Re: [qubes-users] Re: Just realized one of the major disadvantages of Qubes OS...

2017-07-13 Thread Alex
On 07/14/2017 05:30 AM, motech man wrote:
> On Thursday, July 13, 2017 at 12:05:34 PM UTC-5, geoff.m...@gmail.com
> wrote:
>> A bit of thread necromancy here, but - if you're using a smartphone
>> in the US with mobile data, there's a *very* good chance you're
>> already using IPv6.
>> [...]>>
>> --Geo
> 
> I also expect to see routers for home market that will talk ipv6
> externally and ipv4 internally. That will help a lot of people
> transition.
Here in Italy (and a lot of other countries too) home routers just
started distributing /64 internally, in full dual-stack mode, during
this spring for the major ISPs.

Public institutions are expected to be fully dual-stack connected and
publicly available by the end of the year by law.

I don't see any advantage in having a situation like you described - why
not just full dual stack, and the devices connect to the technology they
support?

Apart from us qubes aficionados, any win10 pc, apple or android device,
and the vast majority of linux workstation/server distros fully support
dual stack configurations, and happily work preferring ipv6 when available.

-- 
Alex

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/809adbd0-7716-c7b8-9adf-df3d56787d34%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature


Re: [qubes-users] Re: How do I upgrade to Fedora 26?

2017-07-13 Thread Alex
On 07/14/2017 12:59 AM, Salmiakki wrote:
> But those should work in 3.2 just fine, right?
> 
Probably not; both because forcing the repository to the 4.0 will try to
upgrade a lot of other system components, so the actual update may
involve very convoluted command lines to avoid anything but the
template, and because AFAIR the architecture for 4.0 should be different
enough for the qubes-vm-tools not to work correctly (or at all, I don't
know).

It's strange that the templates are in one repo and not in the other,
especially since fedora 25 works perfectly in qubes 3.2, and you can get
that just upgrading the fedora 24 template.

-- 
Alex

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/923a9d20-7f10-e192-008a-7f66a9880f7a%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature


Re: [qubes-users] Re: How do I upgrade to Fedora 26?

2017-07-13 Thread Alex
On 07/14/2017 01:00 AM, Salmiakki wrote:
>> The problem is that there are no yum sources for qubes-related things
>> for fedora 26, as Foppe said, so the upgrade will likely fail and, in
>> case you manage to complete the upgrade, you will be left with a
>> non-updatable set of qubes software for a while.
> 
> So where do people who make their own templates get these things?
I started cloning the original fedora 24 template, which is already
configured for the correct yum repositories, and upgraded that to 25.
Since the yum config is dynamically expanded to the actual distro
release number, it just works. I'm on Qubes R3.2, and I don't understand
both why the fedora 25 template is missing from the 3.2 repository and
why a user should wait for such a template to be available in the
repository, while he/she could just clone the 24 and update that, if
having a cutting-edge-stable system is important in their scenario
(like, in mine it is so I did just that).

If you start with a template from scratch you can either use the yum
repositories or the debian ones, depending on what your distribution
supports, or you can include a specific version of the tools you
compile/make yourself - the vast majority of them is in Python, so there
should be little trouble using them in another distro. If you do include
a specific version updates will likely have to be manually detected and
installed, unless you also set up a custom repository and package
manager system and maintain that.

-- 
Alex

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8e07a47a-58aa-6464-3180-d61e14d1b1d6%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature


[qubes-users] Re: heads up, qubes 3.2 still vuln to cve-2016-4484 (minor severity)

2017-07-13 Thread qubester

On 07/12/2017 07:04 PM, pixel fairy wrote:

On Wednesday, July 12, 2017 at 7:32:07 PM UTC-7, pixel fairy wrote:

reported here, https://github.com/QubesOS/qubes-issues/issues/2907

wanted to give users without AEM or sed a heads up to fix their grub file or 
add a boot password if this concerns them.


to fix it with grub, (adapted from https://www.qubes-os.org/doc/usb/)

1. Open the file /etc/default/grub in dom0.
2. Find the line that begins with GRUB_CMDLINE_LINUX.
3. Add rd.shell=0 to that line.
4. Save and close the file.
5. Run the command grub2-mkconfig -o /boot/grub2/grub.cfg in dom0.
6. Reboot.

So, to exploit this, someone would need physical access to  the computer 
at risk?


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d3f48a32-6576-7754-dd51-c68018086dc4%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Just realized one of the major disadvantages of Qubes OS...

2017-07-13 Thread motech man
On Thursday, July 13, 2017 at 12:05:34 PM UTC-5, geoff.m...@gmail.com wrote:
> A bit of thread necromancy here, but - if you're using a smartphone in the US 
> with mobile data, there's a *very* good chance you're already using IPv6.
> 
> Over 16% of traffic to Google is native IPv6: 
> https://www.google.com/intl/en/ipv6/statistics.html
> 
> And as of AUgust 2016, more than 50% of the traffic to Facebook from users on 
> the 4 major cellular (mobile data) networks in the US was via IPv6: 
> http://www.internetsociety.org/deploy360/blog/2016/08/facebook-akamai-pass-major-milestone-over-50-ipv6-from-us-mobile-networks/
> 
> Akamai (one of the first CDNs) has some IPv6 adoption statistics, too: 
> https://www.akamai.com/us/en/about/our-thinking/state-of-the-internet-report/state-of-the-internet-ipv6-adoption-visualization.jsp
> 
> So, IPv6 isn't quite as niche as a lot of folks in tech seem to think. My ISP 
> started rolling it out, and while I had to do a small amount of massaging 
> with my pfSense box to have it work properly, once it was functioning 
> essentially the way an ISP-provided router might... essentially everything 
> "just worked."
> 
> --Geo

I also expect to see routers for home market that will talk ipv6 externally and 
ipv4 internally. That will help a lot of people transition.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5762ce6f-1e55-4e6d-8832-8298a89f3d46%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Chromium complains about certificate transparency

2017-07-13 Thread pixel fairy
On Monday, July 10, 2017 at 8:11:50 AM UTC-7, Unman wrote:
> On Mon, Jul 10, 2017 at 04:50:34PM +0200, Rune Philosof wrote:
> > On Mon, Jul 10, 2017 at 4:20 PM, Unman wrote:
> > 

> > Maybe your upgrade instruction 'sudo qubes-dom0-update
> > qubes-template-fedora-24' should be included on
> > https://www.qubes-os.org/doc/template/fedora/upgrade-23-to-24/ with some
> > explanation about why one would choose one method over the other.

fedora-24 is also out of support. install fedora-25.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/682fffa5-4cf5-4ff8-8df5-4a5bb4f301a2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Fedora 24 will EOL on 2017-08-08. Are F25/26 Templates ready?

2017-07-13 Thread qubester

On 07/12/2017 11:05 PM, Unman wrote:

On Fri, Jun 30, 2017 at 01:19:48AM +0200, Illidan Pornrage wrote:

The latest Fedora template, 24, in the repo will EOL soon on 2017-08-08.

Are templates with newer Fedora Versions ready?

If not, what is missing? Maybe I can help porting whatever.


There are templates for Fedora-25 for both 3.2 and 4 , and the packages
are also available at yum.qubes-os.org. so you can either upgrade
existing templates or install a shiny new one.

unman

So, can one, should one, follow the Steps,  that are in the Docs  for 
F23-F24 ?



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/528ca347-262b-694c-aa2d-5533c68c4307%40riseup.net.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Working with a BTC hardware wallet on Qubes

2017-07-13 Thread 'Essax' via qubes-users
Have you tried these steps:
1) Attach hardware wallet to sys-usb
2) Go to the dom0 Gui and and right click on the appVM you want to attach it to.
3) In the box that opens scroll down to Attach/detach block devices and your 
hardware wallet should show up to the right.
4) Right click on your hardware wallet to attach it to your appVM.

Essax
Sent with [ProtonMail](https://protonmail.com) Secure Email.

>  Original Message 
> Subject: [qubes-users] Re: Working with a BTC hardware wallet on Qubes
> Local Time: July 13, 2017 4:23 PM
> UTC Time: July 13, 2017 8:23 PM
> From: p...@mailbox.org
> To: qubes-users@googlegroups.com
>
> I do have a sys-usb vm, however I cannot attach a netVM to it since the 
> sys-usb is also a netvm.
>
> I possibly will need to create a new sys-usb vm or is there any other 
> alternative?
>
> --
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> [https://groups.google.com/d/msgid/qubes-users/1455174408.2312.1499977395517%40office.mailbox.org](https://groups.google.com/d/msgid/qubes-users/1455174408.2312.1499977395517%40office.mailbox.org?utm_medium=email&utm_source=footer).
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cQfcFtvu65bDkUPeJv9eORHYWELlb4LLb0pUnjwb-oSLAvg-O-i6TUTJDUoRhboFNOdyrLvrCeE84XVql9jlX1QDRmejPSmhSrlcHf1vxTE%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: [qubes-devel] Announcement: Toward a Reasonably Secure Laptop

2017-07-13 Thread pixel fairy
On Thursday, July 13, 2017 at 5:07:25 PM UTC-7, tai...@gmx.com wrote:
> I don't think purism should ever be considered an approved product.
> https://www.reddit.com/r/linux/comments/3anjgm/on_the_librem_laptop_purism_doesnt_believe_in/\
> Disclaimer or not people will treat an endorsement from the developer 
> team as vouching for the security/privacy of a device.
> 
> Potential honest vendors:
> Thinkpenguin
> System76

ive discussed this with system76. they're aware of qubes, but not interested in 
supporting it. i do believe them to be an honest vendor, and upfront about the 
limitations of their hardware. i have a lemur7, and had to install qubes on 
another machine and move the drive into it to get it working. the qubes-4 
initial pre release did install on it, but goes into a reboot loop when you try 
to run it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9d46c16a-5f1d-4fb5-991d-da17c37e3d27%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: [qubes-devel] Announcement: Toward a Reasonably Secure Laptop

2017-07-13 Thread taii...@gmx.com

I don't think purism should ever be considered an approved product.
https://www.reddit.com/r/linux/comments/3anjgm/on_the_librem_laptop_purism_doesnt_believe_in/\
Disclaimer or not people will treat an endorsement from the developer 
team as vouching for the security/privacy of a device.


Potential honest vendors:
Thinkpenguin
System76
Vikings (they are the only vendor that sells truly free firmware 
prebuilts such as the libre-coreboot asus boards KGPE-D16/KCMA-D8 and 
the various older thinkpads)


Going forward the only real options to have a performance freedom laptop 
that is affordable is by using owner controlled workstation boards with 
non-x86 CPU's such as AppliedMicro ARM (one 35W AppM CPU is equivalent 
to a mid range sandy bridge desktop model) and putting them in a custom 
"1U" case with a keyboard screen battery etc.


Doing a performance board fab alone costs millions of dollars so most 
small laptop vendors including purism simply buy OEM models from quanta 
and re-badge them chasing the laptop refresh cycle which results in not 
being able to buy a new laptop by the time its firmware port is done, 
whereas workstation/server/embedded boards usually have a 5-7 year 
manufacturing guarantee.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4101b93d-ca3f-ab84-61f5-55b6877d480a%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes 4 Fails to Boot With Coreboot

2017-07-13 Thread taii...@gmx.com
You would be better off posting this on the coreboot mailing list with 
serial console logs from both coreboot and the kernel (you will need a 
null modem cable) along with the coreboot .config file and build log, 
irregardless I use coreboot 4.6 and it works fine.


We need more information to be able to help you.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/91ad39ee-f647-fb04-657d-211056d0bfcf%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: How do I upgrade to Fedora 26?

2017-07-13 Thread Salmiakki
> The problem is that there are no yum sources for qubes-related things
> for fedora 26, as Foppe said, so the upgrade will likely fail and, in
> case you manage to complete the upgrade, you will be left with a
> non-updatable set of qubes software for a while.

So where do people who make their own templates get these things?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b0d35ab6-9a3a-47ad-aa29-91f21032a91a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: How do I upgrade to Fedora 26?

2017-07-13 Thread Salmiakki
But those should work in 3.2 just fine, right?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4d2b9477-9f35-40ef-b183-49b86339aaad%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS 3.2 NUC7i7BNH network driver issue

2017-07-13 Thread wannabeironman
On Thursday, July 13, 2017 at 4:14:54 PM UTC-4, Grzesiek Chodzicki wrote:
> W dniu czwartek, 13 lipca 2017 20:34:15 UTC+2 użytkownik wannabe...@gmail.com 
> napisał:
> > NUC7i7BNH 32GB RAM 500GB M2
> > 
> > I was able to load Qubes 3.2 using a efi bootloader.
> > 
> > I am assuming with bleeding edge hardware that issues may pop-up here and 
> > there.
> > 
> > My current issue is the ethernet driver in sys-net. 
> > 
> > lspci drivers are there and firmware version 
> > 20160609-66.gita4bbc811.fc23.noarch.
> > 
> > "Dom0" dmesg output:
> > 
> > pciback: driver tried to write to read-only configuration space. (bolded, 
> > not in red) See permissive attributes in sysfs.
> > 
> > At the moment I am not able to use sys-net when I assign a static or dhcp 
> > IP.
> > 
> > Any help would be much appreciated.
> 
> https://www.qubes-os.org/doc/assigning-devices/
> Go to possible issues and tr both fixes.

I tried both. I am running Qubes OS 3.2

DMA buffer size: qvm-prefs netvm = "netvm does not exist"

PCI passthrough issues:
systemctl enable qubes-pre-netvm.service = "Failed to execute operation, File 
exist"
Do I need to chmod to match qubes_netvm.service? 

No luck.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d017fa3d-9051-4490-9f86-9613608ffdc3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] How to fix/disable Graphics during Boot

2017-07-13 Thread 'P R' via qubes-users
Hello,

I have a strange video effect when booting up Qubes OS:

When booting up, the displays gets build up from the bottom to the top,
slow motion effect.
I'd like to have my Qubes started with Text only, but in native resolution
which is 2880x1620.

I was able to get rid of the Graphical Boot Menu, but the Grub menu is not
showing up in the native resolution.
I see the first booting messages in bigger a resolution and after a few
moments the screen gets black for a very  time and then switches to a
higher resolution.

My /etc/default/grub:

GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)"
GRUB_DEFAULT=saved
GRUB_DISABLE_SUBMENU=true
GRUB_TERMINAL_OUTPUT="gfxterm"
GRUB_TERMINAL=console
GRUB_GFXMODE=2880x1620x16
GRUB_CMDLINE_LINUX="rd.luks.uuid=luks-1db155a1-5c0d-4f9a-86d0-840c24e7413c
rd.lvm.lv=qubes_dom0/root rd.lvm.lv=qubes_dom0/swap
i915.preliminary_hw_support=1 rd.driver.pre=scsi_dh_rdac
rd.driver.blacklist=nouveau"
GRUB_CMDLINE_XEN_DEFAULT="console=none dom0_mem=min:1024M
dom0_mem=max:4096M"
GRUB_DISABLE_RECOVERY="true"
GRUB_THEME="/boot/grub2/themes/system/theme.txt"
GRUB_DISABLE_OS_PROBER="true"
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX rd.qubes.hide_all_usb"
GRUB_GFXPAYLOAD_LINUX=text
Any help would be nice.
Kind regards
- PhR

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAM8xnvJy7UQJ7OT_EbQYBHWJ7Ovnt7h75VX6pk8gSQa5KJo-Bg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes Pre-4.0: No VM Mannger & Libxenlight error

2017-07-13 Thread 'Flyinghigh877' via qubes-users
Qubes installed OK until very last moment when received error during Starting 
Networking. Error was that Firewall could not start. Ignored error and Qubes 
loaded in xcfe.
(1) Qubes VM Manger does not start.
(2) Qubes VM Manger icon appear in xcfe toolbar but clicking on it has no 
effect.
(3) Qubes listing on right hand side of xcfe tool bar exists and displays 
correct list of VMs
(4) If I attempt to add shortcuts to any VM I get an error that reads: "Failed 
to execute command "qubes-vm-setting-sys-firewall applications". Failed to 
execute child process "qubes-vm-setting (no such file or directory)."
(5) Dom0 does work and I can run terminal.
(6) In terminal I run "qvm-start vault" (or any VM name)
(7) Error: libxenlight failed to create new domian 'vault' (note same error on 
all VMs)
So qubes appears to install correctly and will boot into xcfe but there is no 
VM Manger and I cannot modify or start any VM. Yes I did reboot and same issue.
Please advice

Sent with [ProtonMail](https://protonmail.com) Secure Email.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/m4bS8Qagf8rgpsOi0q4aBVa0OQs5vnA08liWBgjG9-XQXaBIdCa0QeKLHnCyuYCILxPcWi9qdwSaa_k2SjVMLy1GhhsMAN47ex6H0yKuGBQ%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Issue with installation on LENOVO Yoga 900 (13ISK 80MK)

2017-07-13 Thread tsadowski
Well, the error has nothing to do with the problem. It is about kernel mode 
setting and because you get the graphical installer it is not the problem. 

I would expect your USB stick to be defective. I can install the Qubes 4.0 
pre-release on a Yoga 900 for Biz. I have to successfully boot it yet.

Cheers,
Torsten

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/07457739-67f2-4673-a3c4-b08e9b3d5b0c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Working with a BTC hardware wallet on Qubes

2017-07-13 Thread Mr. DONG
I do have a sys-usb vm, however I cannot attach a netVM to it since the sys-usb 
is also a netvm.

I possibly will need to create a new sys-usb vm or is there any other 
alternative?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1455174408.2312.1499977395517%40office.mailbox.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes OS 3.2 NUC7i7BNH network driver issue

2017-07-13 Thread Grzesiek Chodzicki
W dniu czwartek, 13 lipca 2017 20:34:15 UTC+2 użytkownik wannabe...@gmail.com 
napisał:
> NUC7i7BNH 32GB RAM 500GB M2
> 
> I was able to load Qubes 3.2 using a efi bootloader.
> 
> I am assuming with bleeding edge hardware that issues may pop-up here and 
> there.
> 
> My current issue is the ethernet driver in sys-net. 
> 
> lspci drivers are there and firmware version 
> 20160609-66.gita4bbc811.fc23.noarch.
> 
> "Dom0" dmesg output:
> 
> pciback: driver tried to write to read-only configuration space. (bolded, not 
> in red) See permissive attributes in sysfs.
> 
> At the moment I am not able to use sys-net when I assign a static or dhcp IP.
> 
> Any help would be much appreciated.

https://www.qubes-os.org/doc/assigning-devices/
Go to possible issues and tr both fixes.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/52c99560-e43e-4edc-9031-6bef5be99910%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] i3 not working on two screens

2017-07-13 Thread zioasterbald
Hi,
I've just tried i3 on qubes3.2 but there is an issue with my external monitor. 
I cannot separate them, even when I split and dispose properly the screen in 
the settings, as you can see in the image. The screens did not even refresh. 

http://imgur.com/a/7jtvI

I remember I didn't had this problem with qubes 3.1. Going into system-settings 
and selecting display would effectively apply the settings and split my desktop 
in two screen. 

Maybe I'm not calling the correct app, as I don't remember of having xfce in 
the previous 3.1 qubes. 

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/eb49c065-de70-42ef-a11a-203ccacf5372%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Qubes OS 3.2 NUC7i7BNH network driver issue

2017-07-13 Thread wannabeironman
NUC7i7BNH 32GB RAM 500GB M2

I was able to load Qubes 3.2 using a efi bootloader.

I am assuming with bleeding edge hardware that issues may pop-up here and there.

My current issue is the ethernet driver in sys-net. 

lspci drivers are there and firmware version 
20160609-66.gita4bbc811.fc23.noarch.

"Dom0" dmesg output:

pciback: driver tried to write to read-only configuration space. (bolded, not 
in red) See permissive attributes in sysfs.

At the moment I am not able to use sys-net when I assign a static or dhcp IP.

Any help would be much appreciated.  

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a594a613-f512-43da-be64-b4cba2dc3c54%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Just realized one of the major disadvantages of Qubes OS...

2017-07-13 Thread geoff . maciolek
A bit of thread necromancy here, but - if you're using a smartphone in the US 
with mobile data, there's a *very* good chance you're already using IPv6.

Over 16% of traffic to Google is native IPv6: 
https://www.google.com/intl/en/ipv6/statistics.html

And as of AUgust 2016, more than 50% of the traffic to Facebook from users on 
the 4 major cellular (mobile data) networks in the US was via IPv6: 
http://www.internetsociety.org/deploy360/blog/2016/08/facebook-akamai-pass-major-milestone-over-50-ipv6-from-us-mobile-networks/

Akamai (one of the first CDNs) has some IPv6 adoption statistics, too: 
https://www.akamai.com/us/en/about/our-thinking/state-of-the-internet-report/state-of-the-internet-ipv6-adoption-visualization.jsp

So, IPv6 isn't quite as niche as a lot of folks in tech seem to think. My ISP 
started rolling it out, and while I had to do a small amount of massaging with 
my pfSense box to have it work properly, once it was functioning essentially 
the way an ISP-provided router might... essentially everything "just worked."

--Geo

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/66b15d74-c214-43db-a025-b6be98d70290%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes silently ditches Librem

2017-07-13 Thread Noor Christensen
On Thu, Jul 13, 2017 at 01:44:24PM +0200, bald...@tutanota.com wrote:
> 
> That's easy to say Andy, but have you any proof? Qubes is an Open
> Source project so why not open up the qubes accounts and let the users
> see some factual information. Surely, there can't be anything to hide?

What would be the point of opening up "the qubes accounts"?

Let's return to your initial questions regarding Librem 13 not getting
certified. Andrew addressed your concerns and explained what happened
with the collaboration process between Librem and Qubes, and why.

Do you have any reason to believe anyone is lying?

It looks to me that neither Qubes or Librem made any promises to anyone,
and that you might have read the *partnership announcement* post as if
the certification was a fact.

They decided to not proceed with the certification, end of story.

-- noor

|_|O|_|
|_|_|O|  Noor Christensen  
|O|O|O|  n...@fripost.org ~ 0x401DA1E0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170713150106.axbqd5a77flkxa3b%40mail.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature


Re: [qubes-users] Completely disabling pulse audio (playback and record) in service VMs that don't need sound

2017-07-13 Thread cyrinux
Hi,
Very interesting.
Which template do you use?
I try to get this working with a fedora 25 based appvm and pulseaudio start yet.
Could you please do a summary?
Thanks a lot guys

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ca78daf1-74b2-46f7-add1-3f937d160034%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes silently ditches Librem

2017-07-13 Thread Michael Carbone
 To summarise. Many months after Purism started taking orders
 for Version 2 of the Librem 13, Qubes formally withdrew its
 certification leaving users in the lurch. In the meantime Qubes
 pocketed $100 per order in commission. This is unforgivable,
 indefensible behavior.
>> 
>> It's worth noting that the commissions the project received were
>> never enough to cover the cost of our developers' time and labor in
>> performing the testing and certification process, but we knew this
>> would be the case going in. This was never about the money; it was
>> about trying to make it easier for Qubes users to find compatible
>> hardware. 
>
> That's easy to say Andy, but have you any proof? Qubes is
> an Open Source project so why not open up the qubes accounts and let
> the users see some factual information. Surely, there can't be
> anything to hide?

Purism doesn't publicly publish the number of laptops it sells?

If you convince them to do so, then multiple the number of
Librem 13 (rev1) that were chosen by the user to have Qubes OS
pre-installed by $100 to get the amount the Qubes project received from
them.

The "lurch" is that new users can no longer order laptops with Qubes
pre-installed and the Qubes project no longer receives a commission for
these laptops. These seem like not good things for the Qubes project --
why would we want this outcome?

Your Librem 13 rev2 will probably work fine with Qubes, feel free to
make a HCL report and share it with the rest of the community, I'm sure
others would appreciate it:

https://www.qubes-os.org/doc/hcl/

-- 
Michael Carbone

Qubes OS | https://www.qubes-os.org
@QubesOS 

PGP fingerprint: D3D8 BEBF ECE8 91AC 46A7 30DE 63FC 4D26 84A7 33B4


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7529916c-9942-a310-cc52-f12487e8092b%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Linux audio meddling in dom0 - getting alsaequal to work

2017-07-13 Thread daltong defourne
Hi!

Long story short, I've managed to compile and install alsaequal in dom0 (had to 
find dependencies, which have different names, and had to edit makefile to 
point to /usr/lib64 instead of /usr/lib/)

It compiled allright and starts with a lot of different EQ modules.

I am using the following ~/.asoundrc

(borrowed from here 
http://nairobi-embedded.org/alsa_ladspa_example_usage.html#equalmbeq_1197 )

=
ctl.equal1 {
type equal
library "/usr/lib/ladspa/mbeq_1197.so"
module "mbeq"
}

pcm.equal1 {
type plug
slave.pcm plugequal1
}

pcm.plugequal1 {
type equal
# slave.pcm "plughw:0,0"
slave.pcm "plug:dmix"
library "/usr/lib/ladspa/mbeq_1197.so"
module "mbeq"
}
=

alsamixer -D equal1

shows UI as intended and there are no errors.

settings are adjusted and saved okay.

However, the equalizer has *ABSOLUTELY NO EFFECT*
(tested by dropping everything above 500hz and running a sine sweep test video)

I tried using different EQ modules.

I also tried restarting alsa.

No cigar.

Any idea what am I doing wrong and how do I get the EQ to work with qubes sound 
system?

P.S.:
I know there is a pulseaudio eq. It kind of sucks and on qubes produces a nasty 
clicking bug that I previously thought to be a "headphones are dying" issue.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3ed91c55-a62e-44c3-b937-c7064da9b043%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Completely disabling pulse audio (playback and record) in service VMs that don't need sound

2017-07-13 Thread daltong defourne
Okay, after a bit of fiddling I have managed to disable it in "app vms of 
choice" by simply placing a config that only has 

[Desktop Entry] 
OnlyShowIn=X-TemplateVM;

in "override" directory (~/.config/autostar) for pulseaudio

However, templates that have startup parameters for both pulseaudio and 
qubes-pulseaudio need both overriden as separate entries 

Thanks a huge lot!
You fellows rule!
On Wednesday, July 12, 2017 at 5:34:15 PM UTC+3, Noor Christensen wrote:
> On Wed, Jul 12, 2017 at 06:17:53AM -0700, daltong defourne wrote:
> > On Wednesday, July 12, 2017 at 3:04:44 AM UTC+3, Salmiakki wrote:
> > > Putting a name in there did not work for me but going to an AppVM and 
> > > doing this:
> > > mkdir ~/.config/autostart
> > > cp /etc/xdg/autostart/pulseaudio.desktop ~/.config/autostart/
> > > 
> > > and adding X-GNOME-Autostart-enabled=false
> > > to that worked!
> > 
> > Hi!
> > Tried that (X-GNOME-Autostart-enabled=false) and pulse still starts
> > 
> > Does it have to be the only line there (I mostly kept the original
> > content)
> > 
> > I also tried doing those manipulations with qubes-pulseaudio.desktop
> > file, to no result 
> 
> I don't know what the X-GNOME-Autostart-enabled does, but here's a short
> summary on how to use the "ShowIn" XDG fields.
> 
> You can provide multiple values for this field. For example, if you only
> want the application to run on AppVMs and DisposableVMs:
> 
> > [Desktop Entry]
> > OnlyShowIn=X-AppVM;X-DisposableVM;
> 
> The "ShowIn" field can also be negated. For example, if you want an
> application to never run in a TemplateVM but anywhere else:
> 
> > [Desktop Entry]
> > NotShowIn=X-TemplateVM;
> 
> From /etc/qubes/autostart/README.txt:
> 
> > This mechanism overrides only content of /etc/xdg/autostart, files
> > placed in ~/.config/autostart are unaffected, so can be used to
> > override settings per-VM basis.
> 
> It is suggested to use ~/.config/autostart if you need to override anything 
> for
> a specific VM. In your case, I guess you want something like the following...
> 
>   # In TemplateVM
>   # /etc/qubes/autostart/qubes-pulseaudio.desktop.d/30_qubes.conf:
> 
>   [Desktop Entry]
>   NotShowIn=X-QUBES;
> 
> On each AppVM you want to enable this application for, create:
> 
>   # ~/.config/autostart/qubes-pulseaudio.desktop.d/30_qubes.conf
> 
>   [Desktop Entry]
>   OnlyShowIn=X-AppVM;
>   NotShowIn=
> 
> Possibly you can skip "OnlyShowIn" and just clear the "NotShowIn" value.
> 
> I have found the following Qubes-specific identifiers so far, partly from an
> earlier qubes-users thread[0]:
> 
>   X-QUBES Seems to match any type of Qubes VM
> 
>   X-AppVM Any VM except TemplateVM, ProxyVM, NetVM
>   X-NetVM
>   X-ProxyVM
>   X-TemplateVM
>   X-DisposableVM
>   X-UpdateableVM  TemplateVM or StandaloneVM
>   X-NonUpdateableVM   Any VM except UpdateableVM
> 
> Also, here are some non-Qubes identifiers I've seen elsewhere:
> 
>   GNOME
>   KDE
>   MATE
>   Unity
>   Cinnamon
> 
> I am not aware of any way to specify a VM name in this context. Maybe because
> /etc/xdg/autostart is only relevant for a TemplateVM. And when you get to your
> custom files in ~/.config/autostart you are already in a specific VM so no 
> need
> to specify it there.
> 
> If you really want to do it on the TemplateVM and no config on AppVM, I guess
> you could put something in /rw/config/rc.local that only runs if $HOST 
> variable
> matches your VM name.
> 
> [0]  https://groups.google.com/forum/#!topic/qubes-users/smztkltkwOg
> 
> -- noor
> 
> |_|O|_|
> |_|_|O|  Noor Christensen  
> |O|O|O|~ 0x401DA1E0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/835b448b-50ad-469c-a365-fb0e1401dda1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Fedora 24 will EOL on 2017-08-08. Are F25/26 Templates ready?

2017-07-13 Thread Unman
On Thu, Jul 13, 2017 at 12:54:47PM +0100, Unman wrote:
> On Thu, Jul 13, 2017 at 11:41:23AM +0200, Noor Christensen wrote:
> > On Thu, Jul 13, 2017 at 10:05:34AM +0100, Unman wrote:
> > > On Fri, Jun 30, 2017 at 01:19:48AM +0200, Illidan Pornrage wrote:
> > > > The latest Fedora template, 24, in the repo will EOL soon on 2017-08-08.
> > > > 
> > > > Are templates with newer Fedora Versions ready?
> > > > 
> > > > If not, what is missing? Maybe I can help porting whatever.
> > > 
> > > There are templates for Fedora-25 for both 3.2 and 4 , and the packages
> > > are also available at yum.qubes-os.org. so you can either upgrade
> > > existing templates or install a shiny new one.
> > 
> > Anybody know if 3.2 will ever support FC24, or if 4.0 is the only way?
> > 
> > -- noor
> 
> I doubt that 3.2 will change dom0 version - for the reasons given here,
> there's no perceived need to update dom0 software.
> www.qubes-os.org/doc/supported-versions
> 
> A few months back there was still a thought that R4 would have 23 in
> dom0. I havent seen any update on that.
> 
> unman

My bad - the testing repository for R4 contains Fedora 25 packages for
dom0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170713121203.ut742msjmr7mvxn3%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Fedora 24 will EOL on 2017-08-08. Are F25/26 Templates ready?

2017-07-13 Thread Unman
On Thu, Jul 13, 2017 at 11:41:23AM +0200, Noor Christensen wrote:
> On Thu, Jul 13, 2017 at 10:05:34AM +0100, Unman wrote:
> > On Fri, Jun 30, 2017 at 01:19:48AM +0200, Illidan Pornrage wrote:
> > > The latest Fedora template, 24, in the repo will EOL soon on 2017-08-08.
> > > 
> > > Are templates with newer Fedora Versions ready?
> > > 
> > > If not, what is missing? Maybe I can help porting whatever.
> > 
> > There are templates for Fedora-25 for both 3.2 and 4 , and the packages
> > are also available at yum.qubes-os.org. so you can either upgrade
> > existing templates or install a shiny new one.
> 
> Anybody know if 3.2 will ever support FC24, or if 4.0 is the only way?
> 
> -- noor

I doubt that 3.2 will change dom0 version - for the reasons given here,
there's no perceived need to update dom0 software.
www.qubes-os.org/doc/supported-versions

A few months back there was still a thought that R4 would have 23 in
dom0. I havent seen any update on that.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170713115447.zwlxq6vzdziqhpur%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Qubes USB Installation Error

2017-07-13 Thread Noor Christensen
On Wed, Jul 12, 2017 at 07:44:40PM -0700, M wrote:
> Receive this error booting from live USB:
> 
> 
>Incompatible license
>Aborted. Press any key to exit.
> 
> 
> Qubes image written to USB with:
> 
> 
>dd if=Qubes-R3.2-x86_64.iso of=/dev/sdb
> 
> 
> USB drive is SanDisk 64GB USB formatted via GParted

Hmmm, what exactly did you do in GParted?

When writing the image to the entire block device (/dev/sdb), you will
also write the partition table from the image. If you modify the
partitions after this point, you might break the setup and not be able
to boot...

Also, what laptop vendor and model are you using?

-- noor

|_|O|_|
|_|_|O|  Noor Christensen  
|O|O|O|  n...@fripost.org ~ 0x401DA1E0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170713114751.2wr6w7tccwwmjpwx%40mail.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature


Re: [qubes-users] Install issues

2017-07-13 Thread Noor Christensen
On Thu, Jul 13, 2017 at 03:41:36AM -0700, Ray James wrote:
> I've picked up two issues which may be related, the first issue is
> that the installer will not perform a md5 check, and goes straight to
> Anaconda. 

Good point, although I am curious what checksum it should compare
against? I guess the intended way is to verify the image before it is
copied on to an installation medium, or verify the block device after it
has been written.

And don't trust any medium you haven't verified in this manner... :-)

-- noor

|_|O|_|
|_|_|O|  Noor Christensen  
|O|O|O|  n...@fripost.org ~ 0x401DA1E0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170713114514.mocxtevgrxe3y36f%40mail.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature


Re: [qubes-users] Re: Qubes silently ditches Librem

2017-07-13 Thread baldric


That's easy to say Andy, but have you any proof? Qubes is an Open Source 
project so why not open up the qubes accounts and let the users see some 
factual information. Surely, there can't be anything to hide?

--
Securely sent with Tutanota. Claim your encrypted mailbox today!
https://tutanota.com

12. Jul 2017 02:41 by a...@qubes-os.org:


> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
>
> On 2017-07-11 14:36, baldric-q7wo9g+UVklWk0Htik3J/> w...@public.gmane.org>  
> wrote:
>> Chris Laprise:
>>> On 07/10/2017 10:56 AM, Unman wrote:
 This simply isn't true - it's clear from the Purism statement that Librem
 13v2 has not been entered for certification.

 Since Qubes 4 is still at an early stage of development (not even RC1),
 there is little prospect of ANY machine being certified for it at this
 stage.
 The fact that there are issues with Coreboot now is irrelevant - there
 are issues with all sorts of things in 4 as it stands. But it was stated
 that Qubes certified hardware should run on open source boot firmware,
 and I dont think that has changed.

 I dont think that Librem users have been "left in the lurch". It was
 made clear that the Librem13 was not likely to be certified for Qubes 4.
 This doesnt mean that the machine wont work with 4 - if you look at the
 requirements page for 4, minimal are VT-x,VT-d SLAT.
 A quick look at the HCL and the purism site confirms that the 13 has
 CoreI5 6200U, and that CPU does have VT-x, VT-d and SLAT.
 So in what sense does OP have grounds for feeling  "left in the lurch"?

 unman

>>>
>>> And I think its worth re-stating that Qubes wants a formal certification
>>> process (which Purism chose not to continue).
>>>
>>> Qubes should be lauded for creating this process and standing by it; It
>>> guards against the erroneous perceptions people have about "PC hardware"
>>> being a uniform blank canvas for creating an OS.
>>>
>>
>>
>> Sorry guys, I realise you are a couple of die-hard Qubesmen and are
>> desperately trying to defend Qubes reputation, but you need to remove
>> the blinkers and examine the facts.
>>
>> Fact 1/ in my original post I stated "For those of us who followed Qubes
>> hardware recommendations and then bought or ordered shiny new Librem 13
>> laptops, you'll maybe not have noticed that qubes has silently and
>> sneakily withdrawn the recommendation...".  Six months after Purism
>> began taking orders for the version 2 of the Librem 13 and 12 hours
>> after I posted, Andy Wong published an announcement acknowledging that
>> Librem 13v2 was no longer certified by qubes. Now if that doesn't leave
>> people who ordered a version2 Librem13  and just recently had it
>> delivered, in the lurch - I don't know what does.
>>
>
> The announcement didn't actually say (nor would it be accurate to say)
> that the Librem 13v2 was "no longer certified," since it was never
> certified to begin with (see below).
>
>> Fact 2/ In December 15 Qubes trumpeted via its News pages
>> https://www.qubes-os.org/news/2015/12/09/purism-partnership/.Entitled>> ;
>> Partnering with Purism and the first Qubes-certified laptop.
>> Within the document is this statement; "This begins with the
>> certification of the Librem 13" - the words Librem 13 provides a link to
>> https://puri.sm/librem-13>> . Contrary to the arguments you've posted,
>> you'll notice that nowhere within the document does it specify that the
>> certification covers Version 1 of Librem13 only. To the contrary,
>> clicking the link takes you to Version2 of the Librem 13.
>>
>
> At the time of that post, there was no such thing as "v1" or "v2" of the
> Librem 13. It was just "the Librem 13." Only subsequently was a new
> configuration introduced called "Librem 13v2." When the new version was
> introduced, the original configuration was retroactively renamed "Librem
> 13v1," presumably to disambiguate it from the new version.
>
> There's no way we could have known, at the time of that original 2015
> post, that there would end up being two versions of the Librem 13, or
> that the same URL on the Purism website would be used as the product
> page for both versions. Our certification process targets a _specific
> laptop configuration_. Change the configuration, and it's no longer the
> same laptop, at least as far as our certification process is concerned.
> Why? Because what we're certifying is the fact that we've rigorously
> tested that a certain version of Qubes OS is compatible with a certain
> piece of hardware. If you change that piece of hardware or replace it
> with a different one, we can't guarantee that the new piece of hardware
> will be compatible unless we test it.
>
>> To summarise.
>> Many months after Purism started taking orders for Version 2 of the
>> Librem 13, Qubes formally withdrew its certification leaving users in
>> the lurch. In the meantime Qubes pocketed $100 per order in commission.
>> This is u

Re: [qubes-users] Fedora 24 will EOL on 2017-08-08. Are F25/26 Templates ready?

2017-07-13 Thread Noor Christensen
On Thu, Jul 13, 2017 at 10:30:00AM +, Michael Carbone wrote:
> Noor Christensen:
> > On Thu, Jul 13, 2017 at 10:05:34AM +0100, Unman wrote:
> >> On Fri, Jun 30, 2017 at 01:19:48AM +0200, Illidan Pornrage wrote:
> >>> The latest Fedora template, 24, in the repo will EOL soon on 2017-08-08.
> >>>
> >>> Are templates with newer Fedora Versions ready?
> >>>
> >>> If not, what is missing? Maybe I can help porting whatever.
> >>
> >> There are templates for Fedora-25 for both 3.2 and 4 , and the packages
> >> are also available at yum.qubes-os.org. so you can either upgrade
> >> existing templates or install a shiny new one.
> > 
> > Anybody know if 3.2 will ever support FC24, or if 4.0 is the only way?
> 
> As shown in the link you quote, you can download FC24 for 3.2:
> [...]

Sorry, my bad - I meant to ask about FC24 support in dom0...

-- noor

|_|O|_|
|_|_|O|  Noor Christensen  
|O|O|O|  n...@fripost.org ~ 0x401DA1E0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170713104837.lc72a6pp2hge4ocn%40mail.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature


[qubes-users] Install issues

2017-07-13 Thread Ray James
I've picked up two issues which may be related, the first issue is that the 
installer will not perform a md5 check, and goes straight to Anaconda.  The 
second problem is that Anaconda won't allow me to reclaim space on my drive, I 
select the drive I want to install to and the reclaim button still remains 
ghosted.  I've downloaded Qubes 3 times, hopefully from different mirrors but 
the problem still persists. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/df374ae1-366c-4a36-a936-4b56b8bdda88%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Fedora 24 will EOL on 2017-08-08. Are F25/26 Templates ready?

2017-07-13 Thread Michael Carbone
Noor Christensen:
> On Thu, Jul 13, 2017 at 10:05:34AM +0100, Unman wrote:
>> On Fri, Jun 30, 2017 at 01:19:48AM +0200, Illidan Pornrage wrote:
>>> The latest Fedora template, 24, in the repo will EOL soon on 2017-08-08.
>>>
>>> Are templates with newer Fedora Versions ready?
>>>
>>> If not, what is missing? Maybe I can help porting whatever.
>>
>> There are templates for Fedora-25 for both 3.2 and 4 , and the packages
>> are also available at yum.qubes-os.org. so you can either upgrade
>> existing templates or install a shiny new one.
> 
> Anybody know if 3.2 will ever support FC24, or if 4.0 is the only way?

As shown in the link you quote, you can download FC24 for 3.2:

http://yum.qubes-os.org/r3.2/templates-itl/rpm/

so in dom0:

F24:
sudo qubes-dom0-update qubes-template-fedora-24

F25:
sudo qubes-dom0-update qubes-template-fedora-25

as unman mentions you can also upgrade an existing Fedora template
rather than download a fresh new one:

https://www.qubes-os.org/doc/template/fedora/upgrade-23-to-24/

-- 
Michael Carbone

Qubes OS | https://www.qubes-os.org
@QubesOS 

PGP fingerprint: D3D8 BEBF ECE8 91AC 46A7 30DE 63FC 4D26 84A7 33B4


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/35496c0e-e871-9398-4cee-03eccbab52ff%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Fedora 24 will EOL on 2017-08-08. Are F25/26 Templates ready?

2017-07-13 Thread Noor Christensen
On Thu, Jul 13, 2017 at 10:05:34AM +0100, Unman wrote:
> On Fri, Jun 30, 2017 at 01:19:48AM +0200, Illidan Pornrage wrote:
> > The latest Fedora template, 24, in the repo will EOL soon on 2017-08-08.
> > 
> > Are templates with newer Fedora Versions ready?
> > 
> > If not, what is missing? Maybe I can help porting whatever.
> 
> There are templates for Fedora-25 for both 3.2 and 4 , and the packages
> are also available at yum.qubes-os.org. so you can either upgrade
> existing templates or install a shiny new one.

Anybody know if 3.2 will ever support FC24, or if 4.0 is the only way?

-- noor

|_|O|_|
|_|_|O|  Noor Christensen  
|O|O|O|  n...@fripost.org ~ 0x401DA1E0

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170713094123.7kd7tc6h3zcjdb4g%40mail.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature


Re: [qubes-users] Fedora 24 will EOL on 2017-08-08. Are F25/26 Templates ready?

2017-07-13 Thread Unman
On Fri, Jun 30, 2017 at 01:19:48AM +0200, Illidan Pornrage wrote:
> The latest Fedora template, 24, in the repo will EOL soon on 2017-08-08.
> 
> Are templates with newer Fedora Versions ready?
> 
> If not, what is missing? Maybe I can help porting whatever.

There are templates for Fedora-25 for both 3.2 and 4 , and the packages
are also available at yum.qubes-os.org. so you can either upgrade
existing templates or install a shiny new one.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170713090534.jnjyaoxd2owwmuhc%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Fedora 24 will EOL on 2017-08-08. Are F25/26 Templates ready?

2017-07-13 Thread Lorenzo Lamas
Fedora 26 has been released which means there is now less than a month before 
F24 becomes EOL..

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d37335fb-9fa9-4538-8c38-a08b258bf19c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.