[qubes-users] M.2 to PCIe Adapter play nice with qubes?

2019-08-11 Thread brendan . hoar
M.2 NVME SSD devices are just PCIe devices with a special connector. If your 
main board supports PCIe 3.0 then the adapter should work just like it was an 
onboard M.2 slot, with one possible exception: depending on the BIOS, it might 
not be a bootable device.

B

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/899e88ae-bd76-4da1-b350-5cbaa8a9f71d%40googlegroups.com.


Re: [qubes-users] Old qube version

2019-08-11 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 11/08/2019 6.24 PM, 'awokd' via qubes-users wrote:
> 27casanov...@gmail.com:
>> Hi, I have the version prior to the one that is rekomended at
>> this poin. Evey thing works fine but sould I wory? And what dose
>> "unsuported mean".
>> 
>> Sorry the speling.
>> 
>> I reply is most apriciated
>> 
> You might worry if you want these features: 
> https://www.qubes-os.org/doc/releases/4.0/release-notes/. PV based 
> R3.2.1 is more vulnerable to Spectre/Meltdown class exploits,
> IIRC.
> 
> Unsupported means the Qubes team is no longer releasing security
> or functionality updates. (ADW or anyone, is this better defined
> somewhere? Expected to see it on
> https://www.qubes-os.org/doc/supported-versions/, but couldn't find
> it there or on older News items).
> 

Right, it's just the standard meaning of unsupported or end-of-life
software: no more bug fixes or updates. (Since security updates are a
type of update, that means no more security updates.)

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-
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=E0Yr
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/99d1627d-f8e1-0d6c-e754-480bac4a2444%40qubes-os.org.


Re: [qubes-users] Old qube version

2019-08-11 Thread 'awokd' via qubes-users
27casanov...@gmail.com:
> Hi, I have the version prior to the one that is rekomended at this poin. Evey 
> thing works fine but sould I wory? And what dose "unsuported mean".
> 
> Sorry the speling. 
> 
> I reply is most apriciated
> 
You might worry if you want these features:
https://www.qubes-os.org/doc/releases/4.0/release-notes/. PV based
R3.2.1 is more vulnerable to Spectre/Meltdown class exploits, IIRC.

Unsupported means the Qubes team is no longer releasing security or
functionality updates. (ADW or anyone, is this better defined somewhere?
Expected to see it on https://www.qubes-os.org/doc/supported-versions/,
but couldn't find it there or on older News items).

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/79f7ffe4-6209-ef57-20c4-4aaeb15e32e3%40danwin1210.me.


[qubes-users] Old qube version

2019-08-11 Thread 27casanova27
Hi, I have the version prior to the one that is rekomended at this poin. Evey 
thing works fine but sould I wory? And what dose "unsuported mean".

Sorry the speling. 

I reply is most apriciated

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7a57b707-f9af-4a55-83de-83f6449da1b5%40googlegroups.com.


[qubes-users] Overriding Spectre/Meltdown mitigations?

2019-08-11 Thread arthur . summers
My use case for Qubes is less security-focused and more 
separation/compartmentalization of systems-focused. If XenClient was still 
a thing, I'd be using it. I even tried to hack at ESXi to get X11 running 
and maybe use it as a client hypervisor, but no luck.

That said, while I take security seriously, I also weigh it against things 
like risk and performance. I recently upgraded my BIOS to take care of an 
issue I had with my fans going at 100% after resuming from suspend:
https://groups.google.com/forum/#!topic/qubes-users/hkj5BkR8Z8E

Here is the BIOS I flashed:
https://www.dell.com/support/home/us/en/04/drivers/driversdetails?driverid=MJ0KC&oscode=W732&productcode=precision-m6800-workstation

However, the new BIOS appears to allow kernel modules that address the 
Spectre/Meltdown vulnerabilities to run . . . and WOW, did my system get 
slow. Running updates on one of my templates resulted in the VM crashing 
repeatedly and never successfully updating. VMs are regularly taking up a 
large percentage of CPU. I added the nospectre_v1, nospectre_v2, and 
nospec_store_bypass_disable kernel parameters, and that seemed to help 
somewhat, but I have two questions:

   - In GRUB, do I add those kernel params to the multiboot /xen- line, 
   the module /vmlinuz- line, or somewhere else?
   - Are there other modules that I could disable to improve performance?

Obviously, I completely understand that this is not recommended and goes 
against the purpose of Qubes as an OS, but from a risk perspective, I'm 
willing to take the trade-off for a bit of extra performance.

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ec8fce57-a87c-43c0-b36e-d9a46339b40c%40googlegroups.com.


Re: [qubes-users] Re: Changing the clipboard shortcut in 4.0 doesn't work

2019-08-11 Thread Andrew "Arthur" Summers
. . . I need to turn over my MS in Information Systems and my BS in
Computer Science. I don't know how I overlooked that - probably because
I've been doing PHP for the last few years, so I only notice // and /**/ as
comments? Sigh . . . I'm sorry for being a bother . . . Thanks, though!

On Sun, Aug 11, 2019 at 9:41 AM unman  wrote:

> On Sat, Aug 10, 2019 at 10:50:41AM -0700, arthur.summ...@gmail.com wrote:
> > Sorry - I don't use Google Groups enough, so I just hit "Post Reply"
> > assuming that it would be smart enough to put the reply in the right
> place.
> >
> > I looked at the XFCE keyboard shortcuts and window manager keyboard
> > shortcuts, and Ctrl-Alt-c/v aren't in use. There might be another place
> to
> > look, but those are the main ones off the top of my head. However, I'm
> not
> > sure if this is a window manager issue since the keyboard shortcut is
> > controlled by the Qubes Clipboard program (qui-clipboard).
> >
> > I don't know enough about the Qubes internals to trace how it picks up
> the
> > setting from /etc/qubes/guid.conf (and why it isn't accepting my values
> > after I changed them). I tried doing a recursive grep to find any other
> > places where the default shortcut may be set, but it got a little
> > mind-bending.
> >
> > I'm happy to provide more details from my system, though - my fingers
> just
> > really want to use my custom shortcut because they've been confused ever
> > since I upgraded. ;-)
> >
> > On Friday, August 9, 2019 at 7:47:07 PM UTC-5, unman wrote:
> > >
> > > On Sat, Aug 03, 2019 at 10:39:31AM -0700, arthur...@gmail.com
> > >  wrote:
> > > > Any thoughts, here? My fingers are trained to use "Ctrl-Shift-c" and
> > > > "Ctrl-Shift-v" for copying from the terminal and pasting without
> > > > formatting, and it's getting to be quite bothersome that I can't
> change
> > > > this shortcut using the instructions in the docs. I'd really like to
> > > figure
> > > > out what's up.
> > > >
> > > > Thanks!
> > > >
> > > > On Thursday, July 25, 2019 at 9:42:32 AM UTC-5, arthur...@gmail.com
> > > wrote:
> > > > >
> > > > > As a follow-up because I see this has been asked at-length both
> here
> > > an on
> > > > > GitHub: I tried changing this to "Ctrl-Alt-c" and "Ctrl-Alt-v" in
> > > > > /etc/qubes/guid.conf (using that syntax and capitalization
> EXACTLY).
> > > Is my
> > > > > syntax incorrect? I had this working in 3.2, but it won't work in
> 4.0.
> > > > > Strange . . .
> > > > >
> > > > > On Wednesday, July 24, 2019 at 7:33:10 PM UTC-5,
> arthur...@gmail.com
> > > > > wrote:
> > > > >>
> > > > >> I prefer to use a different shortcut for the Qubes clipboard
> because
> > > > >> Ctrl+Shift+V is an existing shortcut for "paste without
> formatting"
> > > in most
> > > > >> applications. However, I've tried editing /etc/qubes/guid.conf
> and
> > > > >> restarting my VMs (I actually restarted my whole system), but no
> > > luck. I
> > > > >> figure something changed now that the clipboard is a standalone
> > > > >> application, but I'm not sure what needs to be modified.
> > > > >>
> > > > >> Thanks!
> > > > >>
> > > > >
> > >
> > > Please dont top post.
> > >
> > > Making that change works fine for me, but I use KDE.
> > > I wonder if that make a difference? Does Xfce use those key combos
> > > already?
> > >
> >
>
> And again - just check the message and drop to the bottom. A few seconds
> for you and easier for everyone else. (I dont envy you using groups web)
>
> Just to check, you *have* uncommented those lines in the conf file?
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "qubes-users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/qubes-users/C98IysnmQPQ/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> qubes-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/qubes-users/20190811144153.GA16707%40thirdeyesecurity.org
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAP0YRgY4vTf8O7a%2BEhmc4sqgTQ8vyNq4663Pfy%3DR6D3AbEXHEg%40mail.gmail.com.


Re: [qubes-users] request : add to dom0 FFmpeg libraries and codecs h264/h265/libavcodec/libfdk_aac/libmp3lame/libopus/libvpx

2019-08-11 Thread Daniel Moerner
On Sunday, August 11, 2019 at 7:14:12 AM UTC-4, john due wrote:
> How can multimedia libraries affect security?

There was a much-discussed exploit a few years ago, and there are several 
similar ones: 
https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-compromising-linux-desktop.html

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3f067002-2773-4362-bf19-0d4ed0f76446%40googlegroups.com.


Re: [qubes-users] debian-10-minimal: no IP addresses on interfaces?

2019-08-11 Thread qubes-lists


> Did you follow the advice in
> https://www.qubes-os.org/doc/templates/debian-minimal  ?

Thanks for the pointer, now I run into this issue:


apt install qubes-core-agent-networking

results in:

The following packages have unmet dependencies:
  qubes-core-agent-networking : Depends: qubes-core-agent (= 4.0.46-1+deb10u1) 
but 4.0.47-1+deb10u1 is to be installed
E: Unable to correct problems, youhave held broken packages.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6a30bf09-1d56-63c1-bbea-8e31d27c80e1%40riseup.net.


Re: [qubes-users] debian-10-minimal: no IP addresses on interfaces?

2019-08-11 Thread unman
On Sun, Aug 11, 2019 at 01:16:00PM +, qubes-li...@riseup.net wrote:
> Hello!
> 
> I installed the debian-10-minimal template from the itl-testing repository
> and used it for a proxyVM.
> 
> When starting the appVM that uses the debian-10-minimal based proxyVM.
> 
> The proxyVM gets the usual interfaces eth0 + vif.. but none of these 
> interfaces
> have an IP address assigned and are in state DOWN.
> 
> This issues does not occur when using the debian-10 (non minimal) version.
> 
> Is this a known limitation of the minimal version? 
> 
> thanks!
> 

Did you follow the advice in
https://www.qubes-os.org/doc/templates/debian-minimal  ?

debian-10-minimal is fine as netVM

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190811150938.GE16707%40thirdeyesecurity.org.


Re: [qubes-users] request : add to dom0 FFmpeg libraries and codecs h264/h265/libavcodec/libfdk_aac/libmp3lame/libopus/libvpx

2019-08-11 Thread unman
On Sun, Aug 11, 2019 at 04:14:12AM -0700, john due wrote:
> This is need for MPV and better performance for window managers users 
> (dwm/2bm/i3wm and others) If you need something better than primitive 
> wallpaper.
> Because all configs and utilities stored at dom0.
> Yes, i already has compiled FFmpeg from source on dom0 but static linking 
> libraries  is a pain.
> How can multimedia libraries affect security?
> Dom0 already has build-toolchain for compile utlities from source but 
> unfortunately not all libraries are enough
> 
> Best Regards, john due
> 
> 
> ??, 11 ?? 2019 ??., 14:03:22 UTC+3 
>  Mike Keehan 
> ??:
> >
> > On Sun, 11 Aug 2019 03:47:14 -0700 (PDT) 
> > john due > wrote: 
> >
> > > Hello, Dear Qubes users and devs! 
> > > 
> > > Can you add please FFmpeg libraries and codecs to dom0 repos? 
> > > Because it impossible to add RPMfusion repo to Dom0 and synchronize 
> > > it with dnf/qubes-dom0-update mechanism. 
> > > it required system-base-release 25 dependencies. 
> > > 
> > > Best Regards, john due 
> > > 
> >
> > Why do you need ffmpeg in dom0?  Dom0 is for admin, not for running 
> > applications.  This is to preserve the security of your whole system. 
> >
> > Mike. 
> >
> 

Please don't top post.

I wouldnt want to see this in dom0.
When you add libraries in any qube, you open up vectors of attack. Given
the importance of dom0 in current, I want it to be as stripped as
possible.
You can do this if you want, but Qubes shouldnt endorse it.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190811150221.GD16707%40thirdeyesecurity.org.


Re: [qubes-users] Re: Caching update packages for templates

2019-08-11 Thread unman
On Sun, Aug 11, 2019 at 02:39:19PM +0100, lik...@gmx.de wrote:
> On 8/10/19 2:10 AM, unman wrote:
> >
> > Please don't top post.
> >
> > I use apt-cacher-ng as a caching proxy - set it to listen on 8082 and
> > it's a plugin replacement for tinyproxy.
> > Debian and Ubuntu work out the box - Fedora needs a minor config
> > change.
> > It's very lightweight and you can spin it up as needed.
> > I have salt if you want to try it.
> >
> 
> Hi unman, I'd like to test the salt. I couldn't find it in your git-repo. 
> Could you point me to the location?
> 

https://github.com/unman/notes/tree/master/config/cacher

The conf files are 50_user.conf to set up the bind-dirs, and acng.conf
to configure the cacher. You probably want to cast an eye over those.
Everything else is straight forward.

I think the fedora_mirrors list needs to be checked - if you see a repo
being separately cached in /var/cache/apt-cacher/ng, check the URL and
add it to the mirrors list.

Works fine for Ubuntu and Debian as is.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190811145125.GC16707%40thirdeyesecurity.org.


Re: [qubes-users] Re: Changing the clipboard shortcut in 4.0 doesn't work

2019-08-11 Thread unman
On Sat, Aug 10, 2019 at 10:50:41AM -0700, arthur.summ...@gmail.com wrote:
> Sorry - I don't use Google Groups enough, so I just hit "Post Reply" 
> assuming that it would be smart enough to put the reply in the right place.
> 
> I looked at the XFCE keyboard shortcuts and window manager keyboard 
> shortcuts, and Ctrl-Alt-c/v aren't in use. There might be another place to 
> look, but those are the main ones off the top of my head. However, I'm not 
> sure if this is a window manager issue since the keyboard shortcut is 
> controlled by the Qubes Clipboard program (qui-clipboard).
> 
> I don't know enough about the Qubes internals to trace how it picks up the 
> setting from /etc/qubes/guid.conf (and why it isn't accepting my values 
> after I changed them). I tried doing a recursive grep to find any other 
> places where the default shortcut may be set, but it got a little 
> mind-bending.
> 
> I'm happy to provide more details from my system, though - my fingers just 
> really want to use my custom shortcut because they've been confused ever 
> since I upgraded. ;-)
> 
> On Friday, August 9, 2019 at 7:47:07 PM UTC-5, unman wrote:
> >
> > On Sat, Aug 03, 2019 at 10:39:31AM -0700, arthur...@gmail.com 
> >  wrote: 
> > > Any thoughts, here? My fingers are trained to use "Ctrl-Shift-c" and 
> > > "Ctrl-Shift-v" for copying from the terminal and pasting without 
> > > formatting, and it's getting to be quite bothersome that I can't change 
> > > this shortcut using the instructions in the docs. I'd really like to 
> > figure 
> > > out what's up. 
> > > 
> > > Thanks! 
> > > 
> > > On Thursday, July 25, 2019 at 9:42:32 AM UTC-5, arthur...@gmail.com 
> > wrote: 
> > > > 
> > > > As a follow-up because I see this has been asked at-length both here 
> > an on 
> > > > GitHub: I tried changing this to "Ctrl-Alt-c" and "Ctrl-Alt-v" in 
> > > > /etc/qubes/guid.conf (using that syntax and capitalization EXACTLY). 
> > Is my 
> > > > syntax incorrect? I had this working in 3.2, but it won't work in 4.0. 
> > > > Strange . . . 
> > > > 
> > > > On Wednesday, July 24, 2019 at 7:33:10 PM UTC-5, arthur...@gmail.com 
> > > > wrote: 
> > > >> 
> > > >> I prefer to use a different shortcut for the Qubes clipboard because 
> > > >> Ctrl+Shift+V is an existing shortcut for "paste without formatting" 
> > in most 
> > > >> applications. However, I've tried editing /etc/qubes/guid.conf and 
> > > >> restarting my VMs (I actually restarted my whole system), but no 
> > luck. I 
> > > >> figure something changed now that the clipboard is a standalone 
> > > >> application, but I'm not sure what needs to be modified. 
> > > >> 
> > > >> Thanks! 
> > > >> 
> > > > 
> >
> > Please dont top post. 
> >
> > Making that change works fine for me, but I use KDE. 
> > I wonder if that make a difference? Does Xfce use those key combos 
> > already? 
> >
> 

And again - just check the message and drop to the bottom. A few seconds
for you and easier for everyone else. (I dont envy you using groups web)

Just to check, you *have* uncommented those lines in the conf file?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190811144153.GA16707%40thirdeyesecurity.org.


[qubes-users] Re: Caching update packages for templates

2019-08-11 Thread liked2
On 8/10/19 2:10 AM, unman wrote:
> On Thu, Aug 08, 2019 at 05:33:48AM -0700, drogo wrote:
>> Thanks!  I'll keep an eye on that thread/issue.
>>
>> I gave rustybird's qubes-update-cache a try on my laptop and it seemed to
>> work well. I also came a cross a way to implement squid transparently on my
>> firewall (pfSense), which I'll give a try later on since I've got many
>> systems to update besides qubes and tend to update everything all at once
>>
>> Thanks again!
>>
>> On Wednesday, August 7, 2019 at 11:38:15 PM UTC-4, Andrew David Wong wrote:
>>>
>>> -BEGIN PGP SIGNED MESSAGE-
>>> Hash: SHA512
>>>
>>> On 07/08/2019 7.55 PM, drogo wrote:
 Is there an easy way to enable caching for template update
 packages? It's annoying to have to download hundred of megs over
 and over while updating templates. I see there's already a proxy
 configured and listening on port 8082, so can I just enable caching
 of those packages somewhere in Qubes' networking stream to speed up
 those downloads?

 Thanks.

>>>
>>> Please have a look at this issue:
>>>
>>> https://github.com/QubesOS/qubes-issues/issues/1957
>>>
>>> - --
>>> Andrew David Wong (Axon)
>>> Community Manager, Qubes OS
>>> https://www.qubes-os.org
>>>
>
> Please don't top post.
>
> I use apt-cacher-ng as a caching proxy - set it to listen on 8082 and
> it's a plugin replacement for tinyproxy.
> Debian and Ubuntu work out the box - Fedora needs a minor config
> change.
> It's very lightweight and you can spin it up as needed.
> I have salt if you want to try it.
>

Hi unman, I'd like to test the salt. I couldn't find it in your git-repo. Could 
you point me to the location?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bb25170d-6dc6-344b-285c-cf8c50977403%40gmx.de.


[qubes-users] debian-10-minimal: no IP addresses on interfaces?

2019-08-11 Thread qubes-lists
Hello!

I installed the debian-10-minimal template from the itl-testing repository
and used it for a proxyVM.

When starting the appVM that uses the debian-10-minimal based proxyVM.

The proxyVM gets the usual interfaces eth0 + vif.. but none of these interfaces
have an IP address assigned and are in state DOWN.

This issues does not occur when using the debian-10 (non minimal) version.

Is this a known limitation of the minimal version? 

thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a6c66f59-e132-8404-d58a-5f5bb868cff3%40riseup.net.


Re: [qubes-users] request : add to dom0 FFmpeg libraries and codecs h264/h265/libavcodec/libfdk_aac/libmp3lame/libopus/libvpx

2019-08-11 Thread john due
This is need for MPV and better performance for window managers users 
(dwm/2bm/i3wm and others) If you need something better than primitive 
wallpaper.
Because all configs and utilities stored at dom0.
Yes, i already has compiled FFmpeg from source on dom0 but static linking 
libraries  is a pain.
How can multimedia libraries affect security?
Dom0 already has build-toolchain for compile utlities from source but 
unfortunately not all libraries are enough

Best Regards, john due


воскресенье, 11 августа 2019 г., 14:03:22 UTC+3 пользователь Mike Keehan 
написал:
>
> On Sun, 11 Aug 2019 03:47:14 -0700 (PDT) 
> john due > wrote: 
>
> > Hello, Dear Qubes users and devs! 
> > 
> > Can you add please FFmpeg libraries and codecs to dom0 repos? 
> > Because it impossible to add RPMfusion repo to Dom0 and synchronize 
> > it with dnf/qubes-dom0-update mechanism. 
> > it required system-base-release 25 dependencies. 
> > 
> > Best Regards, john due 
> > 
>
> Why do you need ffmpeg in dom0?  Dom0 is for admin, not for running 
> applications.  This is to preserve the security of your whole system. 
>
> Mike. 
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bacc9692-5bee-44ae-bac0-875cbf922853%40googlegroups.com.


Re: [qubes-users] request : add to dom0 FFmpeg libraries and codecs h264/h265/libavcodec/libfdk_aac/libmp3lame/libopus/libvpx

2019-08-11 Thread Mike Keehan
On Sun, 11 Aug 2019 03:47:14 -0700 (PDT)
john due  wrote:

> Hello, Dear Qubes users and devs!
> 
> Can you add please FFmpeg libraries and codecs to dom0 repos?
> Because it impossible to add RPMfusion repo to Dom0 and synchronize
> it with dnf/qubes-dom0-update mechanism.
> it required system-base-release 25 dependencies.
> 
> Best Regards, john due
> 

Why do you need ffmpeg in dom0?  Dom0 is for admin, not for running
applications.  This is to preserve the security of your whole system.

Mike.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190811120316.37bd89f5.mike%40keehan.net.


[qubes-users] request : add to dom0 FFmpeg libraries and codecs h264/h265/libavcodec/libfdk_aac/libmp3lame/libopus/libvpx

2019-08-11 Thread john due
Hello, Dear Qubes users and devs!

Can you add please FFmpeg libraries and codecs to dom0 repos?
Because it impossible to add RPMfusion repo to Dom0 and synchronize it with 
dnf/qubes-dom0-update mechanism.
it required system-base-release 25 dependencies.

Best Regards, john due

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bf2d1828-9648-4f86-a40a-e5b9643dde64%40googlegroups.com.