[qubes-users] Debian-10 Updates fail via disposable net/firewall

2019-09-04 Thread ronpunz
I have fresh install of Q4.0.2rc1

I've setup disposable vm's for sys-net and sys-firewall. Everything
works well (i can update Fedora and Whonix) via dispVMs. However, Debian
template updates fail because Debian is calling for updates via sys-net
(which obviously cant start because disp-sys-net is running)

Can anyone identify why and where Debian is calling up sys-net?


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1a969447-fd7d-d200-a3d8-265d640f45d4%40riseup.net.


pEpkey.asc
Description: application/pgp-keys


Re: [qubes-users] script to fix qubes-whonix time-sync issue

2019-09-04 Thread donoban
On 9/3/19 9:31 PM, qtpie wrote:
> The only issue I keep having with Qubes-Whonix, is that after
> suspend/resume, Whonix-GW time is out of sync and cant connect to the
> Tor network. According to Whonix the safe option is to simply not
> suspend Whonix.
> 
> https://www.whonix.org/wiki/Post_Install_Advice#Network_Time_Syncing
> 
> However with a laptop running from battery not using suspend is not
> really an option and manually shutting down multiple qubes is annoying.
> To do this automatically I wrote this script, but cant get it working
> yet. Any help is welcome.
> 
> https://github.com/qtpies/qubes-whonix-suspending

Do you want to restart all domains using sys-whonix netvm? Probably
there are better solutions and I think that Whonix already handles this
properly. I used it for years and I only remember problems with this on
Qubes 3.

Check:
https://github.com/QubesOS/qubes-issues/issues/4989
https://github.com/QubesOS/qubes-issues/issues/4939

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cd3b10dc-9245-c349-5637-b55af9b1a8e0%40riseup.net.


Re: [qubes-users] Debian-10 Updates fail via disposable net/firewall

2019-09-04 Thread unman
On Wed, Sep 04, 2019 at 08:12:27AM +, ronpunz wrote:
> I have fresh install of Q4.0.2rc1
> 
> I've setup disposable vm's for sys-net and sys-firewall. Everything
> works well (i can update Fedora and Whonix) via dispVMs. However, Debian
> template updates fail because Debian is calling for updates via sys-net
> (which obviously cant start because disp-sys-net is running)
> 
> Can anyone identify why and where Debian is calling up sys-net?
> 
> 

I'm surprised at this. I wouldnt have expected Fedora templates
to update.
You need to edit the file /etc/qubes-rpc/policy/qubes.UpdatesProxy and
change the target to the qube where you use the proxy.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190904120214.GA3471%40thirdeyesecurity.org.


[qubes-users] Cant connect hard drive to appvms?

2019-09-04 Thread Stumpy
I have a hard drive that i cant seem to connect to any of the appvms yet 
I can see and access it via dom0 (not good i know).

I can attach a usb flash drive to my appvms but not the hard drive?

This is on my laptop and i do not have a sys-usb (didnt give me the 
option when installing qubes (v4.0.2) but if i can connect a flash then 
i cant figure why i cant connect the external hard drive to appvms, esp 
if i can use/see the drive via dom0?


Thoughts?

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9499a1c4-c84a-34b1-8a2b-d16a7da30917%40posteo.net.


Re: [qubes-users] Cant connect hard drive to appvms?

2019-09-04 Thread Stuart Perkins



On Wed, 4 Sep 2019 20:12:26 -0400
Stumpy  wrote:

>I have a hard drive that i cant seem to connect to any of the appvms yet 
>I can see and access it via dom0 (not good i know).
>I can attach a usb flash drive to my appvms but not the hard drive?
>
>This is on my laptop and i do not have a sys-usb (didnt give me the 
>option when installing qubes (v4.0.2) but if i can connect a flash then 
>i cant figure why i cant connect the external hard drive to appvms, esp 
>if i can use/see the drive via dom0?
>
>Thoughts?
>

Without sys-usb, you may need to overtly assign the device the usb controller 
is on to a VM.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190904203815.021d2d33%40gmail.com.


[qubes-users] Re: Cant connect hard drive to appvms?

2019-09-04 Thread brendan . hoar
On Wednesday, September 4, 2019 at 8:12:41 PM UTC-4, Stumpy wrote:
>
> I have a hard drive that i cant seem to connect to any of the appvms yet 
> I can see and access it via dom0 (not good i know). 
> I can attach a usb flash drive to my appvms but not the hard drive? 
>
> This is on my laptop and i do not have a sys-usb (didnt give me the 
> option when installing qubes (v4.0.2) but if i can connect a flash then 
> i cant figure why i cant connect the external hard drive to appvms, esp 
> if i can use/see the drive via dom0?
>

That's odd. Is this a SATA or USB hard drive? 

SATA: On my primary thinkpad, running qubes R4 current-testing (essentially 
at least v4.0.2), while *sda* is not available for attachment to devices 
(as that is the boot disk) all  the other SATA devices are available for 
attaching: sdb, sdc (and, when the eSATAp and/or dock is attached, sdd and 
sde) to VMs. Any valid partitions as well. 

USB: I generally have not attached USB drives (utilizing the USB IP support 
via `qvm-usb` aka `qvm-device usb`) to VMs as I find it slow and sometimes 
buggy.

Instead I attach the PCI device encompassing the USB controller utilizing 
`qvm-device pci` with an HVM, which may be a luxury that other users don't 
always have (this laptop has three USB PCI devices, one of which is via 
expresscard).

Brendan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c7b7be8f-3e99-4602-8f9b-8d0bacfeed39%40googlegroups.com.