[qubes-users] Re: Is there a mechanism that stops qube os from starting if the drive is unplugged?

[Reg Tiangha]

On 2017-06-18 6:49 PM, carr...@gmail.com
wrote:
> I ask because I plan to hot swap my qube os drive out with my windows drive. 
> When I swap back in the qube os drive it does not boot. I installed anti-evil 
> maid and encrypted the drive but no tpm. 
> 

By "hot swap," do you mean actually yanking out the hard drive while
everything is turned on and then plugging in the other hard drive,
again, while everything is still turned on? Because that's the
traditional meaning of the term. If so, unless you've got specialized
hardware that properly cuts power off to the drive before you pull it
(and even then, I don't think Windows supports being plugged
into/plugged out of a running system anyways), I think you might have
some bigger problems at the moment.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/oi7arn%24kpg%241%40blaine.gmane.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] devs - any plans to bring qubes os to power9?

['Johnysecured88' via qubes-users]

Are there any plans to bring qubes os to power9? It's a much more open platform 
and has a much better long term outlook than x86. I understand qubes os is open 
source but I'm assuming there are very low level things going on that need to 
be ported.

Any comments from the devs?

Sent with [ProtonMail](https://protonmail.com) Secure Email.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cjaOw8FDMesA4_5AYJQQTVOSmyMrFbdhvWxZKE0yaIMgviS__xVeiebxdAaojJoYwkQdiUbI7y4_V5_JM5c1UUQi4Jue0Zl-GvFxsqfAvXA%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Is there a mechanism that stops qube os from starting if the drive is unplugged?

[carre89]

I ask because I plan to hot swap my qube os drive out with my windows drive. 
When I swap back in the qube os drive it does not boot. I installed anti-evil 
maid and encrypted the drive but no tpm. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cdf0ad2e-8aa1-420b-9c6d-0329689b5533%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Great difficulty installing Qubes OS 3.2 (current release) on MSI Intel i7 7th gen, HD 630 graphics

[motech man]

I briefly looked into how to do a backup of the whole system, in case running 
thru a 3rd installation resulted in the encryption passphrase being messed up 
upon first login after finishing the install. I decided against it, not yet 
being familiar with how to do it properly. It will take some getting used to 
the compartmentalization. I'm very familiar with VMs, however Qubes is a layer 
above that and requires understanding the role each VM plays in securing the 
system.

So I simply reinstalled a 3rd time, doing everything the same as the 2nd time 
except I left the checkbox for encryption checked. I also had the network cable 
plugged in this time, but didn't explicitly configure networking. However I did 
see a few log entries that leads me to believe the network drivers were 
activated, tho other log entries seemed to indicate no network service was 
started.

I see the installer uses tmux which I am familiar with. Between the vitual 
consoles and tmux windows I popped around during the installation and looked at 
mounted devices, watched the anaconda log etc.

After installation was complete I created the user account and completed the 
install, then rebooted. This time when the system started and asked for the 
disk passphrase it accepted it and I then completed the post installation 
configuration.

Now it trully is a matter of coming up to speed on how to do things "the Qubes 
way", such as backups and updating the kernel. 

There were no issues with the passphrase on this 3rd install attempt, and now I 
have a fully secure and encrypted system.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0a33a19a-35a3-435b-87d4-69e178c63a8d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] No Filemanager after Update to debian 9

[Unman]

On Sun, Jun 18, 2017 at 10:04:05PM +0200, evo wrote:
> Hello!
> 
> after i updated my app-template to debian 9 (dom0 is on fedora24) for
> some special apps i can not run ANY filemanager anymore!
> 
> i tried to install thunar, caja, nautilus, nemo... they are all now on
> my template... but nothing can be run.
> 
> Can somebody understand it and help?
> 
> Thanks!

Open a terminal in the qube and try to run (e.g.) nautilus - what
happens?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170618224612.GB614%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] accessing nfts secondary harddrive in qube

[Unman]

On Sat, Jun 17, 2017 at 07:45:43AM -0700, carr...@gmail.com wrote:
> On Friday, June 16, 2017 at 6:24:55 PM UTC-4, Unman wrote:
> > On Fri, Jun 16, 2017 at 10:02:27AM -0700, carr...@gmail.com wrote:
> > > I mounted a secondary hard drive to my qube using the "qvm-block" cmd and 
> > > it shows up in the file explorer. When I double click it, nothing happens 
> > > and don't have permissions to access it via the terminal. What else do I 
> > > need to do to access my drive?
> > > 
> > 
> > This really isn't a Qubes problem, and is solvable with a quick search.
> > You most likely need to install ntfs-3g and associated packages - for
> > Debian look at wiki.debian.org/NTFS
> > 
> > The only Qubes specific thing here is that you will want to install the
> > drivers in the template on which your qube is based.
> I checked and ntfs-3g is installed. Fedora comes with them out of the box. 
> 

That's good - You say that you dont have permissions to access it.
Does this mean that you have mounted the drive? Or that the mount fails?
Have you tried mounting using sudo?

If the problem is that you have mounted the drive but cant access it,
then either su to root and do what you have to, or mount it with an
option:
mount -o umask=000 /dev/xvdXXX /mnt

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170618224209.GA614%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] debian-8 template broken after update

[Shashank]

Hello,

I just now tried updating the debian 8 template

- The update asked permission to restart automatically

- The update abruptly stopped after that

- The template vm just status indicator went to yellow for a long long time

- I shutdown the vm and tried starting it up back again but says cannot start 
  guid.

- During the update there were around 144 updates, 43 to be removed and 1 
upgrade

- I went through some articles which suggest going to template vm terminal 
  through dom0, and upgrading it from there. But that did not work. 

Any suggestions as to what went wrong. I am on my xps 15 9560, and on unstable 
repository. Any help would be much appreciated. Thanks

 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f652b6db-ba8c-4526-b68d-428b427754be%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-devel] Re: [qubes-users] Re: Request for feedback: 4.9 Kernel

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Thu, Jun 15, 2017 at 09:53:11PM +0200, Zrubi wrote:
> On 06/15/2017 06:34 PM, Reg Tiangha wrote:
> 
> > Curious:  For those apps that exhibit that behavior, are they
> > running on Debian 9 or Fedora 25 templates?
> 
> Nope.
> Fedora 24 mainly, and Debian 8
> The later is only for sys-net, so all my taskbar icons coming from a
> F24 based template.

Make sure you have up to date qubes-gui-agent (qubes-gui-vm). There were
some issues recently affecting integrity of window content affecting
F24 (or F25 - depending on gui-agent version ;) ).

> > Since it works fine in Debian 8 (I haven't tested much with any 
> > Fedoras), I'm wondering if it's less a kernel issue and more of an
> > issue with newer X or how Qubes integrates with newer X (but I
> > guess if it works properly on 4.4, it may be a combination of the
> > three; don't know how to fix it though).
> 
> Maybe it is a know issue, but:
> online netvm change on a disposable VM is also broken on the latest
> 4.9 VM kernel. (Qubes Manager shows it is changed, but not working in
> practice)

Can you provide more details (and even better: create an issue on
github)?

I've just tried and cannot reproduce. I've tried two scenarios:

1. fedora-25-dvm with netvm=sys-firewall, then new DispVM switched to
another netvm (sys-whonix) - it works
2. fedora-25-dvm with netvm=none, then new DispVM switched to
sys-firewall - it works

After changing netvm for fedora-25-dvm you need to regenerate DispVM
savefile.
All of this using 4.9 kernel (some .28, some .31).

> > I can't play around with this until later today, but in the
> > meantime, what graphics hardware are you running, Zrubi? And which
> > version of 4.4 are you running where things work fine? And finally
> > if you can, if it's an Intel card, can you try booting with this
> > kernel option to see if it makes a difference?
> > 
> > i915.preliminary_hw_support=0
> 
> I believe this setting will not affect this chipset. But will try if I
> have a chance. (This is my only Qubes Laptop atm and using it for
> production)
> 
> HW details:
> 
> Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz
> Intel Corporation Broadwell-U Host Bridge -OPI [8086:1604] (rev 09)
> Intel Corporation HD Graphics 5500 [8086:1616] (rev 09) (prog-if 00
> 
> SW versions:
> Qubes 3.2
> xen: 4.6.5
> kernel: 4.4.62-12

I've seen some graphics issues (different than yours) on Broadwell-based
hardware, on 4.9 kernel. Adding iommu=no-igfx to Xen cmdline helped. See
here:
https://github.com/QubesOS/qubes-issues/issues/2836

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZRurmAAoJENuP0xzK19csFNoH/1DYra+sHUObaQnIIxCWG+sv
7ET5hQmwEyT+JazddANq/JHDlwIbqrIc+f4FE/IA59kkruZiprmvWAh7mEd87zEz
9eh5cx5P0KOhSxbf1FQ5S4109/8kTUXm2rfGhJa0OQduvKk97zJ9AoiC8KdDMb4U
Xdh9EcYYr1kHgTKFWE17qi0i6urXYvl52pRUeLB6Qp0uSXL/zqqOFylSSzWdVq2c
hHQHmxrNGTd8y54M2ME3QzD28mzPdhdKSiy30mptFMr1f2cNad3mHl6/DI5PNxgA
QZW/I0Ljt6SzDAA/HJRjjK2+6fCafuuedCuqXYl/Jq5qRA5zquSr2OxZZOslUwY=
=giIk
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170618210438.GM1268%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] No Filemanager after Update to debian 9

[evo]

Hello!

after i updated my app-template to debian 9 (dom0 is on fedora24) for
some special apps i can not run ANY filemanager anymore!

i tried to install thunar, caja, nautilus, nemo... they are all now on
my template... but nothing can be run.

Can somebody understand it and help?

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5fa38911-e159-a1ae-8cd0-1986748d0145%40aliaks.de.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: [qubes-devel] AEM: Should we drop .png support?

[Rusty Bird]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Marek Marczykowski-Górecki:
> I think PNG support is a nice half-measure against shoulder surfing -
> details on the image are harder to copy/remember (or even photograph
> with a small camera), than some text.

You're right, it is better. I hadn't considered that the user can
manually clear the image from screen as soon as they've recognized it,
simply by pressing Esc to switch to text mode.

> When we get some better alternative, we can drop PNG.

Sounds good.

Rusty
-BEGIN PGP SIGNATURE-
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=TDgE
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170618191620.GA8291%40mutt.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Request for feedback: 4.9 Kernel

[Qubed One]

Reg Tiangha:
> On 06/15/2017 01:53 PM, Zrubi wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA256
>>
>> On 06/15/2017 06:34 PM, Reg Tiangha wrote:
>>
>>> Curious:  For those apps that exhibit that behavior, are they
>>> running on Debian 9 or Fedora 25 templates?
>> Nope.
>> Fedora 24 mainly, and Debian 8
>> The later is only for sys-net, so all my taskbar icons coming from a
>> F24 based template.
>>
> Thanks. I don't really use Fedora, but I'll set up a test VM once my
> laptop is finished converting this Debian 8 template to 9. Can you list
> some apps that this happens with so I can test across a variety of
> templates? I'm still leaning towards an X issue, but maybe it's always
> been there since Fedora 24, even under kernel 4.9. But I would assume if
> that was the case, then more people would have spoken up by now.
>>> Since it works fine in Debian 8 (I haven't tested much with any 
>>> Fedoras), I'm wondering if it's less a kernel issue and more of an
>>> issue with newer X or how Qubes integrates with newer X (but I
>>> guess if it works properly on 4.4, it may be a combination of the
>>> three; don't know how to fix it though).
>> Maybe it is a know issue, but:
>> online netvm change on a disposable VM is also broken on the latest
>> 4.9 VM kernel. (Qubes Manager shows it is changed, but not working in
>> practice)
>>
> I've *never* ever had this work for me (although it might have worked
> once in R3.0 or something old like that); I've always had to shut down
> the Disp VM first, alter the dvm template, and then start up a new one
> in order to change NetVMs.

I have no problem with this myself. 3.2, kernels 4.4, 4.9, 4.10. The
difference I think is that my dvm templates net-vm is set to none, so
each dispvm I start which requires net access is set manually. Is it
common for you or others to change a given dispvms net-vm more than
once? Im just curious.

>>> I can't play around with this until later today, but in the
>>> meantime, what graphics hardware are you running, Zrubi? And which
>>> version of 4.4 are you running where things work fine? And finally
>>> if you can, if it's an Intel card, can you try booting with this
>>> kernel option to see if it makes a difference?
>>>
>>> i915.preliminary_hw_support=0
>> I believe this setting will not affect this chipset. But will try if I
>> have a chance. (This is my only Qubes Laptop atm and using it for
>> production)
>>
>> HW details:
>>
>> Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz
>> Intel Corporation Broadwell-U Host Bridge -OPI [8086:1604] (rev 09)
>> Intel Corporation HD Graphics 5500 [8086:1616] (rev 09) (prog-if 00
>>
>> SW versions:
>> Qubes 3.2
>> xen: 4.6.5
>> kernel: 4.4.62-12
>>
> It might; if you could try it in both dom0 and vm (and maybe different
> combinations if you have the time), that'd be useful to help rule things
> out. It's toggled on by default to work around this:
> 
> https://www.phoronix.com/scan.php?page=news_item=intel-skl-prelim-support
> 
> but maybe it's no longer an issue with 4.9.
> 
> 
> 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b40cbfad-5eb1-3c2d-802f-6b62e5521f45%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: [qubes-devel] AEM: Should we drop .png support?

[Marek Marczykowski-Górecki]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Fri, Jun 16, 2017 at 01:47:25PM +, Rusty Bird wrote:
> Hi everyone,
> 
> What do you think about getting rid [1] of .png image secret support in
> the next major version of Anti Evil Maid? This would offset some of the
> increase in complexity incurred by the upcoming TOTP/keyfile support, in
> addition to other benefits:
> 
> - Considering that AEM is a security oriented feature, it's kind of bad
>   to implicitly encourage the user to copy a complex image format from
>   some VM to dom0 - where it will be parsed during boot. (It would be
>   possible to build something [2] secure using the qubes.GetImageRGBA
>   RPC service, but I don't know if anyone's particularly interested in
>   working on that.)
> 
> - .png support is hacky and weird: We show text secrets in the current
>   dialog, but images appear in the *next* dialog. And text secrets are
>   cleared from the screen as soon as possible, whereas image secrets
>   stay visible until Plymouth finishes.
> 
> For users who prefer the more visual approach, we could tweak the
> Plymouth theme to use a monospace font for text secrets. That should
> make ASCII art a viable replacement for conventional images.

I think PNG support is a nice half-measure against shoulder surfing -
details on the image are harder to copy/remember (or even photograph
with a small camera), than some text. When we get some better
alternative, we can drop PNG.

> 1. 
> https://github.com/rustybird/qubes-antievilmaid/commit/4e45af289d0e651a380f3182cb07901a3002905f
> 
> 2. Similar to the WIP dom0 wallpaper service:
>https://github.com/QubesOS/qubes-issues/issues/215
> 

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJZRszfAAoJENuP0xzK19csNPQIAI8ihNjr2yQsvWqJNdW0IjDa
Qy5JeFu89Xu0/YzqiyRb887q2RgnKBc+jwdQO+KypuFeLNVXvNvLOfwZA9Tx3NGW
zN3bqNmTdS9rNYo5qDvqgsdxNuGcHpfJlHwkIl97EulZZS1Y5jG+FT2p2U/x75GK
3X7kJmuPPCwSEhUD14j3URlsNWDVJi9MQST4q+XgXvmUOhtSr1h5TkKrWDyR3VXD
Dj1O2CXwVpyClf/IxU5mt6o60iL6cCDzvSFhMOEsaHzKZxkXDXe1Y7DdVIv7GU65
35rWmr6p842H6L+JeFXuUg8eLSsCfWuPof72BWveVLNH7pNnTxZnkQyIX8xwxmc=
=Lp1V
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170618185630.GA8758%40mail-itl.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Maximizing IDE(Visual studio, jetbrains Idea) performance within Qubes

[carre89]

Does anyone have experience running heavy IDEs such as Jetbrain's IDE within a 
Qube? What is the most performant setup to do this?

I tried running Android Studio within Windows and there's a lot of jank due to 
the lack of GPU acceralation. 

Installed it in a Fedora qube and ran into alot of errors :/. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f860525a-b6fa-4105-ad05-40e27840b586%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Xen high CPU usage, but nothing is running in the VM

[Chris Laprise]

On 06/18/2017 10:01 AM, qubenix wrote:

'Vincent Adultman' via qubes-users:

This happens to me sometimes on the current Xen/Linux versions. When I
look at top in the offending VM its "kswapd" that has gone berserk.

--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

--
I can confirm I've also experienced this with kswapd in either sys-net or 
sys-firewall, can't remember which. Only way around it I found was to reboot 
the VM.



I have also experience with kswapd going crazy in a Debian vm with
intense I/O and CPU. Kswapd persisted to rock the cpu even after all the
software was done, for about 10 minutes, until I shutdown the vm. Seems
to be a rare condition though because I experience it only 1/50 times
with this vm.



I recently switched to kernel 4.9 and I can't remember it happening 
since then. So maybe the problem was with the 4.8 kernel I was using...


--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f4526136-73de-a6ec-a7bd-2e584335799a%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Xen high CPU usage, but nothing is running in the VM

[qubenix]

'Vincent Adultman' via qubes-users:
> This happens to me sometimes on the current Xen/Linux versions. When I
> look at top in the offending VM its "kswapd" that has gone berserk.
> 
> --
> 
> Chris Laprise, tas...@openmailbox.org
> https://twitter.com/ttaskett
> PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886
> 
> --
> I can confirm I've also experienced this with kswapd in either sys-net or 
> sys-firewall, can't remember which. Only way around it I found was to reboot 
> the VM.
> 

I have also experience with kswapd going crazy in a Debian vm with
intense I/O and CPU. Kswapd persisted to rock the cpu even after all the
software was done, for about 10 minutes, until I shutdown the vm. Seems
to be a rare condition though because I experience it only 1/50 times
with this vm.

-- 
qubenix
GPG: B536812904D455B491DCDCDD04BE1E61A3C2E500

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/76474d76-e39b-9ea0-83e6-77a81cc2538e%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Transform an HVM into a template ?

[Swâmi Petaramesh]

Hi,

Thank you Grzesiek,

Le 22/05/2017 à 19:20, Grzesiek Chodzicki a écrit :
>>
>> I have a Qubes Windows HVM which I have installed as a standalone HVM.
...

>> Is there a way I could convert my existing Windows HVM into a "template" 
>> so I can derive AppVMs from it ?

> Create a new TemplateHVM then copy the private.img and root.img to the 
> appropriate folder

I tried this, but it didn't behave as expected : when I booted into the
resulting "Template VM"

1/ It first showed the Windows boot splash screen, which the original
VMV didn't do ;

2/ It complained it could not find the user and booted into the "default
user" with a black background ; I believe this has someting to do with
the user data being moved to private.img.

The disk structure for a template is somewhat different than the one for
a normal HVM... There is also a root-cow.img, a volatile.img... I don't
figure out yet this quite complex filesystem setup with overlays etc...

Any further help appreciated, for turning wy HVM into a template ;-)

TIA

ॐ


-- 
Swâmi Petaramesh  PGP 9076E32E

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2ffaaf90-1298-062b-f449-5e79109711ae%40petaramesh.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Fedora 25 workstation black screen.

[Michael MENG]

I tried install Fedora 25 workstation as HVM, after restart it running black 
screen and no responding. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2900d777-be96-4ab0-8f35-a225274f6ac5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] How to full screen Ubuntu HVM??

[Michael MENG]

Hi, I am new in Qubes, I did install Ubuntu as HVM, StanaloneVM? how to change 
it to full screen or increase resolution?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/70f462c6-5e76-4a9e-bcb4-24b2f880aa10%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Xen high CPU usage, but nothing is running in the VM

['Vincent Adultman' via qubes-users]

This happens to me sometimes on the current Xen/Linux versions. When I
look at top in the offending VM its "kswapd" that has gone berserk.

--

Chris Laprise, tas...@openmailbox.org
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

--
I can confirm I've also experienced this with kswapd in either sys-net or 
sys-firewall, can't remember which. Only way around it I found was to reboot 
the VM.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/iN97IVQYSzHL2rj-89YTu_69EELdKrifa-PH33Mz3dMgvfxsk6BXhyBqLXVDUPHLzdhbgTJZCJXuVmU91J7wVRVeIAfkg2wg2FrjSFIzq2Y%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] HCL Elitebook 2540p / Complete inability to use any Qubes 3.2 4.x series kernel

['Vincent Adultman' via qubes-users]

Hi all
Having upgraded to 3.2 it's basically as I assumed, no 4.x series kernel will 
boot on my laptop, the graphics on the Qubes boot screen are completely 
corrupted and some of the kernels reboot a second or so after the Qubes boot 
screen appears.

The only kernel that still functions is the leftover 3.8.17-8 from 3.1. Which 
is working fine for now, are there any downsides to continuing to use this?

I suppose I need to mark it as protected so I can try new kernels as they are 
released, but ensure it is not removed...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/iXqIIJtYyO82Qg_QBP0VB2P3_AwbTXWo84VJ7rJKr7A90xePuqIxlO7Mbb2bmpuQu-LbTUYfZcgppHKz5ScrdjTIsZvIqhwCdKn9fNPaDT4%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-Hewlett_Packard-HP_EliteBook_2540p-20170618-130131.yml
Description: application/yaml

[qubes-users] Re: Xen high CPU usage, but nothing is running in the VM

[lokedhs]

On Sunday, 18 June 2017 14:54:03 UTC+8, Vít Šesták  wrote:
> BTW, I remember having such issue (including real CPU load), but that time,
> avahi-daemon was to blame, related to VPN. But it was shown in htop. Disabling
> avahi-daemon has helped.
> 
> On recreating VMs (or VM templates): It might help if the load is shown in
> Qubes Manager. If the load is not shown in Qubes Manager, I'd guess it is a
> Xen-related or dom0-related issue.

I have tried to recreate the circumstances under which this happened, but I 
haven't been able to.

The fact that none of the diagnostics tools I ran, both on dom0 and the VM 
other than xentop was showing anything suggests to me that it's definitely 
Xen-related as you said.

If it happens again, is there something I can do to collect more information in 
order to figure out what is happening? Some tools I forgot to run, or some logs 
I never looked at?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6553a6e6-8661-4382-805b-c67472c6e822%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.