Re: [qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

[799]

Hello,

 schrieb am Mo., 25. Feb. 2019, 03:17:

> (...)
> Hi, please note that Alex's guide was created just before Android-x86 Oreo
> was released. If you change 'repo init -u git://
> git.osdn.net/gitro,ot/android-x86/manifest
>  -b android-x86-7.1-r2'
> to 'repo init -u git://git.osdn.net/gitroot/android-x86/manifest -b
> oreo-x86', you'll have no mouse issues. Just rememeber not to do Alex's
> steps on fixing the mouse if you do, as you'll just recreate the mouse
> problem.
>

Would you mind sharing your ISO, so that I can use it for testing? I want
to know before what is working before going through the hazzle and build an
own ISO.

When you rebooted the appvm, and shut down the builder VM, the iso should
> have detached from the android appvm. Reboot Qubes if it hasn't.
>

Ok, thanks - I will try this.

I've been changing resolution by affixing 'vga=(desired resolution code)'
> to the end of the kernel. You can type vga=ask to get a list of resolution
> codes.


Very good idea, haven't thought about this myself - is it also possible to
change the Grub Options from within Android to make the change persistent,
if I found a working Resolution?

One question that has not been answered so far is, if there is already a
setup howto in Qubes Docs or the Community Docs.

- O

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2uxqNCu_ZGXwXN8z%3Dgr6Jg_Qb5wWAFtGqgCCnwrRZ6gGQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Best ideal laptop for Qubes?

[dexinthecity]

On Sunday, February 24, 2019 at 6:04:01 PM UTC-8, pixel fairy wrote:
> On Saturday, February 23, 2019 at 12:19:04 AM UTC-8, pixel fairy wrote:
> > On Wednesday, February 20, 2019 at 4:49:27 PM UTC-8, dexint...@gmail.com 
> > wrote:
> > > I've been spending hours and hours looking at laptop configs from dell to 
> > > lenovo and I still have yet to make a decision. I'm hoping you guys can 
> > > help me. 
> > > 
> > > Uses:
> > > 
> > > - Programming
> > > - Web Dev
> > > - Tor
> > > - Screen real estate
> > > - Regular web surfing and videos
> > > - Some video and photo editing but I have a PC for that 
> > > 
> > > I'd like to keep cost as low as possible but my budget is very flexible 
> > > if I need to stretch it. I want something that will last me 3-5 years.
> > 
> > https://system76.com/laptops/galago one of the few that you can get with 4 
> > real cores instead of just 2 with hyper threading. at least as of a few 
> > months ago when i got a few for work. the 4 core thing is important because 
> > those speculative execution blunders mean you cant use HT anymore. 
> > 
> > using the 1080p version with a 4k display. they also have a hidpi version, 
> > but the screens only 13". may or may not fit your need for screen estate.
> > 
> > everything works and its great up until you want to watch youtube full 
> > screen at 4k. then it starts getting choppy. blender is fluid, for at least 
> > the small scenes ive done. so, video editing shouldnt be a problem. just 
> > remember to give your editing appvm lots of ram, and all the cores.
> > 
> > if your photo editing for print, you might need to keep that pc. you could 
> > try the plasma (kde) desktop and see if it can take an icc profile. never 
> > tried it.
> 
> forgot to mention, you will need to tweak your netvm. when you first install, 
> it wont be able to start sys-net. go into sys-nets settings/devices and 
> remove the ethernet controller. then click on "Configure strict reset for PCI 
> devices", the big button at the bottom of that tab. 
> 
> dont know why, but you can make another netvm for sys-ethernet, but keeping 
> both interfaces in the same netvm doesnt seem to work.
> 
> also tried a purism librem 13. the laptop itself was broken, but dont 
> remember any compatibility issues with it. couldnt test the mic, as that was 
> one of the broken parts.

does this pertain to the X1C6 laptops? I haven't had a problem with sys-net 
starting.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e5aea617-e320-4c90-bb5d-3a928be0da22%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: thunderbird address book corrupted

[Foppe de Haan]

On Sunday, February 24, 2019 at 10:04:30 PM UTC+1, Jon deps wrote:
> Hello, I realize it's not exactly a qubes thing.
> but, does anybody else unable to save any new entries in thunderbird 
> address book

try updating tb, looks like it's a bug in 60.5.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f0e9ee8d-f9d4-4c3f-aa00-387cdb0dacdc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

[nosugarmaxtaste]

On Monday, 25 February 2019 08:16:32 UTC+11, 799  wrote:
> Hello Alex,
> 
> 
> I have succesfully used your .ISO to build a test-android AppVM, following 
> your howto.
> 
> 
> > Create android VM in dom0:
> > qvm-create --class StandaloneVM --label green --property virt_mode=hvm 
> > android
> > qvm-prefs android kernel ''
> > qvm-prefs android 'sys-android'
> 
> I think this is a typo and should be:
> 
> qvm-prefs android netvm 'sys-android'
> 
> (while I have used sys-firewall as netvm)
> 
> > qvm-prefs android memory '2048'
> > qvm-prefs android maxmem '2048'
> > qvm-volume extend android:root 20g
> > Start the android VM with iso:
> > qvm-start android 
> > --cdrom=android-builder:/home/user/android-x86/out/target/product/x86_64/android_x86_64.iso
> > Install android-x86 on xvda and reboot.
> > Start android VM without iso:
> > qvm-start android
> > When it'll start, kill the VM and wait for it to halt.
> > Configure android VM to use the mouse in dom0:
> > sudo mkdir -p /etc/qubes/templates/libvirt/xen/by-name/
> > sudo cp /etc/libvirt/libxl/android.xml 
> > /etc/qubes/templates/libvirt/xen/by-name/android.xml
> > sudo sed -i -e 's/tablet/mouse/g' 
> > /etc/qubes/templates/libvirt/xen/by-name/android.xml
> > Start android VM without iso and it should work fine:
> > qvm-start android
> 
> 
> Two Questions:
> 
> 1) Is there any way to change the display resolution of the Android AppVM, as 
> I am running it on a LowRes x230 and the window is slightly to high.
> 
> 2) Even after launching the android AppVM without the ISO, the ISO-Boot-Up 
> windows comes and I need to choose Other Options and then Boot from local 
> harddisk to continue booting the AppVM - any idea how to change this?
> 
> 3) The mouse seems strange, as I see two mouse pointers, the one in dom0 and 
> the one in android and they are not synchronized.
> While it is possible to use the mouse, it would be nice if there is only one 
> mouse pointer. Can this be done?
>  
> 
> 
> - O

Hi, please note that Alex's guide was created just before Android-x86 Oreo was 
released. If you change 'repo init -u 
git://git.osdn.net/gitroot/android-x86/manifest -b android-x86-7.1-r2' to 'repo 
init -u git://git.osdn.net/gitroot/android-x86/manifest -b oreo-x86', you'll 
have no mouse issues. Just rememeber not to do Alex's steps on fixing the mouse 
if you do, as you'll just recreate the mouse problem. 

When you rebooted the appvm, and shut down the builder VM, the iso should have 
detached from the android appvm. Reboot Qubes if it hasn't. 

I've been changing resolution by affixing 'vga=(desired resolution code)' to 
the end of the kernel. You can type vga=ask to get a list of resolution codes. 
You do this by pressing 'e' when you get the boot options, and then 'e' again. 
It will look something like 'kernel /android-2019-02-18/kernelvga=ask quiet 
etc, etc'.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4ec3c459-cdf2-4c2d-8989-76536a3e55bf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Best ideal laptop for Qubes?

[pixel fairy]

On Saturday, February 23, 2019 at 12:19:04 AM UTC-8, pixel fairy wrote:
> On Wednesday, February 20, 2019 at 4:49:27 PM UTC-8, dexint...@gmail.com 
> wrote:
> > I've been spending hours and hours looking at laptop configs from dell to 
> > lenovo and I still have yet to make a decision. I'm hoping you guys can 
> > help me. 
> > 
> > Uses:
> > 
> > - Programming
> > - Web Dev
> > - Tor
> > - Screen real estate
> > - Regular web surfing and videos
> > - Some video and photo editing but I have a PC for that 
> > 
> > I'd like to keep cost as low as possible but my budget is very flexible if 
> > I need to stretch it. I want something that will last me 3-5 years.
> 
> https://system76.com/laptops/galago one of the few that you can get with 4 
> real cores instead of just 2 with hyper threading. at least as of a few 
> months ago when i got a few for work. the 4 core thing is important because 
> those speculative execution blunders mean you cant use HT anymore. 
> 
> using the 1080p version with a 4k display. they also have a hidpi version, 
> but the screens only 13". may or may not fit your need for screen estate.
> 
> everything works and its great up until you want to watch youtube full screen 
> at 4k. then it starts getting choppy. blender is fluid, for at least the 
> small scenes ive done. so, video editing shouldnt be a problem. just remember 
> to give your editing appvm lots of ram, and all the cores.
> 
> if your photo editing for print, you might need to keep that pc. you could 
> try the plasma (kde) desktop and see if it can take an icc profile. never 
> tried it.

forgot to mention, you will need to tweak your netvm. when you first install, 
it wont be able to start sys-net. go into sys-nets settings/devices and remove 
the ethernet controller. then click on "Configure strict reset for PCI 
devices", the big button at the bottom of that tab. 

dont know why, but you can make another netvm for sys-ethernet, but keeping 
both interfaces in the same netvm doesnt seem to work.

also tried a purism librem 13. the laptop itself was broken, but dont remember 
any compatibility issues with it. couldnt test the mic, as that was one of the 
broken parts.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cb577cd7-891f-40d1-807c-b53c73dfe1e6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

['awokd' via qubes-users]

799 wrote on 2/24/19 9:16 PM:


1) Is there any way to change the display resolution of the Android AppVM,
as I am running it on a LowRes x230 and the window is slightly to high.


Don't know if this procedure applies: 
https://www.mail-archive.com/qubes-users@googlegroups.com/msg24510.html. 
You might want just the 800x600 setting, and maybe not Cirrus...




--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/42457980-fdcb-666d-68b1-6c839d7df39c%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - LENOVO Thinkpad P1

[Eric Duncan]

On Thursday, February 21, 2019 at 7:20:58 PM UTC-5, vadimkly...@gmail.com wrote:
> 
> Eric, any chance you could try updating the Bios to the recently released 
> version 1.18 which I think should fix the graphics issues allow you to use 
> the intel chip and try again with the latest version of Qubes 4.1 and report 
> back? I literally have a Thinkpad P1 XEON w/32GB ECC and 2x2TB and the 
> upgraded UHD display config that is pending for shipment and if the problems 
> have not been resolved I would really like to know now like you I got this 
> just for Qubes and if I cancel now can avoid $650 in restocking fees.

Hello:

Unfortunately I am traveling and am not able to test Qubes on this machine any 
time soon - at least well past their cancellation time-frame.

In short, all of Lenovo's recent machines for most of 2018 and 2019 all have 
the Sleep issue - that lenovo purposely got rid of the industry-wide S3 sleep 
mode in favor of Windows' new "Si03" crap that does nothing for us Linux people.

All, except the Lenovo Thinkpad X1 Carbon 6th Gen - enough Linux gurus 
complained that Lenovo actually released a BIOS specifically for that machine 
that re-enabled S3.  

I've logged a support ticket with Lenovo, and they said they aren't going to do 
it anytime soon.  Please open a ticket, and complain as well.

As far as the "graphics" issue, I was running 1.17 BIOS at the time.  1.18 
doesn't change anything for graphics, except an "edge case" that could brick 
the laptop.  1.18's main fix is the Sound Card - if you were to disable the 
Sound Card in 1.17 or earlier, you would brick you P1.  1.18 fixed that.

I have 1.18 now, and it doesn't make a difference with any other Linux distro.  
So I don't think it would matter with Qubes, sorry.

Regarding the kernel, Qubes 4.1 is only using 4.14.  As you can see in my tests 
above, I tried Qubes with the latest 4.19 kernel.  It's a no go, sorry, so 4.1 
won't make any difference with it's old(er) 4.14 kernel.

With all that said...  There is hope.  It's a painful process to get there, but 
you can get a pretty decent system going with the P1 and Qubes (with enough 
compromises).

Follow the instructions I posted in the OP of this thread to get Qubes 
installed: https://groups.google.com/d/msg/qubes-users/z51dkaEOiqc/wNhQ_86NGQAJ

You can get Nvidia drivers installed in dom0, and that should really help out 
things.  However, I don't think you'll have brightness control nor the ability 
to switch to Intel only iGPU (aka bbswitch) by using Xen.

As for Arch Linux, I installed Arch but it was a PITA to get anywhere near 
usable - kind of like Qubes.  

Just before returning the laptop under the principal that Lenovo has killed 
Linux-abilities, I decided to try Pop!_OS by System76, which is Ubuntu with a 
skinjob + nvidia drivers built in.  BINGO!  Never in my life have I ever, not 
even once, found a distro that worked 100% out of the box.  We're talking 
brightness control, iGPU Intel-only switching, and most of all - SUSPEND is 
working!  How they got Suspend working, when no one else has posted the ACPI 
tables for the P1 to hack around the sleep mode yet, I am at a loss.  I really 
hated going back to Ubuntu - but things are just too damn silky smooth with 
Pop!_OS.  It's been a 100% dream, and the way Linux (Gnome) should be 
experienced for everyone.  I'm getting 7-9 hours battery life every day out of 
the laptop with Intel only graphics.  I've since installed Pop!_OS on my wife's 
iMac 2015, on my daughter's XPS laptop and on my monster gaming desktop (that 
can't normally run Linux!).  Whatever they did to Pop is what Ubuntu and Gnome 
should pay them to submit back upstream.

Currently I try to follow basic Qubes principals with Pop, such as installing 
nothing - I use Snap and AppImage for everything (even created a few that 
didn't exist).  I also use Docker for development of everything.  So basically 
my OS is barebones with just Pop!_OS. 

Anyhow... For now, I have a functional laptop while traveling and working.  
This fall I'll have more time to try again with Qubes.  Or at least Xen-only (I 
run pure Xen on a few servers myself, isolating things like Qubes does).

Ps, I've also installed some NH1 thermal paste on the CPU and GPU heatsinks as 
the fans were getting annoying - doing nothing but just browsing the web.  If 
on Nvidia graphics, wow they were almost always spinning.  Installing the NH1 
grease dropped temps down by about 20C and the fans hardly ever kick on with 
Nvidia graphics - Intel graphics, I don't think I've ever heard them since with 
normal usage.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 

Re: [qubes-users] MTU setting for all interfaces

[Beto HydroxyButyrate]

On Monday, February 25, 2019 at 12:14:34 AM UTC+10, unman wrote:
> On Sun, Feb 24, 2019 at 02:02:10PM +1000, Beto HydroxyButyrate wrote:
> > I have MTU 9000 set on my internal network.  sys-net connects to this
> > network.
> > 
> > I want all qubes VM interfaces to default to MTU 9000 rather than 1500.
> > 
> > Is there some simple global setting I can make to enable this?
> 
> You could set it at the router level in sys-net using a mangle table.
> This is available for both iptables and nftables.
> I've  done this with iptables in the past and I dont recall issues with
> conntrack and connected clients. ymmv
> 
> iptables has tcp-MSS patch that allows you to hit this in FORWARD rules
> - dont know if similar is available for nftables.
> 
> unman

Not quite what I want.  I want to be able to have all current and future VM 
instances which have networking enabled be provisioned with interfaces with the 
MTU set to 9000.  I do not want any local s/w to be mangling the jumbo frames.  
I want jumbo frames flowing freely and naturally, as ghod and Selina Lo 
intended, between, for instance, my NAS drive and various VMs.  Mainly for NAS 
SMB and/or NFS for performance.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/abab22f9-6340-4806-8212-50bc6bc4cdf9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] disposible vms for sys-net, firewall, usb?

[Chris Laprise]

On 2/24/19 3:26 PM, 799 wrote:

Hello Chris,

On Sun, 24 Feb 2019 at 00:22, Chris Laprise > wrote:


[...]
As you may already know, I created a Qubes service that provides
most of
the benefits of a dispVM by removing, hash checking, repopulating or
whitelisting the contents of a VM's private volume:

https://github.com/tasket/Qubes-VM-hardening
  [...]


I'd like to test your script, but I need some more information how to start.
As far as I understand, I need to deploy your scripts in a template VM 
and your script will do some magic, that the AppVM (made from this 
template) starty in a fresh way (like a disposable VM) but it is 
possible to add changes which survives between reboots?


Its installed in a template VM, and any VM based on that template can 
use it.


Where a dispVM destroys/creates a new private volume for each run, Qubes 
VM Hardening keeps the same volume but can remove or check any/all files 
before the VM has a chance to access them.




Can you give some more details for a complete walkthrough?
For example how to I enable a service? Via the Qubes Settings > Services 
Tab?


Yes. It creates a Qubes service, and that's where you enable it for 
individual VMs (otherwise it does nothing, even if it was installed).


The service name to use in your case is 'vm-boot-protect-root' because 
that has the "/rw executable deactivation, whitelisting, checksumming" 
etc. You can think of it as an automatic "file wiper" that cleans /rw 
before the VM has a chance to access it.




Also I haven't fully understand what happens when I enable the 
/vm-boot-protect service


Its all the same service, but using "vm-boot-protect" tells it to only 
make /home scripts immutable. This only protects against unprivileged 
malware, which is not really the threat model for 'sys-net'.


Using "vm-boot-protect-root" can wipeout malware even if it got root 
access in the VM at some point. So if you were using a public wifi 
router that successfully attacked your 'sys-net' and installed 
persistent malware files in one of the privileged (root-accessible) 
paths that are executed by Qubes on startup, this would automatically 
quarantine them the next time 'sys-net' was started.


Here's a rundown of its actions at startup:

1. Mount private volume in an 'offline' area so it is not recognized by 
the system.


2. Move everything in the /rw privileged directories to 
'/rw/vm-boot-protect', effectively a quarantine. By default these dirs 
are /rw/config, /rw/bind-dirs, /rw/usrlocal.


Anything defined in a whitelist is exempted. The only default whitelist 
is for 'sys-net' and contains:


/rw/config/NM-system-connections/

3. Run hash checks if any were configured by the user. These are just 
SHA256 checksum listings. If any check fails, normal VM startup will be 
halted and a rescue shell will appear.


4. Copy any files that were configured for deployment. This allows you 
to automatically place pristine or special files into /rw at each boot.


5. Dismount the private volume and allow normal VM startup to resume 
(e.g. private volume will be re-mounted in the normally recognized place 
at /rw).


--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB  4AB3 1DC4 D106 F07F 1886

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/65763e55-a39b-52bc-aee2-f2d96c4868f9%40posteo.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: What is the state of automatic updates?

[Vít Šesták]

Why? I suggest having updates as automated as possible – for security reasons. 
It allows you to have all the latest security updates as soon as possible.

Regards,
Vít Šesták 'v6ak'

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ccae666f-b60b-4e0c-aec4-2cfda3d78e43%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] disposible vms for sys-net, firewall, usb?

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 23/02/2019 10.58 AM, Stumpy wrote:
> Hi, I was customizing my dvm templates and of course had to refer
> to the docs (thanks doc maintainers/contributors!) and it
> mentioned that dvms could be used for things like sys-net usb and
> firewall which had never occured to me. I may not be thinking about
> it right but that seemed like a really good security idea, so my
> question is, why is that not the default? Just curious, i suppose
> the same could be said about why arent vms hardened by default
> (which i get the impression is because its a bit of a PITA). 
> Anyway, i'd be curious to know. Thanks!
> 

Your question is answered here:

https://github.com/QubesOS/qubes-issues/issues/3704

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-

iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlxzCeEACgkQ203TvDlQ
MDD7cg//fl5ZSTa9MWIN6I+oJwxIimaQKXhdix4n0aTnitnYF73bYqKnYHnqCHdH
JW1KsB8fl9fv2rPFxGWnKULAKWUqRF+WF0+WmQVEZo3uR2BWNq5uSLJQkiZ+Eb0N
wR6dZ3c1ucGFRuLp2zRaYpk7D/t7hFnQw9IAIhGhvMCQTTlssZiopHd+B8aXTyb1
przlfqwqDEZCVR1dqwKRJwruBS6D+8Z5vrDS53t4cErIDbwrJRE/qdmneWxPv2U9
ES17O4F5cO5AbsLfnjspE7ooMzhJAZwiek5NZCTtoj9NsnvW79BU0sUk0i/uRYla
SgRvHuh82PWG53QGffkqN88RMWGwldYcoJYU0o2Opdf9T9zs8J96ZsqCRUe/qQnj
bhfR1So8lTN1EDZf4+z12lP88BtxicHv0p5i6EuaEJRJ/sNhVO7kBet/s4ttKeji
rn6WljZheD/tN3S3x3PCHTCU4acC7Dg4nsO2d3JWF+MaOsKKI1bJjmVavETmBuen
DN5CqZeMH28DWc4hlCZCEsuJdduJJQq68+r4jYtX+UcsEDa47k4sVjxkQVnJ/ntw
awExytKlaZs8+/sIUkSOStSC183Dc8ca89E96itywjwrdMqI+GC07M07isaw6bJE
lfTOOgAl+Tuo8I8+duD4M4Y/aeTWkaUbdk65sEw+IWXlax7Pj9Y=
=B0bb
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/97d0a8cf-dd4d-aa26-5d68-8882e09d176c%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

[799]

Hello Alex,

I have succesfully used your .ISO to build a test-android AppVM, following
your howto.

> Create android VM in dom0:
> qvm-create --class StandaloneVM --label green --property virt_mode=hvm
android
> qvm-prefs android kernel ''
> qvm-prefs android 'sys-android'
I think this is a typo and should be:
qvm-prefs android netvm 'sys-android'
(while I have used sys-firewall as netvm)
> qvm-prefs android memory '2048'
> qvm-prefs android maxmem '2048'
> qvm-volume extend android:root 20g
> Start the android VM with iso:
> qvm-start android
--cdrom=android-builder:/home/user/android-x86/out/target/product/x86_64/android_x86_64.iso
> Install android-x86 on xvda and reboot.
> Start android VM without iso:
> qvm-start android
> When it'll start, kill the VM and wait for it to halt.
> Configure android VM to use the mouse in dom0:
> sudo mkdir -p /etc/qubes/templates/libvirt/xen/by-name/
> sudo cp /etc/libvirt/libxl/android.xml
/etc/qubes/templates/libvirt/xen/by-name/android.xml
> sudo sed -i -e 's/tablet/mouse/g'
/etc/qubes/templates/libvirt/xen/by-name/android.xml
> Start android VM without iso and it should work fine:
> qvm-start android

Two Questions:
1) Is there any way to change the display resolution of the Android AppVM,
as I am running it on a LowRes x230 and the window is slightly to high.
2) Even after launching the android AppVM without the ISO, the ISO-Boot-Up
windows comes and I need to choose Other Options and then Boot from local
harddisk to continue booting the AppVM - any idea how to change this?
3) The mouse seems strange, as I see two mouse pointers, the one in dom0
and the one in android and they are not synchronized.
While it is possible to use the mouse, it would be nice if there is only
one mouse pointer. Can this be done?

- O

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2sjB1g7W6-MmHhz%3D%2BJ9YaYJRegghitjFS77JW7YY0OMjw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] thunderbird address book corrupted

[Jon deps]

Hello, I realize it's not exactly a qubes thing.
but, does anybody else unable to save any new entries in thunderbird 
address book


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/90a46503-ac6a-9fee-1da4-bb368d016f43%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Android-x86 7.1-r2 with GAPPS installation guide

[Vít Šesták]

Thank you for the work. I have few points:

* If we don't verify the commit/tag, I'd suggest downloading the source through 
HTTPS instead: https://scm.osdn.net/gitroot/android-x86/manifest.git
* You mention that we need a 30GB swap, but you don't mention the RAM you had 
assigned to the VM. What was the RAM? I would probably prefer using more RAM to 
swapping.
* Keeping with Android security updates will feel a bit like recompiling Gentoo 
every month…
* I have looked for GSIs (generic system images). Unfortunately, I haven't 
found any for x86.
* It should be easy to make a TemplateVM. Just use the private disk image 
(which is typically /rw) for /data.

Regards,
Vít Šesták 'v6ak'

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5e1a604e-14cc-4971-99c2-72071cf7c146%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

[799]

On Sat, 1 Dec 2018 at 17:33,  wrote:

> On Saturday, December 1, 2018 at 5:47:52 AM UTC, alex.b...@gmail.com
> wrote:
> > [...]
> > Do you mind sharing the resulting images for testing? I'll have hard
> time compiling this myself on old Core m3/8Gb machine...
>
> You can try this image, but I advise to build your own image for security
> reasons:
> https://drive.google.com/open?id=1KGDRe9iJgjb3nSBjFlK74Sa_nn08qYiq


I agree that building an own ISO would be good, but to make a test (if
Android really works) I think it's ok to use a prebuild ISO.
Even better, if it would be possible to download and install it as a
template, like "qubes-testing-android-7.1-unofficial" from the testing
repositories.
Is this something that is possible (technically and also from the qubes
perspective, how the testing repo's can be used) or do we need something
like a qubes-community-repository to separate packages better (something I
would prefer)

- O

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2twfK4SYKUj4RYZKTS-6V-jyu2js2ONVWUawdXNRu5ppQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] disposible vms for sys-net, firewall, usb?

[799]

Hello Chris,

On Sun, 24 Feb 2019 at 00:22, Chris Laprise  wrote:

> [...]
> As you may already know, I created a Qubes service that provides most of
> the benefits of a dispVM by removing, hash checking, repopulating or
> whitelisting the contents of a VM's private volume:
>
> https://github.com/tasket/Qubes-VM-hardening
>  [...]


I'd like to test your script, but I need some more information how to start.
As far as I understand, I need to deploy your scripts in a template VM and
your script will do some magic, that the AppVM (made from this template)
starty in a fresh way (like a disposable VM) but it is possible to add
changes which survives between reboots?

Can you give some more details for a complete walkthrough?
For example how to I enable a service? Via the Qubes Settings > Services
Tab?

Also I haven't fully understand what happens when I enable the
*vm-boot-protect service*

- O

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2vRJc4ynPtq4zxgq55-VcOd8xfxQ1spoS%2BoiSYkZNaTnQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: No Bootable Devices Found with /boot/efi/ Missing

['Rainier30' via qubes-users]

I just went back and checked, and I'm in UEFI mode. Secure boot is also off. 
I'm running through another installation of it under those conditions right now 
to have a good control for when I change it up again. I should have tried the 
other options all before, but best to be methodical about it. I've also tried 
to boot a live USB, but that fails.
As for results under other settings, it has been the same result. My next step 
will be to cycle through variations of Legacy and Secure Boot to confirm once 
more. If any unexpected changes happen with that, I'll post them.

Sent with [ProtonMail](https://protonmail.com) Secure Email.

‐‐‐ Original Message ‐‐‐
On Sunday, February 24, 2019 7:21 PM, Rainier30  
wrote:

> Thanks Bernhard, and I did find the Troubleshooting UEFI page. I previously 
> looked at the section "Boot Device Not Recognized After Installing". The 
> first step is to "Copy the /boot/efi/EFI/qubes/ directory to 
> /boot/efi/EFI/BOOT/".
>
> When I try to do that, it responds with "Is not a directory". I have to go 
> back as far as /boot/ before it is recognized. If I understood the 
> troubleshooting page correctly, I was supposed to copy /boot/efi/EFI/qubes/. 
> I don't think that is working for me.
>
> Everyone please feel free to explain this all to me. It is not something I 
> understand well, so I maybe am missing something! This is a skill I respect, 
> but don't yet posses.
>
> As for the last message, I didn't understand this part: "you can do the trick 
> with any other live-linux (you "only" modify /boot, no need to do cryptsetup 
> by hand), but then absolute paths are a bit different.". Does this just refer 
> to the Troubleshooting page's instructions?
>
> Thanks everyone!
>
> Sent with [ProtonMail](https://protonmail.com) Secure Email.
>
> ‐‐‐ Original Message ‐‐‐
> On Sunday, February 24, 2019 12:42 PM, Rainier30  
> wrote:
>
>> Hello everyone,
>>
>> I've tried for almost two months now to install Qubes.  I'm excited to get 
>> it working, but I've never gotten past the reboot following installation. I 
>> purchased a new Dell computer for this OS specifically, and the internals 
>> match HCL requirements.
>>
>> I've used both a flash drive and a disk to install from, and I have no 
>> issues all the way through the installation. Once I reboot, I see "No 
>> Bootable Devices Found". Having tried literally over 100 times by now to 
>> figure it out, I think I've tried every possible BIOS configuration.
>>
>> Other users with similar problems seem to have had success by configuring 
>> the EFI boot manager. I tried this through a shell in recovery mode, but 
>> found that for /boot/efi/ there is "No such file or directory". I downloaded 
>> the ISO more than once thinking that I maybe had a partial file or Rufus 
>> problem.
>>
>> Could someone please help me figure out a solution? I would like to use this 
>> great OS, because it seems like an important tool. Please keep in mind with 
>> your responses that everything I know about computers is something I learned 
>> in the last few months. I self-taught myself a little, but this is not my 
>> personal area of expertise. Please assume I have no idea how to follow your 
>> directions unless you treat me like an idiot. I welcome follow-up questions 
>> too!
>>
>> Sent with [ProtonMail](https://protonmail.com) Secure Email.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/lH2XJ8GeNqZcaDW-lONZlHAc1-7Qa5nCdxQw60C5nnY_N2LY68muRzcFN6RSEagqCnqce2kY22CLPEexeMsIi4h8fJKGc47L8peABbFvGTc%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Best practices?

[22rip]

Important maintenece best practice:

...back up your data prior to updating dom) and your templates. I got burned on 
that a while ago.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5d4cdc17-9f25-4118-8fa6-eb4a9b0c18ba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Best practices?

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 24/02/2019 1.53 PM, dexinthec...@gmail.com wrote:
> Just recently installed Qubes being new to Linux altogether I
> haven’t quiet developed my own best practices and the documentation
> online has a pretty steep learning curve. Anyway I was wondering
> what do you guys usually perform after a clean install. What do you
> do on a weekly basis, monthly, annually etc? How do you optimize
> Qube OS or is it already pretty optimized?
> 

Take a look at this page, if you haven't already:

https://www.qubes-os.org/doc/security-guidelines/

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-
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=fFLo
-END PGP SIGNATURE-


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8e76c02d-c8b3-83e0-5e6a-b2f934279e01%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Best practices?

[22rip]

A clean install...you'll never feel more secure:)

A couple of best practices I would suggest include:

1) Clone your templates(maybe multiple cloned templates) and never install or 
use your original templates (This will help keep them secure and if you screw 
up on a clone you can always delete it and start a new clone from the original 
template)

2) Think about how you want to divide your different digital 
lifestyle/compartments e.g. email, banking, personal, work, passwords, etc...

3) What software do you need to install(if any)? Depending on your needs and 
uses e.g. LibreOffice, plugins, other Linux software? Install those on your 
cloned templates

Maintanence:
1) Keep your templates updated (and Dom0 updated)...this should be done right 
after an install
2) Backup your data and system weekly/daily (depending on your need)

Other security setups:
Set up a VPN
Explore minimal templates
Review BIOs
TPM
Look at your firewall and restrict IPs based on the Appvms use
Customize your DVM (disposable VMs)

Welcome and good luck! I never used Linux and I fumble thru fine after a little 
practice. Don't be scared to post a question after searching if you get stuck.


Keep your plugins, if any updated 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cd73f3ab-b5cf-4200-a2b8-b345ae3208b4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes for enterprise usage

[Andrew David Wong]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 15/02/2019 2.23 PM, tggrps wrote:
> Hi all,
> 
> Did anyone try to use Qubes for enterprise use cases? e.g. for 
> securing access to sensitive resources? How did that end up?
> 
> Last time I looked at Qubes, it didn't have enterprise 
> manageability features and required users to be familiar with 
> Linux, which is not always the case with enterprise users. The HCL 
> is also a bit of a concern as enterprise laptops might not well 
> support Linux (audio/video/docking stations/wifi/power 
> management...).
> 
> Details about your experience with Qubes today for enterprise
> users (either power users or simple users) would be helpful!
> 
> Thanks!
> 

Qubes 4.0 is designed for enterprise usage. For some examples and
ideas regarding use cases, please take a look at the following:

https://www.qubes-os.org/news/2017/06/27/qubes-admin-api/
https://www.qubes-os.org/news/2017/10/03/core3/
https://www.qubes-os.org/news/2018/01/22/qubes-air/

Companies interested in enterprise extensions and deployments of
Qubes OS are welcome to contact us at .

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-
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=B91L
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3e51c8cd-df28-a8f6-c97b-c297ed89ff4a%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Best practices?

[dexinthecity]

Just recently installed Qubes being new to Linux altogether I haven’t quiet 
developed my own best practices and the documentation online has a pretty steep 
learning curve. Anyway I was wondering what do you guys usually perform after a 
clean install. What do you do on a weekly basis, monthly, annually etc? How do 
you optimize Qube OS or is it already pretty optimized? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bf4644b2-dc04-4d30-a00f-0560994fc6be%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: No Bootable Devices Found with /boot/efi/ Missing

['awokd' via qubes-users]

'Rainier30' via qubes-users wrote on 2/24/19 6:21 PM:

Thanks Bernhard, and I did find the Troubleshooting UEFI page. I previously looked at the section 
"Boot Device Not Recognized After Installing". The first step is to "Copy the 
/boot/efi/EFI/qubes/ directory to /boot/efi/EFI/BOOT/".

When I try to do that, it responds with "Is not a directory". I have to go back 
as far as /boot/ before it is recognized. If I understood the troubleshooting page 
correctly, I was supposed to copy /boot/efi/EFI/qubes/. I don't think that is working for 
me.


If you don't see /boot/efi at all, that means you've booted in legacy 
mode and are using GRUB boot instead of EFI. This should work to install 
it too, though. Do you have Secure Boot disabled? Do you get the same 
behaviour when you install by a legacy booted USB versus a UEFI booted 
install?



--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6ab3b3e2-9380-8593-e35e-356a66937cbf%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: No Bootable Devices Found with /boot/efi/ Missing

['Rainier30' via qubes-users]

Thanks Bernhard, and I did find the Troubleshooting UEFI page. I previously 
looked at the section "Boot Device Not Recognized After Installing". The first 
step is to "Copy the /boot/efi/EFI/qubes/ directory to /boot/efi/EFI/BOOT/".

When I try to do that, it responds with "Is not a directory". I have to go back 
as far as /boot/ before it is recognized. If I understood the troubleshooting 
page correctly, I was supposed to copy /boot/efi/EFI/qubes/. I don't think that 
is working for me.

Everyone please feel free to explain this all to me. It is not something I 
understand well, so I maybe am missing something! This is a skill I respect, 
but don't yet posses.

As for the last message, I didn't understand this part: "you can do the trick 
with any other live-linux (you "only" modify /boot, no need to do cryptsetup by 
hand), but then absolute paths are a bit different.". Does this just refer to 
the Troubleshooting page's instructions?

Thanks everyone!

Sent with [ProtonMail](https://protonmail.com) Secure Email.

‐‐‐ Original Message ‐‐‐
On Sunday, February 24, 2019 12:42 PM, Rainier30  
wrote:

> Hello everyone,
>
> I've tried for almost two months now to install Qubes.  I'm excited to get it 
> working, but I've never gotten past the reboot following installation. I 
> purchased a new Dell computer for this OS specifically, and the internals 
> match HCL requirements.
>
> I've used both a flash drive and a disk to install from, and I have no issues 
> all the way through the installation. Once I reboot, I see "No Bootable 
> Devices Found". Having tried literally over 100 times by now to figure it 
> out, I think I've tried every possible BIOS configuration.
>
> Other users with similar problems seem to have had success by configuring the 
> EFI boot manager. I tried this through a shell in recovery mode, but found 
> that for /boot/efi/ there is "No such file or directory". I downloaded the 
> ISO more than once thinking that I maybe had a partial file or Rufus problem.
>
> Could someone please help me figure out a solution? I would like to use this 
> great OS, because it seems like an important tool. Please keep in mind with 
> your responses that everything I know about computers is something I learned 
> in the last few months. I self-taught myself a little, but this is not my 
> personal area of expertise. Please assume I have no idea how to follow your 
> directions unless you treat me like an idiot. I welcome follow-up questions 
> too!
>
> Sent with [ProtonMail](https://protonmail.com) Secure Email.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bFYeeNEF6X5QQOVFqB9HMFB7ckHHTVQJKznUzozZIzEkEmZhK26rxIGWwXL5Ricq7i4UUfSMjXNjqHvfQH5i1wgJzZHOC5HvEbwOvL6X_5Y%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes for enterprise usage

[unman]

On Sun, Feb 24, 2019 at 06:28:36AM -0800, tggrps wrote:
> Thanks for the response - interesting to learn about the lacking Windows 
> guest support.
> Do you know which specific SMEs are using Qubes OS? (e.g. specific users I 
> can talk to) Interested in learning more from their experience pushing it to 
> more than a handful of users.
> 
> BTW - also see this article about Qubes OS (and others) that also claims 
> there's a big problem about hardware compatibility with Qubes OS making it 
> impractical for enterprises:
> https://www.brianmadden.com/opinion/client-virtualization-part-2-how-client-vms-have-evolved
> 
> Thank you!
> 
> On Friday, February 22, 2019 at 1:23:29 PM UTC+2, unman wrote:
> > On Fri, Feb 15, 2019 at 12:23:28PM -0800, tggrps wrote:
> > > Hi all,
> > > 
> > > Did anyone try to use Qubes for enterprise use cases? e.g. for securing 
> > > access to sensitive resources? How did that end up?
> > > 
> > > Last time I looked at Qubes, it didn't have enterprise manageability 
> > > features and required users to be familiar with Linux, which is not 
> > > always the case with enterprise users. The HCL is also a bit of a concern 
> > > as enterprise laptops might not well support Linux (audio/video/docking 
> > > stations/wifi/power management...).
> > > 
> > > Details about your experience with Qubes today for enterprise users 
> > > (either power users or simple users) would be helpful!
> > > 
> > > Thanks!
> > 
> > Qubes has salt stack and some features for manageability.
> > Look here:
> > https://www.qubes-os.org/doc/salt
> > https://www.qubes-os.org/news/2017/06/27/qubes-admin-api
> > 
> > It does not require *users* to be familiar with Linux, but undoubtedly
> > admins do. I don't know what a power user is.
> > Sensible selection from the HCL make the choices somewhat limited, but
> > workable.
> > I know some SMEs that use Qubes, but the sysadmins are extremely
> > competent in Linux and Xen.
> > The biggest blocker to widespread adoption is the somewhat sketchy
> > support for Windows imo. (Win 7 support is generally good, but later?)
> 

Please don't top-post when mailing the list.
I know the admins who use Qubes watch this list - if they want to chip
in, they will.
I'd seen that article. I didnt find it particularly useful. I dont think
it's fair to say that Qubes has a problem with hardware compatibility,
any more than Linux has such a problem.
As I said, choosing the hardware is important.
If you commit to Qubes, then its simple to find hardware that works
well. Probably not the latest processors/mboards, but solid enterprise
laptops are available and work well. It's certainly true that you cant
pick *any* laptop and have a trouble free install/use, but frankly the
same goes for (e.g) Debian.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224164805.pufax65jvribmxuu%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Best ideal laptop for Qubes?

[Stuart Perkins]

On Sun, 24 Feb 2019 00:39:56 -0800 (PST)
nosugarmaxta...@gmail.com wrote:

>On Sunday, 24 February 2019 03:44:51 UTC+11, 799  wrote:
>>  schrieb am Sa., 23. Feb. 2019, 14:35:
>> 
>> 
>> Not quite sure why people try use Qubes with laptops. I found far better 
>> performance on desktops. Laptops are the opposite of flexible. PC's you can 
>> upgrade to your hearts content. 
>> 
>> 
>> 
>> Maybe because for 90% a laptop offers enough performance, has much lower 
>> space & power requirement and can be used flexible?
>> And because maybe more people "have to use" computers than they "like to 
>> build" them thereselves.
>> Just a guess ;-)
>> 
>> 
>> I was asking the other question:
>> Who is buying those desktop PCs today? 
>> 
>> 
>> - O  
>
>Who are buying desktops? Anyone who is serious about computing. Developers, 
>gamers, businesses, those interested in VR, those interested in security, 
>those interested in a build that can be upgraded to their hearts content. 
>
>Laptops have their purpose. They can provide a mobile computing experience. I 
>use one for work purposes. But, lets be real. That is the only advantage over 
>a desktop (even power usage can be just as low on a desktop if you want it to 
>be). You don't even have to build one yourself for Qubes. You can easily buy a 
>SSF Dell Optiplex off ebay for $200 with a Intel 4770/4790 and 16/32gb of ram. 
>
>I have an i7 laptop from 2011 that can't even run Qubes 4.0 because laptop 
>cpus get shafted in the specs (thankfully they at least get vt'd these days). 
>I have others that have heating problems because there is only so much cooling 
>you can give a laptop, while some of my desktops have 5 14cm fans keeping them 
>cool at 5ghz overclocks.
>
>You say laptops are flexible? But are they? you can't just rip out parts 
>(apart from ram/hdd) like a desktop. And their actual upgrade paths are 
>limited. With my desktop I have parts from multiple build/years. It is just 
>that flexible. 
>
>Also, space requirements? you living in a tent? 
>
>I speak out about this.. because I have 5 laptops sitting around collecting 
>dust. They have limited use because they are laptops. Desktops can always be 
>adapted to another use. One of my older builds became a pfsense router, for 
>example. 
>
>
>

I use an older Dell D630 as a "server" on my home network.  It hosts three 
different VM's under VirtualBox.  One is really old...XP...keeps track of my 
solar electric system.  Two are Linux based...one is a VPN server, and one 
hosts a webpage for my farm.  It runs continuously and is a replacement for the 
prior laptop I has doing the job for almost 10 years of continuous running.  
They can be repurposed quite easily.  Yes, it is a PITA to "upgrade" the 
hardware much...but a usable laptop can be e-bay found for well < $100...and I 
treat them like a cheap disposable appliance.  Why by a complicated built in 
oven when a counter top toaster oven will do the job?

Everything has a purpose.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224092716.57525b9f%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes wont boot after dom0 update

['awokd' via qubes-users]

'zhivko Todorov' via qubes-users:

Hi,

I decided to update dom0 because of several bugs that were affecting my user 
experience which were minor but nonetheless I hadnt updated in a while.

As the updater is doing its thing, it upgrades and installs all 149 packages, 
then the goes on to the next screen where my cat walks on top of my laptop and 
hits the power button.

Now qubes wont start at all, it reboots every time it goes past the xen 
hypervisor screen where I select the normal boot option.
I have some very important data on some VM's which I would like to recover.

Worse case if there is no solution at present, I would at least like to access 
the data and transfer it to my pc. After that I wouldnt even mind reinstalling 
the whole thing.

Please let me know of anything I can submit to help resolve this issue for any 
other users that might encounter the same or similar issue.


One of those updates was probably a kernel update which isn't getting 
along with your computer. You'll want to try setting the default boot 
kernel back to the older version. Search this mailing list for more 
detailed directions.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/950e27dd-3019-02f3-f78e-cf0457781447%40danwin1210.me.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Best ideal laptop for Qubes?

[Stuart Perkins]

On Sat, 23 Feb 2019 05:35:20 -0800 (PST)
nosugarmaxta...@gmail.com wrote:

>On Thursday, 21 February 2019 11:49:27 UTC+11, dexint...@gmail.com  wrote:
>> I've been spending hours and hours looking at laptop configs from dell to 
>> lenovo and I still have yet to make a decision. I'm hoping you guys can help 
>> me. 
>> 
>> Uses:
>> 
>> - Programming
>> - Web Dev
>> - Tor
>> - Screen real estate
>> - Regular web surfing and videos
>> - Some video and photo editing but I have a PC for that 
>> 
>> I'd like to keep cost as low as possible but my budget is very flexible if I 
>> need to stretch it. I want something that will last me 3-5 years.  
>
>Not quite sure why people try use Qubes with laptops. I found far better 
>performance on desktops. Laptops are the opposite of flexible. PC's you can 
>upgrade to your hearts content. 
>

My use case on my laptop is this...

I consult in the business world, and have a rather large presence in the e-mail 
world.  I use Qubes because it separates...

1) programs from data with template VM's
2) tasks with discrete VM's based on purpose...e-mail, business records, 
servicing a particular client, password manager, general browsing etc...

Prior to Qubes, I would use snapshot kept VirtualBox vms with a non-snapshot 
kept virtual disk for data and revert to snapshot with each VM shutdown with 
multiple VM's for various purposes.  I would periodically start the VM's, do 
software updates and retake my snapshot...essentially emulating a template 
based VM.

When I found Qubes, I found an entire OS designed around that very concept and 
more...so it was a logical fit to my laptop.  Add a coreboot/ME-disabled system 
and security is manifestly enhanced, which is good for my business.  While I 
don't intentionally keep client data around for long, the fact that I have to 
handle it from time to time makes keeping it separate and secure paramount.  

Stuart

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224091556.1b1e38ef%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Qubes for enterprise usage

[tggrps]

Thanks for the response - interesting to learn about the lacking Windows guest 
support.
Do you know which specific SMEs are using Qubes OS? (e.g. specific users I can 
talk to) Interested in learning more from their experience pushing it to more 
than a handful of users.

BTW - also see this article about Qubes OS (and others) that also claims 
there's a big problem about hardware compatibility with Qubes OS making it 
impractical for enterprises:
https://www.brianmadden.com/opinion/client-virtualization-part-2-how-client-vms-have-evolved

Thank you!

On Friday, February 22, 2019 at 1:23:29 PM UTC+2, unman wrote:
> On Fri, Feb 15, 2019 at 12:23:28PM -0800, tggrps wrote:
> > Hi all,
> > 
> > Did anyone try to use Qubes for enterprise use cases? e.g. for securing 
> > access to sensitive resources? How did that end up?
> > 
> > Last time I looked at Qubes, it didn't have enterprise manageability 
> > features and required users to be familiar with Linux, which is not always 
> > the case with enterprise users. The HCL is also a bit of a concern as 
> > enterprise laptops might not well support Linux (audio/video/docking 
> > stations/wifi/power management...).
> > 
> > Details about your experience with Qubes today for enterprise users (either 
> > power users or simple users) would be helpful!
> > 
> > Thanks!
> 
> Qubes has salt stack and some features for manageability.
> Look here:
> https://www.qubes-os.org/doc/salt
> https://www.qubes-os.org/news/2017/06/27/qubes-admin-api
> 
> It does not require *users* to be familiar with Linux, but undoubtedly
> admins do. I don't know what a power user is.
> Sensible selection from the HCL make the choices somewhat limited, but
> workable.
> I know some SMEs that use Qubes, but the sysadmins are extremely
> competent in Linux and Xen.
> The biggest blocker to widespread adoption is the somewhat sketchy
> support for Windows imo. (Win 7 support is generally good, but later?)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be03eb9f-cf1b-48f7-a857-9321e8b591fb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] MTU setting for all interfaces

[unman]

On Sun, Feb 24, 2019 at 02:02:10PM +1000, Beto HydroxyButyrate wrote:
> I have MTU 9000 set on my internal network.  sys-net connects to this
> network.
> 
> I want all qubes VM interfaces to default to MTU 9000 rather than 1500.
> 
> Is there some simple global setting I can make to enable this?

You could set it at the router level in sys-net using a mangle table.
This is available for both iptables and nftables.
I've  done this with iptables in the past and I dont recall issues with
conntrack and connected clients. ymmv

iptables has tcp-MSS patch that allows you to hit this in FORWARD rules
- dont know if similar is available for nftables.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224141432.n76eoa5geseil5kk%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix Yes or No

[unman]

On Sun, Feb 24, 2019 at 10:36:12PM +1100, haaber wrote:
> > On 2/19/19 5:05 PM, ashleybrown...@tutanota.com wrote:
> > > 
> > > 
> > > Please, it would be greatly appreciated. Especially on how to ensure no
> > > clear traffic happens and that it only goes over tor.
> > 
> > This is covered now here:
> > https://hackmd.io/JIXLStC-Sbq8rr1mjomCDQ
> 
> thank you for sharing this.  Bernhard

If you want a packaged solution with similar functionality for stretch,
I package 3isec-tor at https://qubes.3isec.org
Add the stretch repository to your template and apt install 3isec-tor.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224134230.vhr5e4j36fqw5hrp%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix Yes or No

[unman]

On Sat, Feb 23, 2019 at 01:53:17PM -0600, Andrew David Wong wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On 19/02/2019 8.12 PM, unman wrote:
> > On Sun, Feb 17, 2019 at 08:50:01PM +0100, r...@posteo.net wrote:
> >> On 2/17/19 10:49 PM, jrsmi...@gmail.com wrote:
> >>> Reading through the post questioning the trustworthiness of 
> >>> Whonix, I can't tell whether we can continue trusting/using 
> >>> Whonix or not.  Can someone (preferably in a position to speak 
> >>> for QubesOS), please state, in a straightforward and 
> >>> unambiguous manner, spell this out for us?
> >> 
> >> Personally, I don't trust Whonix. The decision to not trust 
> >> Whonix is not based on the sysadmin/aussie issue that came up 
> >> recently on the list. I'm simply not convinced that they are 
> >> capable of designing and writing secure software. Furthermore, 
> >> there is no reason to use whonix in the first place, especially 
> >> when you are using Qubes. Creating a tor netvm is rather
> >> straight forward (and a dispvm that includes the Tor Browser if
> >> you like to use that as well). If there is enough interest, I can
> >> also write up a summary on how to do that in Qubes.
> >> 
> >> Regards
> > 
> > Have you looked at the qubes-tor package and 
> > www.qubes-os.org/doc/torvm? - that page is removed from the menu 
> > but still available. The qubes-tor package is OK but with some 
> > tweaking makes a solid replacement for Whonix gw - certainly for 
> > live images and machines with limited RAM. imo the decision to 
> > deprecate that package and then remove all reference to it from
> > the docs was a mistake.
> > 
> > unman
> > 
> 
> It's not true that all reference to TorVM was removed from the docs.
> In fact, the intro section of our main Whonix page specifically
> mentions TorVM and links to the the TorVM page. [1]
> 
> As you know, the decision to deprecate TorVM was years ago, [2][3] and
> it's been unmaintained ever since. Using it now could be dangerous,
> unless you really know what you're doing.
> 
> 
> [1] https://www.qubes-os.org/doc/whonix/
> [2] https://github.com/QubesOS/qubes-issues/issues/1196
> [3] https://github.com/QubesOS/qubes-issues/issues/1201
> 
> - -- 
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
> 
> -BEGIN PGP SIGNATURE-
> 
> iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlxxpKUACgkQ203TvDlQ
> MDAfIhAAni1qEcGYUJZ2Rvr7mzlenxY4BAY/I5fxm+ROZpMxWMmkJBJGHvRoPn8b
> W39f+d1WRH6RXCb9xsoJ9up4fTs05ZmjD8mULwoy5ugh58lYLfipTJwGyOLReQnM
> DtkpWhmLxGF8O8U3ndjZJLOBSg73EmnlxsyDwLdBdVkqSfzCS++pdPlpjEgjfjSy
> H8gBX+YnBuev/hUdTDBYsLsoHy35uIlq/AWkULLv+Md8zLh9fCfqHYsvRNdbUFfA
> 7aCv/9M2KwNZyWAr8hjhVyncPaqKHupaROv3bRN9sKCiH3vjFapNb44FRTMO1cb7
> NytBgwR2mimluXvYFgFhOq7RzRgejmB1ZeNvmV98FFOJAOlE/Wadc4BIPd77aRWk
> z6lZCcUz7OfoAUYfO2FqlGhJJjLsSX8qMcnv2hNTHRBbj7SLDsXisoBIxXpVHDTi
> zFCU/d8UimN9gOodybfF4TxkwG3taRO7GmDzhZJMx2S3uzqZpgAO9qut8lzZAevl
> SH3grIuANK3BBkqi+2QcXuKByxljVTjiZocxwjdmJP3a5pgG258zTxn43+QW2PU5
> WB1/maSXyColKLHcimypxTpBHFNw/EjecqUiCWFMZgQAlsLYjjfA87O7pg5/YnYf
> ICPz6EW9Chb2wP3ULSIcwnXkm6q22HpsUfTzk9Ld2fbx8RWyJAg=
> =6ucB
> -END PGP SIGNATURE-

I stand corrected Andrew.
But the page was removed from the menu and packages are no longer built.
That looks like removed to me, and goes beyond being "deprecated".

As far as being unmaintained, the package worked perfectly well, and the
errors reported were either generic Tor errors (as I pointed out) or
incorrect usage. The advantage of that package was its simplicity.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224133834.jcdmu23oafpaf6uw%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] No Bootable Devices Found with /boot/efi/ Missing

[haaber]

On 2/24/19 10:42 PM, 'Rainier30' via qubes-users wrote:

Hello everyone,

I've tried for almost two months now to install Qubes.  I'm excited to
get it working, but I've never gotten past the reboot following
installation. I purchased a new Dell computer for this OS specifically,
and the internals match HCL requirements.

I've used both a flash drive and a disk to install from, and I have no
issues all the way through the installation. Once I reboot, I see "No
Bootable Devices Found". Having tried literally over 100 times by now to
figure it out, I think I've tried every possible BIOS configuration.

Other users with similar problems seem to have had success by
configuring the EFI boot manager. I tried this through a shell in
recovery mode, but found that for /boot/efi/ there is "No such file or
directory". I downloaded the ISO more than once thinking that I maybe
had a partial file or Rufus problem.

Could someone please help me figure out a solution? I would like to use
this great OS, because it seems like an important tool. Please keep in
mind with your responses that everything I know about computers is
something I learned in the last few months. I self-taught myself a
little, but this is not my personal area of expertise. Please assume I
have no idea how to follow your directions unless you treat me like an
idiot. I welcome follow-up questions too!


Did you follow the UEFI troubleshooting page? I need to do that since
1-2 months with a recent dell laptop. If qubes won't boot, you can do
the trick with any other live-linux (you "only" modify /boot, no need to
do cryptsetup by hand), but then absolute paths are a bit different. See
here

https://www.qubes-os.org/doc/uefi-troubleshooting/

good luck, Bernhard

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e49a370d-4a4b-1f12-2269-e2b69a571ca0%40web.de.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] No Bootable Devices Found with /boot/efi/ Missing

['Rainier30' via qubes-users]

Hello everyone,

I've tried for almost two months now to install Qubes.  I'm excited to get it 
working, but I've never gotten past the reboot following installation. I 
purchased a new Dell computer for this OS specifically, and the internals match 
HCL requirements.

I've used both a flash drive and a disk to install from, and I have no issues 
all the way through the installation. Once I reboot, I see "No Bootable Devices 
Found". Having tried literally over 100 times by now to figure it out, I think 
I've tried every possible BIOS configuration.

Other users with similar problems seem to have had success by configuring the 
EFI boot manager. I tried this through a shell in recovery mode, but found that 
for /boot/efi/ there is "No such file or directory". I downloaded the ISO more 
than once thinking that I maybe had a partial file or Rufus problem.

Could someone please help me figure out a solution? I would like to use this 
great OS, because it seems like an important tool. Please keep in mind with 
your responses that everything I know about computers is something I learned in 
the last few months. I self-taught myself a little, but this is not my personal 
area of expertise. Please assume I have no idea how to follow your directions 
unless you treat me like an idiot. I welcome follow-up questions too!

Sent with [ProtonMail](https://protonmail.com) Secure Email.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bhYhUMhy4Bsn_KfUIxWy5gMcWWGLWJ2j7wyMQ6842c69iAGr-REBOEEzO_ulIX_RISFn80a7yq31D9k9B_ArPdU_nH2Qa7EOnslS1te4eaQ%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Whonix Yes or No

[haaber]

On 2/19/19 5:05 PM, ashleybrown...@tutanota.com wrote:



Please, it would be greatly appreciated. Especially on how to ensure no
clear traffic happens and that it only goes over tor.


This is covered now here:
https://hackmd.io/JIXLStC-Sbq8rr1mjomCDQ


thank you for sharing this.  Bernhard

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d7148e7b-b341-4192-5616-830e05f31af3%40web.de.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

[nosugarmaxtaste]

On Sunday, 24 February 2019 20:18:11 UTC+11, nosugar...@gmail.com  wrote:
> On Sunday, 24 February 2019 01:45:09 UTC+11, alex.jo...@gmail.com  wrote:
> > On Tuesday, February 19, 2019 at 10:38:39 AM UTC, nosugar...@gmail.com 
> > wrote:
> > > Hi Alex,
> > > 
> > > Let me just start by saying a massive thank you. This guide has been 
> > > great. I have used it for the 8.1 - Oreo - which was just changing:
> > >  'repo init -u git://git.osdn.net/gitroot/android-x86/manifest -b 
> > > android-x86-7.1-r2' to 'repo init -u 
> > > git://git.osdn.net/gitroot/android-x86/manifest -b oreo-x86.'
> > > 
> > > With 8.1, mouse support comes out the box and completing the last part of 
> > > the guide actually makes the mouse worse in Oreo. So, disregard that part 
> > > anyone following this guide for 8.1. You can change resolution by 
> > > affixing 'vga=ask' and choosing your desired resolution 
> > > (https://groups.google.com/forum/#!topic/qubes-users/KZm8aGJuiO0).
> > > 
> > > I have come across one issue, and I am wondering if you could help me. 
> > > Android has installed great, and loads up fine. However, I simply cannot 
> > > open the Settings app, as it crashes every single time. Others who have 
> > > encountered this issue modified it using adb 
> > > (https://stackoverflow.com/questions/3480201/how-do-you-install-an-apk-file-in-the-android-emulator?rq=1),
> > >  but I don't know how to do this with a Qubes HVM. Any help with this?
> > > 
> > > Thanks in advance :)
> > 
> > You can use adb via network:
> > Create tmpvm with adb.
> > Select Networking vm for tmpvm with adb to sys-android.
> > Select Networking vm for Android VM to sys-android.
> > 
> > In sys-android run:
> > sudo nft add rule ip qubes-firewall forward meta iifname eth0 accept
> > sudo iptables -I FORWARD 2 -i vif+ -s 10.137.0.0/24 -d 10.137.0.0/24 -p tcp 
> > -m conntrack --ctstate NEW -j ACCEPT
> > 
> > In android terminal run:
> > su
> > setprop service.adb.tcp.port 
> > stop adbd
> > start adbd
> > 
> > In tmpvm witd adb run:
> > adb connect 10.137.0.xx:
> > Where 10.137.0.xx - android IP
> > And then run your commands.
> 
> Okay, adb works perfectly with your method. Thank you!
> 
> However, my settings is still broken after clearing the data of 
> com.android.settings. I do wonder if this is part of a bigger problem, as the 
> google play store says checking for info.. then the screen turns black. I 
> didn't see any issues when compiling the iso, so not sure what's going on.

Think my issue might be because 'No WebView installed'? Can't open up playstore 
as it fails to load webview provider. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e9b1e1ac-4a2a-4674-b610-91a25faf42ff%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes wont boot after dom0 update

['zhivko Todorov' via qubes-users]

Hi,

I decided to update dom0 because of several bugs that were affecting my user 
experience which were minor but nonetheless I hadnt updated in a while.

As the updater is doing its thing, it upgrades and installs all 149 packages, 
then the goes on to the next screen where my cat walks on top of my laptop and 
hits the power button.

Now qubes wont start at all, it reboots every time it goes past the xen 
hypervisor screen where I select the normal boot option.
I have some very important data on some VM's which I would like to recover.

Worse case if there is no solution at present, I would at least like to access 
the data and transfer it to my pc. After that I wouldnt even mind reinstalling 
the whole thing.

Please let me know of anything I can submit to help resolve this issue for any 
other users that might encounter the same or similar issue.

Thanks in advance
Zhivko

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/eb37c363-e4a0-482c-913c-3fa3579de9f8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

[nosugarmaxtaste]

On Sunday, 24 February 2019 01:45:09 UTC+11, alex.jo...@gmail.com  wrote:
> On Tuesday, February 19, 2019 at 10:38:39 AM UTC, nosugar...@gmail.com wrote:
> > Hi Alex,
> > 
> > Let me just start by saying a massive thank you. This guide has been great. 
> > I have used it for the 8.1 - Oreo - which was just changing:
> >  'repo init -u git://git.osdn.net/gitroot/android-x86/manifest -b 
> > android-x86-7.1-r2' to 'repo init -u 
> > git://git.osdn.net/gitroot/android-x86/manifest -b oreo-x86.'
> > 
> > With 8.1, mouse support comes out the box and completing the last part of 
> > the guide actually makes the mouse worse in Oreo. So, disregard that part 
> > anyone following this guide for 8.1. You can change resolution by affixing 
> > 'vga=ask' and choosing your desired resolution 
> > (https://groups.google.com/forum/#!topic/qubes-users/KZm8aGJuiO0).
> > 
> > I have come across one issue, and I am wondering if you could help me. 
> > Android has installed great, and loads up fine. However, I simply cannot 
> > open the Settings app, as it crashes every single time. Others who have 
> > encountered this issue modified it using adb 
> > (https://stackoverflow.com/questions/3480201/how-do-you-install-an-apk-file-in-the-android-emulator?rq=1),
> >  but I don't know how to do this with a Qubes HVM. Any help with this?
> > 
> > Thanks in advance :)
> 
> You can use adb via network:
> Create tmpvm with adb.
> Select Networking vm for tmpvm with adb to sys-android.
> Select Networking vm for Android VM to sys-android.
> 
> In sys-android run:
> sudo nft add rule ip qubes-firewall forward meta iifname eth0 accept
> sudo iptables -I FORWARD 2 -i vif+ -s 10.137.0.0/24 -d 10.137.0.0/24 -p tcp 
> -m conntrack --ctstate NEW -j ACCEPT
> 
> In android terminal run:
> su
> setprop service.adb.tcp.port 
> stop adbd
> start adbd
> 
> In tmpvm witd adb run:
> adb connect 10.137.0.xx:
> Where 10.137.0.xx - android IP
> And then run your commands.

Okay, adb works perfectly with your method. Thank you!

However, my settings is still broken after clearing the data of 
com.android.settings. I do wonder if this is part of a bigger problem, as the 
google play store says checking for info.. then the screen turns black. I 
didn't see any issues when compiling the iso, so not sure what's going on. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3dea61e5-c2b6-45b5-8a35-429d094d6151%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Android-x86 7.1-r2 with GAPPS installation guide

[799]

Hello,

 schrieb am Fr., 30. Nov. 2018, 16:22:

> I've successfully build android-x86 7.1-r2 with gapps in whonix-14-ws
> AppVM.
> (...)


As far as I understand following the guide from Alex will result in a self
compiled Android ISO, which can be used to create an Android AppVM.

Has someone ported this information over to the Qubes Docs or at least
Qubes Community Docs, so that this valuable information doesn't get lost
and we have one place to collect all feedback and improve it?

One more thing:
Is it also possible to use a regular fedora or Debian based AppVM as
Build-VM, I don't understand why whoonix has been used.

- O

>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2v%2BEU%2BwwF%3DmnFHDVSZ4NFfoCzA5cFmj6iVmRmLdy4wwyQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Best ideal laptop for Qubes?

[nosugarmaxtaste]

On Sunday, 24 February 2019 20:02:37 UTC+11, Frank Beuth  wrote:
> On Sun, Feb 24, 2019 at 12:39:56AM -0800, nosugarmaxta...@gmail.com wrote:
> >You say laptops are flexible? But are they? you can't just rip out parts 
> >(apart from ram/hdd) like a desktop. And their actual upgrade paths are 
> >limited. With my desktop I have parts from multiple build/years. It is just 
> >that flexible.
> >
> >Also, space requirements? you living in a tent?
> 
> Greetings from a beach on a lesser-known Greek island. I tried using a 
> desktop 
> but the sand kept clogging the fans, and the powerstrip, and the GPU cooler, 
> whenever I brought it outside. After the 10th international flight I also got 
> really tired of having to explain to airlines why my luggage was so big and 
> heavy. (The vintage IBM Model M keyboard probably didn't help, they made me 
> check that because they thought it could be used as a weapon, which really 
> sucked because I was hoping to get some work done on the flight!)

Hahaha, greetings, Frank. I do envy a well travelled gent such as yourself. My 
poor qubes doesn't get to go mobile as it is only used in a secure setting with 
motion detection cameras giving it physical protection. 

I travel through airports with vanilla distros.. (yes, yes, I am a windows user 
too.. still can't rid myself of it). 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/46b7190a-1ea4-460f-a00f-56b43a6052b7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Best ideal laptop for Qubes?

[Frank Beuth]

On Sun, Feb 24, 2019 at 12:39:56AM -0800, nosugarmaxta...@gmail.com wrote:

You say laptops are flexible? But are they? you can't just rip out parts (apart 
from ram/hdd) like a desktop. And their actual upgrade paths are limited. With 
my desktop I have parts from multiple build/years. It is just that flexible.

Also, space requirements? you living in a tent?


Greetings from a beach on a lesser-known Greek island. I tried using a desktop 
but the sand kept clogging the fans, and the powerstrip, and the GPU cooler, 
whenever I brought it outside. After the 10th international flight I also got 
really tired of having to explain to airlines why my luggage was so big and 
heavy. (The vintage IBM Model M keyboard probably didn't help, they made me 
check that because they thought it could be used as a weapon, which really 
sucked because I was hoping to get some work done on the flight!)


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224090229.3rnq66dgdnz6dcpq%40web.local.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Android-x86 7.1-r2 with GAPPS installation guide

[nosugarmaxtaste]

On Sunday, 24 February 2019 01:45:09 UTC+11, alex.jo...@gmail.com  wrote:
> On Tuesday, February 19, 2019 at 10:38:39 AM UTC, nosugar...@gmail.com wrote:
> > Hi Alex,
> > 
> > Let me just start by saying a massive thank you. This guide has been great. 
> > I have used it for the 8.1 - Oreo - which was just changing:
> >  'repo init -u git://git.osdn.net/gitroot/android-x86/manifest -b 
> > android-x86-7.1-r2' to 'repo init -u 
> > git://git.osdn.net/gitroot/android-x86/manifest -b oreo-x86.'
> > 
> > With 8.1, mouse support comes out the box and completing the last part of 
> > the guide actually makes the mouse worse in Oreo. So, disregard that part 
> > anyone following this guide for 8.1. You can change resolution by affixing 
> > 'vga=ask' and choosing your desired resolution 
> > (https://groups.google.com/forum/#!topic/qubes-users/KZm8aGJuiO0).
> > 
> > I have come across one issue, and I am wondering if you could help me. 
> > Android has installed great, and loads up fine. However, I simply cannot 
> > open the Settings app, as it crashes every single time. Others who have 
> > encountered this issue modified it using adb 
> > (https://stackoverflow.com/questions/3480201/how-do-you-install-an-apk-file-in-the-android-emulator?rq=1),
> >  but I don't know how to do this with a Qubes HVM. Any help with this?
> > 
> > Thanks in advance :)
> 
> You can use adb via network:
> Create tmpvm with adb.
> Select Networking vm for tmpvm with adb to sys-android.
> Select Networking vm for Android VM to sys-android.
> 
> In sys-android run:
> sudo nft add rule ip qubes-firewall forward meta iifname eth0 accept
> sudo iptables -I FORWARD 2 -i vif+ -s 10.137.0.0/24 -d 10.137.0.0/24 -p tcp 
> -m conntrack --ctstate NEW -j ACCEPT
> 
> In android terminal run:
> su
> setprop service.adb.tcp.port 
> stop adbd
> start adbd
> 
> In tmpvm witd adb run:
> adb connect 10.137.0.xx:
> Where 10.137.0.xx - android IP
> And then run your commands.

Hi Alex, good to hear from you again.

Been pulling my hair out trying to get Android working. It installs great, but 
i can't open settings at all, so can't even do anything with the OS.

Have you had success with Oreo?

I'll try your adb steps.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6ff65e60-5217-4f0d-a134-e504dfc64095%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Best ideal laptop for Qubes?

[nosugarmaxtaste]

On Sunday, 24 February 2019 03:44:51 UTC+11, 799  wrote:
>  schrieb am Sa., 23. Feb. 2019, 14:35:
> 
> 
> Not quite sure why people try use Qubes with laptops. I found far better 
> performance on desktops. Laptops are the opposite of flexible. PC's you can 
> upgrade to your hearts content. 
> 
> 
> 
> Maybe because for 90% a laptop offers enough performance, has much lower 
> space & power requirement and can be used flexible?
> And because maybe more people "have to use" computers than they "like to 
> build" them thereselves.
> Just a guess ;-)
> 
> 
> I was asking the other question:
> Who is buying those desktop PCs today? 
> 
> 
> - O

Who are buying desktops? Anyone who is serious about computing. Developers, 
gamers, businesses, those interested in VR, those interested in security, those 
interested in a build that can be upgraded to their hearts content. 

Laptops have their purpose. They can provide a mobile computing experience. I 
use one for work purposes. But, lets be real. That is the only advantage over a 
desktop (even power usage can be just as low on a desktop if you want it to 
be). You don't even have to build one yourself for Qubes. You can easily buy a 
SSF Dell Optiplex off ebay for $200 with a Intel 4770/4790 and 16/32gb of ram. 

I have an i7 laptop from 2011 that can't even run Qubes 4.0 because laptop cpus 
get shafted in the specs (thankfully they at least get vt'd these days). I have 
others that have heating problems because there is only so much cooling you can 
give a laptop, while some of my desktops have 5 14cm fans keeping them cool at 
5ghz overclocks.

You say laptops are flexible? But are they? you can't just rip out parts (apart 
from ram/hdd) like a desktop. And their actual upgrade paths are limited. With 
my desktop I have parts from multiple build/years. It is just that flexible. 

Also, space requirements? you living in a tent? 

I speak out about this.. because I have 5 laptops sitting around collecting 
dust. They have limited use because they are laptops. Desktops can always be 
adapted to another use. One of my older builds became a pfsense router, for 
example. 



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b15e02ee-b2aa-48ed-852c-8386a09a0dea%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.