date:20181026

On Saturday, October 27, 2018 at 12:09:07 AM UTC+2, Ranguvar wrote:
> Threads per core being 1 actually makes sense given the recent Intel bugs. 
> Hyperthreading is not secure.

So hyperthreading is deliberately disabled by the latest Qubes updates? Is this 
documented somewhere?

> I also have an X1C6 though, with no crazy CPU usage as of today after 
> updating, rebooting, and suspending/resuming.

I don't have CPU usage. CPUs usage idles at < 10%. After resume simply the CPU 
temperature goes up 10 degrees. It is clearly noticeable as the fans are 
running more often and faster. This is actually how I noticed the issue. This 
does not happen without the Qubes update.

Also when I do 'xenpm get-cpufreq-para' after update, I get the data for CPU0 
and CPU2, but I get errors '[CPU1] failed to get cpufreq parameter', same for 
CPU3.

Before update it showed params for CPU0 to CPU7.

So apparently this is not just hyperthreading being disabled. There seem to be 
troubles with two of the physical cores too.

So, if you have an X1C6 with updated Qubes too, do all these things work for 
you? Which BIOS version are you on?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9b4e30c2-e594-4b9b-90c5-056616c9eae3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Ubuntu templates

2018-10-26 Thread Patrick

On Monday, October 8, 2018 at 9:28:26 AM UTC-5, unman wrote:
> It's now straight forward to build templates for bionic as well as xenial,
> using qubes-builder.
> 
> If you want to try them out before building, I've uploaded freshly built
> templates for 4.0, including a fairly hefty xenial-desktop template.
> You can find details at https://qubes.3isec.org 
> 
> Updated packages are available from the repositories there, if you
> already have a working template.
> 
> unman

Hi, I came to find this answer too, what is the best way to install an ubuntu 
vm?

Also, just fyi, I want to run the VMware-Horizon-Client in order to run VDI. 
Documentation says it's tested on ubuntu and Red Hat.

Thanks,
Patrick

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2b51c720-de35-48ae-ad42-176ee6aedec6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Thinkpad X1 Carbon Gen6 suspend/resume issues

2018-10-26 Thread Ranguvar

On Fri, Oct 26, 2018, 16:52 tfm853 via qubes-users <
qubes-users@googlegroups.com> wrote:

> On Friday, October 26, 2018 at 3:14:14 PM UTC+2, tfm...@googlemail.com
> wrote:
> > Always: After resume the temperature idles at 60-70 C with the fan
> running at 4500RPM. xentop still shows no significant CPU usage. So this is
> an average 10 degrees hotter _with_ the fans actually running than it was
> before sleep. The only fix I know is rebooting the system. Apparently some
> power management feature is broken after resume. Even when I shutdown all
> qubes and only run dom0, temperature stays that high.
>
> Ok, apparently there is a deeper issue here: I noticed that I was capped
> at 400% CPU usage although this is a 4 core CPU with hyperthreading.
> 'lscpu' revealed that there was just one thread per core. Since I was
> absolutely sure that I previously could utilize 800%, I reinstalled Qubes.
>
> I should mention that my system was Qubes 4 with 'qubes-dom0-update' run
> yesterday.
>
> Now, with a fresh installation and no update, I have 2 threads per core
> again, and the above mentioned issue with increased heat after suspend is
> gone.
>
> After running 'qubes-dom0-update' again and restarting, the threads per
> core are down to 1 again and the heat issue is back.
>
> I guess I should report a bug regarding this.
>
> PS: Can I change the title of the thread somehow, to better reflect the
> issue?
>

No, as it is an email chain.

Threads per core being 1 actually makes sense given the recent Intel bugs.
Hyperthreading is not secure.

I also have an X1C6 though, with no crazy CPU usage as of today after
updating, rebooting, and suspending/resuming.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAHe59t52%3DPY9MMpEcd9gHhHdKfQVfdMXuAGvsJO%2BU5SYGwQgMg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Updates broke an HVM qube

2018-10-26 Thread Mike Keehan

On Fri, 26 Oct 2018 16:58:09 -0400
Kyaphas Hill  wrote:

> Sheesh, I should've thought of that. No luck though. Same result in
> another terminal window.
> 
> I tried updating by typing "sudo yum update -y && shutdown -h now" in
> the blind. And while that command worked (it ran for a while, then
> shut down), the problem still persists.
> 

Hmm.  Did you try resizing the terminal window by dragging a corner?
I've a vague memory of seeing something like this in the past, but 
not on Qubes.

Mike.


> On Fri, Oct 26, 2018 at 6:39 AM Mike Keehan  wrote:
> 
> > On Thu, 25 Oct 2018 10:47:33 -0700 (PDT)
> > drogo  wrote:
> >  
> > > I recently updated a fedora 28-based qube that I have running in
> > > HVM mode. I also updated dom0 at about the same time. So I'm not
> > > sure which update caused the issue.
> > >
> > > Now when I attempt to start the qube, the terminal for the
> > > template (and its dependent appVM) will only display what looks
> > > like static. Or if you're old enough, what the TV looked like
> > > when you messed with the horizontal hold too far. :)
> > >
> > > The VM seems to be running, as if I type "shutdown -h now" in the
> > > unintelligible terminal, the VM shuts down.
> > >
> > > Any  tips? I'm hoping to avoid having to re-build this qube from
> > > scratch.
> > >
> > > Thanks.
> > >  
> >
> > Try a different terminal emulator - xterm, xfce4-terminal.
> >
> > --
> > You received this message because you are subscribed to a topic in
> > the Google Groups "qubes-users" group.
> > To unsubscribe from this topic, visit
> > https://groups.google.com/d/topic/qubes-users/nP_6mgtX0eY/unsubscribe.
> > To unsubscribe from this group and all its topics, send an email to
> > qubes-users+unsubscr...@googlegroups.com.
> > To post to this group, send email to qubes-users@googlegroups.com.
> > To view this discussion on the web visit
> > https://groups.google.com/d/msgid/qubes-users/20181026113932.3ba50a6e.mike%40keehan.net
> > .
> > For more options, visit https://groups.google.com/d/optout.
> >  
> 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181026221002.2477ee3f.mike%40keehan.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Updates broke an HVM qube

2018-10-26 Thread Kyaphas Hill

Sheesh, I should've thought of that. No luck though. Same result in another
terminal window.

I tried updating by typing "sudo yum update -y && shutdown -h now" in the
blind. And while that command worked (it ran for a while, then shut down),
the problem still persists.


On Fri, Oct 26, 2018 at 6:39 AM Mike Keehan  wrote:

> On Thu, 25 Oct 2018 10:47:33 -0700 (PDT)
> drogo  wrote:
>
> > I recently updated a fedora 28-based qube that I have running in HVM
> > mode. I also updated dom0 at about the same time. So I'm not sure
> > which update caused the issue.
> >
> > Now when I attempt to start the qube, the terminal for the template
> > (and its dependent appVM) will only display what looks like static.
> > Or if you're old enough, what the TV looked like when you messed with
> > the horizontal hold too far. :)
> >
> > The VM seems to be running, as if I type "shutdown -h now" in the
> > unintelligible terminal, the VM shuts down.
> >
> > Any  tips? I'm hoping to avoid having to re-build this qube from
> > scratch.
> >
> > Thanks.
> >
>
> Try a different terminal emulator - xterm, xfce4-terminal.
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "qubes-users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/qubes-users/nP_6mgtX0eY/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/20181026113932.3ba50a6e.mike%40keehan.net
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAKgF3cEv0adtHhuw1TuD6fJrXV5%3Dfm_oVs3gwP8TDTd_d5y%3DOQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Thinkpad X1 Carbon Gen6 suspend/resume issues

On Friday, October 26, 2018 at 3:14:14 PM UTC+2, tfm...@googlemail.com wrote:
> Always: After resume the temperature idles at 60-70 C with the fan running at 
> 4500RPM. xentop still shows no significant CPU usage. So this is an average 
> 10 degrees hotter _with_ the fans actually running than it was before sleep. 
> The only fix I know is rebooting the system. Apparently some power management 
> feature is broken after resume. Even when I shutdown all qubes and only run 
> dom0, temperature stays that high.

Ok, apparently there is a deeper issue here: I noticed that I was capped at 
400% CPU usage although this is a 4 core CPU with hyperthreading. 'lscpu' 
revealed that there was just one thread per core. Since I was absolutely sure 
that I previously could utilize 800%, I reinstalled Qubes.

I should mention that my system was Qubes 4 with 'qubes-dom0-update' run 
yesterday.

Now, with a fresh installation and no update, I have 2 threads per core again, 
and the above mentioned issue with increased heat after suspend is gone.

After running 'qubes-dom0-update' again and restarting, the threads per core 
are down to 1 again and the heat issue is back.

I guess I should report a bug regarding this.

PS: Can I change the title of the thread somehow, to better reflect the issue?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/22e3db87-693a-4728-a199-7c1d383047ad%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes User Forum

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 10/26/18 9:52 PM, Zrubi wrote:
> It seems if you using the google "forum" interface, then the from 
> header looks like this:
> 
> From: "'Raffaele Florio' via qubes-users"
> 

Or probably not even the forum interface, but the standard webmail
with multiple email address/alias?

Can you confirm how you post your mails to this list please?

- -- 
Zrubi
-BEGIN PGP SIGNATURE-
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=zfQI
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/71b30e72-e3d8-793b-ec91-e2d63d1e2e47%40zrubi.hu.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Thinkpad X1 Carbon Gen6 suspend/resume issues

On Friday, October 26, 2018 at 9:11:23 PM UTC+2, birdynam wrote:
> Deactivation of the TPM resolves "suspends" issues on my lenovo x260.

Thanks! I'm trying this now. It doesn't solve the temperature issue, though. 
But maybe it helps stabilize the other issues. Time will tell.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0e721df3-c8ac-48f8-ba46-4f049db20598%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Thinkpad X1 Carbon Gen6 suspend/resume issues

On Friday, October 26, 2018 at 8:45:49 PM UTC+2, rangu...@gmail.com wrote:
> Turn on Thunderbolt BIOS assist mode.

Thanks! In fact, it was already on. The BIOS states quite clearly that you 
should enable it when running Linux. So I never went without it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4a6fa80f-a7b5-4956-811b-650371043ca6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes User Forum

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 10/26/18 4:35 PM, 'Raffaele Florio' via qubes-users wrote:
> I could help with the admin/moderator role.


Cool, the first issue is here:

It seems if you using the google "forum" interface, then the from
header looks like this:

From: "'Raffaele Florio' via qubes-users" 

This seems to trick the forum engine, and creating a user using the
mailing list address :o bummer.

So if you want to use the forum, please post a "real mail" to the list
first ;)

- -- 
Zrubi
-BEGIN PGP SIGNATURE-
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=8Sef
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/247d531a-3f15-d973-4bf5-dca74851cb20%40zrubi.hu.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Thinkpad X1 Carbon Gen6 suspend/resume issues

2018-10-26 Thread birdynam

Hi,
Deactivation of the TPM resolves "suspends" issues on my lenovo x260.

Birdy


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/343c6193-c544-a512-2d68-df9f4d783508%40gmail.com.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] HCL - Lenovo x260

2018-10-26 Thread birdynam

Hi,

Everything seems good now after deactivation of TPM on bios.

Battery seems better too.

I spent one day playing with Qubes, pretty cool.
I was surprised to find out that selinux was not activated in fedora
kernel...


Birdy


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/41a0c404-2a95-3dc0-5bd5-9b5904612155%40gmail.com.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

[qubes-users] Re: Thinkpad X1 Carbon Gen6 suspend/resume issues

2018-10-26 Thread ranguvar13

On Friday, October 26, 2018 at 9:14:14 AM UTC-4, tfm...@googlemail.com wrote:
> Hi everyone!
> 
> I've just installed Qubes4 on a new X1 Carbon; BIOS is updated to 1.31.
> 
> I'm using 'sensors' to monitor temperature and fan speed.
> 
> I run like 5-7 qubes, no significant CPU usage shown in xentop.
> 
> Then the temperature is around 50-55 C and the fan is off.
> 
> When I now suspend by closing the lid and then resume, the following issues 
> can occur:
> 
> Rarely: System does not wake up at all, neither by opening the lid nor by 
> pressing the power button.
> 
> Sometimes: Wifi is not working after resume. Looking at the settings of 
> sys-net shows that the network cards are not assigned to the vm. Trying to 
> assign them is not possible, libvirt complains they are already assigned to 
> sys-net and cannot be detached. Restarting sys-net fixes this.
> 
> Often: All usb devices disappear. 'qvm-usb' shows nothing. Restarting sys-usb 
> fixes this.
> 
> Always: After resume the temperature idles at 60-70 C with the fan running at 
> 4500RPM. xentop still shows no significant CPU usage. So this is an average 
> 10 degrees hotter _with_ the fans actually running than it was before sleep. 
> The only fix I know is rebooting the system. Apparently some power management 
> feature is broken after resume. Even when I shutdown all qubes and only run 
> dom0, temperature stays that high.
> 
> I primarily care for that last issue with the temperature. For the wifi issue 
> I found some suggestions for workarounds I have yet to try.
> 
> But I did not find anything regarding the temperature issue. And it's the 
> only one that can't be fixed live.
> 
> Now, what kind of logs can I provide? Also there are a number of settings in 
> the BIOS that I don't fully understand. (Sleep mode of course is set to 
> Linux.)
> 
> Does anyone else use an X1 carbon and might have some ideas? Any help is 
> appreciated!
> 
> Ole

Turn on Thunderbolt BIOS assist mode.
This resolves many buggy sleep issues in Linux and *BSD.
Note that some people have recently reported changing Thunderbolt BIOS assist 
as bricking their laptop BIOS.
Not me, though, and I've changed it back and forth many times.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e0adca5d-4976-41b3-b306-3c0faad0cdfd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] A message from Marek Marczykowski-Górecki

2018-10-26 Thread donoban

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 10/26/18 04:28, Andrew David Wong wrote:
> Dear Qubes Community,
> 
> Marek Marczykowski-Górecki published the following message on the
> Qubes website today. The plain text source is included below.
> 
> https://www.qubes-os.org/news/2018/10/25/thank-you-joanna/
> 
> ``` Thank you, Joanna! ==

WoW, thank you too Marek.
-BEGIN PGP SIGNATURE-
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=OQaD
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f36a0b59-01a9-e54b-d242-d5231a2f5215%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] HCL - Asrock X370 Gaming K4 BIOS P4.80

2018-10-26 Thread 'Bjoern Christoph' via qubes-users

Am Mittwoch, 24. Oktober 2018 23:41:42 UTC+2 schrieb awokd:
 
> Continuing the same troubleshooting approach, try also enabling 
> permissive and no-strict-reset modes for both those AMD video & audio 
> devices per https://www.qubes-os.org/doc/assigning-devices/#r40-1. 
> Also, for now try limiting your pass-through testing to just one device 
> at a time- i.e. see if video works by itself, then audio. Once both work 
> separately, then try together again. Should only need to update in Qube 
> Settings, not the boot options.

Tried, didn't help.
 
>  > At least no reboot of the PC anymore ;)
> > If I add the devices after Win7 is running Windows tells me that the new 
> > graphic card (which is correctly identified checking the pci device ids) 
> > cannot be used due to a conflict (error 12) and a reboot is needed - which 
> > fails like before.
> 
> Agree, it's good progress! I wonder if there's some tweak needed to 
> Windows and/or the AMD driver itself. Try switching to AMD's driver pack 
> if using the built-in ones, or vice-versa.

I doubt that will help - this happens when Windows first tries to access the 
graphic card I assume as we're less than a second into boot - there is no 
driver loaded yet, this is probably standard VGA mode at this point and that 
should always work no?

For now I'll stop working on this, I have other things... but it's good to see 
that things are improving a lot with Qubes :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/555d05d8-4953-41a7-91d7-c3543bcec04a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Swap/remove second network card => no network at all?

2018-10-26 Thread 'Bjoern Christoph' via qubes-users

I've got two network cards in my workstation.

Now I removed the unneeded network card, start Qubes --> no network at all?

I place the network card back in it's original slot, start Qubes --> network is 
back!

I move the card to a different slot --> no network again?

I assume this has something to do with the BDF which then prevents some 
script/code from running - but this is pretty annoying to be honest. I was not 
able to find any information on where this relationship is stored or how to 
change/remove it.

It would be great if Qubes could/would keep track of the PCI ID/BDF relation 
and if cards have been moved to a different BDF then adjust that internally to 
prevent this problem from happening.

And for now - how do I solve this?

Thanks,
Bjoern

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8006e5ab-590a-4ef4-a096-972e8fc57ee6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] USB-C hub

2018-10-26 Thread 'Christophe Vial' via qubes-users

Thank you very much for you help! Booting with the usb hub connected and then 
assigning the device "usb controller thunderbolt 3 usb controller" to the 
sys-usb vm got everything working.

 Original Message 
On Oct 26, 2018, 13:48, Achim Patzner wrote:

> Am Donnerstag, den 25.10.2018, 19:46 + schrieb 'Christophe Vial' via 
> qubes-users:
>
>> Any workaround for this problem ?
>
> Connect the hub before booting and look at lspci; all my Lenovo systems turn 
> on the required controllers (and only them!) only after something has been 
> connected to the physical port and requested something. In Qubes 3.2 this was 
> annoying because there were sudden appearances of USB (or Thunderbolt) 
> controllers in Dom0 and it seems someone turned off adding busses that appear 
> after booting now (good decision).
>
> Achim
>
> --
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> [https://groups.google.com/d/msgid/qubes-users/14b9c057b706c7c5a78780ff8790debdfb0b35d0.camel%40noses.com](https://groups.google.com/d/msgid/qubes-users/14b9c057b706c7c5a78780ff8790debdfb0b35d0.camel%40noses.com?utm_medium=email_source=footer).
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/_0XhDUcCEXyapa2pPuapvNbduOJlxkhQLFP1pFvcmwRUZQWKoZTbU9ABoZd6HkhQqFZ9S6Ut_w36Z3GinpWctqmu-0SpDNK-6lF0pji1Dgg%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] ERROR:volume qubes_dom0/vm-VMNAME-root missing

2018-10-26 Thread higginsonjim2

Sorry - been away for a couple of days.

Suggest - you don't pursue any further.

Somehow - and I don't know how! - the standalone VM starting working fine again 
after several reboots. 
WRT original query that you resolved (and recovery process worked again 
successfully the other day) - the thread can be seen by keying in the search 
box -   
Error:volume qubes_dom0 /vm-sys-net-private missing

As mentioned - I suggest you spend no time on this - but as ever, thanks again 
for replying.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b683f50b-988c-4905-b951-c3dacb1bfd0d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: My farewell to Qubes OS!

2018-10-26 Thread Foppe de Haan

On Thursday, October 25, 2018 at 12:21:51 PM UTC+2, Joanna Rutkowska wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> Hello Qubes devs and users!
> 
> It's been nearly 9 years[*] since I sent the first internal email
> within ITL to Rafał Wojtczuk and Alex Tereshkin with the original idea
> for making Qubes OS. Shortly after this, we started drafting the
> original architecture and writing some early PoC code...
> 
> Today, I've made an announcement I'm switching focus to another area
> of work and joining the Golem Project as a Chief {Strategy, Security}
> Officer:
> 
> https://www.qubes-os.org/news/2018/10/25/the-next-chapter/
> 
> https://blog.golemproject.net/joanna-rutkowska-joins-golem-as-chief-strategy-security-officer-13f12f0c11c0
> 
> I'd like to thank all the people who made Qubes OS possible, which
> includes: the whole ITL team, all the community contributors, and, of
> course, all the Qubes OS users!
> 
> Qubes OS will continue under the lead of Marek Marczykowski-Górecki,
> who have been a de-facto lead for all the day-to-day development for
> quite some time already!
> 
> Thanks, Marek! Thank you, all!
> 
> Cheers,
> joanna.
> 
> [*] FWIW, the exact date was November 11th, 2009.
> -BEGIN PGP SIGNATURE-
> 
> iQIzBAEBCAAdFiEEtR14vbBDAuE0X2Ly1F2dklVl1NIFAlvRmTYACgkQ1F2dklVl
> 1NIiDxAAtwm3qM1Rq3ow67q5bLu+1VnuM0NQrN/crLu+FDOdaa9XNzSsdWz97UoN
> 2VsRO+RICNttrR7MAaWSgTXtBKOMuSXYc7s5r7VVFtx4qW0xyRaxbr7vBqJRDM5n
> 6eCLdjAFf1Xh8Ju5eDnBJGx41EIywO4Jba3z9+Ww2xyBycQAYY22yRQf6ANlWfwW
> XE0HgBuaJtAEReJc7qpzlG/iwLa/de1eqVa9kOS4HrESllE9wP7qXLrnmwr/yH19
> 2twe3QVS29uVYzPOam6PiCg1PN4AjsYKvihy/Tap11bYfdr1L8OjmE9+KrDPFPek
> MaWlkl/OoiFZsQHhj1somMfFNKH82oTW3zIAZCmmOZgQHgt6T1KDzjehFTASJeFp
> WNmvmowDYfcVYEdjEXQKP78mpxlYz6fChr/A4x3TX64+KsltdZA7l266OMfpXvL4
> Mja4SUvEKqLbyEQxCaDnOwm4cV7k/dHtOXE5fREzUfi+YVu14yVNkPRxg9UpgtCa
> sV/PY7AwOe4JqxV+8VlWWmX0amNf8ZEtz51F2eH6NZZYGaRtTXxTKW6Aad0XHg7p
> 8m2gvH8YWnGPX7ckofcpL7NHR5B6EauXoHKeQZgV9Ix0NQf2CNvBv5ZxZ7IYannH
> mJEcpgRYMtG5b8+x05hBCb7CP5T/tQpt2r5jIK3eqwEzcPY//H8=
> =1ZqA
> -END PGP SIGNATURE-

thank you for your efforts on this, as well as your insights. :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/32391eda-9333-4cea-9584-64d3b71fadbc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Ubuntu templates

2018-10-26 Thread Frank Schäckermann




> On 26. Oct 2018, at 13:21, unman unman-at-thirdeyesecurity.org 
> |qubes-mailing-list/Example Allow|  wrote:
> 
>> On Thu, Oct 25, 2018 at 02:58:51PM +0100, unman wrote:
>>> On Thu, Oct 25, 2018 at 02:03:02PM +0200, Frank Schäckermann wrote:
>>> Hi unman!
>>> 
>>> I am trying to build the bionic template for Qubes 3.2 and the “make 
>>> qubes-vm” works fine after adding the “Build-Depends: dephelper” to the 
>>> control file of meta-packages.
>>> 
>>> But the “make template” fails with
>>> 
>>> E: Couldn’t find these debs: apt-transport-https
>>> make[1]: *** [Makefile:63: rootimg-build] Error 1
>>> 
>>> Any idea what is going wrong here?
>>> 
>>> Regards, Frank
>>> 
 On 8. Oct 2018, at 16:28, unman unman-at-thirdeyesecurity.org 
 |qubes-mailing-list/Example Allow|  wrote:
 
 It's now straight forward to build templates for bionic as well as xenial,
 using qubes-builder.
 
 If you want to try them out before building, I've uploaded freshly built
 templates for 4.0, including a fairly hefty xenial-desktop template.
 You can find details at https://qubes.3isec.org 
 
 Updated packages are available from the repositories there, if you
 already have a working template.
 
 unman
>> 
>> Hi Frank
>> 
>> That package is in bionic repositories for sure.
>> I'll run a 3.2 and see if I encounter any problems, and get back to you.
>> 
>> unman
> 
> I see the problem.
> The package isnt in main but in universal.
> Adding universal to the debootstrap options isnt enough because then the
> install fails because the Qubes package repos put all files in main.
> I'll work up a fix and put in a PR.
> I'll post back here too with the details to save you time.
> 
> unman
> 

Great! Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/645271CB-7085-457B-9833-02670937AFCC%40schaeckermann.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes User Forum

2018-10-26 Thread 'Raffaele Florio' via qubes-users

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Thanks Zrubi.
Those test messages are clear now.

> However I would really need help to:
>
> -   test this solution, by using it :)
> -   forum administrators also welcome.
> -   some voluntary moderators would be nice also.
> -   create any better design :)
> -   creating a privacy policy, and such pages...
>
> --
> Zrubi
>

I could help with the admin/moderator role.

Best Regards,
Raffaele.
-BEGIN PGP SIGNATURE-
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=oWcX
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/mZfRDBHK_epCiQykAgHj9UdmuHh_RbmZCBlDWvNGnxkv4P0oSOPg-CTxuq-JoawxXX9gzNu6_XMGwCP3kL7SDJgldYn9kMCvgXQIwEenqlU%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] My farewell to Qubes OS!

2018-10-26 Thread 'Raffaele Florio' via qubes-users

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Joanna,
Thanks, thanks and thanks again for all your work! I wish you all the best.

Cheers,
Raffaele.
-BEGIN PGP SIGNATURE-
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=JO/B
-END PGP SIGNATURE-

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/sSIgXAYrxlsIeunyMlCOswN3mYf8NqsebvxgNc0wKGg2RjuOqR2xBrQoeahIX7FpPCqLXX4qQfAaQFj_zQRqoLoRy6oF9q9wmQlhZHGbTCA%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes User Forum

Achim Patzner wrote on Fri, 26 October 2018 12:32
> Even with 1&1 being quite cheap: How expensive is it?

I have paid only $12 - with the domain included.
So the first year was a gift :)

The next year would cost more for sure, but we should not
worry about this at least for the next 10 monts ;)
If the project will succeed, I'm happy to fund the next year
too...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6f.5bd31b6e%40qubes-os.info.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes User Forum

Achim Patzner wrote on Fri, 26 October 2018 12:32
> And then sends out the password for that account by mail
> to the mailing
> list? 8)

Nope :d
It should send it to your mail addres.
But, let's try it:
https://qubes-os.info/index.php?t=reset;

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6e.5bd319ab%40qubes-os.info.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes User Forum

Achim Patzner wrote on Fri, 26 October 2018 12:32
> How well is it dealing with the endemic "I can earn
> 8000$ an hour by
> selling all my grandmothers and so can you"-type forum
> spam (besides
> having a houskeeping department consisting of more mods
> than users)?

Only registered ussers can post to the forum.

So the situation is the same as is with the mailing lists,
except:
the forum admins/moderators can ban users, delete spam,
etc...

We will se how it is going :) - that is the goal for the
PoC.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6d.5bd317ea%40qubes-os.info.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Thinkpad X1 Carbon Gen6 suspend/resume issues

Hi everyone!

I've just installed Qubes4 on a new X1 Carbon; BIOS is updated to 1.31.

I'm using 'sensors' to monitor temperature and fan speed.

I run like 5-7 qubes, no significant CPU usage shown in xentop.

Then the temperature is around 50-55 C and the fan is off.

When I now suspend by closing the lid and then resume, the following issues can
occur:

Rarely: System does not wake up at all, neither by opening the lid nor by
pressing the power button.

Sometimes: Wifi is not working after resume. Looking at the settings of sys-net
shows that the network cards are not assigned to the vm. Trying to assign them
is not possible, libvirt complains they are already assigned to sys-net and
cannot be detached. Restarting sys-net fixes this.

Often: All usb devices disappear. 'qvm-usb' shows nothing. Restarting sys-usb
fixes this.

Always: After resume the temperature idles at 60-70 C with the fan running at
4500RPM. xentop still shows no significant CPU usage. So this is an average 10
degrees hotter _with_ the fans actually running than it was before sleep. The
only fix I know is rebooting the system. Apparently some power management
feature is broken after resume. Even when I shutdown all qubes and only run
dom0, temperature stays that high.

I primarily care for that last issue with the temperature. For the wifi issue I
found some suggestions for workarounds I have yet to try.

But I did not find anything regarding the temperature issue. And it's the only
one that can't be fixed live.

Now, what kind of logs can I provide? Also there are a number of settings in
the BIOS that I don't fully understand. (Sleep mode of course is set to Linux.)

Does anyone else use an X1 carbon and might have some ideas? Any help is
appreciated!

Ole

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/90df00b3-ffe2-441e-927f-fc8b9500ad1f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes User Forum

2018-10-26 Thread Achim Patzner

Am Freitag, den 26.10.2018, 13:17 +0200 schrieb Zrubi:
> This means: it is able to sync any mailing list with a forum.
> So every mail posted to any of the qubes mailing lists will be
> received by the forum engine, and convert it to a forum post.

How well is it dealing with the endemic "I can earn 8000$ an hour by
selling all my grandmothers and so can you"-type forum spam (besides
having a houskeeping department consisting of more mods than users)?

> As the sync working both ways if a user post a new topic, or reply to
> an existing one using the forum interface, it will be sent out as a
> regular mail to the corresponding mailing list.
> 
> This way - if it's really work in practice - You don't have to chose
> one solution, both the mailing list and the forum can work and live
> together.
> 
> So if you prefer the forum interface - or just want to give it a try
> -
> you can login to the forum, and just start using it. :)
> Every kind of feedback are welcome. ;)
> 
> The direct registration is disabled for a reason:
> If you post any mail to one of the mailing lists, the forum engine
> creates a user account automatically, using your email address and
> your name (if you using any alongside your mail address)

And then sends out the password for that account by mail to the mailing
list? 8-)

> Some technical background:
> The domain name is registered by me for "personal use". But if the
> PoC
> will be successful, and/or the Qubes team ever would need it, I
> willing to cooperate.

If that would be a problem I would be able to donate the domain
irren.haus...


> The domain, and the hosting is paid for 12 months.

Even with 1&1 being quite cheap: How expensive is it?

> However I would really need help to:
> - test this solution, by using it :)
> - forum administrators also welcome.
> - some voluntary moderators would be nice also.

You mean "cleaning staff"? 8-) Sounds like a great idea if all heavy
duty users should volunteer some time for it.

> - creating a privacy policy, and such pages...

UGH.

To make it a bit more palatable: Make it Tapatalk compatible... 8-).


Achim



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/48f3059ba0335fec955bd284c860fbed42be24e6.camel%40noses.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] HCL - Lenovo x260

2018-10-26 Thread birdynam



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cfce8a26-478e-3f8d-a1ef-274445bdaa82%40gmail.com.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-LENOVO-20F6CTO1WW-20181026-032339.yml
Description: application/yaml


signature.asc
Description: OpenPGP digital signature

Re: [qubes-users] USB-C hub

2018-10-26 Thread Achim Patzner

Am Donnerstag, den 25.10.2018, 19:46 + schrieb 'Christophe Vial'
via qubes-users:
Any workaround for this problem ?

Connect the hub before booting and look at lspci; all my Lenovo systems
turn on the required controllers (and only them!) only after something
has been connected to the physical port and requested something. In
Qubes 3.2 this was annoying because there were sudden appearances of
USB (or Thunderbolt) controllers in Dom0 and it seems someone turned
off adding busses that appear after booting now (good decision).


Achim

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/14b9c057b706c7c5a78780ff8790debdfb0b35d0.camel%40noses.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] No icons in debian-9 File manager

On Tue, Oct 23, 2018 at 03:36:24PM -0700, Alex Winter wrote:
> Hey, I recently installed thunar with debian-9 and When I open it up there 
> are no icons showing at all.  Is there a way to fix this?
> 
> I installed thunar because there wasnt any default file manager with debian-9 
> installed.  I installed it using apt-get install thunar in the debian-9 
> template.
> 

It's quite a common issue.
You can install gnome-icon-theme-full, or lxappearance, and choose what
icon theme you want. Either should work.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181026114559.tloc5cbgbizlaav3%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes User Forum

On Fri, Oct 26, 2018 at 01:17:09PM +0200, Zrubi wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> Hi,
> 
> There were several discussions before about the current mailing lists
> and/or a possible forum.
> 
> I would not only just bring back this topic, but already created a PoC
> project:
> https://qubes-os.info
> 
> The Qubes developers are already know about my project - still it is
> an UNOFFICIAL, Proof of Concept project.
> The goal is to see how it would work in practice.
> 
> The forum engine (fudforum) has a unique feature:
> mailing list manager.
> 
> This means: it is able to sync any mailing list with a forum.
> So every mail posted to any of the qubes mailing lists will be
> received by the forum engine, and convert it to a forum post.
> 
> As the sync working both ways if a user post a new topic, or reply to
> an existing one using the forum interface, it will be sent out as a
> regular mail to the corresponding mailing list.
> 
> This way - if it's really work in practice - You don't have to chose
> one solution, both the mailing list and the forum can work and live
> together.
> 
> So if you prefer the forum interface - or just want to give it a try -
> you can login to the forum, and just start using it. :)
> Every kind of feedback are welcome. ;)
> 
> The direct registration is disabled for a reason:
> If you post any mail to one of the mailing lists, the forum engine
> creates a user account automatically, using your email address and
> your name (if you using any alongside your mail address)
> Because of the two way sync, it is vital to match the forum users with
> the mail authors... and the key is your mail address.
> 
> So if you already posted any mail after the forum started receiving
> mails (2018.10.23), you already have an account. You can access it
> using the password reset function of the forum.
> 
> As the username is auto generated, check your username by reading any
> of your own mails on the forum interface. Later you can change it as
> you wish.
> 
> As your "name" alongside with your email address is already a public
> information, the forum not ever needs any more personal info from you.
> However optionally, you can add more details to your account if you
> feel so.
> 
> Some technical background:
> The domain name is registered by me for "personal use". But if the PoC
> will be successful, and/or the Qubes team ever would need it, I
> willing to cooperate.
> 
> The whole solution is hosted on an external provider. So even if I try
> to make it reasonable safe, keep in mind that the hosting provider
> (1&1) owns it all.
> 
> You should be aware that the forum engine is polling a mailbox, so it
> has a few minutes of delay.
> 
> Help needed:
> Currently it's just a one man show :)
> The domain, and the hosting is paid for 12 months.
> The forum engine is configured, and "seems to be" working.
> 
> However I would really need help to:
> - - test this solution, by using it :)
> - - forum administrators also welcome.
> - - some voluntary moderators would be nice also.
> - - create any better design :)
> - - creating a privacy policy, and such pages...
> 
> 
> 
> - -- 
> Zrubi
> -BEGIN PGP SIGNATURE-
> 
> iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlvS96wACgkQVjGlenYH
> FQ1lcQ/+M9ObQg8Fg8EVeazVYZ8Gu23wQqsqRIGCTKud8dojOR7Aius/h2J3e2Yd
> Sj/1vv0dLhZ4aMPDnwKOtXsYYLkakBzKijrXuAoxnUDCDfqpUPUeuHR71ac2WuRU
> XkhadSly2FrKfs+xT4fb/H7ti4PBppxfMWStJyN08cGQMEtM0v/WVHFlb1VvaWOq
> 6DFPcClJBl4GT7pB1jSl2IQKe9rp2xzF4lDW4GJBmlKWwARRSDTRrWfGTsvcFgC+
> BTW+m5lLmaKRggxLtbytYy33RhH46AQ6g/HQsRdf/0FX7ggQhRxZKxj7GhChQ9wB
> IpfPD9+aDAOIuNK7i73VOinuJr8/ZZ8v7znOj0/qsbRyxxF93zPLHgY00xlrnhUh
> whD5uutXYXudzkvoMAcIxf/whrJKZpJgu3M/8s54jwjLCyS+mMmy8eg+lG59LqLE
> mfrCb6vCSbt3ymje0txtzVqk3jKvtXRwtlXLtby/F7c4mHV5acevz30vcIY3sRD5
> eStgbGqiplfZHHdPfXJ1uv+EvAUnvqVYZ1Rt7n8pLxPNVh3r8/V0lJBspp2yOH62
> E/BkQ8hWCObLXyidP7FedHYSTVtL2V7sEUh3BFb5KRw8wIYT6ADWEvEK6igg6rwa
> gActjhoHFR4sYvOPc3QG0LR+q8zxLt6xwI8CWGYmKOduEnQq+f8=
> =GH0S
> -END PGP SIGNATURE-
> 

Thanks Zrubi -this looks nice solution for those who prefer forums.
I wondered what those test messages were.
If you need help I can chip in with admin or moderationi, if I can use
the interface. I'll let you know by email.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181026113735.qcdsag354jk63sjk%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Unman please help with internet connection

On Thu, Oct 25, 2018 at 08:01:23PM +0300, Squares wrote:
> 
> 
> 
> Hi. I want to get this VM configuration: Internet <-- OpenBSD(VM1) <--
> Firewall(VM2) <-- AppVM(VM3) I use OpenBSD as a NetVM. I call it VM1. I
> assigned the PCI network card to this VM, and it has an em0 interface
> to connect to the internet. I'd like this OpenBSD VM to be the NetVM
> for other Qubes, so I created a new debian AppVM (VM2), which has no
> NetVM of its own, and I made it the NetVM of Openbsd(VM1): OpenBSD(VM1)
> --> VM2 This made it possible to get an xnf0 interface in OpenBSD(VM1).
> I have enabled IP forwarding and enabled Nat for xnf0, and I can ping
> google from the xnf0 interface, meaning that it has internet access:
> ping -I xnf0 8.8.8.8 I made VM2 the NetVM for VM3. VM1 --> VM2 <-- VM3
> I enabled IP forwarding in VM2 and I tested some IPtables
> configurations for allowing forwarding between the 2 interfaces in VM2.
> I made it possible to ping the xnf0 interface in VM1 from VM3. But when
> I can't ping an internet address. Could you please tell me what I need
> to do in VM2 so that I can make VM2 act like a regular firewall VM,
> even theough it is a default Qubes NetVM? Thanks.
> 
> 

SO you have the basic structure in place.
Little more is needed. As I recall, setting DNS on the qubes downstream
of fw, and routing correctly between the qubes and openBSD.
Also there is an unholy mix of iptables and nftables, although I *may*
have tidies that up.
I'm away from home at the moment. When I get back I'll check the
openBSD setup, and post back, probably tomorrow evening.

cheers

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181026113000.sakotkevrpnk6uy2%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Ubuntu templates

On Thu, Oct 25, 2018 at 02:58:51PM +0100, unman wrote:
> On Thu, Oct 25, 2018 at 02:03:02PM +0200, Frank Schäckermann wrote:
> > Hi unman!
> > 
> > I am trying to build the bionic template for Qubes 3.2 and the “make 
> > qubes-vm” works fine after adding the “Build-Depends: dephelper” to the 
> > control file of meta-packages.
> > 
> > But the “make template” fails with
> > 
> > E: Couldn’t find these debs: apt-transport-https
> > make[1]: *** [Makefile:63: rootimg-build] Error 1
> > 
> > Any idea what is going wrong here?
> > 
> > Regards, Frank
> > 
> > > On 8. Oct 2018, at 16:28, unman unman-at-thirdeyesecurity.org 
> > > |qubes-mailing-list/Example Allow|  wrote:
> > > 
> > > It's now straight forward to build templates for bionic as well as xenial,
> > > using qubes-builder.
> > > 
> > > If you want to try them out before building, I've uploaded freshly built
> > > templates for 4.0, including a fairly hefty xenial-desktop template.
> > > You can find details at https://qubes.3isec.org 
> > > 
> > > Updated packages are available from the repositories there, if you
> > > already have a working template.
> > > 
> > > unman
> 
> Hi Frank
> 
> That package is in bionic repositories for sure.
> I'll run a 3.2 and see if I encounter any problems, and get back to you.
> 
> unman

I see the problem.
The package isnt in main but in universal.
Adding universal to the debootstrap options isnt enough because then the
install fails because the Qubes package repos put all files in main.
I'll work up a fix and put in a PR.
I'll post back here too with the details to save you time.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20181026112137.gksyhdtqg3j2djyi%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes User Forum