Re: [qubes-users] Re: Ubuntu templates
On Mon, Dec 31, 2018 at 10:35:31AM -0800, seshu wrote: > On Wednesday, December 26, 2018 at 3:39:55 AM UTC-7, unman wrote: > > For any one who wants to try out Xenial or Bionic, I've put some updated > > templates for 4.0 online, including a bionic+desktop version. > > They are pretty vanilla, except I have stopped the automatic search for > > updates. The templates are signed with my key. > > > > If you use Ubuntu in Qubes I provide package repositories at > > https://qubes.3isec.org for convenience. Full details on that page. > > > > As you may know Qubes doesn't provide official pre-built Templates for > > Ubuntu, because of licensing concerns - details at > > www.qubes-os.org/doc/templates/ubuntu > > > > To use my templates or packages, you will, of course, have to trust me > > (and my key). If you're not happy doing this, then build the templates > > and packages yourself using Qubes Builder. > > It is simple to build templates using Qubes Builder, but some > > people find it daunting, or don't have time. > > If you want to do it, follow the instructions for building but select > > "builder-debian" plugin and the Ubuntu distribution you want. If you > > need help just ask. > > > > unman > > Hi, I'm new to Qubes and am interested in trying the ubuntu template. But, > I"m confused on how to use the template you created? I went to 3isec.org > site and the instructions are confusing. I see the key you have there, but > the pgp.mit.edu server doesn't seem to be responding when I request keys. And > then I'm not sure what to do with the rpm file for the template? > > Sorry to ask dumb questions, but thanks also for putting this together. > thanks! > No need to apologise. Everyone starts from somewhere. If you are connecting via Tor then pgp.mit.edu will often be unresponsive. You should be able to find the key elsewhere, on other keyservers (like keys.gnupg.net), and be able to check fingerprint against github, or postings to this list. Download the package in a qube. Use a Fedora based qube and you can verify the package is signed by me, using 'rpm -K' or 'rpm -qpi' Once you are happy, (and have decided to trust me), you need to transfer the package in to dom0. Have a look at www.qubes-os.org/doc/copy-from-dom0/ for help with this. Once you have the package in dom0 you can install it with 'dnf install' That will create a template, and you should be able to create qubes as you will. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190101021118.l6daknovhoj36u5n%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: How risky is GPU pass-through?
On Sunday, December 30, 2018 at 1:07:32 AM UTC-8, John Mitchell wrote: > On Sunday, December 30, 2018 at 9:34:58 AM UTC+1, John Smiley wrote: > > No. I knew exactly what you were talking about. That’s okay. You just keep > > on with your mind in neutral. I won’t waste time n a closed mind. > > John, > > You never commented on the videos that show gaming working in a VM so I am > not sure who has the closed mind? > > Anyway, no problems, we can agree we disagree and part friends. > > Blessings, > > John I don't need a core sample of the moon to know that it isn't made of green cheese. Doesn't matter what the videos showed. There are lots of videos that "prove" and impossible claim. If you want to believe that, it's completely up to you. VMs have longer code paths than native. That alone would cause a perf hit. Then there is the noisy neighbor problem and the fact that dom0 has to cycle steal. Anyone with a lick of common sense would see the impossibility of such a claim. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/14329dde-b037-4b13-981b-11a5c6bdfe9f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: hplib complaint with fedora-28 qube manager update , what to do?
On 12/31/18 3:50 AM, brendan.hoar-re5jqeeqqe8avxtiumw...@public.gmane.org wrote: > On Monday, December 31, 2018 at 5:07:06 AM UTC-5, unman wrote: >> On Sun, Dec 30, 2018 at 06:15:32PM -1000, John S.Recdep wrote: >>> Hello, >>> >>> The following below was/is after using a manually opened xterm that >>> successfully runs $sudo dnf update >>> and closing the template/s >>> >>> >>> The Qubes Manager is showing green dots on the Fed-28 (Q4.0.1?) >>> templates needing update but: >>> >>> when I use the QManager to update I am seeing some complaint about hplip >>> >>> I tried to highlight and copy it but any clicking in the xterm and it >>> disappears . >>> >>> start a terminal for the template gives me this: >>> >>> [user@fedora-28 ~]$ sudo dnf upgrade >>> Last metadata expiration check: 4:24:34 ago on Sun 30 Dec 2018 01:46:31 >>> PM HST. >>> Dependencies resolved. >>> >>> Problem 1: cannot install the best update candidate for package >>> hplip-3.18.6-7.fc28.x86_64 >>> - nothing provides libnetsnmp.so.35()(64bit) needed by >>> hplip-3.18.6-11.fc28.x86_64 >>> Problem 2: cannot install the best update candidate for package >>> hplip-libs-3.18.6-7.fc28.x86_64 >>> - nothing provides libnetsnmp.so.35()(64bit) needed by >>> hplip-libs-3.18.6-11.fc28.x86_64 >>> Problem 3: cannot install the best update candidate for package >>> libsane-hpaio-3.18.6-7.fc28.x86_64 >>> - nothing provides libnetsnmp.so.35()(64bit) needed by >>> libsane-hpaio-3.18.6-11.fc28.x86_64 >>> Problem 4: package hplip-libs-3.18.6-7.fc28.x86_64 requires >>> hplip-common(x86-64) = 3.18.6-7.fc28, but none of the providers can be >>> installed >>> - cannot install both hplip-common-3.18.6-11.fc28.x86_64 and >>> hplip-common-3.18.6-7.fc28.x86_64 >>> - problem with installed package hplip-libs-3.18.6-7.fc28.x86_64 >>> - cannot install the best update candidate for package >>> hplip-common-3.18.6-7.fc28.x86_64 >>> - nothing provides libnetsnmp.so.35()(64bit) needed by >>> hplip-libs-3.18.6-11.fc28.x86_64 >>> >>> PackageArchVersion >>> RepositorySize >>> >>> Skipping packages with conflicts: >>> (add '--best --allowerasing' to command line to force their upgrade): >>> hplip-common x86_64 3.18.6-11.fc28 >>> updates 110 k >>> Skipping packages with broken dependencies: >>> hplip x86_64 3.18.6-11.fc28 >>> updates 16 M >>> hplip-libs x86_64 3.18.6-11.fc28 >>> updates 204 k >>> libsane-hpaio x86_64 3.18.6-11.fc28 >>> updates 127 k >>> >>> Transaction Summary >>> >>> Skip 4 Packages >>> >>> Nothing to do. >>> Complete! >>> >> >> It's an upstream bug: net-snmp-libs is still in testing. You can wait >> for it to reach stable or run (as suggested) >> dnf --best --allowerasing --enablerepo=updates-testing update hplip >> >> Keep an eye out to see if anything is being removed. > > ...and if anything qubes-* related is removed, dnf install those packages > *before* restarting the template. > > (yes, I've been burned by that before) > > Brendan > If it doesn't effect security or break anything I can wait. BTW, in the past I've never done $sudo dnf upgrade is this really necessary? Have always wondering if the scheme was similar to the debian dist-upgrade , which Does seem to be required but somehow on Fedora seems it might not be ? Lastly, is Fedora-29 going to be officially recommended as a upgrade sometime / somewhere soon ? regards, recdep -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/25d68827-dfad-a974-ea0a-ceee232cb61a%40riseup.net. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Ubuntu templates
On Wednesday, December 26, 2018 at 3:39:55 AM UTC-7, unman wrote: > For any one who wants to try out Xenial or Bionic, I've put some updated > templates for 4.0 online, including a bionic+desktop version. > They are pretty vanilla, except I have stopped the automatic search for > updates. The templates are signed with my key. > > If you use Ubuntu in Qubes I provide package repositories at > https://qubes.3isec.org for convenience. Full details on that page. > > As you may know Qubes doesn't provide official pre-built Templates for > Ubuntu, because of licensing concerns - details at > www.qubes-os.org/doc/templates/ubuntu > > To use my templates or packages, you will, of course, have to trust me > (and my key). If you're not happy doing this, then build the templates > and packages yourself using Qubes Builder. > It is simple to build templates using Qubes Builder, but some > people find it daunting, or don't have time. > If you want to do it, follow the instructions for building but select > "builder-debian" plugin and the Ubuntu distribution you want. If you > need help just ask. > > unman Hi, I'm new to Qubes and am interested in trying the ubuntu template. But, I"m confused on how to use the template you created? I went to 3isec.org site and the instructions are confusing. I see the key you have there, but the pgp.mit.edu server doesn't seem to be responding when I request keys. And then I'm not sure what to do with the rpm file for the template? Sorry to ask dumb questions, but thanks also for putting this together. thanks! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/716e2954-1f04-4501-8e9d-500a7c51af8f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] hplib complaint with fedora-28 qube manager update , what to do?
On Monday, December 31, 2018 at 5:07:06 AM UTC-5, unman wrote: > On Sun, Dec 30, 2018 at 06:15:32PM -1000, John S.Recdep wrote: > > Hello, > > > > The following below was/is after using a manually opened xterm that > > successfully runs $sudo dnf update > > and closing the template/s > > > > > > The Qubes Manager is showing green dots on the Fed-28 (Q4.0.1?) > > templates needing update but: > > > > when I use the QManager to update I am seeing some complaint about hplip > > > > I tried to highlight and copy it but any clicking in the xterm and it > > disappears . > > > > start a terminal for the template gives me this: > > > > [user@fedora-28 ~]$ sudo dnf upgrade > > Last metadata expiration check: 4:24:34 ago on Sun 30 Dec 2018 01:46:31 > > PM HST. > > Dependencies resolved. > > > > Problem 1: cannot install the best update candidate for package > > hplip-3.18.6-7.fc28.x86_64 > > - nothing provides libnetsnmp.so.35()(64bit) needed by > > hplip-3.18.6-11.fc28.x86_64 > > Problem 2: cannot install the best update candidate for package > > hplip-libs-3.18.6-7.fc28.x86_64 > > - nothing provides libnetsnmp.so.35()(64bit) needed by > > hplip-libs-3.18.6-11.fc28.x86_64 > > Problem 3: cannot install the best update candidate for package > > libsane-hpaio-3.18.6-7.fc28.x86_64 > > - nothing provides libnetsnmp.so.35()(64bit) needed by > > libsane-hpaio-3.18.6-11.fc28.x86_64 > > Problem 4: package hplip-libs-3.18.6-7.fc28.x86_64 requires > > hplip-common(x86-64) = 3.18.6-7.fc28, but none of the providers can be > > installed > > - cannot install both hplip-common-3.18.6-11.fc28.x86_64 and > > hplip-common-3.18.6-7.fc28.x86_64 > > - problem with installed package hplip-libs-3.18.6-7.fc28.x86_64 > > - cannot install the best update candidate for package > > hplip-common-3.18.6-7.fc28.x86_64 > > - nothing provides libnetsnmp.so.35()(64bit) needed by > > hplip-libs-3.18.6-11.fc28.x86_64 > > > > PackageArchVersion > > RepositorySize > > > > Skipping packages with conflicts: > > (add '--best --allowerasing' to command line to force their upgrade): > > hplip-common x86_64 3.18.6-11.fc28 > > updates 110 k > > Skipping packages with broken dependencies: > > hplip x86_64 3.18.6-11.fc28 > > updates 16 M > > hplip-libs x86_64 3.18.6-11.fc28 > > updates 204 k > > libsane-hpaio x86_64 3.18.6-11.fc28 > > updates 127 k > > > > Transaction Summary > > > > Skip 4 Packages > > > > Nothing to do. > > Complete! > > > > It's an upstream bug: net-snmp-libs is still in testing. You can wait > for it to reach stable or run (as suggested) > dnf --best --allowerasing --enablerepo=updates-testing update hplip > > Keep an eye out to see if anything is being removed. ...and if anything qubes-* related is removed, dnf install those packages *before* restarting the template. (yes, I've been burned by that before) Brendan -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3b18f03c-de43-49ae-986d-f599ba594c03%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to download detached PGP sig of Qubes-R4.0-x86_64.iso.asc
Thank you very much!! For the simple, quick and efficient reply. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/cd4c4f66-43aa-4a79-a399-0ae7c74bc65a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to download detached PGP sig of Qubes-R4.0-x86_64.iso.asc
On Mon, Dec 31, 2018 at 03:31:28AM -0800, byzcult...@gmail.com wrote: > Hi, > > I am trying to verify my download and i am in the final step where i have to > do > > gpg -v --verify Qubes-RX-x86_64.iso.asc Qubes-RX-x86_64.iso > > to verify the ISO file. The instructions claim that i can download the .asc > signature and this is where i am really stuck. The download link just leads > me to another page with the raw PGP signature-no download. I don't know how > to import it to gpg to do the verification. Do i have to transform it to a > .asc file or what?? I am extremely confused. > > Appreciate any advice. > > You dont need to import that signature in to gpg. You *do* need to download and import the PGP key. On the page with the signature, save it as plain text. (If you save it as html page, you will have to edit the file to rekove HTML cruft). The saved page will be named Qubes-RX-x86_64.iso.asc , and you can then verify the download with that file. Dont forget to get a copy of the Master Signing key and check it - details as https://www.qubes-os.org/security/verifying-signatures/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181231120017.tabork6hz4axnnao%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
[qubes-users] How to download detached PGP sig of Qubes-R4.0-x86_64.iso.asc
Hi, I am trying to verify my download and i am in the final step where i have to do gpg -v --verify Qubes-RX-x86_64.iso.asc Qubes-RX-x86_64.iso to verify the ISO file. The instructions claim that i can download the .asc signature and this is where i am really stuck. The download link just leads me to another page with the raw PGP signature-no download. I don't know how to import it to gpg to do the verification. Do i have to transform it to a .asc file or what?? I am extremely confused. Appreciate any advice. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/12adb6c6-5e29-43c4-b6e5-cb9c5cc6cbcf%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] How to download detached PGP sig of Qubes-R4.0-x86_64.iso.asc
Hi, I am trying to verify my download and i am in the final step where i have to do gpg -v --verify Qubes-RX-x86_64.iso.asc Qubes-RX-x86_64.iso to verify the ISO file. The instructions claim that i can download the .asc signature and this is where i am really stuck. The download link just leads me to another page with the raw PGP signature-no download. I don't know how to import it to gpg to do the verification. Do i have to transform it to a .asc file or what?? I am extremely confused. Appreciate any advice. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/648cc0ba-cc6f-436a-85b4-30fdc4ae59f8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] dom0 bell
On Sun, Dec 30, 2018 at 10:32:16PM +0100, haaber wrote: > Hi, I never understood the purpose of the loudspeaker bell in linux, but on > my machine, it is particularly loud and annoying. Is there a reasonable way > to deactivate it forever? Thank you (and a happy new year), Bernhard Try these: As root rmmod pcspkr, should stop it in running machine. Edit /etc/modprobe.d/blacklist, and insert a line: blacklist pcspkr If that doesnt work, put the rmmod command in a startup script. The ultimate sanction is to unplug the leads to the internal speaker from motherboard. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181231101702.nocdow2mqqfxthbd%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] hplib complaint with fedora-28 qube manager update , what to do?
On Sun, Dec 30, 2018 at 06:15:32PM -1000, John S.Recdep wrote: > Hello, > > The following below was/is after using a manually opened xterm that > successfully runs $sudo dnf update > and closing the template/s > > > The Qubes Manager is showing green dots on the Fed-28 (Q4.0.1?) > templates needing update but: > > when I use the QManager to update I am seeing some complaint about hplip > > I tried to highlight and copy it but any clicking in the xterm and it > disappears . > > start a terminal for the template gives me this: > > [user@fedora-28 ~]$ sudo dnf upgrade > Last metadata expiration check: 4:24:34 ago on Sun 30 Dec 2018 01:46:31 > PM HST. > Dependencies resolved. > > Problem 1: cannot install the best update candidate for package > hplip-3.18.6-7.fc28.x86_64 > - nothing provides libnetsnmp.so.35()(64bit) needed by > hplip-3.18.6-11.fc28.x86_64 > Problem 2: cannot install the best update candidate for package > hplip-libs-3.18.6-7.fc28.x86_64 > - nothing provides libnetsnmp.so.35()(64bit) needed by > hplip-libs-3.18.6-11.fc28.x86_64 > Problem 3: cannot install the best update candidate for package > libsane-hpaio-3.18.6-7.fc28.x86_64 > - nothing provides libnetsnmp.so.35()(64bit) needed by > libsane-hpaio-3.18.6-11.fc28.x86_64 > Problem 4: package hplip-libs-3.18.6-7.fc28.x86_64 requires > hplip-common(x86-64) = 3.18.6-7.fc28, but none of the providers can be > installed > - cannot install both hplip-common-3.18.6-11.fc28.x86_64 and > hplip-common-3.18.6-7.fc28.x86_64 > - problem with installed package hplip-libs-3.18.6-7.fc28.x86_64 > - cannot install the best update candidate for package > hplip-common-3.18.6-7.fc28.x86_64 > - nothing provides libnetsnmp.so.35()(64bit) needed by > hplip-libs-3.18.6-11.fc28.x86_64 > > PackageArchVersion > RepositorySize > > Skipping packages with conflicts: > (add '--best --allowerasing' to command line to force their upgrade): > hplip-common x86_64 3.18.6-11.fc28 > updates 110 k > Skipping packages with broken dependencies: > hplip x86_64 3.18.6-11.fc28 > updates 16 M > hplip-libs x86_64 3.18.6-11.fc28 > updates 204 k > libsane-hpaio x86_64 3.18.6-11.fc28 > updates 127 k > > Transaction Summary > > Skip 4 Packages > > Nothing to do. > Complete! > It's an upstream bug: net-snmp-libs is still in testing. You can wait for it to reach stable or run (as suggested) dnf --best --allowerasing --enablerepo=updates-testing update hplip Keep an eye out to see if anything is being removed. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20181231100702.fcppehpk5snrevaa%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
