Re: [qubes-users] Asus Keyboard Backlight Not Working

2019-08-15 Thread Church870

   
   1. Yea, the other LED controls are in /sys/class/leds/, but 
   asus::kbd_backlight is missing. I did a bunch of find commands for any 
   config file or folder that had backlight, keyboard, kbd, asus, or anything 
   similar and didn't find it either. I tried to create the folder, but wasn't 
   able to. I might just be out of luck unless there's some package somewhere 
   I can download that creates the directory.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/edd5ec95-c8a5-498e-a426-dcae061c26d9%40googlegroups.com.


Re: [qubes-users] Problem with NextCloud-Client App-VM (unable to login on 2nd boot)

2019-08-15 Thread *Null* **
oh I am dumb, perhaps try logging in with your template vm, do the key 
exchange, and then shut it down. It may stick into the appvm?

On Thursday, August 15, 2019 at 11:15:46 AM UTC-7, 799 wrote:
>
> Hello,
>
> *Null* ** > schrieb am Do., 15. Aug. 
> 2019, 19:12:
>
>> OCC commands:
>>
>>
>> https://docs.nextcloud.com/server/16/admin_manual/configuration_server/occ_command.html#user-commands-label
>>  (...)
>
>
> Now I understand what you've meant, regarding the movement of directories. 
> This was related to running a Nextcloud Server within Qubes OS.
> In my case I am connected from an AppVM (Qubes OS) to an external 
> Nextcloud-Server (not running Qubes OS).
>
> As all Client-settings _should_ be safe in an AppVM I don't understand why 
> I need to login after the first boot of the AppVM and why even after login 
> in, the synchronization is not working again.
>
> [799]
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/899c309f-be2a-47c9-a1e9-b83061518976%40googlegroups.com.


Re: [qubes-users] best and less expensive Lenovo think pad

2019-08-15 Thread 27casanova27
Hi 799, when I tride to instal I run in to mesage saying that Qubes wouldent 
funktion becous hardware whas mising.

The I proceeded withe installation. And later during setup I got this message: 

sys firewall failed

And then:

Start faild... Could not find capabilites for arch=x86_64  

The later is refering to missing hardware i gues.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/578ab456-4ff3-40aa-9d2d-7eb92b57135e%40googlegroups.com.


Re: [qubes-users] Problem with NextCloud-Client App-VM (unable to login on 2nd boot)

2019-08-15 Thread 799
Hello,

*Null* **  schrieb am Do., 15. Aug. 2019, 19:12:

> OCC commands:
>
>
> https://docs.nextcloud.com/server/16/admin_manual/configuration_server/occ_command.html#user-commands-label
>  (...)


Now I understand what you've meant, regarding the movement of directories.
This was related to running a Nextcloud Server within Qubes OS.
In my case I am connected from an AppVM (Qubes OS) to an external
Nextcloud-Server (not running Qubes OS).

As all Client-settings _should_ be safe in an AppVM I don't understand why
I need to login after the first boot of the AppVM and why even after login
in, the synchronization is not working again.

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2s1Gjyb2D7qEpxFnNhse1pyYRgiat94%3Dwr67ZuDvD%2BSzw%40mail.gmail.com.


Re: [qubes-users] How to change date and time format in Thunderbird

2019-08-15 Thread 799
 schrieb am Do., 15. Aug. 2019, 18:25:

> I've installed thunderbird today and all is fine except that dates are
> shown in US format: MM/DD/YY. How can I change this to UK format: DD/MM/YY?
>
> I googled and found that thunderbird gets its setting from the OS.
>

Maybe this plugin helps:
https://addons.thunderbird.net/nl/thunderbird/addon/quick-locale-switcher/

?

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2tDNOmkkSftg_gqJEJ0uueZ0SQcX3KvcUM8P%3DKpC%2B_t-A%40mail.gmail.com.


Re: [qubes-users] Problem with NextCloud-Client App-VM (unable to login on 2nd boot)

2019-08-15 Thread *Null* **
Oh yeah /home is saved too... I thought just /rw. It is advised on the 
nextcloud hardening guide to not keep it in the default location and on my 
setup I had to move it anyways because of how the machine is set up.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/274990d8-a2fa-4854-bebb-55c18557fb9d%40googlegroups.com.


Re: [qubes-users] Problem with NextCloud-Client App-VM (unable to login on 2nd boot)

2019-08-15 Thread *Null* **
OCC commands:

https://docs.nextcloud.com/server/16/admin_manual/configuration_server/occ_command.html#user-commands-label

In qubes you have to specify the file path to occ(in the docs it lets you call 
occ by itself).
So for a typical fedora/apache/nc install in the template you would enter:

Sudo -u httpd(or apache) php /usr/share/nextcloud/occ [enter commands]

OCC is your main way of administering nextcloud in qubes so that link will help.

Qubes appvms do not keep anything outside of /rw so you would need to migrate 
the storage folder into /rw 
(https://help.nextcloud.com/t/howto-change-move-data-directory-after-installation/17170)

Or you can declare certian folders or files to be persistent. 
https://www.qubes-os.org/doc/bind-dirs/

This is done in the appvm. Dont designate all of nextcloud to be persistent or 
if someone hacks the nextcloud appvm its there forever. It is bad enough you 
are doing it to the file folder.

I assume you installed nextcloud in the template and set up an admin account in 
the process. So when you fire up the appvm anything you do in there will be 
erased until you add your users via occ in the template and preserve the file 
folder.

Once you do all that it will work fine from your home network, exposing it to 
the world is a bit of a pain and introduces an attack vector obviously.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b7f8b6a3-1961-46a4-a095-5e987188f93f%40googlegroups.com.


Re: [qubes-users] Data recovery - data loss during cut and paste

2019-08-15 Thread brendan . hoar
On Monday, August 12, 2019 at 12:25:02 PM UTC-4, Chris Laprise wrote:
>
> On 8/12/19 10:50 AM, ger...@riseup.net  wrote: 
> > Chris Laprise: 
> >> On 8/12/19 9:37 AM, ger...@riseup.net  wrote: 
> >>> Is there a possibility, to recover data after moving it with cut and 
> >>> paste? 
> >>> 
> >>> Description what I did: 
> >>> I have a VM based on a Fedora 28 template (Qubes 4.0) and attached a 
> USB 
> >>> 3.0 SD reader with a SD card to that VM. 
> >>> I moved my complete folder with important offline e-mail data (appr. 
> >>> 500MB) from the VM to the SD card with cut and paste. 
> >>> The connection to the SD card was interrupted during moving, so the 
> data 
> >>> on the VM is lost and there is only a small part of it on the SD card 
> >>> now. 
> >>> There is no backup of that data to restore. 
> >>> I know it was stupid, not to use copy and paste and not to make a 
> backup 
> >>> :-( 
> >>> 
> >>> I didn't make a reboot of the VM and I didn't copy data on that VM 
> yet. 
> >>> Can the deleted data be restored somehow? 
> >>> 
> >>> Many thanks for each kind of help or hint! 
> >>> 
> >> 
> >> There is a chance you can recover the data. 
> >> 
> >> You said "I didn't make a reboot of the VM", and if your system is 
> >> still running and the VM has not been shut down since the incident, 
> >> you can simply clone the VM while it is still running. This will 
> >> create a clone VM in the same state (with the same data!) _before_ you 
> >> started the source VM. 
> >> 
> >> A VM's prior state (pre-startup) isn't removed from the system until 
> >> you shut down the VM. 
> >> 
> > 
> > It worked! Thanks a lot for the answer and thanks a lot for the Qubes 
> > team to develop such a safe working system. All my data could be 
> > restored without loss. 
> > 
>
> Really glad to hear it... kudos to people who ask for help in an 
> emergency and don't panic! :) 
>

Hear, hear! 

Nice one, Chris.

This is a great candidate for something to add to the new users guide for 
the Google Season of Docs effort!

Brendan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/864a80cf-02b9-49b7-9198-78be115fb5d2%40googlegroups.com.


[qubes-users] How to change date and time format in Thunderbird

2019-08-15 Thread galthop
I've installed thunderbird today and all is fine except that dates are shown in 
US format: MM/DD/YY. How can I change this to UK format: DD/MM/YY?

I googled and found that thunderbird gets its setting from the OS.

Thank you.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/88161e1a-c2e9-40b8-8496-3f975c3c2cef%40googlegroups.com.


Re: [qubes-users] Problem with NextCloud-Client App-VM (unable to login on 2nd boot)

2019-08-15 Thread 799
Hello,

*Null* **  schrieb am Do., 15. Aug. 2019, 14:46:

> Sorry my initial reply was the wrong answer.
>
> To set up a login that is persistant you need to do it in the template
> with the occ commands. Any user made in the appvm will not survive a reboot.
>

What exactly is meant by "occ commands"?

The nextcloud storage area needs to be made persistant using the
> qubes-bind-dirs directory in the appvm, the qubes docs cover that.
>
> I am able to stay logged in with the nextcloud app and sync via webdav
> between reboots in this manner.
>

Thank you for the feedback, I don't understand why I need to make changes
regarding the storage area.
As far as I know the Nextcloud data is stored in /home/user which should
survive the a reboot as long as it is a normal AppVM.

Are you also trying to sync other appvms?


No I have just build a template (as describes) and build an AppVM from this
template.

[799]

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CAJ3yz2tg-YoCHkmkwi9gW0y1UJ819%2BwHFbXNLAh2_cODLBCOZg%40mail.gmail.com.


Re: [qubes-users] Asus Keyboard Backlight Not Working

2019-08-15 Thread 'awokd' via qubes-users

adiaz1...@gmail.com:

I just bought an Asus Zenbook 3 and was able to successfully install Qubes.
Really enjoying it so far. I'm having trouble getting the keyboard
backlight to work.  I tried xset commands, configurations in xfce, and even
tried to turn it on manually via the asus::kbd_backlight configuration
folder. Unfortunately, that folder does not exist.  Does anyone have any
ideas what else I can try?

I'd like to get the FN+F3 and FN+F4 shortcuts to work, but I"ll settle for
jsut turning the LEDs on. I am often working in dark rooms and if I can't
figure it out I'll probably end up switching distributions, which I really
don't want to do. I really like Qubes so far.

You might try to poke around in /sys/class/ and see if the keyboard 
backlight control is surfaced somewhere in there, unless that is what 
you mean by asus::kbd_backlight folder.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b0a7d1e2-a17d-8cea-736b-da66e20acd49%40danwin1210.me.


Re: [qubes-users] USB keyboard won't work in app VM in spite of being attached and recognised.

2019-08-15 Thread 'awokd' via qubes-users

unman:

On Tue, Aug 13, 2019 at 07:31:50PM +0100, Eternal Questioner wrote:

Hi All,

I was wondering whether anyone might have had a similar issue.

Background:


- sys-usb sys VM is installed and functional.
- Hewlett Packard keyboard can be seen in the results of qvm-usb.
- Keyboard has been attached to the app VM with qvm-usb.
- Keyboard can be seen as device 002 on bus 002 in the app VM:

[user@testvm ~]$ lsusb
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 002 Device 002: ID 03f0:2b4a Hewlett-Packard
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
[user@testvm ~]$

Typing on the keyboard produces no output though.  The keyboard works in
other computers.  I tried changing the virt_type from PVM to HVM with no
change in results.

All constructive ideas welcome.


Thanks.

EQ



Dont have this problem.
Works as expected with a few  keyboards (not HP)
What template are you using in testvm and in sys-usb?

https://www.qubes-os.org/doc/usb-qubes/#enable-a-usb-keyboard-for-login 
may also be instructive.


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a617ea6b-2fe2-c506-382f-27a6660aab2d%40danwin1210.me.


Re: [qubes-users] best and less expensive Lenovo think pad

2019-08-15 Thread brendan . hoar
On Thursday, August 15, 2019 at 8:24:58 AM UTC-4, unman wrote:
>
> On Wed, Aug 14, 2019 at 04:26:18PM -0700, brend...@gmail.com  
> wrote: 
> > 1. That first USB device, which does not state where it can be used is 
> > either: 
> > a) The USB 2.0 interface "available" via the expresscard interface (some 
> > "expresscard" devices are really just USB 2.0 devices). 
> > b) The USB 2.0 interface available via the docking connector. 
>
> It's the dock. 
> I use 3 disposable USBVMs, each allocated 1 controller. 
>

Thanks unman. Thinking about it...that does make the most sense as some of 
the compatible docks can have quite a few USB 2.0 ports (presumably 
implemented as a hub) on them, so it make the most sense to have that 
controller separate.

I won't guarantee this, but I suspect that the "alternate" interface (USB 
2.0) in the expresscard slot is probably attached to the *primary* USB 2.0 
controller on the Thinkpads then.

Therefore the best approach in *most* cases where the user wants either 
best combined throughput or USB controller assignment flexibility is to 
utilize a 1-lane PCIe 1.0-based expresscard (e.g. with a one-or-two port 
USB 3.0 controller) instead of a USB 2.0-based expresscard.

Brendan

PS - The one caveat I will note with the expresscard interface is that it 
is an external PCIe interface, and may provide direct DMA into memory, 
similar to Firewire. You can see there are commercial products that utilize 
the expresscard interface here for memory forensics on running but locked 
machines: 
  https://www.forensicswiki.org/wiki/Tools:Memory_Imaging

I would be curious to see recent experiments showing how well Xen HVM IOMMU 
enforcement works to limit the scope of attacks using Expresscard, which 
Qubes + IOMMU *should* protect against. I just don't have the skills to 
create one or the $7800 it costs to purchase one of these devices (nor 
really the time) to do some testing...

For those overly concerned, they may want to investigate other preventative 
methods (e.g. Does BIOS disabling of the expresscard interface have a 
security impact? Are there physical modifications that would prevent usage 
of acquisition devices? Are there other software mitigation (power-off on 
attach, etc.))

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be63f72c-1495-484c-ab32-ed2b82ceb003%40googlegroups.com.


[qubes-users] How to upgrade fedora versions, but exclude certian apps

2019-08-15 Thread *Null* **
I upgraded a fedora minimal based template using the qubes docs guide but one 
program i was using gor downgraded in the process. Manually upgrading it is a 
huge pain. 

Is there an option to exclude a certian app from the process?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e64f3e12-8746-4963-8ee3-a071398d9db6%40googlegroups.com.


[qubes-users] Problem with NextCloud-Client App-VM (unable to login on 2nd boot)

2019-08-15 Thread *Null* **
Sorry my initial reply was the wrong answer.

To set up a login that is persistant you need to do it in the template with the 
occ commands. Any user made in the appvm will not survive a reboot.

The nextcloud storage area needs to be made persistant using the 
qubes-bind-dirs directory in the appvm, the qubes docs cover that.

I am able to stay logged in with the nextcloud app and sync via webdav between 
reboots in this manner.

Are you also trying to sync other appvms?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5787f646-e605-453e-9522-b4205b834377%40googlegroups.com.


[qubes-users] Problem with NextCloud-Client App-VM (unable to login on 2nd boot)

2019-08-15 Thread *Null* **
Youve got to set up your user names in the template. So fire up httpd in your 
template and use the occ commands to add users. Its inconvienent, but the appvm 
non persistance is the secuity feature that is also preventing anyone from 
embedding anything too nasty in your system.

I have tried to find where specifically user data is stored if you really 
wanted to allow users to add themselves while the server runs and between 
reboots, but I recall not finding out much. This has been asked about on the NC 
forums as well.

Youve also got to set up the storage area to be persistant between boots. This 
is easier to make non persistant. Follow the NC hardening guide to move the 
folder somewhere else, and then use qubes-bind-dirs to make that folder 
persistant. You would need to do the move in the template, but set up the 
bind-dirs in the app.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d1f13c0d-d849-4d65-b453-4d04d969962b%40googlegroups.com.


Re: [qubes-users] best and less expensive Lenovo think pad

2019-08-15 Thread unman
On Wed, Aug 14, 2019 at 04:26:18PM -0700, brendan.h...@gmail.com wrote:
> 1. That first USB device, which does not state where it can be used is 
> either:
> a) The USB 2.0 interface "available" via the expresscard interface (some 
> "expresscard" devices are really just USB 2.0 devices).
> b) The USB 2.0 interface available via the docking connector.
> 
> ...some experimentation should lead to clarification.
> 

It's the dock.
I use 3 disposable USBVMs, each allocated 1 controller.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190815122454.GA905%40thirdeyesecurity.org.


[qubes-users]

2019-08-15 Thread Gerhold , Jörg IHKDRE


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bf84e58a114341b985b493663ba324e6%40dresden.ihk.de.