluctant to try them.

Try setting `pci_e820_host` property to false on sys-net and sys-usb.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXekfwAAoJENuP0xzK19csDzEH/j64FaOHAd4jmCJ2/kE44fdL
GQzEKEr5pfqQwI3TOgcTUN2XK1/qjcyDa1uH8SGfRWAGcwa3WigvaAeuLZYIbQEb
uuWOMKOBO/f/soHDd/7rVNkOs4tOuoNm7NX0pCi6dZu1m+3HiR++la2iePBNRgKk
K5QjcmH9b0SskEtIcOW+cUPQeaQxtIWkgp2gy3ueZsfniHq58M6Oa8l3zRB32G17
sXgjKQ3sMzlrTtQajj+hJxvdc+WZqmyQrZz9sWzg5Nnmz8Qb2C4fj1vkeoTEvU6l
I6Wjiqk/Jdfb0xWoLeAausL7OF1AdRUQ7l44btswFhc87kzgJkOlRS9CUFnKh3Y=
=Ctd4
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160704112640.GF1464%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-03 Thread Chris Laprise



On 05/30/2016 03:39 AM, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sun, May 29, 2016 at 11:10:45PM -0700, Andrew David Wong wrote:

On 2016-05-29 16:34, Marek Marczykowski-Górecki wrote:

On Fri, May 27, 2016 at 03:27:50AM -0700, Andrew David Wong wrote:

On 2016-05-19 02:34, Frank Schäckermann wrote:

There should be a bootable BIOS-Updater-Image that can be
burned to a CD and booted on the TP to get the BIOS updated. At
least there was one for my Lenovo W530 a couple of weeks ago.
Practically hassle free - not counting getting the CD burned on
Qubes OS. ;-) But than again... the T450 mileage may vary...

Thanks, Frank. Unfortunately, even after successfully updating
the BIOS to the latest version, AEM is still not working (fails
the same way as before). I really thought updating the BIOS would
fix it, since there's a TPM-related fix in the BIOS patch notes.
Marek, I noticed that the version of tboot being used is somewhat
old (July 2014). Would upgrading tboot itself break compatibility
with AEM? If so, are there any plans to upgrade AEM to be
compatible with a newer version of tboot?

I think newer tboot shouldn't break anything. The only reason for
this particular version (1.8.2) is a package in Fedora. And I see
even in Fedora 23 (planned as dom0 for Qubes 3.2), it's still at
1.8.2.


Would it be as simple as "qubes-dom0-update tboot" or more complicated?

It will not help, as there is no newer package for Fedora (even for
upcoming Fedora 24).

- -- 


AEM is now causing reboots for me as well, after installing it under 
R3.2rc1.


Has there been any progress on this? I don't see any signed sources of 
the newer tboot versions, so I'm reluctant to try them.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c7a71215-370f-c35f-a135-9a16f97fe0ba%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-01 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

> On 2016-06-23 06:20, Rusty Bird wrote:
>> There is something the people for whom AEM fails on UEFI could 
>> try:
> 
>> [...]
> 
> Not sure if this is directed at me, but I was/am not on UEFI. (If
> you were already aware of this and were talking to other people,
> my apologies.)

No problem, I just understood your original post to mean that you
tried both BIOS and UEFI booting because your ThinkPad can do either?
If so, there might be a tiny chance that it's worth retrying UEFI with
the options removed.

Rusty
-BEGIN PGP SIGNATURE-

iQJ8BAEBCgBmBQJXbAewXxSAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ4NEI1OUJDRkM2MkIxMjlGRTFCMDZEMDQ0
NjlENzhGNDdBQUYyQURGAAoJEEadePR6ryrfPw0P/2CSFQ85OrlpnlJHvnkesTI/
oDPUYa12EEVNm0bQiL4VLciH5ob3uQc+5ykKX8lYd0foOzQatnxwtXUGQQgMF6eO
2lJqpgyaa8x8ewEyOb7Kr/iDqwoU5jbNvFA5v9Uhlei1W2hOISStrl4ZjON+C95H
2ZYoSnAyjdseZK0O6iXKWDLdsMTTm/oNU1CIbpZsxvKX1tmvVnSTPmcpDI+MwPht
pIrAgw4wZqOl6V+g3OKsnIV5wevedmK9/EWxPzIgElf/6dr2e9FN9ysiohhmSxdx
HgmBbbMCd1OfQGCIJh+1FPw4XjZ1fJjis3zq6rfr74j+ilRMjKcxP4gBtu8lDwyT
dWv4UKL9utPmlIimEpemYqR+BPl5dchRplO/JUNtoQyHVfaq9H/KgHqYQ7HgPlSf
c+PaDft2fgRIkaNsaQ+FkVvIca4STfM1O9Kjl3t5lVMqk8jnFwIIypF1Y4J/i3x6
jvUaDV3fpVl1XGf1AxLqIBEXFN6J0/o9zHtp0+E6wZQE/ETlrbPyxgoGdPFKgUZR
CF7S4JCdkM+P0miQzfvd03piK0XV7NoxmT7A32Ds+MuHUBIm76IV2nlELA77zbVH
fzPIiT/5ysG1U9C+ExdUzaz9Ey12Y6ESldTYSq2jbFGVi5v86VCW2HVmdhV0o52p
/LCthjRRPbi7i51pFNDb
=2J9L
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f57b46ec-58dc-aadb-f456-b75bc47c0d9f%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-01 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi Andrew,

> On 2016-06-22 21:58, Todd Lasman wrote:
>> On 05/16/2016 11:44 PM, Andrew David Wong wrote: I seem to have
>> this exact same problem, but only after installing Qubes 3.2
>> (worked fine with 3.1) on my Thinkpad T430.
> 
> Very interesting. Perhaps my suspicion about the AEM installer
> having recently changed was right after all?

IIRC and going by the dates on the pages below, the installer and all
other code changes were before R3.1 (only the README has changed since):

https://www.qubes-os.org/doc/releases/3.1/schedule/
https://www.qubes-os.org/news/2016/03/09/qubes-os-3-1-has-been-released/
https://github.com/QubesOS/qubes-antievilmaid/commits/master
https://github.com/QubesOS/qubes-antievilmaid/commits/master/anti-evil-maid/sbin/anti-evil-maid-install

Rusty
-BEGIN PGP SIGNATURE-
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=210N
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/283b532d-519b-ef7a-b6f5-74b421326ea1%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-07-01 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi Chris & everyone,

> On 06/23/2016 06:53 AM, Andrew David Wong wrote:

>> On 2016-06-23 03:49, Rusty Bird wrote:
>>> Hi Andrew,
>>> 
 On 2016-06-22 21:58, Todd Lasman wrote:
> On 05/16/2016 11:44 PM, Andrew David Wong wrote: I seem to 
> have this exact same problem, but only after installing
> Qubes 3.2 (worked fine with 3.1) on my Thinkpad T430.
 Very interesting. Perhaps my suspicion about the AEM
 installer having recently changed was right after all?
>>> IIRC and going by the dates on the pages below, the installer
>>> and all other code changes were before R3.1 (only the README
>>> has changed since):

>> Ah, perhaps not then. It remains a mystery!
>> 
> If it changed after initial 3.0 release (esp. later on, near the
> 3.1 release date) then that would actually make sense.

There is something the people for whom AEM fails on UEFI could try:

AEM uses a forked version of grub2's 20_linux_xen as
/etc/grub.d/19_linux_xen_tboot. In commit c43309[1], I rebased this
against the then current (on Fedora) version, which added the
following options for non-BIOS platforms: no-real-mode edd=off

But tboot's 20_linux_xen_tboot [2], a different fork of 20_linux_xen,
never followed grub2 upstream in adding these options. Maybe they
should not be used if Xen is loaded by tboot?

So, try removing "no-real-mode edd=off" (but not the whole line, I
don't know if empty else blocks are allowed here) in
19_linux_xen_tboot and running anti-evil-maid-install again. I'd be
very interested to hear if it helps.

Rusty


1.
https://github.com/QubesOS/qubes-antievilmaid/commit/c43309d0a0b90368b5b2600c886b9deee55e0522

2.
https://sourceforge.net/p/tboot/code/ci/default/tree/tboot/20_linux_xen_tboot
-BEGIN PGP SIGNATURE-
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=+Liu
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2813f291-ed31-9451-2661-de5a3d3fc250%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-06-23 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-06-23 06:20, Rusty Bird wrote:
> Hi Chris & everyone,
> 
>> On 06/23/2016 06:53 AM, Andrew David Wong wrote:
> 
>>> On 2016-06-23 03:49, Rusty Bird wrote:
 Hi Andrew,
 
> On 2016-06-22 21:58, Todd Lasman wrote:
>> On 05/16/2016 11:44 PM, Andrew David Wong wrote: I seem
>> to have this exact same problem, but only after
>> installing Qubes 3.2 (worked fine with 3.1) on my
>> Thinkpad T430.
> Very interesting. Perhaps my suspicion about the AEM 
> installer having recently changed was right after all?
 IIRC and going by the dates on the pages below, the
 installer and all other code changes were before R3.1 (only
 the README has changed since):
> 
>>> Ah, perhaps not then. It remains a mystery!
>>> 
>> If it changed after initial 3.0 release (esp. later on, near the 
>> 3.1 release date) then that would actually make sense.
> 
> There is something the people for whom AEM fails on UEFI could
> try:
> 
> [...]

Not sure if this is directed at me, but I was/am not on UEFI. (If you
were already aware of this and were talking to other people, my
apologies.)

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=cwuz
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ccdac4b3-8d84-11bc-23f2-a91e8838d59d%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-06-23 Thread Chris Laprise



On 06/23/2016 06:53 AM, Andrew David Wong wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-06-23 03:49, Rusty Bird wrote:

Hi Andrew,


On 2016-06-22 21:58, Todd Lasman wrote:

On 05/16/2016 11:44 PM, Andrew David Wong wrote: I seem to
have this exact same problem, but only after installing Qubes
3.2 (worked fine with 3.1) on my Thinkpad T430.

Very interesting. Perhaps my suspicion about the AEM installer
having recently changed was right after all?

IIRC and going by the dates on the pages below, the installer and
all other code changes were before R3.1 (only the README has
changed since):

[...]

Rusty


Ah, perhaps not then. It remains a mystery!

If it changed after initial 3.0 release (esp. later on, near the 3.1 
release date) then that would actually make sense.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fb05403b-c5ff-f005-23d3-29ff89cd075b%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-06-23 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-06-23 03:49, Rusty Bird wrote:
> Hi Andrew,
> 
>> On 2016-06-22 21:58, Todd Lasman wrote:
>>> On 05/16/2016 11:44 PM, Andrew David Wong wrote: I seem to
>>> have this exact same problem, but only after installing Qubes
>>> 3.2 (worked fine with 3.1) on my Thinkpad T430.
> 
>> Very interesting. Perhaps my suspicion about the AEM installer 
>> having recently changed was right after all?
> 
> IIRC and going by the dates on the pages below, the installer and 
> all other code changes were before R3.1 (only the README has 
> changed since):
> 
> [...]
> 
> Rusty
> 

Ah, perhaps not then. It remains a mystery!

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJXa7+SAAoJENtN07w5UDAwuXkP/R1aLX1n7xm50huX93/YxSnE
vrR1RiLytNMUSEBF8jz/8F0TSivVK/40qm6LBEF42UpLQUnjx7NDX+zCmeToLxBE
WacBzx5osT7vCS3QCdd3Z8RO2pVKQ2Fn4w56ucSXJtV8v6nn29mPdTVwtXpH+HxI
rC/QvmN/ZvH3+5rwXcH5qE+mSn3+OKKVLXW0LdmOfqw2aa208Rk/VJ2FnpYGlIyq
RNeE9JpQOiEsvxt2g9S+pACzeC5deN/xn7myhLKjGtMKEhsIwr5IrAIzOwv7Ir/o
nrB3jOiP8k3Hai/Zn3tPYZrg7/MycIY06KPK0Qr2KnSYLF/Tq4bhMupopprluIDK
L2NQ5L7bEFtUQUEFnO0xrOev8JTQrVsxllBBtxyedcyQGFxPDz8+YnKezW4MUKlQ
pmcJgsPw+3Zf7Dqrw7SJKdOjbg602tz53g1GnknDIkPkHEKCVz5Udn+6kVDV0ZRk
El7RXjaa70I1CFO8F3QwGBcTn9PWbUrgPl2nwbOmPUGsoI/crsea2KR5GQHdHmw/
5xV9yIcRp81l/T9GG2eswuFOEZcPdFo11HVkXZhHLgO5vavAEhlTuqXArA4iV0wx
S33T9RDYnaf5+aLIIs3Itf3QY3lYthIABZnPFb+acx+Gm9n0Vnpbt3Ptfxq4usIb
CepoRxYGUqaQE4tMfE9r
=4PlM
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9d74651d-99d9-be82-79f6-45fe04cc91cb%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-06-22 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-06-22 21:58, Todd Lasman wrote:
> On 05/16/2016 11:44 PM, Andrew David Wong wrote:
>> I'm attempting to install Anti Evil Maid on a Lenovo T450s 
>> (Broadwell, Wildcat Point-LP).
>> 
>> [...]
> 
> 
> Andrew, did you ever get this resolved?

I'm afraid not. I gave up on it after my last message in this thread.

> I seem to have this exact same problem, but only after installing 
> Qubes 3.2 (worked fine with 3.1) on my Thinkpad T430.

Very interesting. Perhaps my suspicion about the AEM installer having
recently changed was right after all?

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJXa4fYAAoJENtN07w5UDAwv8YP/3yfU0aO/fzLhsCJnMmh+9eh
nTdgrnGvAOv57jZkzaHmqiDHpxm77j03chqzV+BMdwPUfY4SkP5StGTbp/yTTYeq
OSr3n3qNBvhAziUygYVVusDFgQ252CZGzAPECeKQXCS1JHhkZJ9j/o5oHdqRo9h1
jHTytZDVuO+UlQzsQXYGySTwlmrkyNl5aZ+gXxjMa0kHdaJuO+ENeMSlJxeopEI3
M7BPxjlGTKKzFO4sTjLbjhuWu5KWGUKX7gKfA+R+AhBF7Oorvo0e3F6Q+CclMo2v
VPfdprIXGhDf0dq5Mg4b19UDVDs1sGaGKyFDTc9CljyN9TjxA0FgMOjrgnGhZ4j7
TJfptym0YXC1QYJWZj2tAsWbFktiofdyPYG/QGb/htW4RF2LD9R6SYffXhbhG+yn
7b4OtqAOis41g38KjRh+ffdGoG69jOX/oxgSqhzLc/zouPhk6xJARkqDu9IChrVe
ciaN4BEf4uR4L3ckCwKrX8QqyokqSUFWTzepJaLVvzNWt9jnvqp0Tco0opm7mp8+
jk+j/Ak48wxLl4W5HP4regrovGUtuowv9ZREGxbetfImRQn0eW6FHaKFXIvSeHOQ
NuIC0/lzSMcthsOq3yNfw1K+4qV+g5VJ6VvBb86z5ZBSPTN0BgB7X1bzOVmqBG02
N+hNBfmrt1aqH3hsTed0
=j733
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bd5b1934-e7c0-7df3-e283-875e0c33ae08%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-06-22 Thread Todd Lasman
On 05/16/2016 11:44 PM, Andrew David Wong wrote:
> I'm attempting to install Anti Evil Maid on a Lenovo T450s (Broadwell,
> Wildcat Point-LP).
>
> A previous report from Alex Guzman indicated that AEM works on this
> model. [1] However, I've followed the instructions [2] to the letter
> and across dozens of variations over the course of days with no luck.
> It's possible I'm missing something obvious, but here's what I've tried:
>
>  * Use legacy boot option.
>  * Use UEFI boot option.
>  * Try all USB ports.
>  * Try different USB drives.
>  * Install to /boot partition on internal SSD.
>  * Enable/disable different BIOS USB options.
>  * Try different AEM text secrets (e.g., no symbols).
>  * Check that the correct SINIT module is in /boot.
>Unless I'm mistaken, for the T450s, it should be:
>
>  5th_gen_i5_i7_SINIT_79.BIN
>
> In all cases, everything goes smoothly with the installation up to
> step 5 (reboot and select the "AEM Qubes" GRUB option). I select that
> option (or allow it to be auto-selected, or select the one in the
> "advanced" submenu). It gets about 4 lines in (up to "loading initial
> ramdisk," I think; a bit too fast to read), then the laptop appears to
> do a hard reboot/partial shutdown. Instead of a normal reboot with the
> BIOS and normal boot process, the screen is blank, but the system
> retains power. (Power button is lit and keyboard backlight brightness
> can be changed.)
>
> Does anyone have any ideas or tips about this one? Any help would be
> greatly appreciated.
>
>
> [1] https://groups.google.com/d/topic/qubes-users/jelz1pA8Ilk/discussion
> [2] https://github.com/QubesOS/qubes-antievilmaid/blob/master/anti-
> evil-maid/README
>


Andrew, did you ever get this resolved? I seem to have this exact same
problem, but only after installing Qubes 3.2 (worked fine with 3.1) on
my Thinkpad T430.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c90a4d4c-457f-0edf-daa8-a2af09412502%40nowlas.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-05-30 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sun, May 29, 2016 at 11:10:45PM -0700, Andrew David Wong wrote:
> On 2016-05-29 16:34, Marek Marczykowski-Górecki wrote:
> > On Fri, May 27, 2016 at 03:27:50AM -0700, Andrew David Wong wrote:
> >> On 2016-05-19 02:34, Frank Schäckermann wrote:
> >>> There should be a bootable BIOS-Updater-Image that can be
> >>> burned to a CD and booted on the TP to get the BIOS updated. At
> >>> least there was one for my Lenovo W530 a couple of weeks ago.
> >>> Practically hassle free - not counting getting the CD burned on
> >>> Qubes OS. ;-) But than again... the T450 mileage may vary...
> > 
> >> Thanks, Frank. Unfortunately, even after successfully updating
> >> the BIOS to the latest version, AEM is still not working (fails
> >> the same way as before). I really thought updating the BIOS would
> >> fix it, since there's a TPM-related fix in the BIOS patch notes.
> > 
> >> Marek, I noticed that the version of tboot being used is somewhat
> >> old (July 2014). Would upgrading tboot itself break compatibility
> >> with AEM? If so, are there any plans to upgrade AEM to be
> >> compatible with a newer version of tboot?
> > 
> > I think newer tboot shouldn't break anything. The only reason for
> > this particular version (1.8.2) is a package in Fedora. And I see
> > even in Fedora 23 (planned as dom0 for Qubes 3.2), it's still at
> > 1.8.2.
> > 
> 
> Would it be as simple as "qubes-dom0-update tboot" or more complicated?

It will not help, as there is no newer package for Fedora (even for
upcoming Fedora 24).

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXS+4hAAoJENuP0xzK19csKq8H/jIR89UyQJROJCC2reHpkz4x
Tv3AToMpocU+6H7ryDKksHG00YjZvWBLh3WE3QF5veX4QOr+7ZUy4GsUqHHrMWX7
knjMmUXwqIy4aWDDfkqOnd0Stiy71xPfFK00/R3Of9eLkQVFQc83DonvWZgRpDSC
ah8SvQaigqA4KSGa5716xWZkorXgqI1iOndlulPgWcrEWiEK0EtWfdBzS/EwFmwt
Ef4K2cbLTsm9cH4QbR6FbX1ahvTNEIRcn6aJiMc18YlDCG7Zfroaa7rNVlqDG1hp
wmSAgAkzyaOs0KiQjd0/X2gS7NoNJBibKKsPOSSKWOv/wAtg/3HSUUfR9VBHqnM=
=0+vK
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160530073910.GC1593%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-05-29 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-05-29 16:34, Marek Marczykowski-Górecki wrote:
> On Fri, May 27, 2016 at 03:27:50AM -0700, Andrew David Wong wrote:
>> On 2016-05-19 02:34, Frank Schäckermann wrote:
>>> There should be a bootable BIOS-Updater-Image that can be
>>> burned to a CD and booted on the TP to get the BIOS updated. At
>>> least there was one for my Lenovo W530 a couple of weeks ago.
>>> Practically hassle free - not counting getting the CD burned on
>>> Qubes OS. ;-) But than again... the T450 mileage may vary...
> 
>> Thanks, Frank. Unfortunately, even after successfully updating
>> the BIOS to the latest version, AEM is still not working (fails
>> the same way as before). I really thought updating the BIOS would
>> fix it, since there's a TPM-related fix in the BIOS patch notes.
> 
>> Marek, I noticed that the version of tboot being used is somewhat
>> old (July 2014). Would upgrading tboot itself break compatibility
>> with AEM? If so, are there any plans to upgrade AEM to be
>> compatible with a newer version of tboot?
> 
> I think newer tboot shouldn't break anything. The only reason for
> this particular version (1.8.2) is a package in Fedora. And I see
> even in Fedora 23 (planned as dom0 for Qubes 3.2), it's still at
> 1.8.2.
> 

Would it be as simple as "qubes-dom0-update tboot" or more complicated?

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=l84H
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c9a8c6bf-cb9a-8b93-33e9-fdafa0066a1f%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-05-29 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Fri, May 27, 2016 at 03:27:50AM -0700, Andrew David Wong wrote:
> On 2016-05-19 02:34, Frank Schäckermann wrote:
> > There should be a bootable BIOS-Updater-Image that can be burned to
> > a CD and booted on the TP to get the BIOS updated. At least there
> > was one for my Lenovo W530 a couple of weeks ago. Practically
> > hassle free - not counting getting the CD burned on Qubes OS. ;-)
> > But than again... the T450 mileage may vary...
> 
> Thanks, Frank. Unfortunately, even after successfully updating the BIOS
> to the latest version, AEM is still not working (fails the same way as
> before). I really thought updating the BIOS would fix it, since
> there's a TPM-related fix in the BIOS patch notes.
> 
> Marek, I noticed that the version of tboot being used is somewhat old
> (July 2014). Would upgrading tboot itself break compatibility with
> AEM? If so, are there any plans to upgrade AEM to be compatible with a
> newer version of tboot?

I think newer tboot shouldn't break anything. The only reason for this
particular version (1.8.2) is a package in Fedora. And I see even in
Fedora 23 (planned as dom0 for Qubes 3.2), it's still at 1.8.2.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXS3yWAAoJENuP0xzK19cs15cH/itnEnSnnnXnVZxRITtWqSE3
mFxwG34GcwV01+ZuIQ/7tbKaU9owAo8b1vKq9zJS63pEkmSSIcwXu1h3jC52AiIG
Oeq+FEcu3P79a4c8D8q1lXi50Urcw/ibRAnXpQQDfPzzdlwAoBbcyYMwspC08HTl
xfRljhxWxp95GUlc3C+JXvI5yXZExT6SD86SBfmpJdQP1UaAw4BNbyHJVpA2SRh6
HR2MFERzEK3CmzF9X/3uAZTv3bgcbgFwyuLe/NaY3eWDdrkzAglX3kbiPcHmyR6/
3xBJgwZ80Y2pH0ONEp7dtTwvaoRN1fcizmGvDQXF+Maf1wuFtpbao5YbuIs45DI=
=VCk5
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20160529233447.GD2191%40mail-itl.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] AEM boot option causes hard reboot/partial shutdown (Lenovo T450s)

2016-05-27 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-05-19 02:34, Frank Schäckermann wrote:
> There should be a bootable BIOS-Updater-Image that can be burned to
> a CD and booted on the TP to get the BIOS updated. At least there
> was one for my Lenovo W530 a couple of weeks ago. Practically
> hassle free - not counting getting the CD burned on Qubes OS. ;-)
> But than again... the T450 mileage may vary...

Thanks, Frank. Unfortunately, even after successfully updating the BIOS
to the latest version, AEM is still not working (fails the same way as
before). I really thought updating the BIOS would fix it, since
there's a TPM-related fix in the BIOS patch notes.

Marek, I noticed that the version of tboot being used is somewhat old
(July 2014). Would upgrading tboot itself break compatibility with
AEM? If so, are there any plans to upgrade AEM to be compatible with a
newer version of tboot?

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-

iQIcBAEBCgAGBQJXSCEHAAoJENtN07w5UDAwc+UP/3Ei78EYFI+hzOslohEhC58u
vQWaI7ThNOpXm29AezzvdMFFNrpzZZhRTBC2G4xzi8or9ZU9o84OtDChJ5u+u+7t
MHjyCHDvc6z6PocJm4OdKRVaIXjZC8wZYHLWQduo1+SbATWwPtIBgf60iBjG/mQR
dQ3+gIgUR/q51IZ4V7JBSf81SZ5zlTJrXFBOnG6fUaT79N1TWxGg7A4Fu4GD93TR
OmTK7Qh0LHVC+eHIaAwruCZ4K7YniQ+AyVphDVO1Q7I///b9eXg7pSCi2SyJkkxY
mlBTGjT1Z2tN2dwanxByjXpXXS7eHI2Q3PKY7N1bjGH8cBMgH4TvqoB5m2AJ754/
0B5HS8f4O2UUjUm5f4cST5SGuz0qyh858SuGmGHqEFrDv3AZn/md2Fs73usD9Deo
v1yH+hTizIuAdW44+myGx+GW1XA3QD+B8APDGj/iQ4qDq6UVzbdNVW8sODMgWiWy
NzMModDuT0i1oeAWOf3I1JnAcBwjHFHTUaW9B6ghFPWsbMiFHxLhWAS5+Ou+RhS7
MDg0MBK5oP4kmSIzXR/iCmKU9fkFavG33u9S42Gu7mNuxuNd6N/Jw0Mi/AT9u2qm
/2jeV7UQQM0r3M5srbxInDKgqGEqomTz/rLyo6NlwfvF9mffpd/5QnbixqLrs4Dv
EM35Vea4yO5th44b+ANv
=TAgf
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a6a1e84e-8dd4-75a3-26f3-f4dc2143ba28%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.