[qubes-users] Re: Xen.cfg file empty after install

2016-12-31 Thread xxdeadseeds 
Checked my xen.cfg file on my working Qubes install, and it's empty.  So, I'm 
thinking I'm going down the wrong path with that.  Booted into grub (from 
rEFInd), and entered "configfile /EFI/qubes/grub.cfg" at the command line.  
This brought up a GRUB Boot Menu with Qubes as an option.  Cool!  But when I 
try to boot Qubes I get:

locading Xen 4.6.1...
error: can't find command 'multiboot'
Loading Linux 4.4.14.11.pvops.qub es.x86_64...
error: can't find command 'module'.
Loading initial ramdisk...
error: can't find command 'module'.
Press any key to continue...

Pressing any key returns me to the grub boot menu.

This appears to be (after some light research) an issue with grub looking for 
multiboot.mod.  I'll continue searching for an answer, but again, if anyone has 
advice, I would really appreciate it.

If nothing else, I'm at least hoping to document my steps for anyone else that 
stumbles across this in the future.

Happy New Year!

regards,
deadseeds

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/554dd61a-c2c8-4847-97cc-bdd168903d3b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] What decides which VM is the FirewallVM?

2016-12-31 Thread almightylaxz 
On Sunday, January 1, 2017 at 2:21:49 PM UTC+10:30, WillyPillow wrote:
> In short, there's not really an "one and only FirewallVM" in the system, but 
> FirewallVMs that are assigned to each AppVM.

I see now, thanks. Each ProxyVM acts as the FirewallVM for whichever VMs use it 
as a NetVM.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b2848f2c-57fd-41ad-b9fc-0ba190588afc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] What decides which VM is the FirewallVM?

2016-12-31 Thread WillyPillow 
 Original Message 
On 2017年1月1日 11:11, wrote:
Hi, From my understanding, the FirewallVM is where the firewall rules are put 
into place from the Qubes VM Manager. The sys-firewall VM acts as the 
FirewallVM by default but what decides which VM gets that role? Is it 
automatically the first ProxyVM connected through the NetVM? Does naming a 
ProxyVM "sys-firewall" make it the FirewallVM? I can't find anything on how the 
FirewallVM is decided in the documentation at 
https://www.qubes-os.org/doc/firewall/. It would be handy to know if creating 
all VMs from scratch instead of using the defaults when Qubes OS is installed. 
Thanks

When you create an VM, you have the option of making it a ProxyVM. After that, 
you can connect other VMs (even ProxyVMs) to that ProxyVM, making the ProxyVM 
the FirewallVM of the VM. IIRC, the option in Qubes Manager that decides what 
ProxyVM an VM connects to is simply called "NetVM".
In short, there's not really an "one and only FirewallVM" in the system, but 
FirewallVMs that are assigned to each AppVM.

--WillyPillow

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2dNAY7ocElKwM_2BrI8TUHr83iN4DsWNkatgUIOvnth_K46PzbRlKJxXSXonhhCeh_JzgIewZjkp4WqoqunGPxJHeOHCETcbfVdtt_Fql_4%3D%40nerde.pw.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] What decides which VM is the FirewallVM?

2016-12-31 Thread almightylaxz 
Hi,

>From my understanding, the FirewallVM is where the firewall rules are put into 
>place from the Qubes VM Manager. The sys-firewall VM acts as the FirewallVM by 
>default but what decides which VM gets that role? Is it automatically the 
>first ProxyVM connected through the NetVM? Does naming a ProxyVM 
>"sys-firewall" make it the FirewallVM? I can't find anything on how the 
>FirewallVM is decided in the documentation at 
>https://www.qubes-os.org/doc/firewall/. It would be handy to know if creating 
>all VMs from scratch instead of using the defaults when Qubes OS is installed.

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/941d11b0-4ea0-49c4-953e-dc5794a1c8b0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: advise on HP Zbook G3 (or another laptop with recommended spec and high RAM)

2016-12-31 Thread wael . nasreddine 
The SSD I chose is an NVMe according to the spec 
http://www8.hp.com/h20195/v2/GetDocument.aspx?docname=c04834946, last I 
checked, it's not possible to boot from NVMe, has that changed?

On Saturday, December 31, 2016 at 5:51:11 PM UTC-8, wael.na...@gmail.com wrote:
> Hello,
> 
> I am considering purchasing an HP ZBook 15 G3. This would be my first Qubes 
> OS install, and I wanted to make sure my selection would work. 
> Their Xeon version seems to come with an integrated Intel Iris P580, but they 
> also propose adding Nvidia or AMD graphic cards which I am not sure if I 
> would need at all (or if it would work at all). If I select an additional 
> graphic card, say the Nvidia 2000M, would I still be able to use the Intel 
> Iris that's integrated?
> 
> Unfortunately, HP does not provide a permanent link to a customization, so I 
> have created a screenshot of my selection that you can view here 
> https://www.awesomescreenshot.com/showImage?img_id=2008636 
> 
> Does anyone know beforehand if this setup would work? Should I expect any 
> problems during install? Finally, do you recommend any additions?
> 
> Happy New Years everyone!
> 
> Thanks,
> 
> Wael

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9e801b51-5e9e-4372-aee3-9f422a1c2e96%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] advise on HP Zbook G3 (or another laptop with recommended spec and high RAM)

2016-12-31 Thread wael . nasreddine 
Hello,

I am considering purchasing an HP ZBook 15 G3. This would be my first Qubes OS 
install, and I wanted to make sure my selection would work. 
Their Xeon version seems to come with an integrated Intel Iris P580, but they 
also propose adding Nvidia or AMD graphic cards which I am not sure if I would 
need at all (or if it would work at all). If I select an additional graphic 
card, say the Nvidia 2000M, would I still be able to use the Intel Iris that's 
integrated?

Unfortunately, HP does not provide a permanent link to a customization, so I 
have created a screenshot of my selection that you can view here 
https://www.awesomescreenshot.com/showImage?img_id=2008636 

Does anyone know beforehand if this setup would work? Should I expect any 
problems during install? Finally, do you recommend any additions?

Happy New Years everyone!

Thanks,

Wael

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e901100a-edf4-4663-b71c-217fe4900ffa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Xen.cfg file empty after install

2016-12-31 Thread xxdeadseeds 
Progress!  I did an lsblk and figured out that my "root =" should be 
root=/dev/sdb2/root (I installed on a USB flash drive).   I suppose it makes 
sense that lvdisplay wasn't coming up with anything, as I hadn't been able to 
unlock the drives.  I now get to the point where I need to enter my device 
password—which succeeds—but then the boot process hangs at "Reached target 
Basic System."

I'm then spit out to a dracut prompt, so I run lvm, and then lvdisplay, and I 
see /dev/qubes_dom0/swap and /dev/qubes_dom0/root.  So, in my Xen.cfg file, I 
have "rd.lvm.lv=/dev/qubes_dom0/root".  Here is my whole Xen.cfg file:

[global]
default=4.4.14-11.pvops.qubes.x86_64

[4.4.14-11.pvops.qubes.x86_64]
options=loglvl=all
kernel=vmlinuz-4.4.14-11.pvops.qubes.x86_64 root=/dev/sdb2/root 
vconsole.font=latarcyrheb-sun16 rd.lvm.lv=qubes_dom0/root rd.shell
ramdisk=initramfs-4.4.14-11.pvops.qubes.x86_64.img

Does this look correct?

regards,
deadseeds

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a9b8832b-37c9-4749-b4fc-3bb91fadf18e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Archlinux Community Template Qubes OS 3.2

2016-12-31 Thread Franz 
On Sat, Dec 31, 2016 at 5:00 PM,  wrote:

> @Olivier Medoc
>
> First off, thank you for all the work you've clearly put into the Arch
> Linux build and documentation for Qubes.
>
> FYI, I'd just like to add my own experiences when I tried to use the new
> template. (Since I was using the ready-built template, I skipped your build
> instructions and started at section "Package Manager Proxy Setup Section".):
>
> 1. After the initial download, the template VM wouldn't close down and was
> eventually killed by the qubes-dom0-update script. That behaviour was
> repeated after I started and tried to shutdown the template VM myself.
> 2. Just like Francesco, I had difficulty reading the command lines,
> because it is virtually impossible to distinguish a single- from a
> double-dash and copy/paste wasn't working. I tried in both Firefox and
> Chromium so it wasn't browser related. A fixed-pitch font should do the
> trick.
> 3. Since gnome-terminal wouldn't open, it would have been useful if you
> had specifically named the "archlinux terminal app" for those of us not
> versed in Arch Linux. I used xterm as a fallback, which worked, but later
> found out that there is an xfce4-terminal that is very like gnome-terminal.
> 4. Step 3 Install Pacman failed with an error about a database file not
> existing. Some research led me to try "pacman -Syy" (I think without
> "sudo") which did the trick.
> 5. Step 7 Configure Powerpill...  the description (though not the example)
> omits the need for a comma on the preceding line.
>
> Otherwise, it's now all up and running. Now all I have to do is get my
> head around Arch!
>
>
Mine is also working! Thanks to Olivier for your long time commitment.
Happy new Year!


> Mike
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-users/K_LP0VH--3-0%40tutanota.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAPzH-qBfYnMHA4zGt9eqEz1YdufUUQxU7zM4cNmA1YkCxBKe3g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Sudo dnf list qubes-template* does not list all templates

2016-12-31 Thread Franz 
On Sat, Dec 31, 2016 at 6:53 PM, WillyPillow  wrote:

>  Original Message 
> Subject: [qubes-users] Sudo dnf list qubes-template* does not list all
> templates
> Local Time: January 1, 2017 4:44 AM
> UTC Time: December 31, 2016 8:44 PM
> From: 169...@gmail.com
> To: qubes-users@googlegroups.com 
>
> Hello,
> While most templates appear, a couple of templates does not appear using
>
> sudo dnf list qubes-template*
>
> I was trying to delete one of them with
>
> sudo dnf remove qubes-template-debian-8-e
>
> and got a
>
> no match for argument: qubes-template-debian-8-e
>
> But both unlisted templates are present in Qubes Manager and work
> perfectly as far as I can understand.
>
> I do not know if it is related but I am using btrfs and recently removed
> and reinstalled debian-8 in relation to Debian upgrade security problem.
> The two unlisted templates where originally cloned from debian-8 now
> removed.
>
> Happy new Year
> Fran
>
>
> Sorry if I misunderstood you, but it seems like you're trying to remove a
> cloned template with dnf. If so, dnf only work with templates installed via
> packages (i.e. qubes-dom0-update) and not custom cloned ones.
>
>
Exactly!, it was enough to use remove in Qubes Manager :-)) Many thanks!
Best!

> Happy new year too :)
> --WillyPillow
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAPzH-qC-NzpFt6s%2BugcP3zzrJz4K1JX4rSwD31029dGqPJhrQg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - Lenovo Thinkpad Edge E560

2016-12-31 Thread Wojciech Gustowski 
UPDATE: You need to disable TPM in bios, because it cause issues with shutdown 
and sleep

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a3bf6bb5-a5ca-438d-a9fe-9ca0eadba6eb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Sudo dnf list qubes-template* does not list all templates

2016-12-31 Thread WillyPillow 
 Original Message 
Subject: [qubes-users] Sudo dnf list qubes-template* does not list all templates
Local Time: January 1, 2017 4:44 AM
UTC Time: December 31, 2016 8:44 PM
From: 169...@gmail.com
To: qubes-users@googlegroups.com 









Hello,
While most templates appear, a couple of templates does not appear using

sudo dnf list qubes-template*

I was trying to delete one of them with

sudo dnf remove qubes-template-debian-8-e

and got a

no match for argument: qubes-template-debian-8-e

But both unlisted templates are present in Qubes Manager and work perfectly as 
far as I can understand.

I do not know if it is related but I am using btrfs and recently removed and 
reinstalled debian-8 in relation to Debian upgrade security problem. The two 
unlisted templates where originally cloned from debian-8 now removed.

Happy new Year
Fran

Sorry if I misunderstood you, but it seems like you're trying to remove a 
cloned template with dnf. If so, dnf only work with templates installed via 
packages (i.e. qubes-dom0-update) and not custom cloned ones.

Happy new year too :)
--WillyPillow

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/10Z_bASoblAmL-gXTtpfADjXc6wRA77x-CiAqhzAz__y6YFhI-C8HTN6tZkpffYkPyvCcuw7JC3y64Con7NHPAkKqJOjC28Q4t80LpoyPQU%3D%40nerde.pw.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Sudo dnf list qubes-template* does not list all templates

2016-12-31 Thread Franz 
Hello,

While most templates appear, a couple of templates does not appear using

sudo dnf list qubes-template*

I was trying to delete one of them with

sudo dnf remove qubes-template-debian-8-e

and got a

no match for argument: qubes-template-debian-8-e

But both unlisted templates are present in Qubes Manager and work perfectly
as far as I can understand.

I do not know if it is related but I am using btrfs and recently removed
and reinstalled debian-8 in relation to Debian upgrade security problem.
The two unlisted templates where originally cloned from debian-8 now
removed.

Happy new Year
Fran

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAPzH-qDiQ3pbF5dYufoEWf1KLcJcPigLx4QnS%2BjiHKPoLLsj3w%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Xen.cfg file empty after install

2016-12-31 Thread xxdeadseeds 
Hi all,

I've been struggling to install Qubes on a 2015 Macbook Pro, and I seem to be 
having a problem similar to others: my Xen.cfg file is empty after the initial 
Qubes installation.  This obviously leaves me with an un-bootable system.

I've done quite a bit of poking around, and I stumbled on a github thread 
(https://github.com/QubesOS/qubes-issues/issues/794) which has information 
about what should be in a normal config file.  I've hand-modified the file, and 
have gotten up to a point where the bootloader starts to look for the root 
device and fails.  My question is, how do I figure out the location of the root 
device?  I've tried running vgdisplay and lvdisplay when in lvm (from the 
dracut command prompt), but it doesn't come up with anything.  Can anyone 
please point me in the right direction?

I apologize if this has been covered before, but I've done hours of research, 
and have been unable to come up with an answer.

regards,
deadseeds

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a22520e8-fd82-4dd4-adfa-309eca4c5b3e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Archlinux Community Template Qubes OS 3.2

2016-12-31 Thread hedron 
@Olivier Medoc
First off, thank you for all the work you've clearly put into the Arch Linux 
build and documentation for Qubes.
FYI, I'd just like to add my own experiences when I tried to use the new 
template. (Since I was using the ready-built template, I skipped your build 
instructions and started at section "Package Manager Proxy Setup Section".):
1. After the initial download, the template VM wouldn't close down and was 
eventually killed by the qubes-dom0-update script. That behaviour was repeated 
after I started and tried to shutdown the template VM myself.2. Just like 
Francesco, I had difficulty reading the command lines, because it is virtually 
impossible to distinguish a single- from a double-dash and copy/paste wasn't 
working. I tried in both Firefox and Chromium so it wasn't browser related. A 
fixed-pitch font should do the trick.3. Since gnome-terminal wouldn't open, it 
would have been useful if you had specifically named the "archlinux terminal 
app" for those of us not versed in Arch Linux. I used xterm as a fallback, 
which worked, but later found out that there is an xfce4-terminal that is very 
like gnome-terminal.4. Step 3 Install Pacman failed with an error about a 
database file not existing. Some research led me to try "pacman -Syy" (I think 
without "sudo") which did the trick. 5. Step 7 Configure Powerpill...  the 
description (though not the example) omits the need for a comma on the 
preceding line.
Otherwise, it's now all up and running. Now all I have to do is get my head 
around Arch!
Mike

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/K_LP0VH--3-0%40tutanota.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Tip: Faster reboot

2016-12-31 Thread 5sgnts+7bzd9w6fps5h0 via qubes-users 
I've also noticed that VMs that has pci devices assigned tend to be much more 
slower on the shutdown/reboot it seems that hang a long time, to the point that 
a pop up message appears stating if the user wants to kill the respective vms.
With the appvms that have no pci devices attached, they are much more faster in 
the reboot/shutdown






Sent using Guerrillamail.com
Block or report abuse: 
https://www.guerrillamail.com/abuse/?a=UFR2AB5NVqcQmh2U93EQdRjCStifx8dDiadNcQ%3D%3D


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/72db1c26a8388c290a4e4d21301253afd438%40guerrillamail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - Lenovo X230

2016-12-31 Thread noorrbertt 
Dear Paul,

I have a Lenovo x230 i5 and I wold like install the Qubes.
I have a bootable USB with 3.2 but i have a problem.

I saw this https://www.qubes-os.org/doc/uefi-troubleshooting/ but I am not sure 
how can i do that? Where I have to edit the xen.cfg file? What I missed?
Edit /mnt/sysimage/boot/efi/EFI/qubes/xen.cfg (you can use vi editor) and add 
to every kernel section:

mapbs=1
noexitboot=1
Note: You must add these parameters on two separate new lines (one paramater on 
each line) at the end of each section that includes a kernel line (i.e., all 
sections except the first one, since it doesn’t have a kernel line).

Now you can reboot the system by issuing reboot command.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bd7a41b0-10aa-4d69-89d4-d5b8dc3a17bb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Tip: Faster reboot

2016-12-31 Thread Andrew David Wong 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-12-30 10:50, Pawel Debski wrote:
> W dniu piątek, 30 grudnia 2016 16:03:12 UTC+1 użytkownik Jon Solworth napisał:
>> Is it possible to substitute Andrew's shutdown for the login screens 
>> shutdown?
> 
> Yeah. Would be great usability improvement if we had it as default install of 
> Qubes. Could you, Qubes folks, please log it as "usability feature request" 
> for next Qubes release?
> 
> PD
> 

Added as a comment to the issue I reference above:

https://github.com/QubesOS/qubes-issues/issues/1581#issuecomment-269873202

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=v5+m
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/133a59c3-c7ab-45a5-1102-1ecd4e1878c7%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Tip: Faster reboot

2016-12-31 Thread Andrew David Wong 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2016-12-30 03:47, Jarle Thorsen wrote:
>> FWIW, I've been using simple shutdown and reboot scripts to work
>> around this issue (I think since I first started using Qubes). Here's
>> an example:
>>
>> ```
>> #!/bin/bash
>> qvm-shutdown --wait --all \
>> - --exclude=sys-net \
>> - --exclude=sys-firewall \
>> - --exclude=sys-usb \
>> - --exclude=sys-whonix \
>> - --exclude=sys-vpn \
>> - --exclude=sys-etc \
>> qvm-shutdown --wait --all
>> sleep 3
>> shutdown now
> 
> I guess there is some formatting problems here? The '-' in the beginning of 
> all the --exclude lines should be removed I think?
> 

Correct. Enigmail automatically inserts them. (It also automatically removes 
them, so if you were using Enigmail, you wouldn't see them.)

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=IaS0
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/32b4cfd0-3ce3-a5ff-29d2-7763517f3018%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Number of vcpus for machine with many cores?

2016-12-31 Thread Alex 
On 12/31/2016 03:59 PM, Jarle Thorsen wrote:
> I'm abut to move my Qubes OS to a new machine with 32 cpu cores. When
> I run Windows on bare metal a program like 7-zip have no problem
> saturating almost 100% of all 32 cores.
> 
> To let a program like 7-zip do the same thing in a Qubes OS HVM,will
> I have to give the HVM close to 32 vcpus, or should I just give it
> the (recommended?) 2 vcpus and XEN will do the job of distributing
> the load?
It's generally better to leave the minimum vcpu you expect your machine
needs, and fiddle by increments of 1 to find the sweet spot.

To answer your actual question, you will not be able to let a program
fill all your cores to 100% when using a virtualization solution of any
kind.

In general, an hypervisor that is told to give 20 cores out of 32 to a
VM will try its best to give them all together at the same time, to
actually emulate the parallel cpu situation the administrator asked for.
This will lead to the hypervisor chasing this 20-free-cores moments
while juggling the whole CPU to other VMs. This leads to situations like
the one described in
http://serverfault.com/questions/576078/vsphere-allocate-100-cpu-to-1-vm-88-efficiency/

So, still speaking in general, you should leave the minimum VCPU number
you think you'll need and let the hypervisor work its magic. More advice
in this direction can be found here:
http://serverfault.com/questions/380505/vmware-esxi-virtual-machine-configuration-for-hyperthreading

Yet that's not the end of the story; your specific CPU and/or memory
configuration may actually favor some apparently weird combos, like you
may get better performance with 7 VCPU assigned to your Windows machine
than with any other setting - that's for the experimental part.

Back to theory, to complete the landscape, if your CPU has 32 cores you
can technically assign more than that to any VM; you may have a
situation where there are ~100 vcpu assigned to the running VMs, even if
you have 32 cores only. The hypervisor will just have more work to do,
and depending on the hypervisor it will either simulate the missing
cores (by suspending some vcpus earlier than others for the same VM) or
just ignore the overflowing count. If you assign a big number of VCPUs
to your VMs, so as to overbook the actual number of cores, but still
less than the total number for each VM, you will just have them executed
sequentially (and, depending on the particular configuration, you may
waste a lot of useful CPU resources).

Last but not least do remember that hyperthreading is not full blown
multi-cores, and multi-core is not full-blown multi-processor: your
mileage will vary accordingly.

-- 
Alex

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8803e766-6a8b-d5bf-342e-3c42550d2232%40gmx.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Number of vcpus for machine with many cores?

2016-12-31 Thread Jarle Thorsen 
I'm abut to move my Qubes OS to a new machine with 32 cpu cores. When I run 
Windows on bare metal a program like 7-zip have no problem saturating almost 
100% of all 32 cores.

To let a program like 7-zip do the same thing in a Qubes OS HVM,will I have to 
give the HVM close to 32 vcpus, or should I just give it the (recommended?) 2 
vcpus and XEN will do the job of distributing the load? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/28c62dad-a96a-4b9e-b0b8-adf575295dc4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Trouble reading data CD under Qubes

2016-12-31 Thread Pawel Debski 
W dniu niedziela, 4 grudnia 2016 00:48:36 UTC+1 użytkownik Marek 
Marczykowski-Górecki napisał:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> On Sat, Dec 03, 2016 at 03:21:48AM -0800, Pawel Debski wrote:
> > Folks,
> > 
> > I have a PC with two SATA controllers: primary master holds my SDD with 
> > Qubes, while secondary master has CD drive attached.
> > 
> > When I insert a data CD it gets mounted by dom0 and the files are 
> > accessible. I do not want to open these files in dom0 however. So in the VM 
> > Manager I right click my favourite perssonal-full-sw appVM that I created 
> > previously and select:
> > 
> > Attach/detach block devices -> Attach dom0:sr0
> > 
> > and nothing happens. 
> > 
> > Even more: CD content is still visible in dom0 and /dev/sr0 is still 
> > mounted in /run/media/pdebski/CDTITLE
> > 
> > How can I better diagnose the problem?
> 
> I think the problem is you have it mounted in dom0. If unmount it there,
> it should just work.
> 
> - -- 
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
> 
> iQEcBAEBCAAGBQJYQ1nPAAoJENuP0xzK19cs7dkH/3tixTrrQAaozHR6A+J3Z/wX
> wqheJcIwYdGYxGYd4wKC2breqED7tuVertg771ZhwJsN+YOshLiPywfY13Xj52cV
> Yfr3JYLkSFyhuE8PSQjQm5Zzovhm/PNOoMuBBsVm2l/afTv66iDedxpoisEGk2PO
> fc38ZaCVy5eXtE8cWuIqIUDXoVelD2Qlr2rxIBbewykCFqK0DgcxTUkh2qwrBlF3
> 7O1K1+hOmYkKFaOoM0lUoRuBUeG6Lh0hm+hHk0KlJuEW1uPzV/6SfWgZO2bu13UR
> 6x5LiXSMIxLzLnGyzzx0uMVhOAuWoNJeVPwm4AEi5AIsXyTek+LyU8F4WZVbF/k=
> =/m+X
> -END PGP SIGNATURE-

How do I check whether it is really mounted in dom0?
(I think it is not, but maybe I'm doing something wrong)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/005eec90-f573-4ee3-aa70-d3ec34c7b8f5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Q3.2 installation issues - x not starting on XPS13 HVW8J

2016-12-31 Thread li...@digitaldissidents.org 
Op zaterdag 31 december 2016 11:24:33 UTC+1 schreef li...@digitaldissidents.org:
> Op woensdag 28 december 2016 21:47:00 UTC+1 schreef Marek 
> Marczykowski-Górecki:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA256
> > 
> > On Mon, Dec 26, 2016 at 12:59:52PM +0100, Niels ten Oever wrote:
> > > On 12/24/2016 01:52 PM, Niels ten Oever wrote:
> > > > Hello all,
> > > > 
> > > > Merry christmas and thanks a lot for your awesome work on Qubes. I have
> > > > been trying to install Qubes R3.2-x86_64 on my XPS 13 - 9360HVW8J with a
> > > > Intel Core i7-7500U, but I've run into some problems. (My specific
> > > > laptop model is not mentioned in the HCL [0]).
> > > > 
> > > > Firstly the x server is not starting.
> > > > 
> > > > Secondly the text-based installer is running in a loop when I try set
> > > > the installation destination I run into the following error:
> > > > 
> > > > 'Encryption requested for LUKS device nvme0n1p2 but no encryption key
> > > > specified for this device', which seems to be a upstream problem [0]
> > > > 
> > > > I read about a kickstart file , but that seems to be for an older
> > > > version (Qubes R2) [1].
> > > > 
> > > > Any suggestions on how I could get this working? Thanks much in advance.
> > >
> > > Hi all,
> > > 
> > > Things I've tried thusfar:
> > > 
> > > - I tried in EFI and legacy mode,
> > > 
> > > - I verified the Internet Core I7 7500 Kaby Lake processor does VT-D and
> > > VT-X [0] and both are switched on in the bios.
> > > 
> > > - I've added nomodeset as a kernel option in xen.cfg
> > > 
> > > Still no luck with getting xserver to start during install process.
> > > 
> > > Any other hints? Would be much appreciated!
> > 
> > The kickstart way should still work. Other thing to try, is to take out
> > the disk, install in other machine and then put it back. Or, if that's
> > hard for hardware reasons (for example you don't have other machine
> > supporting nvme), install to USB stick (set the same partition size as
> > the target disk), then transfer installed system to your target machine
> > (just dd the whole disk).
> > 
> 
> Thanks! I made some progress! By adding 'intremap=nosid,no_x2apic_optout 
> intel_iommu=on' to the kernel option and booting in EFI mode I managed to get 
> the X started. Hurray!
> 
> Now I am in the installation process and am unfortunately not able to select 
> and Installation Destination. (Even though there is a 512 GB SSD drive in the 
> device, which I could see/select in text mode).
> 
> Any suggestions?
> 

Disable RAID ON and changing it to AHCI will do the trick! Finally installing 
#excited



> Cheers,
> 
> Niels
> 
> 
> 
> > > [0]
> > > https://ark.intel.com/products/95451/Intel-Core-i7-7500U-Processor-4M-Cache-up-to-3_50-GHz-
> > > > [0]
> > > > https://groups.google.com/forum/#!msg/qubes-users/-9qRHSkwfy8/CCx08nnTVEAJ
> > > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1020345
> > > > [2]
> > > > https://groups.google.com/forum/#!msg/qubes-users/-9qRHSkwfy8/CCx08nnTVEAJ
> > > > 
> > > 
> > 
> > - -- 
> > Best Regards,
> > Marek Marczykowski-Górecki
> > Invisible Things Lab
> > A: Because it messes up the order in which people normally read text.
> > Q: Why is top-posting such a bad thing?
> > -BEGIN PGP SIGNATURE-
> > Version: GnuPG v2
> > 
> > iQEcBAEBCAAGBQJYZCS/AAoJENuP0xzK19csnpIH/2+1s2ex2slWRE/nLQrODTQr
> > XH95+jnTlhIE4ALUwIUzHuYtH7+D+j03A12QB1KniBN6941dvlhYin+fe1O4ld7x
> > uc/EQOcBicCTgWmhe0bGg0b2KG4dyWN2f2ElYjYMVm8RQQxhotB2YRt3ElZflJ2A
> > JQzCnmz1J9o/nrWGzKgpdLpDPBBwoEUvp6wC9mkNrHQ6CK6wp8a4sfKAm+2cRcFS
> > aC6Gpo/xc9kXqKgKGX82/ZiknX4SvFVoi+q8ad1PatSBhwJtWoK9KznJ2XIm3lQv
> > 97a4k1rnVTkH5uewRZJaxnQoOIakP+mi8g6uVrfnlf27rylJxYCr53Q9s/vWyiY=
> > =WrMy
> > -END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/837a597c-77d0-4da3-9127-ac3b4baa619b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Q3.2 installation issues - x not starting on XPS13 HVW8J

2016-12-31 Thread li...@digitaldissidents.org 
Op woensdag 28 december 2016 21:47:00 UTC+1 schreef Marek Marczykowski-Górecki:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> On Mon, Dec 26, 2016 at 12:59:52PM +0100, Niels ten Oever wrote:
> > On 12/24/2016 01:52 PM, Niels ten Oever wrote:
> > > Hello all,
> > > 
> > > Merry christmas and thanks a lot for your awesome work on Qubes. I have
> > > been trying to install Qubes R3.2-x86_64 on my XPS 13 - 9360HVW8J with a
> > > Intel Core i7-7500U, but I've run into some problems. (My specific
> > > laptop model is not mentioned in the HCL [0]).
> > > 
> > > Firstly the x server is not starting.
> > > 
> > > Secondly the text-based installer is running in a loop when I try set
> > > the installation destination I run into the following error:
> > > 
> > > 'Encryption requested for LUKS device nvme0n1p2 but no encryption key
> > > specified for this device', which seems to be a upstream problem [0]
> > > 
> > > I read about a kickstart file , but that seems to be for an older
> > > version (Qubes R2) [1].
> > > 
> > > Any suggestions on how I could get this working? Thanks much in advance.
> >
> > Hi all,
> > 
> > Things I've tried thusfar:
> > 
> > - I tried in EFI and legacy mode,
> > 
> > - I verified the Internet Core I7 7500 Kaby Lake processor does VT-D and
> > VT-X [0] and both are switched on in the bios.
> > 
> > - I've added nomodeset as a kernel option in xen.cfg
> > 
> > Still no luck with getting xserver to start during install process.
> > 
> > Any other hints? Would be much appreciated!
> 
> The kickstart way should still work. Other thing to try, is to take out
> the disk, install in other machine and then put it back. Or, if that's
> hard for hardware reasons (for example you don't have other machine
> supporting nvme), install to USB stick (set the same partition size as
> the target disk), then transfer installed system to your target machine
> (just dd the whole disk).
> 

Thanks! I made some progress! By adding 'intremap=nosid,no_x2apic_optout 
intel_iommu=on' to the kernel option and booting in EFI mode I managed to get 
the X started. Hurray!

Now I am in the installation process and am unfortunately not able to select 
and Installation Destination. (Even though there is a 512 GB SSD drive in the 
device, which I could see/select in text mode).

Any suggestions?

Cheers,

Niels



> > [0]
> > https://ark.intel.com/products/95451/Intel-Core-i7-7500U-Processor-4M-Cache-up-to-3_50-GHz-
> > > [0]
> > > https://groups.google.com/forum/#!msg/qubes-users/-9qRHSkwfy8/CCx08nnTVEAJ
> > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1020345
> > > [2]
> > > https://groups.google.com/forum/#!msg/qubes-users/-9qRHSkwfy8/CCx08nnTVEAJ
> > > 
> > 
> 
> - -- 
> Best Regards,
> Marek Marczykowski-Górecki
> Invisible Things Lab
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
> 
> iQEcBAEBCAAGBQJYZCS/AAoJENuP0xzK19csnpIH/2+1s2ex2slWRE/nLQrODTQr
> XH95+jnTlhIE4ALUwIUzHuYtH7+D+j03A12QB1KniBN6941dvlhYin+fe1O4ld7x
> uc/EQOcBicCTgWmhe0bGg0b2KG4dyWN2f2ElYjYMVm8RQQxhotB2YRt3ElZflJ2A
> JQzCnmz1J9o/nrWGzKgpdLpDPBBwoEUvp6wC9mkNrHQ6CK6wp8a4sfKAm+2cRcFS
> aC6Gpo/xc9kXqKgKGX82/ZiknX4SvFVoi+q8ad1PatSBhwJtWoK9KznJ2XIm3lQv
> 97a4k1rnVTkH5uewRZJaxnQoOIakP+mi8g6uVrfnlf27rylJxYCr53Q9s/vWyiY=
> =WrMy
> -END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fede4659-ba3a-465b-bbeb-b334dba1b9eb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.