Re: [qubes-users] update dom0 offline?

[Unman]

On Sun, Dec 10, 2017 at 10:58:28AM -0600, Sven Semmler wrote:
> On Dec 7, 2017, at 6:37 PM, Unman  wrote:
> > 
> > You can always grab the files from yum.qubes-os.org on the old computer.
> 
> You mean https://yum.qubes-os.org/r3.2/current/dom0/fc23/rpm/ ?
> 
> All of them? There seem to be different versions. If I copy all of them, is 
> there a way to tell dnf to just upgrade the packets that are already 
> installed?
> 
> Here is what I already tried:
> 
> - installed R4rc3 and confirmed that kernel 4.9 supports my hardware 
> 
> - on my old R3.2 machine uname -r returns 4.9 both in dom0 and the fedora-25 
> template
> 
> - I copied that template to the new machine now running R3.2 freshly 
> installed and both dom0 and the template report kernel 4.4 (expected for dom0 
> but would have thought the template would continue to report 4.9)
> 
> - I then downloaded and transferred and installed the dom0 kernel 4.9 rpm 
> from yum.qubes-os.org. Now dom0 reports 4.9 but the fedora-25 template still 
> reports 4.4 ??? 
> 
> - when trying to install kernel-qubes-vm-4.9.56-21.pvops.qubes.x86_64.rpm I 
> get dependency errors. 
> 
> Do I just download all rpms and let dnf sort it out? 
> 
> Thank you for your time and support!
> 
> /Sven
> 
The repo contains all the old versions of files as well, so if you are
downloading manually you only need to pull the most recent versions.

An alternative approach might be to try this in your network connected
box:
sudo qubes-dom0-update --action=download 
I *think* that dnf will do the right thing and resolve dependencies for
you. This should download the packages to the current directory, then
you can transfer them to the offline box and install them manually.
dnf will select the most recent version if you only give a package name -
if you want a specific version you can specify that.





-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20171211010639.wqls6aet7kctox2l%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: speed between usb-qube-vm and another app-vm

[charly LEMMINKÄINEN]

Le lundi 11 décembre 2017 00:47:20 UTC+1, Drew White a écrit :
> On Monday, 11 December 2017 10:12:47 UTC+11, charly LEMMINKÄINEN  wrote:
> > Hi,
> > 
> > I would like if we have any idea about what would be the speed between the 
> > usb-qube appvm and another appvm if we attach an external hdd to this 
> > appvm?Normally I should have 25MB but here I have only 2.5 MB...
> 
> You have a 25 MB file and it only transfers 2.5 MB of it?
> 
> What is the error?

No sorry if I have misexplained this. Normally I should have a transfer of 
25MB/s (mesured from a transfer of a file on the same usb-qube of a file) . And 
here the same file from the usb-qubes to another appvm by attaching the hdd to 
this appvm I have 2.5MB/s so is that normal to only have 10% of transfer rate 
between the usb-qube and the appvms or is it a bug ? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0ff56369-9711-4c0a-ab5b-d0ea696bb156%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: speed between usb-qube-vm and another app-vm

[Drew White]

On Monday, 11 December 2017 10:12:47 UTC+11, charly LEMMINKÄINEN  wrote:
> Hi,
> 
> I would like if we have any idea about what would be the speed between the 
> usb-qube appvm and another appvm if we attach an external hdd to this 
> appvm?Normally I should have 25MB but here I have only 2.5 MB...

You have a 25 MB file and it only transfers 2.5 MB of it?

What is the error?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/31cf66ef-0f72-47a9-80c4-9c512051804c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Yubikey SHA1 challenge-response doesn't match with the openssl result

[Adrian Rocha]

Hi, I am following the proposed configuration for 2 factor authentication from:

https://www.qubes-os.org/doc/yubi-key/

But it isn't working for me. I found that the reason is that the responses from 
yubikey and from openssl doesn't match.
I used the yubikey personalization GUI to configure the key, this is the 
configuration:
Challenge-Response: HMAC-SHA1,12/10/17 5:17 
PM,2,,,d574183f4b63995b077987f14457ab19f194c710,,,0,0,0,0,0,0,0,0,1,1

But when I manually test it using a random input, the result doesn't match:

Open SSL:
$ echo 
56508ce98a10825321744c1e0565706f44bd585081d22ba5261836c45eabf14f92f2956b90fcb4eb058c380b8929518b365e28e926464f68707a6831a2eab8fe
 | xxd -r -ps | openssl dgst -sha1 -macopt 
hexkey:d574183f4b63995b077987f14457ab19f194c710 -mac HMAC -r | cut -f1 -d ' '
Result:
48e6c79fcb8f5f0dde68e26d646d2908b22321a1

Yubikey:
$ ykchalresp -2 -x 
56508ce98a10825321744c1e0565706f44bd585081d22ba5261836c45eabf14f92f2956b90fcb4eb058c380b8929518b365e28e926464f68707a6831a2eab8fe
Result:
9f7d86c78ccdc232fcbec48e37fe2ac1f3f53a61

I double checked the slot, algorithm used, etc. And I also tried using 
different keys

Where I am wrong?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3e81779a-9663-4b13-abac-33c2fbae207a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] speed between usb-qube-vm and another app-vm

[charly LEMMINKÄINEN]

Hi,

I would like if we have any idea about what would be the speed between the 
usb-qube appvm and another appvm if we attach an external hdd to this 
appvm?Normally I should have 25MB but here I have only 2.5 MB...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/40294958-cb81-427c-98b2-2441cc010618%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Boot QUBES with kexec

[Robert Walz]

Hello Holger,

thanks, I already found this on https://github.com/osreserach/heads

"Booting Qubes requires patching Xen's real mode startup code see
patches/xen-4.6.3.patch and adding no-real-mode to start of the Xen command
line.
Booting or installing Qubes is a bit hacky and needs to be documented."



On Sun, Dec 10, 2017 at 5:35 PM, Holger Levsen 
wrote:

> On Sun, Dec 10, 2017 at 03:05:11PM +0100, Robert Walz wrote:
> > Does anybody know how to kexec the xen hypervisor?
>
> http://osresearch.net/ uses kexec to boot Qubes.
>
>
> --
> cheers,
> Holger
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CANYLK6GBwpt5LqB-1Hj9kHzFK8WCTA8xgv352CMi_FXmFncd_A%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] update dom0 offline?

[Sven Semmler]

On Dec 7, 2017, at 6:37 PM, Unman  wrote:
> 
> You can always grab the files from yum.qubes-os.org on the old computer.

You mean https://yum.qubes-os.org/r3.2/current/dom0/fc23/rpm/ ?

All of them? There seem to be different versions. If I copy all of them, is 
there a way to tell dnf to just upgrade the packets that are already installed?

Here is what I already tried:

- installed R4rc3 and confirmed that kernel 4.9 supports my hardware 

- on my old R3.2 machine uname -r returns 4.9 both in dom0 and the fedora-25 
template

- I copied that template to the new machine now running R3.2 freshly installed 
and both dom0 and the template report kernel 4.4 (expected for dom0 but would 
have thought the template would continue to report 4.9)

- I then downloaded and transferred and installed the dom0 kernel 4.9 rpm from 
yum.qubes-os.org. Now dom0 reports 4.9 but the fedora-25 template still reports 
4.4 ??? 

- when trying to install kernel-qubes-vm-4.9.56-21.pvops.qubes.x86_64.rpm I get 
dependency errors. 

Do I just download all rpms and let dnf sort it out? 

Thank you for your time and support!

/Sven





-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/EFFEB324-09B6-4FF0-9D75-1F3395B8957D%40SvenSemmler.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Boot QUBES with kexec

[Holger Levsen]

On Sun, Dec 10, 2017 at 03:05:11PM +0100, Robert Walz wrote:
> Does anybody know how to kexec the xen hypervisor?

http://osresearch.net/ uses kexec to boot Qubes.


-- 
cheers,
Holger

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20171210163517.jugnfv723un552ch%40layer-acht.org.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature

Re: [qubes-users] Anyone ran a cryptocurrency mining software on qubes?

[Ted Brenner]

I've run a cpu miner for monero but only gotten ~100H/s. Was also curious
if it would be possible to use VTd to use gpus.

On Sun, Dec 10, 2017 at 6:52 AM,  wrote:

> Curious if anyones gotten this to work.
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-users/c34b7bc2-4ee6-40e1-867c-895105ef6a69%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Sent from my Desktop

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CANKZutwrxQgjfdoN%2BzP%2Bw_OfV%3DY-ou1Yxtq3es%3D_pkfCexvJ7w%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] How to create DVM Templates in Qubes OS 4?

['Tom Zander' via qubes-users]

On Sunday, 10 December 2017 07:09:35 CET qbertq...@gmail.com wrote:
> What I don't understand

Just want to point out that the 4.0 support for dispVMs is extremely basic 
and honestly quite broken.
The concept works, most of the tools don't or are just shitty.

Happy to hear you made it work :)
-- 
Tom Zander
Blog: https://zander.github.io
Vlog: https://vimeo.com/channels/tomscryptochannel

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2576609.luoT2bi4Tg%40cherry.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Boot QUBES with kexec

[Robert Walz]

Hello,

I have no experience with Xen, maybe you can help me.

I use coreboot with a linux payload (linux kernel in flash ROM) and want to
kexec qubes-os from it.

Does anybody know how to kexec the xen hypervisor?

I tried some options, but it doesn't work. I tried this:
(after mounting the boot partition)

kexec -l /boot/vmlinuz --initrd /boot/initrd --command-line "kernel boot
parameters"
kexec -e

Do I need some special boot parameters?

Regards

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CANYLK6FED3Y3V42KFuCdvnw4y4QUvHT1YHRpU9AyaoBivh-bWQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Anyone ran a cryptocurrency mining software on qubes?

[Rory]

Curious if anyones gotten this to work. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c34b7bc2-4ee6-40e1-867c-895105ef6a69%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.