-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Wed, Apr 21, 2021 at 05:41:56AM +0000, 'Elliot Killick' via qubes-devel wrote: > Hello, everyone!
Hi! > Starting this past early September, I've been working on and off to > create a new tool for secure webcam integration in Qubes OS out of > /absolute necessity/ for remote work at both my (new) job and school at > the university I'm newly attending. The tool is called Qubes Video > Companion and I'm proud to announce that it's evolved far past that > basic requirement and at version 1.0.4 is now publicly available for > testing! This looks awesome! (...) > 2. Do video conferencing in any qube with qrexec+usbip (with a sys-usb > qube; can't be done from dom0) > > Even disregarding my personal hardware issues above, qrexec+usbip is a > mess to get working and does poor on performance according to this > GitHub issue: https://github.com/QubesOS/qubes-issues/issues/4035. > Although, I've never been able to test it out myself. Additionally, the > security concerns of using TCP/IP and USBIP between qubes is there. A small clarification: qvm-usb does not use TCP/IP. It is running USBIP protocol over qrexec instead of TCP (apparently kernel driver doesn't care ¯\_(ツ)_/¯ ). Otherwise it is all correct. (...) > Repo can be found here: > > https://github.com/elliotkillick/qubes-video-companion > > I spent a lot of time trying to make this a "just works" (and well) > experience (discounting just a couple of hiccups in the FAQ of the > README and GitHub Issues) as I would've wanted back in September (or > earlier) so please star the repo if my project achieves that for you. > Otherwise, create an issue and I'll try to diagnose and fix the problem > you're having as soon as I have a moment. I've read the README there and it all looks really well thought and made! As you noted in the issue #2, integrating it into devices widget would be awesome too. In fact, qvm-usb has quite similar architecture to Qubes Video Companion - there is qubes.USB qrexec service that is called from usb-device-wanting qube, to sys-usb. To facilitate it from dom0 level, there are two extra services: qubes.USBAttach and qubes.USBDetach. You can find it here: https://github.com/QubesOS/qubes-app-linux-usb-proxy/tree/master/qubes-rpc Plus a dom0 part to plug it as a "device": https://github.com/QubesOS/qubes-app-linux-usb-proxy/blob/master/qubesusbproxy/core3ext.py It's a bit clumsy design (make a dom0->qube1 connection, to trigger qube1->sys-usb connection), but it works, reliably. This will work for a camera. For screen share, not really - you have too many options (N x N matrix, instead of 1 x N). But maybe that isn't a problem (to have GUI for camera only)? > As for contribution to the Qubes Community Repo (if that is to be > desired) I first want to fix the issue with Firefox (see the GitHub > issue) because Mozilla has been a great supporter of Qubes with the big > grant they gave so it's the least we could do as well as to not put > Firefox at a disadvantage. Yes, having this in community repo would be fantastic! In fact, I'd even consider adding it into the main repo and have it installed by default! But for that, we need more testers, proper review etc first. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAmCAZHMACgkQ24/THMrX 1yxM/wf/ZS/2NOegExrqhio9kI+HuZYL2dE2dPNWwRivObWeCZJawrX2P93u2Lws /h2xhgZTr7ge8nQYGCzsMXxvOnDfEEmdolC6PL1JTphAaI5o2mdb0ZNu+B4Pjnb9 KJtWaZ0PXBzG6xvVproaIqRnz4Zaq+IKWw77WXxCYMHdoa0/U/eOB2S1JFEOgPMI 5Qu5Xu94XwfxRqlIlz28/YTvhIiAgybH7fK0T4kJ834Zt3VOZTtABtRpYHtiJnnQ vzL4wCpF/bvnr3nbOoMnS3ahDDSXdG5fYHAneqCit5VSD7PLGnSUiKLI8kRoAaj6 LGH43kRRGHLcxBgCYfknMsoXrhlL+w== =fBCr -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/YIBkc3KsSGMwGE99%40mail-itl.
