Re: [qubes-users] Installer crash: IO-APIC + timer doesn't work (Dell XPS 7390)
Correction: according to the boot logs, Xen is still using HPET despite hpet=disable. My Googling/DuckDuckGoing skills have failed me. Any advice for how to disable HPET? I couldn't find it anywhere in the BIOS settings. Also, maybe this is relevant, or maybe it's why you brought up HPET in the first place: https://www.phoronix.com/scan.php?page=news_item=Linux-Disabling-HPET-CoffeeLake Thanks! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0e3423a3-c922-4a29-81de-d82fe720e137%40googlegroups.com.
Re: [qubes-users] Re: HCL - Dell Inspiron 15 5000 (5575) AMD Ryzen 5 2500U w/ Vega 8 Graphics
December 23, 2019 7:31 AM, "qubes123" wrote: > For many AMD systems (eg. Trinity/Richland) CPUID changes after suspend (some > of the high bits), > resulting in Xen Panic (see xen/arch/x86/acpi/power.c). So, more > investigation would be needed to > check why the CPUID bits are changing after resume and whether it had any > security implications or > not. > For the time being - if you accept the possible security implications - you > can disable that check > eg. by commenting the panic line out after "recheck_cpu_features" in the > above mentioned power.c > file, compile xen for dom0 via qubes builder and test it in your system. I decided to give this a try, but I don't really know how to use the build system. I did `make vmm-xen`, modified the file chroot-dom0-fc29/home/user/rpmbuild/BUILD/xen-4.12.1/xen/arch/x86/acpi/power.c, but it appears after running `make vmm-xen` again my changes have been reverted. After it finishes the line is no longer commented out. Do I have to commit the change, or generate a patch file, or something like that? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/bc81395ceb7d2abdc48d96964f9ddc05%40disroot.org.
Re: [qubes-users] Can containers be saved and copied to another qubes install?
December 28, 2019 7:13 PM, tobozoc...@gmail.com wrote: > Hi, > > Is it possible to take a container from Qubes that has some app installed and > copy it to another > system? > > Reason why this would be interesting, bc if containers can run windows apps > (thinking about > hardware development, microcontroller and FPGA connectivity through USB), > > and windows tends to crash over time, so it needs to be reinstalled, with > every program in it... > > It would make life easier if it is possible to use the containers as > containers on freight ships, > unload and load it on another ship (os), so only the platform has to be > changed underneath. > (while Qubes would be the harbor in this metaphor) > Is that possible? I would try it myself, but cannot run qubes in virtual > machine and messing up my > pc is not an attractive option. > > Appreciate your answers! Qubes has built-in backup and restore for VMs, so yes. Just copy the backup file to another Qubes machine and restore it. However I don't know what you mean by "so only the platform has to be changed underneath." Qubes VMs aren't really intended to be portable to other virtualization platforms (like KVM or VirtualBox), if that's what your asking. Not sure how template VMs work with Windows guests, but with Linux guests you can keep apps separate from user data, so that you don't have to reinstall apps when you create or delete VMs. Also, you can install Qubes on a USB flash drive if you just want to try it out. https://www.qubes-os.org/doc/backup-restore/ https://www.qubes-os.org/doc/windows-template-customization/ https://www.qubes-os.org/doc/installation-guide/#installation-destination -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/4b3cc7c3297e3baeaad9abe034cd9859%40disroot.org.
[qubes-users] Notebook with Nvidia Quadro graphics card
Thanks for the reply. Do you know when the option to only use integrated graphics was removed? The models i’m looking at are 4th gen i7 CPU’s with Quadro K1100M/1200M. Unfortunately, a lot of business laptops have changed to prefer sleek design over performance, and use the slower U versions of Intel CPU’s. The ones that do have a proper CPU usually also have a discrete Nvidia or AMD graphics card. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/fe0900a2-27dc-4aa4-9e05-25dcbaaa1e9f%40googlegroups.com.
Re: [qubes-users] No connection to qubes-guid
On 12/28/19 8:15 PM, David Hobach wrote: Dear all, I recently had a few boots where Qubes OS didn't start any /usr/bin/qubes-guid processes. All VMs did start as usual, but the GUI wasn't available. The logs didn't show anything (journalctl & VM log) except for the guid log which said: "Failed to connect to gui-agent". The full log entry for reference: Icon size: 128x128 libvchan_is_eof Icon size: 128x128 domain dead Failed to connect to gui-agent It was back OK after 2 reboots. qvm-start-gui was running as far as I recall. Did anyone experience the same issue? How can I restart the guid? Best Regards David -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2a28001c-25a4-a18f-c6ed-008e4c900cdd%40hackingthe.net. smime.p7s Description: S/MIME Cryptographic Signature
[qubes-users] Notebook with Nvidia Quadro graphics card
Older laptops w/ Optimus allowed choosing Integrated-only video (vs hybrid or vs Discrete). I set up my W520 w/ the Integrated intel cpu and it has been a workhorse. Contemporary laptops w/ Optimus only allow Hybrid or Discrete. No way to choose just Integrated. Qubes 4.0 and lower don’t handle this very well w/o a lot of boot parameter fiddling and custom X config. However... I just tested a test build (20191227) of R4.1 using Fedora 31 dom0 and 5.4 kernel on a Thinkpad P52 (2018 model w/ Optimus on a Quadra P3200). Other than a bit of blind navigation during the first boot part of the install (and some strategic Bios settings such as setting discrete graphics), it installed ok. Changing screen resolution results in a black screen (fixed via ctrl-alt-f2 then ctrl-alt-f1). Probably would work much better after installing nvidia drivers via rpmfusion-nonfree. But not unusable. B -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f28cb7dd-b46c-47e1-8952-4d71ea921258%40googlegroups.com.
[qubes-users] No connection to qubes-guid
Dear all, I recently had a few boots where Qubes OS didn't start any /usr/bin/qubes-guid processes. All VMs did start as usual, but the GUI wasn't available. The logs didn't show anything (journalctl & VM log) except for the guid log which said: "Failed to connect to gui-agent". Did anyone experience the same issue? How can I restart the guid? Best Regards David -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9b9b15fe-7123-9abc-2f34-49acb30c9e21%40hackingthe.net. smime.p7s Description: S/MIME Cryptographic Signature
[qubes-users] Can containers be saved and copied to another qubes install?
Hi, Is it possible to take a container from Qubes that has some app installed and copy it to another system? Reason why this would be interesting, bc if containers can run windows apps (thinking about hardware development, microcontroller and FPGA connectivity through USB), and windows tends to crash over time, so it needs to be reinstalled, with every program in it... It would make life easier if it is possible to use the containers as containers on freight ships, unload and load it on another ship (os), so only the platform has to be changed underneath. (while Qubes would be the harbor in this metaphor) Is that possible? I would try it myself, but cannot run qubes in virtual machine and messing up my pc is not an attractive option. Appreciate your answers! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/12290d1f-ae41-42fc-9a9f-88a768a2c612%40googlegroups.com.
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
-- Securely sent with Tutanota. Get your own encrypted, ad-free mailbox: https://tutanota.com Dec 28, 2019, 19:31 by claud...@disroot.org: > December 28, 2019 6:02 PM, mas...@tuta.io wrote: > >> my USB controller is attached to nothing, but needed for Yubikey login. >> >>> I lost my tty2-credentials (the username), so I'm locked out of the system. >>> BIOS changes don't help. >>> Is there any way to "free" USB during boot? Or get rid of the tty login >>> credentials? >>> >>> not sure what "tty login credentials" means. >>> but you can always boot some random live-linux (like "fedora >>> workstation"), open the qubes luks device and mount the dom0 >>> root and check/change whatever needs fixing there. >>> >>> if you are just missing your dom0 username (huh?), getting it >>> through liveboot is probably easiest. >>> you can also change the boot config to remove all mentions >>> of hide-all-usb. (check a guide on how to configure a qubes >>> for usb-keyboard usage, basicly same thing) >>> >>> I think he means he uses his yubikey as an emulated keyboard to type his >>> disk password, and >>> probably enabled a USB Qube and now the yubikey can't type in early >>> userspace. >>> >>> So yeah, you'll have to boot into the installer and enter rescue mode, or >>> boot into some other live >>> linux distro, and disable the USB Qube. Follow these instructions for >>> removing your USB Qube: >>> https://www.qubes-os.org/doc/usb-qubes/#removing-a-usb-qube >>> >>> Note, if you're using Grub, all you have to do is press 'e' when you're at >>> the boot loader, and >>> remove rd.qubes.hide_all_usb from the kernel command line. Then you should >>> be able to login, and >>> remove that same option from /etc/default/grub >>> Thanks! Well, I can boot into nothing because my USB connection is gone. I know my dom0 username but it doesnt work, and therefore the Yubikey authentication at login neither. So I thought there could be a trick reattaching the USB controller to sys-usb during early boot. If I had access to tty2 there would be no big problem. I would delete the Yubikey pam.d entry for login. Best, mastor >>> >>> (when replying please use reply-all to make sure a copy goes to the list >>> and not just to me) >>> >> >> Sorry, this is a mess on a/my mobile phone. >> >>> Ah, I see. So you're able to type in your disk passphrase and get to the >>> user login screen? Either >>> lightdm or a TTY, I'm assuming? And I'm assuming you're able to switch to >>> TTY2, but you can't login >>> to it? >>> >> >> Yes, lightdm. >> >>> The username shouldn't have anything to do with the yubikey or USB at all. >>> What do you mean the >>> dom0 username doesn't work? I thought the problem was that you can't sign >>> in because the yubikey >>> isn't working in Qubes anymore due to enabling a USB Qube. >>> >> >> Both. No tty login, no Yubikey, because the controller is not attached to >> the USB qube. >> >>> Also, did you disable password authentication after you set up the yubikey? >>> >> >> I use this, and it usually worked fine for years: >> >> https://old.mig5.net/content/yubikey-2fa-qubes-redux-adding-backup-key.html >> >>> And what do you mean your USB connection is gone? Unless there's something >>> physically wrong with >>> it, you should be able to boot from a USB drive regardless of whether a USB >>> Qube is enabled or not. >>> Have you tried booting into the installer from USB (the same way as when >>> you first installed >>> Qubes)? >>> >> >> Hm, no, no USB boot option in Bios, no way to boot from USB. I tried >> everything, I think. >> >> Thanks for your patience! >> > > Thanks for the link. That explains a lot. > > I don't know anything about this setup, so I don't know if there's a failsafe > for this type of situation, such as when sys-usb won't start or it > malfunctions. > > Something you could try: when qubes is first starting, *before* you get to > the disk password prompt, press f12 to switch into text mode. You should see > console output and a text-based disk password prompt. From there, see if you > can do anything: switch TTYs, press Ctrl-C, type the password wrong three > times, or whatever you can think of. You might be able to get an early rescue > shell. > > Also here are some other threads about Yubikey on Qubes. See if any of them > look like the same problem you're having. > https://www.mail-archive.com/search?q=+Yubikey=qubes-users%40googlegroups.com > > Also, how did you install Qubes in the first place if you can't boot from > USB? If you booted from a CD, then do that again. If you did the installation > on a different machine and then physically installed the disk, do the > reverse. Basically, do whatever you did to install Qubes, but instead of > installing, use the rescue option. > Thanks again! I was able to boot from USB yesterday ... -- You received this message because you are subscribed to
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
December 28, 2019 6:02 PM, mas...@tuta.io wrote: > my USB controller is attached to nothing, but needed for Yubikey login. > >> I lost my tty2-credentials (the username), so I'm locked out of the system. >> BIOS changes don't help. >> Is there any way to "free" USB during boot? Or get rid of the tty login >> credentials? >> >> not sure what "tty login credentials" means. >> but you can always boot some random live-linux (like "fedora >> workstation"), open the qubes luks device and mount the dom0 >> root and check/change whatever needs fixing there. >> >> if you are just missing your dom0 username (huh?), getting it >> through liveboot is probably easiest. >> you can also change the boot config to remove all mentions >> of hide-all-usb. (check a guide on how to configure a qubes >> for usb-keyboard usage, basicly same thing) >> >> I think he means he uses his yubikey as an emulated keyboard to type his >> disk password, and >> probably enabled a USB Qube and now the yubikey can't type in early >> userspace. >> >> So yeah, you'll have to boot into the installer and enter rescue mode, or >> boot into some other live >> linux distro, and disable the USB Qube. Follow these instructions for >> removing your USB Qube: >> https://www.qubes-os.org/doc/usb-qubes/#removing-a-usb-qube >> >> Note, if you're using Grub, all you have to do is press 'e' when you're at >> the boot loader, and >> remove rd.qubes.hide_all_usb from the kernel command line. Then you should >> be able to login, and >> remove that same option from /etc/default/grub >> >>> Thanks! Well, I can boot into nothing because my USB connection is gone. >>> >>> I know my dom0 username but it doesnt work, and therefore the Yubikey >>> authentication at login >>> neither. >>> >>> So I thought there could be a trick reattaching the USB controller to >>> sys-usb during early boot. >>> >>> If I had access to tty2 there would be no big problem. I would delete the >>> Yubikey pam.d entry for >>> login. >>> Best, mastor >> >> (when replying please use reply-all to make sure a copy goes to the list and >> not just to me) > > Sorry, this is a mess on a/my mobile phone. > >> Ah, I see. So you're able to type in your disk passphrase and get to the >> user login screen? Either >> lightdm or a TTY, I'm assuming? And I'm assuming you're able to switch to >> TTY2, but you can't login >> to it? > > Yes, lightdm. > >> The username shouldn't have anything to do with the yubikey or USB at all. >> What do you mean the >> dom0 username doesn't work? I thought the problem was that you can't sign in >> because the yubikey >> isn't working in Qubes anymore due to enabling a USB Qube. > > Both. No tty login, no Yubikey, because the controller is not attached to the > USB qube. > >> Also, did you disable password authentication after you set up the yubikey? > > I use this, and it usually worked fine for years: > > https://old.mig5.net/content/yubikey-2fa-qubes-redux-adding-backup-key.html > >> And what do you mean your USB connection is gone? Unless there's something >> physically wrong with >> it, you should be able to boot from a USB drive regardless of whether a USB >> Qube is enabled or not. >> Have you tried booting into the installer from USB (the same way as when you >> first installed >> Qubes)? > > Hm, no, no USB boot option in Bios, no way to boot from USB. I tried > everything, I think. > > Thanks for your patience! Thanks for the link. That explains a lot. I don't know anything about this setup, so I don't know if there's a failsafe for this type of situation, such as when sys-usb won't start or it malfunctions. Something you could try: when qubes is first starting, *before* you get to the disk password prompt, press f12 to switch into text mode. You should see console output and a text-based disk password prompt. From there, see if you can do anything: switch TTYs, press Ctrl-C, type the password wrong three times, or whatever you can think of. You might be able to get an early rescue shell. Also here are some other threads about Yubikey on Qubes. See if any of them look like the same problem you're having. https://www.mail-archive.com/search?q=+Yubikey=qubes-users%40googlegroups.com Also, how did you install Qubes in the first place if you can't boot from USB? If you booted from a CD, then do that again. If you did the installation on a different machine and then physically installed the disk, do the reverse. Basically, do whatever you did to install Qubes, but instead of installing, use the rescue option. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ffe4b16fea5dbb572e3ef027698322f6%40disroot.org.
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
On Sat, Dec 28, 2019 at 07:02:33PM +0100, mas...@tuta.io wrote: > Hm, no, no USB boot option in Bios, no way to boot from USB. I tried > everything, I think. how did you install qubes if you can not boot from usb? just boot the qubes installer the same way you did for installation, then use it as a rescue system. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20191228181943.GI17393%40priv-mua.
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
my USB controller is attached to nothing, but needed for Yubikey login. >>> I lost my tty2-credentials (the username), so I'm locked out of the system. >>> BIOS changes don't help. >>> Is there any way to "free" USB during boot? Or get rid of the tty login >>> credentials? >>> not sure what "tty login credentials" means. but you can always boot some random live-linux (like "fedora workstation"), open the qubes luks device and mount the dom0 root and check/change whatever needs fixing there. if you are just missing your dom0 username (huh?), getting it through liveboot is probably easiest. you can also change the boot config to remove all mentions of hide-all-usb. (check a guide on how to configure a qubes for usb-keyboard usage, basicly same thing) >>> I think he means he uses his yubikey as an emulated keyboard to type his >>> disk password, and >>> probably enabled a USB Qube and now the yubikey can't type in early >>> userspace. >>> >>> So yeah, you'll have to boot into the installer and enter rescue mode, or >>> boot into some other live >>> linux distro, and disable the USB Qube. Follow these instructions for >>> removing your USB Qube: >>> https://www.qubes-os.org/doc/usb-qubes/#removing-a-usb-qube >>> >>> Note, if you're using Grub, all you have to do is press 'e' when you're at >>> the boot loader, and >>> remove rd.qubes.hide_all_usb from the kernel command line. Then you should >>> be able to login, and >>> remove that same option from /etc/default/grub >>> >> Thanks! Well, I can boot into nothing because my USB connection is gone. >> >> I know my dom0 username but it doesnt work, and therefore the Yubikey >> authentication at login >> neither. >> >> So I thought there could be a trick reattaching the USB controller to >> sys-usb during early boot. >> >> If I had access to tty2 there would be no big problem. I would delete the >> Yubikey pam.d entry for >> login. >> Best, mastor >> > (when replying please use reply-all to make sure a copy goes to the list and > not just to me) > Sorry, this is a mess on a/my mobile phone. > Ah, I see. So you're able to type in your disk passphrase and get to the user > login screen? Either lightdm or a TTY, I'm assuming? And I'm assuming you're > able to switch to TTY2, but you can't login to it? > Yes, lightdm. > The username shouldn't have anything to do with the yubikey or USB at all. > What do you mean the dom0 username doesn't work? I thought the problem was > that you can't sign in because the yubikey isn't working in Qubes anymore due > to enabling a USB Qube. > Both. No tty login, no Yubikey, because the controller is not attached to the USB qube. > Also, did you disable password authentication after you set up the yubikey? > I use this, and it usually worked fine for years: https://old.mig5.net/content/yubikey-2fa-qubes-redux-adding-backup-key.html > And what do you mean your USB connection is gone? Unless there's something > physically wrong with it, you should be able to boot from a USB drive > regardless of whether a USB Qube is enabled or not. Have you tried booting > into the installer from USB (the same way as when you first installed Qubes)? > Hm, no, no USB boot option in Bios, no way to boot from USB. I tried everything, I think. Thanks for your patience! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/LxCf84_--3-2%40tuta.io.
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
December 28, 2019 5:20 PM, mas...@tuta.io wrote: > Dec 28, 2019, 17:42 by claud...@disroot.org: > >> December 28, 2019 4:31 PM, dhorf-hfref.4a288...@hashmail.org wrote: >> >>> On Sat, Dec 28, 2019 at 08:00:46AM -0800, mastor wrote: >> >> my USB controller is attached to nothing, but needed for Yubikey login. >> I lost my tty2-credentials (the username), so I'm locked out of the system. >> BIOS changes don't help. >> Is there any way to "free" USB during boot? Or get rid of the tty login >> credentials? >> >>> not sure what "tty login credentials" means. >>> but you can always boot some random live-linux (like "fedora >>> workstation"), open the qubes luks device and mount the dom0 >>> root and check/change whatever needs fixing there. >>> >>> if you are just missing your dom0 username (huh?), getting it >>> through liveboot is probably easiest. >>> you can also change the boot config to remove all mentions >>> of hide-all-usb. (check a guide on how to configure a qubes >>> for usb-keyboard usage, basicly same thing) >> >> I think he means he uses his yubikey as an emulated keyboard to type his >> disk password, and >> probably enabled a USB Qube and now the yubikey can't type in early >> userspace. >> >> So yeah, you'll have to boot into the installer and enter rescue mode, or >> boot into some other live >> linux distro, and disable the USB Qube. Follow these instructions for >> removing your USB Qube: >> https://www.qubes-os.org/doc/usb-qubes/#removing-a-usb-qube >> >> Note, if you're using Grub, all you have to do is press 'e' when you're at >> the boot loader, and >> remove rd.qubes.hide_all_usb from the kernel command line. Then you should >> be able to login, and >> remove that same option from /etc/default/grub > > Thanks! Well, I can boot into nothing because my USB connection is gone. > > I know my dom0 username but it doesnt work, and therefore the Yubikey > authentication at login > neither. > > So I thought there could be a trick reattaching the USB controller to sys-usb > during early boot. > > If I had access to tty2 there would be no big problem. I would delete the > Yubikey pam.d entry for > login. > Best, mastor (when replying please use reply-all to make sure a copy goes to the list and not just to me) Ah, I see. So you're able to type in your disk passphrase and get to the user login screen? Either lightdm or a TTY, I'm assuming? And I'm assuming you're able to switch to TTY2, but you can't login to it? The username shouldn't have anything to do with the yubikey or USB at all. What do you mean the dom0 username doesn't work? I thought the problem was that you can't sign in because the yubikey isn't working in Qubes anymore due to enabling a USB Qube. Also, did you disable password authentication after you set up the yubikey? And what do you mean your USB connection is gone? Unless there's something physically wrong with it, you should be able to boot from a USB drive regardless of whether a USB Qube is enabled or not. Have you tried booting into the installer from USB (the same way as when you first installed Qubes)? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/9c3d4891b7e950b7c0b126af21d3dd29%40disroot.org.
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
Its not Grub but UEFI ... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/LxCWicC--3-2%40tuta.io.
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
On Sat, Dec 28, 2019 at 04:42:30PM +, Claudia wrote: > I think he means he uses his yubikey as an emulated keyboard to type > his disk password, and probably enabled a USB Qube and now the yubikey > can't type in early userspace. oh, thats even easier to work around: just plug the yubikey into any random computer, open an editor, hit yk button, save/writedown what it just typed into the editor, apply recovered secret to qubes during boot. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20191228164734.GH17393%40priv-mua.
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
December 28, 2019 4:31 PM, dhorf-hfref.4a288...@hashmail.org wrote: > On Sat, Dec 28, 2019 at 08:00:46AM -0800, mastor wrote: > >> my USB controller is attached to nothing, but needed for Yubikey login. >> I lost my tty2-credentials (the username), so I'm locked out of the system. >> BIOS changes don't help. >> Is there any way to "free" USB during boot? Or get rid of the tty login >> credentials? > > not sure what "tty login credentials" means. > but you can always boot some random live-linux (like "fedora > workstation"), open the qubes luks device and mount the dom0 > root and check/change whatever needs fixing there. > > if you are just missing your dom0 username (huh?), getting it > through liveboot is probably easiest. > you can also change the boot config to remove all mentions > of hide-all-usb. (check a guide on how to configure a qubes > for usb-keyboard usage, basicly same thing) I think he means he uses his yubikey as an emulated keyboard to type his disk password, and probably enabled a USB Qube and now the yubikey can't type in early userspace. So yeah, you'll have to boot into the installer and enter rescue mode, or boot into some other live linux distro, and disable the USB Qube. Follow these instructions for removing your USB Qube: https://www.qubes-os.org/doc/usb-qubes/#removing-a-usb-qube Note, if you're using Grub, all you have to do is press 'e' when you're at the boot loader, and remove rd.qubes.hide_all_usb from the kernel command line. Then you should be able to login, and remove that same option from /etc/default/grub -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8efdf119f5087039bb63bf09614d3f3e%40disroot.org.
Re: [qubes-users] State of Arch Template?
On Sat, 2019-12-28 at 16:15 +0100, dhorf-hfref.4a288...@hashmail.org wrote: > On Sat, Dec 28, 2019 at 04:03:12PM +0100, Johannes Graumann wrote: > > A current Arch template would help this much, but the repos contain > > no > > such image for 4.0 and the qubes-builder doesn't even finish the > > "setup" script for me. > > What's the status of Arch support? Is is still being worked on? > > building an arch template through qubes-builder worked for me > without any effort/problems in the last days. > > -rw-rw-r-- 1 user user 657775936 Dec 26 20:14 qubes-template- > archlinux-4.0.1-201912261712.noarch.rpm > > the resulting VM starts and looks ok/working on console, but didnt > want > to run any gui apps, qvm-run calls were just hanging without any > error. > didnt track that down since i didnt actualy want to use it, was just > a question similar to yours came up on freenode #qubes ... > > i could probably walk you through the "building" part, but fixing > whatever needs fixing inside the arch template is out of scope for > me since i am not an arch user. Can others coment on the state/usability of the template? @Olivier Médoc ? Sincerely, Joh -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/fd2b8bdf27b23b0950931da137c9b36502e199b5.camel%40graumannschaft.org.
Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency
On Sat, Dec 28, 2019 at 08:00:46AM -0800, mastor wrote: > my USB controller is attached to nothing, but needed for Yubikey login. > I lost my tty2-credentials (the username), so I'm locked out of the system. > BIOS changes don't help. > Is there any way to "free" USB during boot? Or get rid of the tty login > credentials? not sure what "tty login credentials" means. but you can always boot some random live-linux (like "fedora workstation"), open the qubes luks device and mount the dom0 root and check/change whatever needs fixing there. if you are just missing your dom0 username (huh?), getting it through liveboot is probably easiest. you can also change the boot config to remove all mentions of hide-all-usb. (check a guide on how to configure a qubes for usb-keyboard usage, basicly same thing) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20191228163140.GG17393%40priv-mua.
Re: [qubes-users] State of Arch Template?
On Sat, 2019-12-28 at 16:15 +0100, dhorf-hfref.4a288...@hashmail.org wrote: > On Sat, Dec 28, 2019 at 04:03:12PM +0100, Johannes Graumann wrote: > > A current Arch template would help this much, but the repos contain > > no > > such image for 4.0 and the qubes-builder doesn't even finish the > > "setup" script for me. > > What's the status of Arch support? Is is still being worked on? > > building an arch template through qubes-builder worked for me > without any effort/problems in the last days. > > -rw-rw-r-- 1 user user 657775936 Dec 26 20:14 qubes-template- > archlinux-4.0.1-201912261712.noarch.rpm > > the resulting VM starts and looks ok/working on console, but didnt > want > to run any gui apps, qvm-run calls were just hanging without any > error. > didnt track that down since i didnt actualy want to use it, was just > a question similar to yours came up on freenode #qubes ... > > i could probably walk you through the "building" part, but fixing > whatever needs fixing inside the arch template is out of scope for > me since i am not an arch user. Many thanks. After religiously sticking with the `qubes-builder` part of the online documentation I appear to have progressed further and will report back ... Joh -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c3ece84ed4acd3c1cc41b4cd94baa5db4e04d2b5.camel%40graumannschaft.org.
[qubes-users] Lost USB-Controller, lost tty-credentials, emergency
Hi all, my USB controller is attached to nothing, but needed for Yubikey login. I lost my tty2-credentials (the username), so I'm locked out of the system. BIOS changes don't help. Is there any way to "free" USB during boot? Or get rid of the tty login credentials? Or am I definitely lost now and have to restart from scratch? A 3 weeks old backup is available, but USB ... Help is very much appreciated. THANKS! -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2c91f702-1c37-4379-b170-c6052807c55c%40googlegroups.com.
[qubes-users] Notebook with Nvidia Quadro graphics card
Hi, I may buy a notebook for Qubes with integrated Intel HD graphics 4600, but it also comes with a Nvidia Quadro graphics card. Will that be a problem for Qubes? Is there someway I can force it to use the integrated graphics to avoid problems? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1fee3a82-5f5d-4d46-b2c8-15b71f1acded%40googlegroups.com.
[qubes-users] State of Arch Template?
Gentlepeople, I'm migrating an Arch setup to qubes (4.0). This is complicated by the rel. bleeding edge nature of Arch and the resulting software version incompatibility/unavailability. Currently I try to move a Digikam Archiving setup (Arch 6.4.0-4, Fedora-30 6.1.0-7, Debian-10 4:5.9) with smbnetfs mounted remote archives (not even present in Fedora). A current Arch template would help this much, but the repos contain no such image for 4.0 and the qubes-builder doesn't even finish the "setup" script for me. What's the status of Arch support? Is is still being worked on? Sincerely, Joh -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/61007bacf7f9e500a2a7e4f13bda7ca75f1f8d83.camel%40graumannschaft.org.
