Re: [qubes-devel] Re: Preliminary test image of Qubes 4.0

[Jean-Philippe Ouellet]

On Thu, Jul 6, 2017 at 11:51 PM, pixel fairy <pixelfa...@gmail.com> wrote:
> On Thursday, July 6, 2017 at 2:44:36 PM UTC-7, Marek Marczykowski-Górecki
> wrote:
>>
>>
>>
>> Download links:
>> https://ftp.qubes-os.org/~marmarek/Qubes-DVD-x86_64-20170706.iso
>> https://ftp.qubes-os.org/~marmarek/Qubes-DVD-x86_64-20170706.iso.asc
>> (signed with my code signing key)
>
>
> wheres your code signing key?

Here: 
https://github.com/QubesOS/qubes-secpack/blob/master/keys/core-devs/marmarek-qubes-code-signing-keys.asc
Also here: https://keys.qubes-os.org/keys/qubes-developers-keys.asc

Those keys are signed by the master signing key (hopefully
427F11FD0FAA4B080123F01CDDFA1A3E36879494?) which you hopefully already
have a trusted copy of.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/CABQWM_BK7CNxcJN7neGVeFd-tk5gn9i5KeAbnhKwwm%3DTKhBDiA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-devel] Re: Preliminary test image of Qubes 4.0

[pixel fairy]

On Thursday, July 6, 2017 at 2:44:36 PM UTC-7, Marek Marczykowski-Górecki 
wrote:
>
>
>
> Download links: 
> https://ftp.qubes-os.org/~marmarek/Qubes-DVD-x86_64-20170706.iso 
> https://ftp.qubes-os.org/~marmarek/Qubes-DVD-x86_64-20170706.iso.asc 
> (signed with my code signing key) 
>

wheres your code signing key? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/956115fd-676e-405e-94f9-467501a74db1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-devel] Preliminary test image of Qubes 4.0

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi all,

Here is long awaited test image of upcoming Qubes 4.0-rc1. This isn't "release
candidate" yet, because there are still some missing parts. Don't try to use it
for anything serious yet.

Known issues/limitations:
 - in-place upgrade is not supported (this will be the case for the final
   release too)
 - backup / restore do not work yet - no way to move the data from Qubes 3.2
 - on some machines (Librem 13v1, 15v2) sys-usb crashes at startup
 - on some machines (Thinkpad t460p) installation crashes when started from USB
   3.0 stick; works fine from USB 2.0
 - this ISO contains only Fedora 25 and Debian 8 templates, no Whonix templates
 - there is no GUI tool to create VMs and change theirs settings yet; same for
   adding applications to the menu
 - new devices widget do not start automatically - you need to launch it
   with "qui-devices" command
 - time synchronization do not work (qvm-sync-clock)
 - VM windows do not have appropriate icons retrieved
 - application entries in the menu lack icons
 - `qvm-run --pass-io` wait for local EOF (ctrl-d), even if remote process
   already have exited
 - the above applies also to qubes-dom0-update tool (which use qvm-run
   internally) - you need to press ctrl-d after package download to continue
   with update
 - `qvm-run -u root` doesn't work on debian-8 template
 - `qvm-shutdown --all` do not work, and consequently system shutdown hangs
 - gnome terminal and other applications using dbus activation do not work;
   xterm do work
 - initial configuration fails with "name 'default_dispvm' not defined'
 - Disposable VMs do not work

A lot of things under the hood are different from Qubes 3.2, but most command
line tools are the same - possibly with slightly different options.

After installing it, we recommend to enable testing repositories (both in
dom0 and templates) and install updates. We are working hard on fixing those
remaining issues, so new packages may be already available with some
fixes.

As announced earlier, by default all VMs are HVM. This means it requires IOMMU
(aka VT-d on Intel CPU) for working sys-net and sys-usb. In this test image,
we've left enabled window of VM's local display, during its startup - so you'll
easily see if anything goes wrong. Additionally there are three ways of booting
VM:
 - as HVM, using kernel provided by dom0 - this is default, it's controlled by
   non-empty "kernel" VM property and "hvm" set to True
 - as HVM, using bootloader and kernel installed inside template - to enable
   this mode, set "kernel" property to empty string:
 
 qvm-prefs VMNAME kernel ""
 
 - as PV, using kernel provided by dom0 - we've left this option available
   mostly for now, later it will be converted to PVH (when it will finally
   works...); to enable this mode, keep kernel set to appropriate version, then
   set "hvm" property to False


Troubleshooting hints:
 - if you get "Got empty response from qubesd" error, look into journalctl in 
dom0
 - if you get "internal error: libxenlight failed ...", look into
   /var/log/libvirt/libxl/libxl-driver.log in dom0
 - to access VM console either enable debug mode (qvm-prefs VMNAME debug True)
   and use its graphics output, or use `sudo xl console -t pv VMNAME`

If you want to send a bug report, please check if it isn't reported already -
both in qubes-issues and on a mailing list. Also, if you want to report
something on the above "known issues" list - we know it already...

Download links:
https://ftp.qubes-os.org/~marmarek/Qubes-DVD-x86_64-20170706.iso
https://ftp.qubes-os.org/~marmarek/Qubes-DVD-x86_64-20170706.iso.asc
(signed with my code signing key)

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZXq8/AAoJENuP0xzK19csHr0H/R4LW1QpcX1VkLvr6OmUo7Uk
3Ly1/o8NIVRyjJQDc6S6sC0qSdUjKeHgq5qZaDO6aEPzztWTy52sjpbOBRqW426Y
ynDYBBXJ5MhkfSPMQj6vKmNu2LgoUT5l4c3TS6pCsOk+w4nRM4v3r/FGFO472K5V
XNPdCVc1EwIlbceqnmuU4+76KBmkil7om6digbmbwV7KPe7zryBp/pitCGuSIjeL
ACbj42G2Lo30jyUykL1QjlyWYmowr/MZPgRXnYQfVGeDYPhDzmiP5latRNqrB0pP
Ky1DG43cZpy51gYZOoMHOgfsVcO1uur/wR3yaIukKtyyTB0njfeD+L+tRx1BJgE=
=bvkI
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20170706214430.GA5042%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Qubes 4.0

[mikihonzero]

On Thursday, June 29, 2017 at 10:52:22 AM UTC, Outback Dingo wrote:
>
> On Thu, Jun 29, 2017 at 6:45 AM, Marek Marczykowski-Górecki 
>  wrote: 
> > -BEGIN PGP SIGNED MESSAGE- 
> > Hash: SHA256 
> > 
> > On Thu, Jun 29, 2017 at 06:41:33AM -0400, Outback Dingo wrote: 
> >> On Thu, Jun 29, 2017 at 6:32 AM, Outback Dingo  > wrote: 
> >> > On Thu, Jun 29, 2017 at 6:31 AM, Marek Marczykowski-Górecki 
> >> >  wrote: 
> >> >> -BEGIN PGP SIGNED MESSAGE- 
> >> >> Hash: SHA256 
> >> >> 
> >> >> On Thu, Jun 29, 2017 at 06:19:34AM -0400, Outback Dingo wrote: 
> >> >>> On Wed, Jun 28, 2017 at 8:31 PM, Outback Dingo  > wrote: 
> >> >>> > On Wed, Jun 28, 2017 at 8:18 PM, Outback Dingo <
> outbac...@gmail.com > wrote: 
> >> >>> >> 
> >> >>> >> 
> >> >>> >> On Jun 28, 2017 20:16, "Marek Marczykowski-Górecki" 
> >> >>> >>  wrote: 
> >> >>> >> 
> >> >>> >> -BEGIN PGP SIGNED MESSAGE- 
> >> >>> >> Hash: SHA256 
> >> >>> >> 
> >> >>> >> On Wed, Jun 28, 2017 at 07:58:24PM -0400, Outback Dingo wrote: 
> >> >>> >>> successful... now lets see what it does  -rw-r--r--  2 dingo 
> dingo 
> >> >>> >>> 1265631232 Jun 28 19:57 Qubes-DVD-x86_64-20170628.iso 
> >> >>> >> 
> >> >>> >> Hmm, it's a bit small. Should be about 3GB. I guess templates 
> are not 
> >> >>> >> included. Have you built them? Check 
> >> >>> >> qubes-src/linux-template-builder/rpm/noarch - if its empty, 
> execute 
> >> >>> >> "make template", then "make iso" again. 
> >> >>> >> 
> >> >>> >> 
> >> >>> >> I configured it for only F25 templates it's installing now also 
> during the 
> >> >>> >> install I noticed it only gave me a gui option for xfce not kde 
> I'll know 
> >> >>> >> more in 10 mins 
> >> >>> > ls 
> qubes-src/linux-template-builder/rpm/noarch/qubes-template-fc25-3.1.0-201706282236.noarch.rpm
>  
>
> >> >>> > 
> >> >>> > it is there, i also noticed when qubes rebooted after install and 
> >> >>> > asked for initial configuration it failed to configure basic 
> vms... 
> >> >>> > personal, work ... etc etc 
> >> >>> 
> >> >>> also make template 
> >> >>> -> Building template fc25 (logfile: 
> build-logs/template-fc25.log)... 
> >> >>> --> Done. 
> >> >>> /bin/bash: 
> /home/dingo/qubes-builder/qubes-src/builder-windows//scripts/convert-path.sh: 
>
> >> >>> Permission denied 
> >> >>> /bin/bash: line 0: pwd: -W: invalid option 
> >> >>> pwd: usage: pwd [-LP] 
> >> >>> make[1]: *** No rule to make target 'update-repo'.  Stop. 
> >> >>> make: *** [Makefile:294: template-local-win7x64] Error 1 
> >> >> 
> >> >> builder-windows?! 
> >> >> I thought you've enabled only fc25 template... 
> >> > 
> >> > i went back and enabled windows and debian templates, ive now 
> disabled 
> >> > windows again and just left debian 
> >> 
> >> and now -> Building template fc25 (logfile: 
> build-logs/template-fc25.log)... 
> >> --> Done. 
> >> Makefile.generic:28: *** Building packages for jessie not supported by 
> >> any of configured plugins.  Stop. 
> >> make: *** [Makefile:294: template-local-jessie] Error 1 
> > 
> > Do you have builder-debian plugin enabled? 
>
> like 
> BUILDER_PLUGINS = builder-fedora builder-debian 
>
> i just added it 
>
> > 
> > - -- 
> > Best Regards, 
> > Marek Marczykowski-Górecki 
> > Invisible Things Lab 
> > A: Because it messes up the order in which people normally read text. 
> > Q: Why is top-posting such a bad thing? 
> > -BEGIN PGP SIGNATURE- 
> > Version: GnuPG v2 
> > 
> > iQEcBAEBCAAGBQJZVNpCAAoJENuP0xzK19csNM0IAIJDF78Ozib/eNPrtWKq9jgS 
> > YfjlG05WlZ6P7q09/ANN8gecb3MpaTbF9W5LymezTEEfX2XXWl+E5tAKQO3Rg9AD 
> > WBzYKAI2U4GrWm2R5TZC/CSuDI2Qs4vKeZq94xiE4SN3N7/Xs3ir6+zXTFiPnYGw 
> > +5bG55tl2FUL94sYMz7cGikSmN4qQ5dI9WTDUs+rt+YF8KCktQUySkYjUpAo2VC3 
> > 7+BGlEJDVyoS33Z3kX4t3wA2eW+CEYccPNAk/DutinVqHUD5b6DBdJSjH22Ir3mZ 
> > p7F3Tm/W6xVGT/Y7xY7QMsmbbOoZfxpf8C7FVNJiT5Y8iJG2DzZ/GV2+QJrpmt8= 
> > =Nco5 
> > -END PGP SIGNATURE- 
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups "qubes-devel" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an email to qubes-devel...@googlegroups.com . 
> > To post to this group, send email to qubes...@googlegroups.com 
> . 
> > To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-devel/20170629104521.GB1268%40mail-itl.
>  
>
> > For more options, visit https://groups.google.com/d/optout. 
>

Pretty much the same problems for me. Make iso doesn't include templates. I 
built fc25 which is straightforward. Jessie builts a  ~560mb rpm, but 
errors out: template-local-jessie+minimal+no recommends.
The important thing missing are make iso not including the templates (no 
errors though), any ideas ? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this 

[qubes-devel] Re: Managing the Qubes Documentation

[Andrew Morgan]

On 07/04/2017 03:25 PM, je wrote:
> Hello,
>
> we should have a mechanism to manage the state of the documentation. The
> documentation is only helpful if the documents reflect the actual
> situation of Qubes OS. For example, documents which are written for
> Qubes v1 or 2 are outdated. Wikipedia displays certain meta information
> above articles which are outdated and/or need to be reviewed to reflect
> the latest changes. My idea is to have a similar mechanism. For example,
> it would be helpful to look after every Qubes OS, Fedora or Debian
> release through the documentation and mark the documents which need to
> be updated for the new release. In addition, it would be helpful to
> create an issue for every outdated document. This way it would be easy
> for the community to contribute to the documentation.
>
> Best regards
>   J. Eppler
>
> --
> You received this message because you are subscribed to the Google
> Groups "qubes-devel" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to
> qubes-devel+unsubscr...@googlegroups.com
> .
> To post to this group, send email to
> qubes-devel@googlegroups.com
> .
> To view this discussion on the web visit
>
https://groups.google.com/d/msgid/qubes-devel/04281dee-4fbe-46ec-b31f-fd76244756f2%40googlegroups.com
>
.
> For more options, visit https://groups.google.com/d/optout.

Additionally documentation version snapshots would be great. Being able
to choose a version of the docs from a dropdown list for each QubesOS
version would help keep things less cluttered as we start to have a
split in users using v3 and v4.

Andrew Morgan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/ojli4i%24i92%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature