Re: [qubes-users] Internet Connection Is Slow

[Person]

It probably is. I've changed the proxy settings around but either "this proxy 
doesn't exist" or "error connecting". The last time I installed Qubes, this 
didn't happen, and it is the exact same version (3.2).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/113efed6-bd52-4556-be65-7c62b9689fa7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Proprietary application needs activation in each VM. But DVM?

[Franz]

On Fri, Sep 1, 2017 at 11:54 AM, Unman  wrote:

> On Thu, Aug 31, 2017 at 09:55:46PM -0300, Franz wrote:
> > >
> > Template? Now I'm getting confused. The tutorial you showed me tells to
> do:
> >
> > [user@dom0 ~]$ qvm-run -a fedora-23-dvm gnome-terminal
> >
> > Since my DispVM is based on template debian-8-multimedia, I did:
> >
> > qvm-run -a debian-8-multimedia-dvm gnome-terminal
> >
> > Is this a template?
>
> DisposableVms in 3.2 are based on a DVMTemplate, which is generated from
> an ordinary template.
>
> >
> > Anyway did the changes, created the .qubes-dispvm-customized file,
> > poweroff. Regenerated the DispVM
> > qvm-create-default-dvm debian-8-multimedia
> >
> > or am I wrong and should instead use debian-8-multimedia-dvm
>
> No, you are right.
> >
> > such as
> >
> > qvm-create-defaul-dvm debian-8-multimedia-dvm
> >
> > I have not tried it fearing to break everything, but this second option
> > seems to make more sense.
>
> No it doesnt, if you think about the Template - DVMTemplate - disposableVM
> pattern.
>
> >
> >
> > > When you open a terminal in a disposableVM, can you see the
> > > .qubes-dispvm-customized
> > > file that you created in the dispVm template?
> >
> >
> > not sure I am able to do that with a terminal, but with nautilus and
> ctrl+h
> > hidden files appear, but .qubes-dispvm-customized is NOT present
> >
>
> In that case you need to regenerate the DVMTemplate.
> >
> >
> > > (When I customise a dispVM
> > > Template I always create a file that isn't hidden, listing the changes.
> > > That way I can be sure that subsequent changes are being captured.)
> > >
> > >
> > Yes the difference is that you understand what you are doing  and I
> cannot
> > even imagine what this non hidden file may be.
> >
>
> It's ANY file that you like - When you customise the DVMTemplate,
> create a file README, and write in it what you have done.
> If you make more changes add description to that file.
> Then any disposableVM will contain a README in /home/user showing what
> custom changes you have made.
>
> > > If this is the case, then it's possible that your application is
> > > checking some feature that ISN'T common between the disposableVMs -
> disk
> > > signatures, MAC address perhaps?
> > >
> >
> > And setting viewnior  as defult "open with" option for opening .png and
> > .jpg also checks MAC address? It is just that I am doing something
> stupid.
> >
> > Anyway I tried to start again debian-8-multimedia-dvm  and the empty file
> > is there, still empty. Also there is a folder and an hidden file from
> > Softmaker that do not appear on normal DispVMs
> >
>
> This shows that your disposableVMs are not using the updated
> DVMTemplate.
> Whenever this issue has come up in the past, it's invariably been solved
> by a slow and methodical approach.
> Make sure that the DVMTemplate has customisations and the
> .qubes-dispvm-customized file in /home/user (It does, you say.)
> Close down the DVMTemplate.
> Wait.
> Regenerate the DVMTemplate (as you have).
>
> If this doesnt work, then try closing all disposableVMs, qvm-remove the
> debian-8-multimedia-dvm, and start again.
>
>
>
I rebooted the whole computer, did what you suggested, but what is strange
is that when I start the normal DispVM it starts immediately and the usual
screen (telling that the first time it is slow, but later will be faster)
does not appears. Is that expected?

Any way the DispVM does not contain the files that are in the
DispVM-template, particularly the softmaker folders and the hidden
.qubes-dispvm-customized

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAPzH-qDOOcvVVRMJygwSBJEzbnAuNnUDo64u64cDJsz4C_FhZg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Why Qubes won't UEFI boot on Macbook Air and why it isn't fixed?

[carlos . massera . filho]

On Saturday, September 2, 2017 at 5:19:17 PM UTC-7, Guerlan wrote:
> I've just found how to install Qubes on my Macbook Air 2011. It requires me 
> to activate BIOS booting. Why Qubes won't UEFI boot on my mac? Why it wasn't 
> fixed in the update?
> 
> This is just a question to learn more about booting, I'm interested :)

Hi, I just installed 3.2 on a MacBook Pro 2014. UEFI won't work but you can 
always install it without EFI in legacy mode. For me (with a 2014 model) I just 
had to use a USB 2.0 flash drive and it allowed me to boot legacy using rEFInd

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/58c2c30c-a978-4bb3-8baa-591f67874b69%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Why Qubes won't UEFI boot on Macbook Air and why it isn't fixed?

[Guerlan]

I've just found how to install Qubes on my Macbook Air 2011. It requires me to 
activate BIOS booting. Why Qubes won't UEFI boot on my mac? Why it wasn't fixed 
in the update?

This is just a question to learn more about booting, I'm interested :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0d5abc6e-eb5f-4656-99bd-ff3ca0db23c7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] set mimetypes in dispvm

[Sven Semmler]

On 09/02/17 08:06, Unman wrote:
> There's been discussion of this with okular before, [...]

Hi Unman, thank you for the hint. I found the discussion between
Francesco and cooloutac on 2/7/16. In summary:

> But it worked to use in template mimeopen -d 

So I installed perl-File-MimeInfo and then ran mimeopen -d in the VM.
Then regenerated ... and it works!

/Sven

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bc318252-b755-2ed8-a365-afdc6ad225f5%40SvenSemmler.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] Re: Does Qubes 4 allow a full (HVM?) VM to run in the background without connecting to its window?

[David Schissler]

On Saturday, September 2, 2017 at 7:21:42 AM UTC-7, Matty South wrote:
> Possibly. Are we talking windows? Because "seamless gui" might do the trick.


I'm thinking about Linux VMs running in the background without a connected 
window in the host OS.  I only use Windows for the GUI.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/13d3aaef-895b-4dd5-93b4-e0fe9dd2a03d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Does Qubes 4 allow a full (HVM?) VM to run in the background without connecting to its window?

[Matty South]

Possibly. Are we talking windows? Because "seamless gui" might do the trick.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/026b62e6-4a16-4ecb-a236-efd4fa94f96c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes 3.2 - Firewalling Tor connections?

[Unman]

On Sat, Sep 02, 2017 at 02:05:03PM +0200, Michael Strasser wrote:
> Hi!
> 
> I've been wondering if it is possible to allow connections only to
> certain domains via Tor from an app vm (e.g. Firewall blocks everything
> except google.com and access to google.com is via Tor).
> 
> >From my understanding the "Firewall rules" for the App VMs are handled
> by sys-firewall? Now the standard configuration is to route sys-whonix
> through sys-firewall, so any attempts at setting firewall rules is
> useless, because the IP address that sys-firewall sees is a Tor entry node.
> 
> Is there a way to create a second firewall net-vm that I could set up in
> front of sys-whonix, or is my understanding of networking in Qubes wrong?
> 
> 
> Best regards,
> 
> Michael
> 

Your understanding is correct, and that will work fine.
Just create a new proxy, set sys-whonix as its netvm, and change the
netvm in your appVMs to the new proxy.

Unfortunately you cant specify google.com as a target, because it is
resolved at the time the rule is set up. You could work around this by
resolving www.google.com and using all the relevant IP addresses in the
firewall rules.
Or you could have one or two entries in /etc/hosts and allow only those
IP addresses.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170902131415.4fgj27vnu2wsatbs%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] can not update debian9 TemplateVM

[Unman]

On Sat, Sep 02, 2017 at 10:52:58AM +0200, evo wrote:
> Hi!
> 
> if i start the update, it shows me:
> 
> E: could not get lock /var/lib/apt/lists/lock - open (11: resource
> temporarily unavailable)
> E: unable to lock directory /var/lib/apt/lists
> 
> how can i manage it??
> 
> thanks!

Just delete the lock file, and try again.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170902130751.2u3ddlhw7yfildcz%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] set mimetypes in dispvm

[Unman]

On Sat, Sep 02, 2017 at 12:52:07AM -0500, Sven Semmler wrote:
> Hi,
> 
> I have a customized disposable vm template. It is based on
> fedora-25-minimal and instead of firefox I have icecat installed along
> with libreoffice and okular.
> 
> When I now try qvm-open-in-dvm example.pdf I get a dialog with the
> following error message: Unable to handle mimetype of the requested file
> (exit status: 768)!
> 
> How can I set said mimetype?
> 
> /Sven
> 

You need to set the mimetype in the customized DispVM Template.
There's been discussion of this with okular before, and if I recall
correctly in Fedora you have to set the default application for PDFs
from nautilus, and then regenerate the DispVM Template using
qvm-create-default-dvm.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170902130640.zhvhg2tg2d7txxbg%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Internet Connection Is Slow

[Unman]

On Fri, Sep 01, 2017 at 07:57:17PM -0700, Person wrote:
> I have tested the WiFi, and it works on my other devices. Also I did let 
> Firefox through the firewall, and I know I typed in the domain correctly.
> 
> -- 

Can you connect using an IP address?
http://104.25.151.101 
If you see an error 1003 page then you know the problem is with DNS
resolution.

You can always look at the movement through the (Qubes) network by
opening a terminal in sys-firewall /sys-net and watching the traffic
using iptables -L -nv.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170902125705.gcdqljkko5foin7d%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Preinstallation

[Unman]

On Fri, Sep 01, 2017 at 08:24:18AM -0700, Finsh wrote:
> Am Donnerstag, 31. August 2017 15:07:34 UTC+2 schrieb Finsh:
> > hello,
> > 
> > a Buddy of mine asked me to do him a preinstallation on a Computer he got 
> > from me.However, i have Qubes so far only installed the "normal" way, how 
> > do i do a preinstallation, since i cant add any encryptionpasswords etc?
> > 
> > greetings
> 
> Yes exactly, he wanted me to install it in OEM mode like it it possible with 
> mint, where the costumer only has to specify his passwords with his first 
> boot and thats it.I simply installed it now and will show him how to change 
> the password /delete the old key(he is scared by the use of a terminal, so i 
> thought  maybe there is a way to avoid this)
> 
> thanks
> 

It would be good to have this, but it isnt currently possible.
I've provided a short script in the past to prompt for new password and
then effect the change. You might like to do this rather than showing
how to use the terminal.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20170902125214.zk5ojhvnbhlxy6oy%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes 3.2 - Firewalling Tor connections?

[Michael Strasser]

Hi!

I've been wondering if it is possible to allow connections only to
certain domains via Tor from an app vm (e.g. Firewall blocks everything
except google.com and access to google.com is via Tor).

>From my understanding the "Firewall rules" for the App VMs are handled
by sys-firewall? Now the standard configuration is to route sys-whonix
through sys-firewall, so any attempts at setting firewall rules is
useless, because the IP address that sys-firewall sees is a Tor entry node.

Is there a way to create a second firewall net-vm that I could set up in
front of sys-whonix, or is my understanding of networking in Qubes wrong?


Best regards,

Michael

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8bc84162-f39a--05b3-5e2da0323dff%40gmx.at.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] problem after qvm-start fedora-25

[QubesOS-ML]

Still no Feedback ;-)
it is not starting ando i can't go further to use it!
b' Snapshot origin LV vm-fedora25-privat not found Volume group 
qubes_dom0 .\n




Am 2017-09-01 07:47, schrieb QubesOS-ML:

Any Help I have Qubes 4.0-rc1


Still hoping to get a hint how to solve this Problem

when i do start
qvm-start fedora-25

after a while i got a
b' Snapshot origin LV vm-fedora25-privat not found Volume group 
qubes_dom0 .\n


and Fedora is not running

how to solve this problem?
have a nice day
vinc


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9d840595af5b89fab1ec6d9f4acb6f07%40kozo.ch.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] HCL Asrock AB350 Pro4 + Ryzen 5 1600 (Qubes R4)

[Foppe de Haan]

works

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/73a97dc8-43eb-4700-9c15-da42bd7f15bc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-ASRock-AB350_Pro4-20170902-112511.yml
Description: Binary data

[qubes-users] Qubes on Intel® NUC Kit NUC6CAYH

[Varmint LP]

Hello,

I'm trying since days to install Qubes on an Intel® NUC Kit NUC6CAYH which just 
won't really work. I've tried to install Qubes 3.2 which currently worked much 
better on the installation then Qubes 4.0.

For the Installation I've used an USB-Stick with a Kickstart file on it which 
let the installation run through pretty smooth but after the installation was 
done it got stuck after the loading bar with the 3 colors and Qubes 3.2 at the 
right end because it says "Filed to start Cryptography Setup" and starts the 
dracut command line. After that I can't do anything else which was suguested in 
this link which is from someone who managed to do it but I'm stuggeling with 
it. https://groups.google.com/forum/#!msg/qubes-users/-9qRHSkwfy8/CCx08nnTVEAJ

When I should have run that "cp /root/kernel*.rpm 
/mnt/sysimage/var/lib/qubes/updates" it just said couldn't find the file or 
whatever and now I'm stuck at the dracut terminal or whatever it is. 

For the installation I've prepared the USB-Stick with Rufus in DD mode. Then 
disabled the UEFI and ran legacy boot which worked fine. Added the line 
"ks=hd:sdb1:/ks.cfg" behind "quite" after pressing the Tab key to open the 
commandline or whatever.

I've also added the file he put as an attachement with out changing anything 
beside the keyboard and the timezone.

then it ran through until it said to finish press the return key. I then opened 
the command line with Alt + F2 as told. Ran the command "mount /dev/sdb1 /root" 
with the spaces and the second command "cp /root/kernel*.rpm 
/mnt/sysimage/var/lib/qubes/updates" gave me that error with couldn't find it. 
Then I unmounted with "umount /root" and I pressed enter/return.

Since then I'm stuff with this.

The installation of qubes 4.0 won't really run because I can't get pass the 
"install qubes" or "Test this media & install qubes" because there it runes the 
installation until it comes to that screen with the giant Q in 3 colours and a 
small loading bar which only filles up to 10-20% and then stops.

I would so love to just install qubes on that PC for some tests before I go and 
get me an expensive computer on which it might never run. :/

Could someone please help me with this? I might be the biggest moron who is 
missing something important and I would really love to be part of the qubes 
community but for now it just looks as if qubes is kind of broken or at least 
the installation is.

Kind regards,
Nico

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/97189854-7198-4ac2-a639-5924a5b0c9ed%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] can not update debian9 TemplateVM

[evo]

Hi!

if i start the update, it shows me:

E: could not get lock /var/lib/apt/lists/lock - open (11: resource
temporarily unavailable)
E: unable to lock directory /var/lib/apt/lists

how can i manage it??

thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9a058b92-c3a7-fc05-c8e5-46ae57f02888%40aliaks.de.
For more options, visit https://groups.google.com/d/optout.