date:20181110

Re: [qubes-users] Get help with HNS VM installation error

2018-11-10 Thread 'awokd' via qubes-users


unman:

On Sat, Nov 10, 2018 at 03:36:09PM +, 'awokd' via qubes-users wrote:

gdru...@gmail.com:

Hi,

I'm trying to install a VM in HVM mode called HNS (hybrid network simulation).

Based on Debian, HNS seems to run on KVM/QEMU.


Running a hypervisor like KVM inside another hypervisor like Xen is known as
"nested virtualization". This is disabled and not supported in Qubes.


I think that gdrub51 is saying that HNS runs under KVM, and they want to
run it under Qubes, *not* that they are trying to run KVM within Qubes.


OK.


In any case, I dont believe that nested virtualization is "disabled"
under Qubes. Not suppported certainly, but that's different.


https://groups.google.com/d/msg/qubes-users/BwQskBAvMtY/AzZQ7Y-NAAAJ
https://groups.google.com/d/msg/qubes-users/Y3P_moY4QN0/PdYhFWCvCAAJ

Don't believe nestedhvm=1 out of the box. Ergo, it's disabled (at least 
for type 1 hypervisors). :)



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9f38e68a-a818-3007-d6a0-9fef6fc45ab8%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-10 Thread 22rip

Tough questions and discussion but in the spirit of finding the "best" we can
get laptop for Qubes 4.0 (Best being defined as: available to purchase, priced
right, most open, most "reasonably" secure and"reasonably simple" to
maintain), for me I see the following as my best options, ranked:

Lenovo Carbon 5G X1
Available
Good RAM
Little pricey
Easy install/maintain? Not sure if I can flash these BIOS...

Lenova 400 series
Available
Affordable
Limited RAM?
Little boxy
Easier to install/maintain

Librem 'what ever" model
Available
NOT Affordable
Limited RAM?
Reasonably easy to install/maintain!

G505
NOT as Available
Affordable
Limited RAM?
Very boxy?
Tough to install/maintain (Flash BIOS?? Out of my scope...)

200 series
NOT as Available?
Affordable
Limited RAM?
Very boxy?
Tough to install/maintain! (Flash BIOS?? Out of my scope...)

Dell/HP/Other?
I don't know, but I suspect Qubes was developeded on Lenovo's yet select models
work

Desk Tops
I need a laptop...

Keep in mind I might weigh some of the "Easy to install/maintain" perspective
more heavily but I see my best options as:

1)Carbon X1 being the ultimate winner (if I want to invest the $1k)
2)T400+ series for the budget concerned
3)Librem if you want to get the best you can with out the "fuss" and pay some $$
4)G505/200 if you have the technical know-how/experience

What I am struggling to weigh is the security/privacy/trust compromises and
implications I have made/would make? I know G505/200 type products are most
secure but how can I get one pre-installed and done (Easy) yet still balance
trust, security, afford-ability, etcI fear the open source BIOS are out of
my technical scope to install and maintain.

I find Librem intriguing with the easiest "most" open source option for the
"reasonable" layman(person)...sure not Intel/AMD/government secure but at least
non chip maker collusion secure? Lets assume Librem screwed up initially with
their claimsare they clear now? Is their product a good option?

Decisions, Decisions...

--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/d53fd873-90fb-4426-b960-efd57aafbadd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] HCL - Purism Librem 13 v2

2018-11-10 Thread unman

On Sat, Nov 10, 2018 at 11:33:48AM -0800, Kyle Rankin wrote:
> 
> > Also, i wasnt able to find a statement of Purism about the fact that, in 
> > the beginning, they claimed the ME was "completely disabled and removed". I 
> > mean, that was obviously not true right?
> 
> I can only comment on the current state of things and what we have tried to
> be open about on our site. I don't recall them using words like
> "completely" but I also wasn't working there at the time.
> 

I find this somewhat disingenuous.

Original claims:

"This is the first laptop to be manufactured where there is no mystery
software. This means that there are absolutely no proprietary drivers
in the linux kernel, no Linux kernel binary blobs, and no proprietary
software applications required to operate this computer."

Later:
"We promise that a Purism system and all its components  will be free
according to the strictest of guidelines set forth by the FSF's Free
Software Definition."

By 2016, the company had (under pressure) rolled back on these claims,
and acknowledged that the BIOS and Intel Binaries required binary blobs.

The "completely" claim is in the October19 2017 post - "Purism Librem
Laptops Completely Disable Intel's Management Engine"

I think that what bothers people is that the early claims were either false
or misleading. I had concerns about the whole "Qubes endorsed" debacle.
I believe issues like these raise questions about the probity of the company,

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2018024616.jdigceo4sob5pdn4%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Get help with HNS VM installation error

2018-11-10 Thread unman

On Sat, Nov 10, 2018 at 03:36:09PM +, 'awokd' via qubes-users wrote:
> gdru...@gmail.com:
> > Hi,
> > 
> > I'm trying to install a VM in HVM mode called HNS (hybrid network 
> > simulation).
> > 
> > Based on Debian, HNS seems to run on KVM/QEMU.
> 
> Running a hypervisor like KVM inside another hypervisor like Xen is known as
> "nested virtualization". This is disabled and not supported in Qubes.

I think that gdrub51 is saying that HNS runs under KVM, and they want to
run it under Qubes, *not* that they are trying to run KVM within Qubes.

In any case, I dont believe that nested virtualization is "disabled"
under Qubes. Not suppported certainly, but that's different.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2018015806.zjpgidqcz5s2vwuh%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Costum qubes order in QVM

2018-11-10 Thread pieter lems

Thanks for the response and sorry for the late response back. Concerning
the question, How didn't i think of that -_-! Thank you for mentioning
this. I've been using qube colors for my qube order. It works pretty well
if you get used to it.

For anyone wanting to use my method, the order of the qube colors is as
follows:
black ( i use it for my templates)
purple ( for sys qubes ex. sys-whonix)
blue ( for disposable vm's)
The rest of the colors can be used for whatever you like , but i use the
red one for qubes which are not connected to a netVM (ex. vault and db vm)
grey
green
yellow
orange
red

cheers!

Op za 10 nov. 2018 om 04:05 schreef Sven Semmler :

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> On 11/2/18 8:20 AM, pieter lems wrote:
> > How does one costumize the order in wich the qubes are displayed.
>
> If you want a solution without programming: use a naming convention. I
> use simple prefix:
>
> app-... for AppVMs
> dvm-... for DispVM templates
> sys-... for system qubes
> sys-dvm-... for disposable system qubes
> tpl-... for templates
>
> Both qvm-ls and qubes-qube-manager will show your qubes somewhat
> ordered that way.
>
> /Sven
> -BEGIN PGP SIGNATURE-
>
> iQIzBAEBCAAdFiEE18ry22WNibwI1qeq2m4We49UH7YFAlvmSwQACgkQ2m4We49U
> H7ZQAA/+JK4PHdoVFFmHYw0VDbQA6Gj2P4WeYtqUaxTdPeH8fdLon+fzmFxe6Wph
> hS/18fvSL9hsX9/UE5L/G2JseedKKReqQheQhhRWsSurZw3+KiWIgi6l+KzSMv6u
> 5mSieodtLZus1LeplYCA0/fHQmNgdE1+ArNTcGNhJfOfHbuacmqdFeq2aaaSNL8q
> 2uPzpwu9wm/O5wcXBg06pNVHQJ5BVm1DBCvUSApONwT+GvdJu/GMz/YeZcPTuS/x
> cB5b4TRkzlhCJJ1ytdStNU/EOgE3q7nXTDcZmlCjssJb3ouRxT0gCI/S5fyEgZmg
> ufcGe80Y/e1ocqGbJwx1IY7EnrZg/y1jqcr+KrCHqoSDSs7SpLjbgN7jUeXgb6Hc
> T73ndVxATbjFt28JZhv2EkiQdadqyl1N7G2a0DJaAY/WTfcgnEETQt9ev0PdY9xP
> OPISKvQ8byxfazJoDL/DByV61PYQ4kCKxh1dOO3jTt/JyJM8TyK9+PQsGaoUNkTe
> 6NH5qeEP0pW8Sv1VTMPHMyD1no+t+1Y9VAXjYhs47Q4zWYcqhi6QAW6YZJuuOuLX
> 0i09++sz2ig6rPjSwLVkzU6576/3q7pJ3v001NiR783SYMEPC+txe+PQw22Fjvyf
> jat+YsZ2D62Juk80ok9K0KzxV6G/z11MGEJSnHS8jqjvADt8h4I=
> =+8Hd
> -END PGP SIGNATURE-
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/8d88df08-f7f6-e6c5-ed2d-dfcbb15d725a%40SvenSemmler.org
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAK8vAnV9UbeRqq0fPN240ALRmdUR8k7rJ%2BOgXP0D_3NZhbxJWg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

50 matches

Mail list logo