Re: [qubes-devel] Re: Re: Request for feedback: 4.9 Kernel

2017-06-29 Thread 0spinboson 
On Thursday, June 29, 2017 at 10:10:43 PM UTC+2, Reg Tiangha wrote:
> On 06/29/2017 04:59 AM,
> 0spinbo...@gmail.com wrote:
> > fyi: this kernel built as-is will cause kernel panics on (some, common) 
> > Ryzen motherboards. Issue is described here among other places: 
> > https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1671360
> > This happens as soon as config_pinctrl_amd is set to 'm' in the build 
> > config. Un-setting it should evade the issue (as I've not yet seen a proper 
> > fix for it).
> >
> 
> I've now disabled it in my branch. But reading through the thread, they
> say it's been fixed but I can't figure out what part in their changelog
> addresses it. Did they merely disable the kernel option as well, or was
> there an actual patch? Latest 4.9 version is now 4.9.35 and there
> doesn't seem to be anything obvious in the .34 and .35 changlogs that I
> can see that addresses it either. But then again, maybe I don't know
> what I'm looking for.

I couldn't tell either, other than that they seem to have moved to a newer 
branch. Very messy bug thread, to be sure.
The option seems to be disabled in some distro-shipped kernels (such as f26, 
iirc), so not everyone runs into it either, which made it seem distro-specific.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/3b2fede2-e649-4cd0-a2ee-100bed519219%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-devel] Re: Stack-clash kernel vuln & patches

2017-06-29 Thread Reg Tiangha 
On 06/28/2017 04:05 PM, Marek Marczykowski-Górecki wrote:
> I think currently the problem is we both have v4.9.33-18 tag, pointing
> at different things... As Ilpo already said, git push -f may be a
> solution here. But generally we need a better coordination to avoid
> situation like this in the future.
>
> - -- 
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?

Thanks for all the tips and sorry about all the inconvenience. I've
cleaned up my tree, figured out how to set up a proper tracking remote
to the main QubesOS repository and to sync to that so my branch should
now be clean again.

I'll just keep an eye on the main branch for changes and sync them to
mine now that I know how to actually do that.

Again, thanks for the help and the patience while I try to learn the git
way of doing things.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/oj3lih%24h76%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] [GSoC] Qubes-MIME-Handlers Weekly Progress Report #3

2017-06-29 Thread Jean-Philippe Ouellet 
On Thu, Jun 22, 2017 at 4:11 AM, Marek Marczykowski-Górecki
 wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> On Wed, Jun 21, 2017 at 11:15:30PM -0700, Andrew Morgan wrote:
>> $ qvm-trust --check ~/Downloads --quiet
>> $ echo $?
>> 2
>>
>> A reference for the return codes is as follows. Additionally I plan to
>> write up a man page with all usage information soon:
>>
>> Error codes:
>> Unable to read extended attributes: -2
>> Unable to read an input file: -1
>> No errors: 0
>> File/Folder is untrusted: 1
>> File/Folder is trusted: 2

Note that exit statuses are usually treated as 8-bit unsigned values,
so -1 and -2 would actually be 255 and 254 respectively.

Standard semantic values for exit codes have existed for several
decades, and can be found in sysexits.h (also documented in man pages
such as [1]).

Canonical usage might look something like the following:
- EXIT_SUCCESS (0) for no errors and file being trusted
- EXIT_FAILURE (1) for no errors but file being untrusted
- EX_USAGE (64) for invalid command usage
- EX_DATAERR (65) for xattr errors (such as value other than "true"
for user.qubes.untrusted)
- EX_NOINPUT (66) for specified file to check not existing
- EX_OSFILE (72) for problems with the "Qubes untrusted folders" file(s)
- EX_NOPERM (77) for e.g. chmod failing due to file ownership during
--{un,}trust operation
etc.

The fact that only no errors & file being trusted results in a zero
exit status (truthy value for shells) means that any other errors
result in the trust system failing-closed (treating as untrusted),
which IMO is what we want.

EXIT_* can be found defined in POSIX [2], and EX_* are from sysexits.

[1]: https://man.openbsd.org/sysexits
[2]: http://pubs.opengroup.org/onlinepubs/9699919799/functions/exit.html

> IMO --check should return 0 for trusted files. This way it would be
> possible to use `if qvm-trust --check ...; then` (or negated with `!`).

+1

> Also consider making --check default action.

+1

Also, what would you think of writing nothing to stdout by default
(essentially --quiet by default) and instead taking --verbose/-v to
print "File is {un,}trusted"?

http://www.catb.org/esr/writings/taoup/html/ch01s06.html#id2878450
http://www.catb.org/esr/writings/taoup/html/ch11s09.html

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/CABQWM_AKo72LZ_qa3QeyGWr4aZnHjv0%3DWkaXi%2BWEkVFPyZS7hQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Re: [qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-29 Thread 0spinboson 
fyi: this kernel built as-is will cause kernel panics on (some, common) Ryzen 
motherboards. Issue is described here among other places: 
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1671360
This happens as soon as config_pinctrl_amd is set to 'm' in the build config. 
Un-setting it should evade the issue (as I've not yet seen a proper fix for it).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/7c97c7d2-5199-451a-99e9-ca9fea95ae71%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Qubes 4.0

2017-06-29 Thread Marek Marczykowski-Górecki 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Thu, Jun 29, 2017 at 06:41:33AM -0400, Outback Dingo wrote:
> On Thu, Jun 29, 2017 at 6:32 AM, Outback Dingo  wrote:
> > On Thu, Jun 29, 2017 at 6:31 AM, Marek Marczykowski-Górecki
> >  wrote:
> >> -BEGIN PGP SIGNED MESSAGE-
> >> Hash: SHA256
> >>
> >> On Thu, Jun 29, 2017 at 06:19:34AM -0400, Outback Dingo wrote:
> >>> On Wed, Jun 28, 2017 at 8:31 PM, Outback Dingo  
> >>> wrote:
> >>> > On Wed, Jun 28, 2017 at 8:18 PM, Outback Dingo  
> >>> > wrote:
> >>> >>
> >>> >>
> >>> >> On Jun 28, 2017 20:16, "Marek Marczykowski-Górecki"
> >>> >>  wrote:
> >>> >>
> >>> >> -BEGIN PGP SIGNED MESSAGE-
> >>> >> Hash: SHA256
> >>> >>
> >>> >> On Wed, Jun 28, 2017 at 07:58:24PM -0400, Outback Dingo wrote:
> >>> >>> successful... now lets see what it does  -rw-r--r--  2 dingo dingo
> >>> >>> 1265631232 Jun 28 19:57 Qubes-DVD-x86_64-20170628.iso
> >>> >>
> >>> >> Hmm, it's a bit small. Should be about 3GB. I guess templates are not
> >>> >> included. Have you built them? Check
> >>> >> qubes-src/linux-template-builder/rpm/noarch - if its empty, execute
> >>> >> "make template", then "make iso" again.
> >>> >>
> >>> >>
> >>> >> I configured it for only F25 templates it's installing now also during 
> >>> >> the
> >>> >> install I noticed it only gave me a gui option for xfce not kde I'll 
> >>> >> know
> >>> >> more in 10 mins
> >>> > ls 
> >>> > qubes-src/linux-template-builder/rpm/noarch/qubes-template-fc25-3.1.0-201706282236.noarch.rpm
> >>> >
> >>> > it is there, i also noticed when qubes rebooted after install and
> >>> > asked for initial configuration it failed to configure basic vms...
> >>> > personal, work ... etc etc
> >>>
> >>> also make template
> >>> -> Building template fc25 (logfile: build-logs/template-fc25.log)...
> >>> --> Done.
> >>> /bin/bash: 
> >>> /home/dingo/qubes-builder/qubes-src/builder-windows//scripts/convert-path.sh:
> >>> Permission denied
> >>> /bin/bash: line 0: pwd: -W: invalid option
> >>> pwd: usage: pwd [-LP]
> >>> make[1]: *** No rule to make target 'update-repo'.  Stop.
> >>> make: *** [Makefile:294: template-local-win7x64] Error 1
> >>
> >> builder-windows?!
> >> I thought you've enabled only fc25 template...
> >
> > i went back and enabled windows and debian templates, ive now disabled
> > windows again and just left debian
> 
> and now -> Building template fc25 (logfile: build-logs/template-fc25.log)...
> --> Done.
> Makefile.generic:28: *** Building packages for jessie not supported by
> any of configured plugins.  Stop.
> make: *** [Makefile:294: template-local-jessie] Error 1

Do you have builder-debian plugin enabled?

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZVNpCAAoJENuP0xzK19csNM0IAIJDF78Ozib/eNPrtWKq9jgS
YfjlG05WlZ6P7q09/ANN8gecb3MpaTbF9W5LymezTEEfX2XXWl+E5tAKQO3Rg9AD
WBzYKAI2U4GrWm2R5TZC/CSuDI2Qs4vKeZq94xiE4SN3N7/Xs3ir6+zXTFiPnYGw
+5bG55tl2FUL94sYMz7cGikSmN4qQ5dI9WTDUs+rt+YF8KCktQUySkYjUpAo2VC3
7+BGlEJDVyoS33Z3kX4t3wA2eW+CEYccPNAk/DutinVqHUD5b6DBdJSjH22Ir3mZ
p7F3Tm/W6xVGT/Y7xY7QMsmbbOoZfxpf8C7FVNJiT5Y8iJG2DzZ/GV2+QJrpmt8=
=Nco5
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20170629104521.GB1268%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Qubes 4.0

2017-06-29 Thread Outback Dingo 
On Thu, Jun 29, 2017 at 6:32 AM, Outback Dingo  wrote:
> On Thu, Jun 29, 2017 at 6:31 AM, Marek Marczykowski-Górecki
>  wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA256
>>
>> On Thu, Jun 29, 2017 at 06:19:34AM -0400, Outback Dingo wrote:
>>> On Wed, Jun 28, 2017 at 8:31 PM, Outback Dingo  
>>> wrote:
>>> > On Wed, Jun 28, 2017 at 8:18 PM, Outback Dingo  
>>> > wrote:
>>> >>
>>> >>
>>> >> On Jun 28, 2017 20:16, "Marek Marczykowski-Górecki"
>>> >>  wrote:
>>> >>
>>> >> -BEGIN PGP SIGNED MESSAGE-
>>> >> Hash: SHA256
>>> >>
>>> >> On Wed, Jun 28, 2017 at 07:58:24PM -0400, Outback Dingo wrote:
>>> >>> successful... now lets see what it does  -rw-r--r--  2 dingo dingo
>>> >>> 1265631232 Jun 28 19:57 Qubes-DVD-x86_64-20170628.iso
>>> >>
>>> >> Hmm, it's a bit small. Should be about 3GB. I guess templates are not
>>> >> included. Have you built them? Check
>>> >> qubes-src/linux-template-builder/rpm/noarch - if its empty, execute
>>> >> "make template", then "make iso" again.
>>> >>
>>> >>
>>> >> I configured it for only F25 templates it's installing now also during 
>>> >> the
>>> >> install I noticed it only gave me a gui option for xfce not kde I'll know
>>> >> more in 10 mins
>>> > ls 
>>> > qubes-src/linux-template-builder/rpm/noarch/qubes-template-fc25-3.1.0-201706282236.noarch.rpm
>>> >
>>> > it is there, i also noticed when qubes rebooted after install and
>>> > asked for initial configuration it failed to configure basic vms...
>>> > personal, work ... etc etc
>>>
>>> also make template
>>> -> Building template fc25 (logfile: build-logs/template-fc25.log)...
>>> --> Done.
>>> /bin/bash: 
>>> /home/dingo/qubes-builder/qubes-src/builder-windows//scripts/convert-path.sh:
>>> Permission denied
>>> /bin/bash: line 0: pwd: -W: invalid option
>>> pwd: usage: pwd [-LP]
>>> make[1]: *** No rule to make target 'update-repo'.  Stop.
>>> make: *** [Makefile:294: template-local-win7x64] Error 1
>>
>> builder-windows?!
>> I thought you've enabled only fc25 template...
>
> i went back and enabled windows and debian templates, ive now disabled
> windows again and just left debian

and now -> Building template fc25 (logfile: build-logs/template-fc25.log)...
--> Done.
Makefile.generic:28: *** Building packages for jessie not supported by
any of configured plugins.  Stop.
make: *** [Makefile:294: template-local-jessie] Error 1


>
>>
>> - --
>> Best Regards,
>> Marek Marczykowski-Górecki
>> Invisible Things Lab
>> A: Because it messes up the order in which people normally read text.
>> Q: Why is top-posting such a bad thing?
>> -BEGIN PGP SIGNATURE-
>> Version: GnuPG v2
>>
>> iQEcBAEBCAAGBQJZVNbvAAoJENuP0xzK19csPTIIAItkYku36cT5Fc1c5grmp0cu
>> 9kEn9Tr/T/T+dURk6QhmkaVI8nIu5CmsP6hvuB194Z14E0QAJhDEUSX703n6Q8NJ
>> LpB7kChJ7f+BosuNbMgR2yIgMsgOBZMa2R5OEOE0DHkBBNg/JdPVIdcPbs7DKDn1
>> hKFxDKhnV/fLrq31pnglF+HkKqb+kzWVL5k7bmL3ftLCWiE0Ps587TM4PyTmro6K
>> 6F7jYe6d6LNGFjIugAHRAKwmYnU13TfAtCvnfLeav5BTZaA14HJGPozNT9Ec2Mvt
>> qGjj2XgiFgCWAGv24Jr54DGPqdZwuFMXZjqMt9oKQ0ZkXS+SqOoEiyDwUzG3R5s=
>> =peq6
>> -END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/CAKYr3zzy9fX1%3DRL3Eu7VzMM3n8UofnYYC3E_dwcHJ7_NdZAyOg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Qubes 4.0

2017-06-29 Thread Outback Dingo 
On Thu, Jun 29, 2017 at 6:31 AM, Marek Marczykowski-Górecki
 wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> On Thu, Jun 29, 2017 at 06:19:34AM -0400, Outback Dingo wrote:
>> On Wed, Jun 28, 2017 at 8:31 PM, Outback Dingo  
>> wrote:
>> > On Wed, Jun 28, 2017 at 8:18 PM, Outback Dingo  
>> > wrote:
>> >>
>> >>
>> >> On Jun 28, 2017 20:16, "Marek Marczykowski-Górecki"
>> >>  wrote:
>> >>
>> >> -BEGIN PGP SIGNED MESSAGE-
>> >> Hash: SHA256
>> >>
>> >> On Wed, Jun 28, 2017 at 07:58:24PM -0400, Outback Dingo wrote:
>> >>> successful... now lets see what it does  -rw-r--r--  2 dingo dingo
>> >>> 1265631232 Jun 28 19:57 Qubes-DVD-x86_64-20170628.iso
>> >>
>> >> Hmm, it's a bit small. Should be about 3GB. I guess templates are not
>> >> included. Have you built them? Check
>> >> qubes-src/linux-template-builder/rpm/noarch - if its empty, execute
>> >> "make template", then "make iso" again.
>> >>
>> >>
>> >> I configured it for only F25 templates it's installing now also during the
>> >> install I noticed it only gave me a gui option for xfce not kde I'll know
>> >> more in 10 mins
>> > ls 
>> > qubes-src/linux-template-builder/rpm/noarch/qubes-template-fc25-3.1.0-201706282236.noarch.rpm
>> >
>> > it is there, i also noticed when qubes rebooted after install and
>> > asked for initial configuration it failed to configure basic vms...
>> > personal, work ... etc etc
>>
>> also make template
>> -> Building template fc25 (logfile: build-logs/template-fc25.log)...
>> --> Done.
>> /bin/bash: 
>> /home/dingo/qubes-builder/qubes-src/builder-windows//scripts/convert-path.sh:
>> Permission denied
>> /bin/bash: line 0: pwd: -W: invalid option
>> pwd: usage: pwd [-LP]
>> make[1]: *** No rule to make target 'update-repo'.  Stop.
>> make: *** [Makefile:294: template-local-win7x64] Error 1
>
> builder-windows?!
> I thought you've enabled only fc25 template...

i went back and enabled windows and debian templates, ive now disabled
windows again and just left debian

>
> - --
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJZVNbvAAoJENuP0xzK19csPTIIAItkYku36cT5Fc1c5grmp0cu
> 9kEn9Tr/T/T+dURk6QhmkaVI8nIu5CmsP6hvuB194Z14E0QAJhDEUSX703n6Q8NJ
> LpB7kChJ7f+BosuNbMgR2yIgMsgOBZMa2R5OEOE0DHkBBNg/JdPVIdcPbs7DKDn1
> hKFxDKhnV/fLrq31pnglF+HkKqb+kzWVL5k7bmL3ftLCWiE0Ps587TM4PyTmro6K
> 6F7jYe6d6LNGFjIugAHRAKwmYnU13TfAtCvnfLeav5BTZaA14HJGPozNT9Ec2Mvt
> qGjj2XgiFgCWAGv24Jr54DGPqdZwuFMXZjqMt9oKQ0ZkXS+SqOoEiyDwUzG3R5s=
> =peq6
> -END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/CAKYr3zxmLfLHJ0gAzc68R%3D9eM72RA18Q9H5S-n-KfgCMWy1nsA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Qubes 4.0

2017-06-29 Thread Marek Marczykowski-Górecki 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Thu, Jun 29, 2017 at 06:19:34AM -0400, Outback Dingo wrote:
> On Wed, Jun 28, 2017 at 8:31 PM, Outback Dingo  wrote:
> > On Wed, Jun 28, 2017 at 8:18 PM, Outback Dingo  
> > wrote:
> >>
> >>
> >> On Jun 28, 2017 20:16, "Marek Marczykowski-Górecki"
> >>  wrote:
> >>
> >> -BEGIN PGP SIGNED MESSAGE-
> >> Hash: SHA256
> >>
> >> On Wed, Jun 28, 2017 at 07:58:24PM -0400, Outback Dingo wrote:
> >>> successful... now lets see what it does  -rw-r--r--  2 dingo dingo
> >>> 1265631232 Jun 28 19:57 Qubes-DVD-x86_64-20170628.iso
> >>
> >> Hmm, it's a bit small. Should be about 3GB. I guess templates are not
> >> included. Have you built them? Check
> >> qubes-src/linux-template-builder/rpm/noarch - if its empty, execute
> >> "make template", then "make iso" again.
> >>
> >>
> >> I configured it for only F25 templates it's installing now also during the
> >> install I noticed it only gave me a gui option for xfce not kde I'll know
> >> more in 10 mins
> > ls 
> > qubes-src/linux-template-builder/rpm/noarch/qubes-template-fc25-3.1.0-201706282236.noarch.rpm
> >
> > it is there, i also noticed when qubes rebooted after install and
> > asked for initial configuration it failed to configure basic vms...
> > personal, work ... etc etc
> 
> also make template
> -> Building template fc25 (logfile: build-logs/template-fc25.log)...
> --> Done.
> /bin/bash: 
> /home/dingo/qubes-builder/qubes-src/builder-windows//scripts/convert-path.sh:
> Permission denied
> /bin/bash: line 0: pwd: -W: invalid option
> pwd: usage: pwd [-LP]
> make[1]: *** No rule to make target 'update-repo'.  Stop.
> make: *** [Makefile:294: template-local-win7x64] Error 1

builder-windows?!
I thought you've enabled only fc25 template...

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZVNbvAAoJENuP0xzK19csPTIIAItkYku36cT5Fc1c5grmp0cu
9kEn9Tr/T/T+dURk6QhmkaVI8nIu5CmsP6hvuB194Z14E0QAJhDEUSX703n6Q8NJ
LpB7kChJ7f+BosuNbMgR2yIgMsgOBZMa2R5OEOE0DHkBBNg/JdPVIdcPbs7DKDn1
hKFxDKhnV/fLrq31pnglF+HkKqb+kzWVL5k7bmL3ftLCWiE0Ps587TM4PyTmro6K
6F7jYe6d6LNGFjIugAHRAKwmYnU13TfAtCvnfLeav5BTZaA14HJGPozNT9Ec2Mvt
qGjj2XgiFgCWAGv24Jr54DGPqdZwuFMXZjqMt9oKQ0ZkXS+SqOoEiyDwUzG3R5s=
=peq6
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20170629103111.GA1268%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Qubes 4.0

2017-06-29 Thread Outback Dingo 
On Wed, Jun 28, 2017 at 8:31 PM, Outback Dingo  wrote:
> On Wed, Jun 28, 2017 at 8:18 PM, Outback Dingo  wrote:
>>
>>
>> On Jun 28, 2017 20:16, "Marek Marczykowski-Górecki"
>>  wrote:
>>
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA256
>>
>> On Wed, Jun 28, 2017 at 07:58:24PM -0400, Outback Dingo wrote:
>>> successful... now lets see what it does  -rw-r--r--  2 dingo dingo
>>> 1265631232 Jun 28 19:57 Qubes-DVD-x86_64-20170628.iso
>>
>> Hmm, it's a bit small. Should be about 3GB. I guess templates are not
>> included. Have you built them? Check
>> qubes-src/linux-template-builder/rpm/noarch - if its empty, execute
>> "make template", then "make iso" again.
>>
>>
>> I configured it for only F25 templates it's installing now also during the
>> install I noticed it only gave me a gui option for xfce not kde I'll know
>> more in 10 mins
> ls 
> qubes-src/linux-template-builder/rpm/noarch/qubes-template-fc25-3.1.0-201706282236.noarch.rpm
>
> it is there, i also noticed when qubes rebooted after install and
> asked for initial configuration it failed to configure basic vms...
> personal, work ... etc etc

also make template
-> Building template fc25 (logfile: build-logs/template-fc25.log)...
--> Done.
/bin/bash: 
/home/dingo/qubes-builder/qubes-src/builder-windows//scripts/convert-path.sh:
Permission denied
/bin/bash: line 0: pwd: -W: invalid option
pwd: usage: pwd [-LP]
make[1]: *** No rule to make target 'update-repo'.  Stop.
make: *** [Makefile:294: template-local-win7x64] Error 1


>
>>
>>
>> - --
>> Best Regards,
>> Marek Marczykowski-Górecki
>> Invisible Things Lab
>> A: Because it messes up the order in which people normally read text.
>> Q: Why is top-posting such a bad thing?
>> -BEGIN PGP SIGNATURE-
>> Version: GnuPG v2
>>
>> iQEcBAEBCAAGBQJZVEbcAAoJENuP0xzK19cs4+IH/RV2Ruj6W9ds+Ex3BAGMirq2
>> ZpnvsD+C7DHblHVdHsCMDTdpola0V/uR8JRTYBvd5muk2yV6TLRTPiMoOjna2k/M
>> Z546aQA7RJGxrNmXwbW/FCThcHmNO7s0sETBNa11YcYkDWegyHnuzb/PHzaj2qCJ
>> ZlIAiliml3Uz0mYlHj1FFT8QLAbOZ++66daO1vJnPk2cZs8PPM7/YnrJ//6Hy+me
>> kULJ8Nc42yuJI4aCteuJi4IlgtpXkQyOEFHobEUaNeb5NOuehz5+oXoEojAp2YKc
>> KGFt/wz/TCFmISZNcFPm/omHe6jTssK5QqHebLDUWZqR1yFeTbvHYh4Q2A0eIzE=
>> =ga4A
>> -END PGP SIGNATURE-
>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/CAKYr3zyL2RV7Ed5Wm8G08yhNLYU7tZ6Y%3Dd7Kuz_CJ6sJ2tx3fA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Re: [GSoC] Qubes-MIME-Handlers Weekly Progress Report #3

2017-06-29 Thread Noor Christensen 
On Wed, Jun 28, 2017 at 08:00:35PM -0700, Andrew Morgan wrote:
> Thanks, and apologies for the slight delay in the latest weekly update,
> had some major sunburn from the beach that slowed down my productivity a
> bit :) Should be out tomorrow.

Hey, it's _Summer_ of Code right? 

Sorry... Thanks for your hard work :-)

-- noor

|_|O|_|
|_|_|O|  Noor Christensen  
|O|O|O|  n...@fripost.org ~ 0x401DA1E0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20170629055505.rwkb6jqlvfisg5dl%40mail.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature

Re: [qubes-devel] Re: [GSoC] Qubes-MIME-Handlers Weekly Progress Report #3

2017-06-29 Thread Marek Marczykowski-Górecki 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Wed, Jun 28, 2017 at 08:00:35PM -0700, Andrew Morgan wrote:
> I'm starting to write some unit tests for qvm-file-trust. I found a page
> in the documentation on unit tests
> (https://www.qubes-os.org/doc/automated-tests/), and from what I can see
> all the tests are in qubes-core-admin.

Not all, but most ;)
There is also "extra tests loader":
https://github.com/QubesOS/qubes-core-admin/blob/master/qubes/tests/extra.py
It's purpose is to load tests from other repositories and run them as
part of one test run in dom0.

See split-gpg for example:
https://github.com/QubesOS/qubes-app-linux-split-gpg/tree/master/tests

This is mostly about integration tests, which require running Qubes
system. Above API allow running tests either directly from specific
component, or as part of full test run.

Specifically:
 - test case class for integration tests should inherit from
   qubes.tests.extra.ExtraTestCase, unit tests can inherit from standard
   unittest.TestCase; put them in separate files, so it's possible to
   load unittests outside of dom0
 - use self.create_vms to create required VMs, do not modify existing
   VMs
 - you can use standard methods on returned objects (.start(), .run()
   etc)
 - define appropriate entry_point in setup.py to register tests (see
   example above)

For unit tests, you can use standard unittest.TestCase and ignore most
of above things. See for example qubes-firewall unit tests:
https://github.com/QubesOS/qubes-core-agent-linux/blob/master/qubesagent/test_firewall.py
https://github.com/QubesOS/qubes-core-agent-linux/blob/master/run-tests

And then it's integrated into travis:
https://github.com/QubesOS/qubes-core-agent-linux/blob/master/.travis.yml

In short, for unit tests, create separate file, inherit from
unittest.TestCase and write them the way to not require running in Qubes
VM or dom0. unittest.mock module can be useful for this.
For integration tests (if any), put them in separate file and inherit
from qubes.tests.extra.ExtraTestCase. Those tests can check if things
really open DispVM etc. That class should orchestrate
thins from dom0 - but can simply run a test script in the VM - again,
see split-gpg (thunderbird tests).

As for unittest.mock, a simple example:

class TC_00_Example(unittest.TestCase):
@unittest.mock.patch('subprocess.check_call')
def test_xyz(self, mock_subprocess):
# do some things here
mock_subprocess.assert_called_one_with(['qvm-open-in-dvm',
'some-path')

More in module documentation. And in test_firewall.py linked above.

> The tests in the repo seem pretty high level, more at the VM level. 

In Qubes 3.x most of our tests are integration tests, then in Qubes 4.0
we have a lot of unit tests in core-admin (and some in other
repositories).

> For
> testing the cli tool, should I create a new file or integrate into one
> of the existing ones?

New file, preferably in the same repository as the tool.

> Also I noticed that most of the files seem to be gone in the master
> branch as opposed to release3.2. Is it a good idea to base on release3.2
> or will those files be permanently gone in R4?

Those files are moved to qubes/tests. But see above.

> Additionally, qvm-file-trust is written in python3, while the unittest
> files are written in python2. Do you forsee this as a problem? Should I
> convert to py2?

Keep it python3. First - in Qubes 4.0 we also migrate to python3, second
- - unit tests do not need to use test loader in core-admin.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZVK9kAAoJENuP0xzK19csk2wIAJcW4hbCKTfKY8MEK7y9DLgn
KMDq2cGvz2kdpbcApDOpjn0kYw5JkLXgvyBsZpEjUjzUWq9Bn88kDTowfld4HDTE
NWbJhrjleI1csTLUZnXOa//xQkf0AjUSrqkEHjYe6LILJMtiEC0ouHHqMm4Sian5
84Uw6bDqZi4SUmHQJkuo+OInypB5ypmTH5hVY4Ehixz21D5aMUhi7BJ5UWweJ6zS
qGz8SM+5DBNIDo1eugpu3YnrNhutICYdAH0wHLSQfhBNErYSYsQMPmwqRnePEAic
L1HWUEA9UdCVoB49LZFIVy0pgGOMbRsNI0V0AIYhLzknJwdGqa3038sCF871XbU=
=kWPa
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20170629074227.GD3857%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Re: [qubes-users] Re: Request for feedback: 4.9 Kernel

2017-06-29 Thread Zrubi 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 06/29/2017 04:57 AM, Chris Laprise wrote:

> I noticed this, too. So reverting a dispVM's template back to 4.4 
> should fix it?

Yes - but this is a general kernel changing issue, not related to any
specific kernel version.

Workaround:
After changing the kernel, you need to regenerate DispVM
savefile.



- -- 
Zrubi
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=ZBm4
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/21fc2088-acb5-e2b8-a35c-7d290397cdf6%40zrubi.hu.
For more options, visit https://groups.google.com/d/optout.