Re: [qubes-users] Shaving N seconds off VM startup

[Chris Laprise]

On 04/13/2018 07:50 PM, 799 wrote:

Hello Chris,

Thanks for the info, very interesting.

Chris Laprise > schrieb am 
Fr., 13. Apr. 2018, 19:20:


I've done some experimenting to get my Debian VMs to boot faster. So
far
I've reduced the start time significantly by disabling these
services in
the template:
(...).


Can you post some more I formation what you have done to measure startup 
time?
Additionally I like to know if you can do the same for Fedora based VMs, 
as most of the AppVMs from me are Fedora based.


I don't normally use Fedora, but it should be possible. Use tools like 
'systemd-analyze blame' as your guide.


I'll try to post some timings tomorrow.

Another service that shows up with significant time is wpa_supplicant. 
You can have it start only for network VMs by creating 
/lib/systemd/system/wpa_supplicant.service.d/20_netvms with the following



[Unit]
ConditionPathExists=/var/run/qubes/this-is-netvm


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a088c9ae-387d-a820-3ba5-e5b66105cd7b%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] how to transfer 3.2 vpn vm to 4.0?

[Chris Laprise]

On 04/14/2018 10:03 PM, Stumpy wrote:
I had a really hard time getting a vpnvm to work in 3.2 but finally got 
it and it more or less ran great for months. In one of the 4 RCs (3 I 
think) I was able to restore that vpnvm to 4.0 rc3. Now I can't seem to 
do that, and am really hoping there is some way I can at least back up 
(tar?) the settings/changes on the 3.2 vpnvm and restore (untar?) then 
on a 4.0 vm.

Thoughts?


Depends on how you setup the original VPN VM. If you used the Qubes VPN 
doc, you can try tar-ing the /rw/config folder and transfer the contents 
to the new proxyVM (to the same folder). When tar-ing, use sudo.


OTOH, installing from scratch with Qubes-vpn-support is fairly easy:
https://github.com/tasket/Qubes-vpn-support

--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/55165855-bd3a-4a5d-60d6-6eb672df151e%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] HCL - Lenovo Thinkpad T480

[Ivan Mitev]

hi

On 04/15/2018 12:13 AM, bbrr3...@gmail.com wrote:
> System basically works nicely out of the box with Q4.0. I recommend the 
> laptop.
> 
> The only glitch was consistent crash when resuming from suspend. I debugged 
> by shutting down service vm's and narrowed it down to sys-usb. Then detached 
> the second USB controller from sys-usb and everything seems to work fine.  I 
> did not seem to loose any devices/ports doing this but did not do an 
> exhaustive test. 
> 
> I have the high-res screen and text is pretty small. Haven't yet figure out 
> how to scale things up in qubes?

have a look at:

https://github.com/Qubes-Community/Contents/blob/master/docs/customization/dpi-scaling.md

(if you have any issues with the instructions or remarks, please tell me
so that I can update the doc)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/47bfb469-1fce-2372-3ce6-d4a4e3b3cfb7%40maa.bz.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Stock firewall vs a new created firewall in 4.0?

[Chris Laprise]

On 04/14/2018 11:25 PM, vel...@tutamail.com wrote:

I created a new sys-firewall from the one that came with the installation of 
4.0...is there anything special I need to do to make this the same as 
sys-firewall in terms of configuration?

Its working:

New appvm, provides networked=checked, connected to sys-net is what I did to 
create it.

Thanks in advance...



That's the right way to create a 'sys-firewall'.

--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8a5b91fc-8760-edf8-2e60-e18fd1bb2b73%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Qubes 4.0 and Private Internet Access? Tasket VPN solution...

[Chris Laprise]

On 04/14/2018 11:21 PM, vel...@tutamail.com wrote:

Thanks again for this solution...is there an ETA when this will be built into 
4.0/4.1?



I'll post about this tomorrow, but it looks like ETA is 4.1 release.

People can start testing it now by downloading it from:
https://github.com/tasket/qubes-tunnel

And you can get instructions here:
https://github.com/tasket/qubes-doc/blob/tunnel/configuration/vpn.md

This is intended for installation into templates... there is no option 
for proxyVM only install.


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c7dd6612-ef6f-7b21-d24e-e9e4a679ecc6%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Stock firewall vs a new created firewall in 4.0?

[velcro]

I created a new sys-firewall from the one that came with the installation of 
4.0...is there anything special I need to do to make this the same as 
sys-firewall in terms of configuration?

Its working:

New appvm, provides networked=checked, connected to sys-net is what I did to 
create it.

Thanks in advance...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f29d007c-e040-4f18-86dc-ae15e4ef1ce6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes 4.0 and Private Internet Access? Tasket VPN solution...

[velcro]

Manage to get this working on 4.0 using the Master!

Below are my abreviated steps:

Using Master File from Tasket

Create proxy using VPN template:
sys-VPN
Green
Provides Network  Checked
connect to sys-net
Launch settings  - Checked

Settings:
Add files and Terminal to Applications
Add “vpn-handler-openvpn” to services

Optional-Change DNS in your PIA config: setenv vpn_dns '208.67.222.222 
208.67.220.220'

sudo mkdir /rw/config/vpn
sudo mv “highlight all 3 vpn files and drag to terminal here” /rw/config/vpn

cd “Then drag master4 file into terminal from tasket”
sudo bash ./install

Close terminal, open new terminal:

cd /rw/config/vpn
sudo ln -s this_vpn.ovpn vpn-client.conf

Restart new proxy vm

Tasket...I needed to create the "/rw/config/vpn" file first, add my PIA files 
before I could get the Tasket file to "link".

Thanks again for this solution...is there an ETA when this will be built into 
4.0/4.1?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/410c5352-0625-40e1-b1aa-33372473eb4b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - Lenovo Thinkpad T480

[velcro]

Thanks for sharing...my understanding is you can get this Laptop new? Not sure 
if you know but this can come with either these processors:


8th Generation Intel® Core™ i7-8550U Processor (1.80GHz, up to 4.0GHz with 
Turbo Boost, 8MB Cache)

or


8th Generation Intel® Core™ i7-8650U Processor with vPro (1.90GHz, up to 
4.20GHz with Turbo Boost, 8MB Cache)

Your HCL states you have the vPro...

Would you or anybody know if you can get all the functionality including AEM 
with the i7-8550U (with out the vPro)?

Is there a higher risk of attack with the vPro?

Thanks for doing this HCL...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a9b2132e-3224-44d6-a76a-0b251f5dd8f2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: lemur7 Unable to reset PCI device

[tenchiki]

For Qubes-4.0 and the latest Lemur Laptop,
Blacklist the rtsx_pci module AND add the device to sys-net lets ethernet come 
up.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/05419c72-33fb-43f4-81e2-fd3f96b4e728%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] how to transfer 3.2 vpn vm to 4.0?

[Stumpy]

I had a really hard time getting a vpnvm to work in 3.2 but finally got 
it and it more or less ran great for months. In one of the 4 RCs (3 I 
think) I was able to restore that vpnvm to 4.0 rc3. Now I can't seem to 
do that, and am really hoping there is some way I can at least back up 
(tar?) the settings/changes on the 3.2 vpnvm and restore (untar?) then 
on a 4.0 vm.

Thoughts?

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b4d0f091ff51f7012f19ce79ca1eff5d%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: How to verify Qubes

[cooloutac]

On Saturday, April 14, 2018 at 9:17:43 AM UTC-4, myblackc...@gmail.com wrote:
> Hey, 
> 
> when i open the master signing key with the tool checksum utility and want 
> verify it, i become the message "Hash does not match". 
> 
> regards

The tool for windows you might be thinking of is certutil, from cmd prompt:

certUtil -hashfile pathtofile.iso SHA256

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bc8c8884-4bb1-40a4-bb57-bea093145b38%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Unable to resize VM Template disk size

['awokd' via qubes-users]

On Sat, April 14, 2018 10:12 pm, chipper...@gmail.com wrote:
> Hello,
> I am fairly new to QUBES, as I have only just installed QUBES 4.0 and have
> been learning the OS. I initally installed QUBES 3.x (last RC), and
> immediately installed QUBES 4.0. I have had several problems.
>
> My motherboard is a supermicro X8DAL-3, (2) XEON L5638 with 48 Gb of RAM.
> 250GB SSD hard drive.
>
>
> I have attempted to run the command:  qvm-volume extend personal:root
> 300 in the template VM Fedora-26.
>
>
> The error I receive is "Command not found"
>
>
> I've had similar errors when trying to install packages to the template
> VMs.
>
>
> Request some guidance in achieving success in re sizing disk space in the
> personal VM -
>
> Thank you in advance for any help / guidance.

Right command, but maybe running it in the wrong place. See
https://www.qubes-os.org/doc/resize-disk-image/. You want to do those
qvm-volume commands from dom0 terminal with the VM/template shut down
instead of inside a template. You can also go to VM Settings on the VM you
want to resize and increase it using the GUI.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d23abee08fba8195d9249f1294ef743c.squirrel%40tt3j2x4k5ycaa5zt.onion.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Unable to resize VM Template disk size

[chipperh61]

Hello,
 I am fairly new to QUBES, as I have only just installed QUBES 4.0 and have 
been learning the OS. I initally installed QUBES 3.x (last RC), and immediately 
installed QUBES 4.0. I have had several problems.

My motherboard is a supermicro X8DAL-3, (2) XEON L5638 with 48 Gb of RAM.  
250GB SSD hard drive.

  I have attempted to run the command:  qvm-volume extend personal:root 
300 in the template VM Fedora-26.

  The error I receive is "Command not found"

I've had similar errors when trying to install packages to the template VMs.

Request some guidance in achieving success in re sizing disk space in the 
personal VM - 

Thank you in advance for any help / guidance. 

Cheers,
Chip

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/508585f2-94a1-4a1a-8af1-948ed60a4c57%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: DisplayPort problems

[gavinericksonbritishacu]

Did you ever get the DisplayPort to work? I have a Lenove thinkpad with 
displayport and Qubes doesn't recognise it by the look of things..

thanks :-)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a912277d-5ae6-4738-a181-a9bff8816bf1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] HCL - Lenovo Thinkpad T480

[bbrr3332]

System basically works nicely out of the box with Q4.0. I recommend the laptop.

The only glitch was consistent crash when resuming from suspend. I debugged by 
shutting down service vm's and narrowed it down to sys-usb. Then detached the 
second USB controller from sys-usb and everything seems to work fine.  I did 
not seem to loose any devices/ports doing this but did not do an exhaustive 
test. 

I have the high-res screen and text is pretty small. Haven't yet figure out how 
to scale things up in qubes?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/340b728b-fd1b-47c8-8143-52b4e0f0b2e7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-LENOVO-20L6S1RG00-20180414-220504.yml
Description: Binary data

[qubes-users] Re: Keyboard not working: How to make the buying decision?

[Foppe de Haan]

On Saturday, April 14, 2018 at 6:59:06 PM UTC+2, 00010...@gmail.com wrote:
> Here's the summary of outcome:
> 
> - When I use QubesOS out-of-the-box (without any special configuration), the 
> mentioned USB mouse works right away, but not the USB keyboard.
> 
> - When I follow the instructions for the USB keyboard at 
> https://www.qubes-os.org/doc/usb/#how-to-use-a-usb-keyboard then it works 
> correctly (as advertised) already at the LUKS password input. However, 
> neither keyboard nor mouse work at the QubesOS user/session authentication 
> (once logged in, both do however work again).
> 
> Should I file a bug report?

I sometimes ran into this, when sys-usb was too slow or too fast to start, idk 
which. Reconnecting the USB plug usually worked.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/153b7366-19f9-46f2-b13a-a3518414a27b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Keyboard not working: How to make the buying decision?

[00010agency]

Here's the summary of outcome:

- When I use QubesOS out-of-the-box (without any special configuration), the 
mentioned USB mouse works right away, but not the USB keyboard.

- When I follow the instructions for the USB keyboard at 
https://www.qubes-os.org/doc/usb/#how-to-use-a-usb-keyboard then it works 
correctly (as advertised) already at the LUKS password input. However, neither 
keyboard nor mouse work at the QubesOS user/session authentication (once logged 
in, both do however work again).

Should I file a bug report?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8ce4d1b4-7ffb-48eb-8483-32e52b3eb038%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: CentOS Virtualization From Multiple .vmdk

[hype]

I've also just tried:
qvm-create centos --class StandaloneVM --property virt_mode=hvm --property 
kernel="" --property memory=4096 --property maxmem=4096 --property debug=True 
--label red

qvm-start centos --cdrom=TEST-VMDK:/home/user/root.img

and

qvm-start centos --hddisk=TEST-VMDK:/home/user/root.img 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1e9f41ce-04a1-405a-8f65-6ca316a2d641%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: How to verify Qubes

[myblackcatisback]

Hey, 

when i open the master signing key with the tool checksum utility and want 
verify it, i become the message "Hash does not match". 

regards

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6e72c5ff-ded3-47eb-8626-7aa5668965be%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: How to verify Qubes

[myblackcatisback]

Hey guys,

thanks alot for your help and feedbacks.Its cool t know that someone can help 
me :)

@ Chris Laprise 

I download the qubes master signing key
   qubes release 4 signing key
andthe signature (Qubes-R4.0-x86_64.iso)

I following your tutorial and opened the windows command promp. 
I type the commands gpg2 --import qubes-master-signing-key.asc. After this i 
become the error message "No such file or directory". I memory all files into 
the download folder. Its important for me to work with the Dos, because i want 
learn it on the hard way :D 

On the Qubes main site i try too, to write the commands on the main site into 
the windows command promp.But both not work well.Mh, what iam doing wrong?

@ Neelix

Before i use the checksum tool for Windows, but i forget the name of the tool. 
Thanks to post it. Thumbs up.I will try it again. 

About your messages i would be happy again.

regards

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7bd2923f-66fd-47ea-89f7-2ec16e634ee1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Q4 Laptops...

[cooloutac]

On Thursday, April 12, 2018 at 7:46:03 PM UTC-4, tai...@gmx.com wrote:
> On 04/12/2018 08:49 AM, cooloutac wrote:
> 
> > In my case I found uefi mode works better for Qubes.   For example using 
> > legacy bios mode i have many wake from sleep problems,  such as usb mouse 
> > in sys-usb not working after sleep.  system becoming unresponsive.
> >
> > Booting in uefi mode I dont' have those problems.  I think eventually we 
> > will have no choice but to use uefi cause all hardware will be designed for 
> > it.
> >
> Commodity hardware in the future will suck and won't allow you to run
> your own distro, or even your own programs unless you pay for a
> "developer" computer. This is the goal of microsoft.
> 
> The future for owner controlled high performance devices is POWER, the
> TALOS 2 is now in full production and the benchmarks indicate that it
> costs thousands less than an intel/amd system with equivilant performance.
> 
> For once we have a unicorn - a libre firmware system that is actually
> fast and brand new.
> > Unfortunately using uefi mode does not give any security benefits since 
> > Qubes doesn't support secure boot
> >
> Oh boy here we go again with
> linux-distro-sucks-unless-it-supports-microsoft-technology
> https://www.phoronix.com/scan.php?page=news_item=UEFI-Kernel-Lockdown-Concerns
> 
> Linus describes Secure Boot as being "pushed in your face by people with
> an agenda."
> Even linus agrees with me that these things aren't happening in a vacuum.
> 
> Remember guys if something is truly good it doesn't need to be forced on
> you "for your own good"
> > or secure flash.
> >
> Operating systems should not be modifying EEPROM settings - you are free
> to use flashrom to do that yourself if you so desire.
> 
> I grow increasingly tired of your uninformed comments.

So you're a free software guy quoting crazy linus torvalds who is anything but 
for free software and who could care less about security...  You do know him 
and his whole family use windows at home right?   He doesn't even use linux 
himself.  He makes kernels in virtualbox on windows 10 and for the all the 
suckers...  At least you use an fsf kernel,  too bad no more grsec to use with 
it, since spender is another mental patient.  lmao...

What about when I quote Richard Stallman who says its ok to use secure boot for 
security because its "failed its intended purpose"... Why do you not address my 
statement on this?  I find that suspicious.

   The same "purpose" you still claim MS wants to happen in the future turned 
out to be Fear mongering politics by crazy fsf nutjobs.So you seem to 
ignore the whole fact secure boot is a security benefit that is beneficial to 
all operating systems.  Stop telling me about whats going to happen in the 
future like you are Nostradamus,  makes you seem fake since this prediction was 
already previously made and was wrong. 

Like I said free software movement will never become popoular,  if its own 
advocates are not even honest with themselves and seem distant from reality.  
You are like a car salesman to me.   At least Richard Stallman half admitted he 
was wrong.

So I guess you don't use a gui desktop since that was made popular by evil 
apple and ms, and since it would be so much better for security right??Text 
based machines only bud?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/81b3a384-e08a-4a96-aa15-e9c479e50801%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] How to verify Qubes

['Neelix' via qubes-users]

Hi,


Try using this guide to verify the checksum.

https://bhoover.com/how-to-verify-checksum-windows/


On 04/13/2018 05:21 PM, myblackcatisb...@gmail.com wrote:
> Hello community,
>
> first i want say, that iam a new member of this google-group and i want greet 
> all. :)
>
> Iam a newbie of Qubes(Linux) and i use Windows 10 at time. 
>
> Today I downloaded the current ISO image from the main page. Since I'm not so 
> good with Linux in general, I turn to you.
>
> I downloaded the Qubes master signing key and try to verify it. 
>
> Since I use Windows 10, I have also downloaded the program GPGEX. I open the 
> program Cleopatra and click on the field "import". The tool gives me the hint 
> that the certificate must first be authenticated and I have to create my own 
> PGP certificate to verify others. After the mentioned configuration I get a 
> key. Is this the Qubes key? 
> How can I tell that this is the right key?
>
> For example, when I click the Decrypt / Verify tab in Kleopatra, I get the 
> error message that the key contains certificates and can not be decrypted.
>
> When I enter the commands from the Qubes page into the Windows command 
> prompt, I get the error message no such file...
>
> What am I doing wrong?
>
> I hope my question is not ridiculous and someone can help me.
>
> Previously, I never dealt with PGP and the like.
> I would be very happy about many answers.
>
> Thanks in advance
>

-- 
Regards,

Neelix
PGP: 289C 2E3B A021 FAE8 9529 A128 1528 9E56 B4BE 1DD3



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/X3g2Roi2CigV_M5Z2u8T7jiwXrvx4EEAoKTB-oBm8CH-Dj1o-CZwK2hEJMwNWQw9c7Efu8tQk7iP4py4pZkhaYtHm4mPpr4VsJ14maeyRCM%3D%40x86.is.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: PGP signature

[qubes-users] Re: CentOS Virtualization From Multiple .vmdk

[hype]

I forgot to mention:

SeaBIOS (version rel-1.10.2-0-...)
Machine UUID ...
Booting from Hard Disk...
Boot failed: not a bootable disk

Booting from Floppy...
Boot failed: could not read the boot disk

No bootable device.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e5268680-dbfa-44ee-b3af-6809b742168b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: CentOS Virtualization From Multiple .vmdk

[hype]

Drew,

Would you mind walking me through this more step-by-step? I've tried many 
variations of this and I keep failing. I'm using Qubes 4.0. To create the 
centos qube I do:

Qube Manager->
Qube->
Create new qube->
Name and label: centos red
Type: Standalone qube not based on a template

In a qube named TEST-VMDK, I have the CentOS root image here:
/home/user/root.img

Which I've created using your advice:
qemu-img convert {path/to/vmdk}CentOS\ 7.x\ 64-bit.vmdk root.img

Is this the correct way to create the StandaloneVM I need? Should it be/not be 
based on a template? Should it be the default (PVH) mode, or HVM? Should the 
kernel be the default (4.14.18-1) (current)? I don't know how to do this from 
the terminal using Qubes 4.0.

>From dom0 I've:
qvm-run --pass-io TEST-VMDK 'cat /var/lib/qubes/appvm' > /home/user/root.img

I think this is wrong? Why does my PVH/HVM show up in /var/lib/qubes/appvms? 
Why do none of the qubes in that directory contain root.img? Where should my 
root.img reside? Is there a command to create the correct VM type and load a 
root image from a specified qube such as TEST-VMDK?

When I do:
qvm-prefs-centos

There's no line about a root.img so I must be doing something very wrong?

As you can see... a lot of step-by-step hand-holding would be amazing. I really 
need to understand how to do this. I have a lot of VMs I need to load this 
way...

Thank you so much for your help.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/55300f8f-e0a0-4a4f-be23-668a2019aaac%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] WWAN/LTE Card stopped working

[799]

Hello,

I have applied Updates to my Templates and also flashed Coreboot ony X230.
I haven't used my internal WWAN Card for a while as I was using WiFi.
The WWAN Card was working before (default template/Stock ROM) without a
problem, now it doesn't.

I can pass the WWAN per sys-usb to my sys-net and I can see that it it
present there (lsusb).
But I can't use Gnome Network Manager anymore to us it.

I have also tried to pass the whole PCI Controller which includes the WWAN
Card as USB device to take sys-usb out of the equation, but I get the same
result.

Do you have any idea where to start troubleshooting?

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2sK696_eLL81f%3DT92b9t9LEVmS_0Gk8T%2BGB7Z2fyFBRaA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Keyboard not working: How to make the buying decision?

[Foppe de Haan]

On Saturday, April 14, 2018 at 3:11:37 AM UTC+2, tai...@gmx.com wrote:
> On 04/13/2018 03:01 PM, 00010age...@gmail.com wrote:
> 
> > Is there a way to know which keyboards are incompatible with QubesOS?
> >
> > Or do we just need to keep on buying keyboards until one works?
> 
> You need to enable the keyboard sys-usb forwarding permission in qubes
> settings files, there is a guide on the website for that.
> 
> > I'm asking because I bought the (IMHO best ergonomic mouse/keyboard combo; 
> > wireless) "Microsoft Sculpt Ergonomic Desktop" [0], but only the mouse 
> > works (and only once you have logged into your QubesOS session), not the 
> > keyboard.
> >
> > So based on what is one supposed to make the buying decision?
> >
> The best keyboards are made in a first world country and have firmware
> that can't be internally flashed - the unicomp keyboards fit the bill
> here and are much more secure as the firmware can't be re-written and
> they are made in usa thus more trustworthy than one that is made in china.

You've really drunk the cool-aid, haven't you? Products from the "land of the 
free", with its public-private Stasi (NSA in full cooperation with 
FAANG/Silicon Valley more generally) are inherently "more trustworthy" than 
those made in "China". 
If only the world were that simple.. 
Sadly, that was a lie even when McCarthy and the Cold War were still in full 
swing, let alone now, when everything described in 1984 is both technologically 
completely possible, and enacted (the only difference being that it's done in a 
less blatantly fascist manner than in the book).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/84b1e331-a78d-4276-a157-8a57289b214f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] X230 won't boot into Qubes after installing 4.0

[Andreas Rasmussen]

onsdag den 11. april 2018 kl. 09.33.12 UTC+2 skrev [ 799 ]:
> Hello,
> 
> 
> 
>   schrieb am Mi., 11. Apr. 2018, 07:49:
> 
> 
> > Check this here:
> 
> > https://github.com/QubesOS/qubes-issues/issues/2841
> 
> 
> 
> We discussed this issue recently on this mailing list. I also tried the  
> suggestion from above now, and it did not fix it on my Thinkpad X230. The 
> default iommu=no-igfx option works fine though.
> 
> 
> 
> However, the suggestion by awokd is working for me. Add the two lines to the 
> kernel sections in Xen.cfg as in 
> https://www.qubes-os.org/doc/uefi-troubleshooting/#cannot-start-installation-installation-completes-successfully-but-then-bios-loops-at-boot-device-selection-hangs-at-four-penguins-after-choosing-test-media-and-install-qubes-os-in-grub-menu
> 
> 
> As the link to the Qubes-docs seems to cover UEFI, I assume you are using 
> UEFI on your X230?
> If so, may I ask why? I am running Qubes 4 on my X230 and had no problems 
> installing it, but I've installed from one of the Release Candidates and I 
> have also not used UEFI as I don't see any benefit.
> I am using Coreboot with SeaBIOS as Payload and everything works supernice 
> and like the best Laptop I have ever had.
> There is one issue with my sys-usb which I need to resolve but I am unsure if 
> it is related to 4.0 or Coreboot or just myself.
> 
> 
> [799]

I forgot to reply with my solution: To install with legacy instead of UEFI. I 
don't know why it didn't occur to me sooner; I guess I was pre-occupied with 
the fact that Qubes 3.2 worked fine with UEFI. So after four days of struggling 
I tried with legacy and it just works :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b199209c-e920-4dd0-b76c-f02836b4d577%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] X230 won't boot into Qubes after installing 4.0

[799]

Hello Taiidan,

taii...@gmx.com  schrieb am Mi., 11. Apr. 2018, 23:01:

> (...)
> I also suggest buying a *20 series non-chiclet keyboard while you are at
> it, it is a good mod.
>

Is it possible to place the older non-chiclet keyboard in a X230?
If so, do I need to modify my laptop in such a way that I can't go back to
the Chiclet Keyboard (example selling the device)?

Would love to use the older keyboard I had on my X200.

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2v3Lt%3D6gXjCg8CrRnLo7Taq6y4XXdsw7JCEoDy5J0U_%3Dg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.