Re: [qubes-users] Re: Major Problem: Boot Loop after Upgrading dom0
Hello, schrieb am Mo., 28. Mai 2018, 19:18: > On Monday, May 28, 2018 at 6:00:05 PM UTC+2, [ 799 ] wrote:, > > > > After Upgrading my AppVMs to Fedora 28 yesterday I tried to upgrade dom0. > > During the update I ran into problems with the kernel upgrade. > > As the process seem to be stuck I interrupted with STRG + C. > > > > Upon next reboot I run into a bootloop after passing Grub menu. > > > > Any idea how to proceed? > > You should choose in grub menu an older kernel and do the grub2-mkconfig > command as suggested. > Ok, when booting up I see the following menu: 1) Qubes, with Xen Hypervisor 2) advanced Options for Qubes with Xen Hypervisor Choosing 2) I see another menu: 1) Xen Hypervisor, version 4.8.3 2) Xen Hypervisor, version 4.8.3.config 3) Xen Hypervisor, version 4.8 I have chosen 1 and then I can see different kernels: I'll try to boot those. [799] -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAJ3yz2vAxgjCzKaqSzUTytWGK3HM7mwe7tN2gtGQZBt5HK6nyQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Qubes 4.0 Intel I210 nic keeps resetting
I'm unable to get the Intel NICs to register an IP address since they reset constantly. Attached is the dmesg log from sys-net (running 4.14.35-1.pvops.qubes.x86_64). Thanks for any help and let me know if you need more information. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b30d567c-181e-f618-5dee-313719714793%40gmail.com. For more options, visit https://groups.google.com/d/optout. [0.00] Linux version 4.14.35-1.pvops.qubes.x86_64 (user@build-fedora4) (gcc version 6.4.1 20170727 (Red Hat 6.4.1-1) (GCC)) #1 SMP Sat Apr 21 15:51:26 UTC 2018 [0.00] Command line: root=/dev/mapper/dmroot ro nomodeset console=hvc0 rd_NO_PLYMOUTH rd.plymouth.enable=0 plymouth.enable=0 nopat iommu=soft swiotlb=8192 [0.00] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [0.00] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [0.00] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [0.00] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [0.00] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [0.00] e820: BIOS-provided physical RAM map: [0.00] BIOS-e820: [mem 0x-0x0009fbff] usable [0.00] BIOS-e820: [mem 0x0009fc00-0x0009] reserved [0.00] BIOS-e820: [mem 0x000f-0x000f] reserved [0.00] BIOS-e820: [mem 0x0010-0x17ffefff] usable [0.00] BIOS-e820: [mem 0x17fff000-0x17ff] reserved [0.00] BIOS-e820: [mem 0xfc00-0x] reserved [0.00] x86/PAT: PAT support disabled. [0.00] NX (Execute Disable) protection: active [0.00] random: fast init done [0.00] SMBIOS 2.4 present. [0.00] DMI: Xen HVM domU, BIOS 4.8.3 05/08/2018 [0.00] Hypervisor detected: Xen HVM [0.00] Xen version 4.8. [0.00] Xen Platform PCI: I/O protocol version 1 [0.00] Netfront and the Xen platform PCI driver have been compiled for this kernel: unplug emulated NICs. [0.00] Blkfront and the Xen platform PCI driver have been compiled for this kernel: unplug emulated disks. You might have to change the root device from /dev/hd[a-d] to /dev/xvd[a-d] in your root= kernel command line option [0.00] HVMOP_pagetable_dying not supported [0.00] tsc: Fast TSC calibration using PIT [0.00] e820: update [mem 0x-0x0fff] usable ==> reserved [0.00] e820: remove [mem 0x000a-0x000f] usable [0.00] e820: last_pfn = 0x17fff max_arch_pfn = 0x4 [0.00] MTRR default type: write-back [0.00] MTRR fixed ranges enabled: [0.00] 0-9 write-back [0.00] A-B write-combining [0.00] C-F write-back [0.00] MTRR variable ranges enabled: [0.00] 0 base F000 mask 3000 uncachable [0.00] 1 disabled [0.00] 2 disabled [0.00] 3 disabled [0.00] 4 disabled [0.00] 5 disabled [0.00] 6 disabled [0.00] 7 disabled [0.00] x86/PAT: Configuration [0-7]: WB WT UC- UC WB WT UC- UC [0.00] found SMP MP-table at [mem 0x000f6ae0-0x000f6aef] mapped at [ff240ae0] [0.00] Base memory trampoline at [9d1780099000] 99000 size 24576 [0.00] Using GB pages for direct mapping [0.00] BRK [0x04a79000, 0x04a79fff] PGTABLE [0.00] BRK [0x04a7a000, 0x04a7afff] PGTABLE [0.00] BRK [0x04a7b000, 0x04a7bfff] PGTABLE [0.00] BRK [0x04a7c000, 0x04a7cfff] PGTABLE [0.00] BRK [0x04a7d000, 0x04a7dfff] PGTABLE [0.00] RAMDISK: [mem 0x1795c000-0x17fe] [0.00] ACPI: Early table checksum verification disabled [0.00] ACPI: RSDP 0x000F6A30 24 (v02 Xen ) [0.00] ACPI: XSDT 0xFC00A5B0 54 (v01 XenHVM HVML ) [0.00] ACPI: FACP 0xFC00A2D0 F4 (v04 XenHVM HVML ) [0.00] ACPI: DSDT 0xFC0012A0 008FAC (v02 XenHVM INTL 20160831) [0.00] ACPI: FACS 0xFC001260 40 [0.00] ACPI: FACS 0xFC001260 40 [0.00] ACPI: APIC 0xFC00A3D0 70 (v02 XenHVM HVML ) [0.00] ACPI: HPET 0xFC00A4C0 38 (v01 XenHVM HVML ) [0.00] ACPI: WAET 0xFC00A500 28 (v01 XenHVM HVML 0
[qubes-users] Re: Major Problem: Boot Loop after Upgrading dom0
On Monday, May 28, 2018 at 6:00:05 PM UTC+2, [ 799 ] wrote: > Hello, > > > After Upgrading my AppVMs to Fedora 28 yesterday I tried to upgrade dom0. > During the update I ran into problems with the kernel upgrade. > As the process seem to be stuck I interrupted with STRG + C. > > > Upon next reboot I run into a bootloop after passing Grub menu. > > > Any idea how to proceed? > > > [799] You should choose in grub menu an older kernel and do the grub2-mkconfig command as suggested. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/54305e7a-732a-47ef-90b3-cdb887efecb1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Major Problem: Boot Loop after Upgrading dom0
That sounds similar to what happened to others when the kernel update process was interrupted. Perhaps: https://github.com/QubesOS/qubes-issues/issues/3915 might help if you try what marmarek suggested and boot into an older kernel and generate initramfs if not there and then run the grub2 command. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a0fe3491-f3b6-b706-130b-ada8ae3dd80c%40go-bailey.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Dolphin or Nautilus in a standard Qubes AppVM Template
Hey :) On 05/28/2018 07:02 PM, 799 wrote: > schrieb am Mo., 28. Mai 2018, 13:45: > >> On Sunday, May 27, 2018 at 10:16:17 PM UTC+2, [ 799 ] wrote: >> >>> The question is now, if I should install Dolphin or Nautilus as the >> default File Manager and which qubes-specific question I should install. >>> What do you suggest under Qubes Dolphin or Nautilus? >> >> For fedora use nautilus. Better Qubes integration. >> In debian use dolphin, because in the past there already were some Qt >> packages installed. >> > > Thanks for the hint. > > And respectively use Qt Applications in debian and gtk stuff in fedora. >> > > Is there a way to check which application uses GTK and which are using QT? ldd should help: eg.: $ ldd /bin/nautilus | grep -i 'gtk\|qt' libgtk-3.so.0 => /lib64/libgtk-3.so.0 $ ldd /usr/bin/qgis | grep -i 'gtk\|qt' libQtXml.so.4 => /lib64/libQtXml.so.4 libQtCore.so.4 => /lib64/libQtCore.so.4 [...] Another solution is to list the package's dependencies; for rpms: $ rpm -qR packagename | grep -i 'gtk\|qt' > > [799] > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3d88bd66-dfae-f86e-d79d-26f6458cd82e%40maa.bz. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Lenovo T480 freezes after resume on suspend
I had a similar issue with my T480S. I'm not currently using sys-usb at the moment. The laptop would still freeze for about 30 seconds after resuming from sleep. After installing the latest Updates and Kernel in dom0 today, the issue is gone for me. Maybe it'll help with your issue too. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e33473cb-0492-4988-918a-0033a1b178e4%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Dolphin or Nautilus in a standard Qubes AppVM Template
schrieb am Mo., 28. Mai 2018, 13:45: > On Sunday, May 27, 2018 at 10:16:17 PM UTC+2, [ 799 ] wrote: > > > The question is now, if I should install Dolphin or Nautilus as the > default File Manager and which qubes-specific question I should install. > > What do you suggest under Qubes Dolphin or Nautilus? > > For fedora use nautilus. Better Qubes integration. > In debian use dolphin, because in the past there already were some Qt > packages installed. > Thanks for the hint. And respectively use Qt Applications in debian and gtk stuff in fedora. > Is there a way to check which application uses GTK and which are using QT? [799] -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAJ3yz2u1r0hjczsx_xJQnKWZVF6A7TeVNL6dNURFBDW%3DMdXANQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Major Problem: Boot Loop after Upgrading dom0
Hello, After Upgrading my AppVMs to Fedora 28 yesterday I tried to upgrade dom0. During the update I ran into problems with the kernel upgrade. As the process seem to be stuck I interrupted with STRG + C. Upon next reboot I run into a bootloop after passing Grub menu. Any idea how to proceed? [799] -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAJ3yz2tT_JTDDysK2R_orJR_UdK%3D-H%3DAEsdviL_mikvZK3EYHQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: How to attach CDROM /dev/sr0 to appvm?
On Sunday, May 27, 2018 at 10:14:14 PM UTC+2, Inqubator wrote:
> On Sunday, May 27, 2018 at 3:41:41 PM UTC+2, awokd wrote:
> > On Sat, May 26, 2018 9:24 pm, Inqubator wrote:
> > > On Saturday, January 30, 2016 at 11:25:47 AM UTC+1, Dimitri wrote:
> > >> I'd like to listen to music but I didn't yet succeed with reading a
> > >> CDROM in a appvm. Qubes manager offers the option to attach dom:/dev/sr0
> > >> but the device won't show up in the appvm. (qvm-block tells me that
> > >> /dev/sr0 is attached as xvdi but there's no xvdi in the vm) Any ideas?
> > >> Thanks
> > >
> > > Same here: I attach my cdrom (sr0) to the domain "personal" but it doesn't
> > > show up there. qvm-block, run in dom0, shows it as used by "personal" (as
> > > "xvdi").
> > >
> > > Dmesg does not show anything but throws an error, both in dom0 and
> > > personal: "dmesg: read kernel buffer failed: Operation not permitted".
> > >
> > > Ideas?
> > >
> > > (BTW: I am using Qubes 4)
> >
> > I think that is a Xen limitation. It should work as you describe with data
> > CDs, but for music you might have to take one of these
> > https://www.qubes-os.org/doc/recording-optical-discs/ approaches.
>
> Thanks for the suggestion.
>
> I had tried with a music CD actually. But when I inserted a data CD, nothing
> changed. It just doesn't show up in the VM, despite the fact that Qubes shows
> it as attached. Very frustrating.
>
> Other ideas?
In dom0 (just a file you can delete afterwards) console as user:
truncate -s 500MB /var/tmp/testfile.img
testthis=$(sudo losetup -f --show /var/tmp/testfile.img)
sudo mkfs.ext2 ${testthis##*/}
qvm-block a VMname dom0:${testthis##*/}
In VMname AppVM as user with sudo or root:
sudo mount /dev/xvdi /mnt/removable
sudo ls -la /mnt/removable
Read/write ability available?
If true, is it possible that the domU kernel cannot read your type of music cd?
Maybe a drm codec/copyprotection?
But you said you tried this with data cd's too.
If not readable, something is wrong with qvm-block with cdroms and/or you have
chosen the wrong AppVM by name? ;-)
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/46bf274b-c066-414e-ae99-e5ce85bd29af%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Dolphin or Nautilus in a standard Qubes AppVM Template
On Sunday, May 27, 2018 at 10:16:17 PM UTC+2, [ 799 ] wrote: > Hello, > > I am currently migrating from fedora-26 to fedora-28 which includes replacing > my templates buy rebuilding from scratch. > > I decided to replace my "fat AppVM templates" which have been based on > fedora-26 before with AppVMs based on the > fedora-28-minimal template. > > The question is now, if I should install Dolphin or Nautilus as the default > File Manager and which qubes-specific question I should install. > What do you suggest under Qubes Dolphin or Nautilus? > > > [799] For fedora use nautilus. Better Qubes integration. In debian use dolphin, because in the past there already were some Qt packages installed. And respectively use Qt Applications in debian and gtk stuff in fedora. That is my advice. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b6c15394-4932-4992-a1d1-fc92bb8c26e2%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] How to use sudo/nm-applet in qubes 4.0 in fedora-2X-minimal
I installed qubes-template-fedora-26-minimal, upgraded it to release version 28 (paid attention to the python2-xcffib bug) and cloned it to make a network-"for-all-things-networking"-VM-only template. So far, as written in qubes documentation->fedora-minimal, I installed the networking related packages to let the template act as a minimal-networking-stuff-template. But nm-applet is not authorized to control. And here we stops, because it seems that qubes-core-agent-passwordless-root and/or polkit is always necessary. (?) But because of a choice of design in Qubes 4.0, it is not installed as default. Whereas qubes-core-agent-systemd and qubes-core-agent-qrexec are installed by default as written in the documentation. What is the mind behind this choice? Just asking out of sheer curiosity. The package polkit depends on spidermonkey javascript stuff (mozjs52 package). 6.5MB of not relevant stuff for just an networking VM. Because it works except the nm-applet authorization thingy. "nmcli general permissions" gave me a timeout as fedora-minimal AppVM user. Can I get around this by adding the user to a specific group to get the rights to use nm-applet as an user? A search gave me answers to a nm-applet bug in 2015: https://mail.gnome.org/archives/networkmanager-list/2015-January/msg00033.html There is a hint that NM uses polkit and/or systemd. But only polkit is not installed (I guess). An advice someone wrote in the link: "Alternatively, if you don't care about user permissions and want to allow any user to control networking you can build NM with --with-session-tracking=none and --with-polkit=no to disable this functionality." I guess, this would be a workaround to get the minimal networking VM to fully work, am I correct? This should be the same behavior as qubes' passwordless-root just for NM and with less packages - or is this way intending that anyone (even nobody-user, if existing) could handle NM but do not get any other root files like write to /rw/ in the NetVM and is therefor less "secure" than user-polkit-passwordless-root installation and interaction!? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8db3b6c8-ebd2-497e-ac57-26f3459c2078%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-27-minimal: networking support?
> I want networking, but NOT use the https://www > .qubes-os.org/doc/templates/fedora-minimal/late as sys-net/-firewall > > Thank you! > > Joh Why not? Isn't it a prefered way to have an All-I-Need-Is-In-For-Networking-VM? Maybe additional packages someone would never use in an AppVm is an argument or to get only the basic support to lower any risk. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/d236a808-e835-42ea-85b8-c076e235461b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-27-minimal: networking support?
On Mon, 2018-05-28 at 09:46 +0200, Johannes Graumann wrote: > On Mon, 2018-05-28 at 00:40 +0200, [799] wrote: > > Hello Johannes, > > > > On 05/28 12:00, Johannes Graumann wrote: > > > The fedora-27-minimal template from the repo does not appear to > > > have > > > networking support. What needs to be installed to remedy that? > > > > I have just migrated all my sys-AppVMs from a fedora-26-minimal to > > a > > fedora-28-minimal image. > > I also had some issues with networking and got it working after > > installing some more packages: > > > > When I build my standard-App-Template for daily use, the AppVM was > > unable to connect to the web. > > I had to install the following packages in the template to get > > networking: > > > > dnf install qubes-core-agent-networking > > > > I guess the same applies for fedora 27. > > That indeed was the missing item ... > I had studied the 4.0 section of https://www.qubes-os.org/doc/templat > es > /fedora-minimal/, but failed to identify this, as the corresponding > listing is somewhat confusing: "... qubes-core-agent-networking: > Networking support. Required if the template is to be used for a sys- > net or sys-firewall VM." I want networking, but NOT use the https://w > ww > .qubes-os.org/doc/templates/fedora-minimal/late as sys-net/-firewall Propose this: https://github.com/QubesOS/qubes-doc/pull/659 Joh -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/bf7415bc968d8ea51eb02670ae1960c23501af2f.camel%40graumannschaft.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] fedora-27-minimal: networking support?
On Mon, 2018-05-28 at 00:40 +0200, [799] wrote: > Hello Johannes, > > On 05/28 12:00, Johannes Graumann wrote: > > The fedora-27-minimal template from the repo does not appear to > > have > > networking support. What needs to be installed to remedy that? > > I have just migrated all my sys-AppVMs from a fedora-26-minimal to a > fedora-28-minimal image. > I also had some issues with networking and got it working after > installing some more packages: > > When I build my standard-App-Template for daily use, the AppVM was > unable to connect to the web. > I had to install the following packages in the template to get > networking: > > dnf install qubes-core-agent-networking > > I guess the same applies for fedora 27. That indeed was the missing item ... I had studied the 4.0 section of https://www.qubes-os.org/doc/templates /fedora-minimal/, but failed to identify this, as the corresponding listing is somewhat confusing: "... qubes-core-agent-networking: Networking support. Required if the template is to be used for a sys- net or sys-firewall VM." I want networking, but NOT use the https://www .qubes-os.org/doc/templates/fedora-minimal/late as sys-net/-firewall Thank you! Joh -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e58be6a930ac9f139949cfc18104a3794518f415.camel%40graumannschaft.org. For more options, visit https://groups.google.com/d/optout.
