[qubes-users] Fedora 31 ?
thank you for your reply, not sure what I'm doing wrong if it is there? maybe I don't have the correct repos? where-ever it is that dom0 stores those? I've had successful dom0 updates over the last month, btw, from the widget @dom0 ~]$ sudo qubes-dom0-update qubes-template-fedora-31 Using sys-firewall as UpdateVM to download updates for Dom0; this may take some time... Last metadata expiration check: 1 day, 9:07:55 ago on . No match for argument: qubes-template-fedora-31 Error: Unable to find a match: qubes-template-fedora-31 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a2bc2162-60f0-09ea-aa48-1a2a0df5188c%40riseup.net.
Re: [qubes-users] Fedora 31 ?
On 2020-05-02 22:49, anon wrote: I'm not so sure its me. I've been around, think I know the basics am not seeing it @dom0 ~]$ rpm -qa |grep fedora qubes-template-fedora-30-4.0.1-201906241949.noarch What you're seeing are the installed packages in dom0. You have to pull the template from the repository with the command dom0$ sudo qubes-dom0-update qubes-template-fedora-31 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c55732f9-0af5-dad8-c0e8-67a2503e5f4d%40mbg.pt.
[qubes-users] Fedora 31 ?
I'm not so sure its me. I've been around, think I know the basics am not seeing it @dom0 ~]$ rpm -qa |grep fedora qubes-template-fedora-30-4.0.1-201906241949.noarch -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/04e67576-bfdf-8a5a-5c9d-0497fe3c86b9%40riseup.net.
Re: Solved: [qubes-users] external CD writer
On Sat, May 02, 2020 at 11:01:06PM +0200, Olaf Klinke wrote: > I presume dom0 did not recognize the drive as a USB device and hence > refuses to attach as such? `qvm-usb` yields the empty list. oh right, you just came full circle: attaching USB devices is not going to work without a usbVM. > The only remaining question is: Did I buy a shitty drive or will any > external CD writer behave this way? no, you just dont have your qubes setup properly. once you have a sys-usb ... qvm-usb should work just fine. for how to do that: see other thread. :P -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200502212519.GA987%40priv-mua.
Solved: [qubes-users] external CD writer
On Sat, 2020-05-02 at 09:44 +0200, dhorf-hfref.4a288...@hashmail.org wrote: > On Sat, May 02, 2020 at 01:23:53AM +0200, Olaf Klinke wrote: > > just lacking the knowledge how different writing to a CD is from > > reading from CD, on the hardware level. Is there more to burning a > > CD > > than a single block special device? > > try attaching it as a USB-device instead of a block device. > meaning "qvm-usb instead of qvm-block". Thanks a lot, that might be the bit I was missing. Unfortunately qvm- device does not seem to list any devices that are not attached to a VM, so I have difficulties identifying the right name to use. When I attach the drive to , `qvm-device block list --all` yields dom0:sr0 SDRW-08U7M () (read-only=yes, frontend-dev=xvdi) After detaching, then trying `qvm-device usb attach --verbose dom0:sr0` yields qvm-device: error: backend vm 'dom0' doesn't expose device 'sr0' I presume dom0 did not recognize the drive as a USB device and hence refuses to attach as such? `qvm-usb` yields the empty list. The usb-devices documentation recommends (or rather, lists as option) to attach the PCI USB controller holding the external drive to a qube. Following the procedure indeed results in brasero recognizing the drive as writer. Thanks! The only remaining question is: Did I buy a shitty drive or will any external CD writer behave this way? Olaf -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8612f0f5b9cd8b2ad91264ed2438d56eb485ede7.camel%40aatal-apotheke.de.
Re: [qubes-users] fedora-31 not in repo yet?
On 2020-05-02 20:19, Miguel Barbosa Gonçalves wrote: You have to install the template using dom0$ qubes-dom0-update qubes-template-fedora-31 Correction: dom0$ sudo qubes-dom0-update qubes-template-fedora-31 Sorry -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/cb5dbcd3-ad68-a7a0-1da9-f0c2b0bb31a3%40mbg.pt.
Re: [qubes-users] fedora-31 not in repo yet?
On 2020-05-02 20:06, yreb wrote: is is me or not sure why i'm not seeing the fed-31 in the repo ; i did do a qubes-dom0-update i know in the past sometimes the announcement precedes sometimes quite a few days before things are in the repo so maybe its Not me? It's you :-) You have to install the template using dom0$ qubes-dom0-update qubes-template-fedora-31 and after that shutdown every qube, switch to the new Fedora TemplateVM (Qube Manager > Manage templates for qubes (System menu)) and restart every qube. Hope this helps. Cheers, Miguel -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0eb06206-73bc-f57d-657c-221c2634bb12%40mbg.pt.
[qubes-users] fedora-31 not in repo yet?
is is me or not sure why i'm not seeing the fed-31 in the repo ; i did do a qubes-dom0-update i know in the past sometimes the announcement precedes sometimes quite a few days before things are in the repo so maybe its Not me? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200502190643.GA2119%40disp2278.
Re: [qubes-users] Hallo, wer von der Qubes Gruppe spricht hier deutsch? Bitte melde dich!
On Sat, 2020-05-02 at 16:41 +0100, unman wrote: > On Sat, May 02, 2020 at 08:03:29AM -0700, Caroline Villinger wrote: > > > > > > Hallo, > > > > > > > > wer von der Qubes Gruppe spricht hier deutsch? > > > > > > > > Bitte melde dich! > > > > > > > > Gibt es auch in Deutschland eine Qubes Forum, denn ich m??chte von > > Windows > > 10 wegkommen und in Qubes einsteigen, jedoch spreche ich > > haupts??chlich > > deutsch! > > > > Gibt es in Deutschland auch eine Qubes Veranstaltung? > > > > Wenn ja, wo ist was geplant? > > > > > > > > Sorry to reply in English. I'm sure the German speakers here will > come > in. > > There's no problem with posting to this list in German, and there are > German speakers here. > Bear in mind that many list users *don't* speak German so it would be > helpful to post a summary in English if possible, if a problem has > been > raised and solved. > > Stay Safe > By the way, is there an i18n effort for Qubes? The dom0 menu does not seem to have any settings regarding language. I can not find anything related on github. If there is an i18n effort I'd like to help out. If no, how would one go about it? Olaf -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/879913270f5313347b00faccdbb4e6923ecba507.camel%40aatal-apotheke.de.
[qubes-users] Re: Hallo, wer von der Qubes Gruppe spricht hier deutsch? Bitte melde dich!
Hallo, wenn du Fragen hast kannst du die gerne an mich stellen. Am besten mit der Funktion "dem Autor antworten" im Dropdown Menü Grüße Am Samstag, 2. Mai 2020 17:03:29 UTC+2 schrieb Caroline Villinger: > > Hallo, > > > > wer von der Qubes Gruppe spricht hier deutsch? > > > > Bitte melde dich! > > > > Gibt es auch in Deutschland eine Qubes Forum, denn ich möchte von Windows > 10 wegkommen und in Qubes einsteigen, jedoch spreche ich hauptsächlich > deutsch! > > Gibt es in Deutschland auch eine Qubes Veranstaltung? > > Wenn ja, wo ist was geplant? > > > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/28ded152-bc9d-496e-8a31-ed63dc8fc8db%40googlegroups.com.
Re: [qubes-users] Hallo, wer von der Qubes Gruppe spricht hier deutsch? Bitte melde dich!
On Sat, May 02, 2020 at 08:03:29AM -0700, Caroline Villinger wrote: > > > Hallo, > > > > wer von der Qubes Gruppe spricht hier deutsch? > > > > Bitte melde dich! > > > > Gibt es auch in Deutschland eine Qubes Forum, denn ich m??chte von Windows > 10 wegkommen und in Qubes einsteigen, jedoch spreche ich haupts??chlich > deutsch! > > Gibt es in Deutschland auch eine Qubes Veranstaltung? > > Wenn ja, wo ist was geplant? > > > Sorry to reply in English. I'm sure the German speakers here will come in. There's no problem with posting to this list in German, and there are German speakers here. Bear in mind that many list users *don't* speak German so it would be helpful to post a summary in English if possible, if a problem has been raised and solved. Stay Safe -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200502154105.GA18440%40thirdeyesecurity.org.
[qubes-users] Hallo, wer von der Qubes Gruppe spricht hier deutsch? Bitte melde dich!
Hallo, wer von der Qubes Gruppe spricht hier deutsch? Bitte melde dich! Gibt es auch in Deutschland eine Qubes Forum, denn ich möchte von Windows 10 wegkommen und in Qubes einsteigen, jedoch spreche ich hauptsächlich deutsch! Gibt es in Deutschland auch eine Qubes Veranstaltung? Wenn ja, wo ist was geplant? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2be7d3ed-1590-44e1-86c6-13c533752635%40googlegroups.com.
Re: [qubes-users] Dividing Qubes Into Separate Networks (FAILED)
On Sat, May 02, 2020 at 10:05:52AM +0200, dhorf-hfref.4a288...@hashmail.org wrote: > On Sat, May 02, 2020 at 03:14:42AM +, 'Zsolt Bicskey' via qubes-users > wrote: > > > > Set the VLAN correctly? > > yes, as I said if I connect a Windows latptop it works right away > > > Set all parameters necessary to satisfy any port security on the switch? > > Yes, same answer as above > > actualy, those are not "answers" at all. > there is nothing in this description confirming you know how to > configure a network interface under linux. > > since you confirmed the second port is working in general, this > is unlikely to be a qubes problem. > may be a whatever-your-netvm-distro-is problem. > or more likely, a configuration problem. > > try booting whatever the distro in your netvm is off a USB stick > or dvd (== without xen involved), and get the right network > interface to work on the right port with that. > then copy over the interface configuration to your netvm. > This. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200502105531.GB15257%40thirdeyesecurity.org.
Re: [qubes-users] Me (anon-whonix AppVM) -> Tor -> VPN, settup with Mullvad VPN
On Sat, May 02, 2020 at 08:22:57AM +, taran1s wrote: > > > unman: > > On Fri, May 01, 2020 at 11:54:27AM +, taran1s wrote: > >> > >> > >> taran1s: > >>> > >>> > >> Chris, I tried now to connect to the kraken.com, which seems to be tor > >> unfriendly through me->tor->VPN->kraken.com but it returns error on the > >> site "Disabled". > >> > >> I learned now that despite I use the above connection model, using VPN > >> as an exit, I still exit from the tor exit not and not from the VPN. I > >> am not sure what broke. > >> > > > > If I understand your model: me->tor->VPN->kraken.com > > you are running Tor *through* your VPN - this means that your service > > provider sees your connection to the VPN, and your VPN provider sees > > your connection to the first Tor hop. > > Naturally, when you exit the VPN and set up the TOR circuit, it's a Tor > > exit node that connects to kraken. > > The VPN is NOT an exit in this model. Nothing has broken. > > > > I am actually using mullvad VPN. The idea is to have the possibility to > access websites or services (like kraken.com) that are not tor-friendly. > I would like to connect first to Tor through sys-whonix than connect to > the VPN through VPN AppVM and from that VPN to connect to the clearnet. > > I set the AppVMs networking following way: anon-whonix networking set > to -> sys-whonix networking set to -> VPN-AppVM proxy that connects to > the clearnet. Is that right for my model? > No. Think about it. anon-whonix creates a request. sys-whonix takes that request, and builds a circuit. VPN-AppVM sees the traffic to the first hop, and sends it down the VPN. The VPN provider gets the Tor traffic, and sends it on to the first hop. Then it goes via Tor to the exit node and then to the target. Your ISP sees traffic to the VPN; the VPN provider sees traffic from you going to Tor; the target sees traffic coming from Tor network. *Always* use check.torproject.org to confirm your exit IP in this sort of case (always) so that actual matches expectations. What you have built (in packet terms) is: me - Tor - VPN - target. What you seem to want is: me - VPN - Tor - target To do that you need to build the VPN traffic and send it down a Tor circuit. Your Qubes network configuration should be: client - VPN qube - Tor qube - sys-firewall - sys-net I have no idea if Whonix will let you do this. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200502105407.GA15257%40thirdeyesecurity.org.
Re: [qubes-users] How to mount App-VMs from Outside qubes
On 02.05.20 10:54, David Hobach wrote: > On 5/1/20 6:53 PM, dhorf-hfref.4a288...@hashmail.org wrote: >> On Fri, May 01, 2020 at 06:18:10PM +0200, Dieter wrote: >>> I tried accessing data on an old qubes (3.2) drive that doesnt boot >> >>> However after decryption I only see the lvms "qubes_dom0-swap" and >>> "qubes_dom0-root" >> >>> reading from dom0 is no problem but how can I access the other VMs? >> >> >> mount the dom0 root volume >> check for .img files under /var/lib/qubes/ >> >> these are loop-mountable volumes > > Doesn't that depend on the storage pool being used? Your instructions > should be valid for file storage pools. > > However with Qubes 4 LVM thin storage pools became the default. You > should be able to find instructions on this forum; there's also [1] > describing how to do it from dom0. > > [1] https://www.qubes-os.org/doc/mount-lvm-image/ Its a Qubes 3.2 drive. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b918d461-0896-5abb-f445-addfd4d3690f%40systemli.org.
Re: [qubes-users] Re: Fedora 30 approaching EOL, Fedora 31 TemplateVM available, Fedora 32 TemplateVM in testing
> was really unrisky and straightforward scripting, why did the Qubes OS > installer not offer this choice, let alone just do it? a mix of historic reasons and expecting users to do their homework. without a sys-usb, you can not really use usb devices with qubes. and _trying_ to use them will connect them to dom0, which is a decent sized can of worms. as in: usb keyboard is bad. no sys-usb is worse. and yes, it might be time to change what the installer does when seeing a usb keyboard. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200502093439.GG990%40priv-mua.
Re: [qubes-users] How to mount App-VMs from Outside qubes
On 5/1/20 6:53 PM, dhorf-hfref.4a288...@hashmail.org wrote: On Fri, May 01, 2020 at 06:18:10PM +0200, Dieter wrote: I tried accessing data on an old qubes (3.2) drive that doesnt boot However after decryption I only see the lvms "qubes_dom0-swap" and "qubes_dom0-root" reading from dom0 is no problem but how can I access the other VMs? mount the dom0 root volume check for .img files under /var/lib/qubes/ these are loop-mountable volumes Doesn't that depend on the storage pool being used? Your instructions should be valid for file storage pools. However with Qubes 4 LVM thin storage pools became the default. You should be able to find instructions on this forum; there's also [1] describing how to do it from dom0. [1] https://www.qubes-os.org/doc/mount-lvm-image/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/11790649-392d-5680-e2f2-eb70ac767652%40hackingthe.net. smime.p7s Description: S/MIME Cryptographic Signature
Re: [qubes-users] Re: Fedora 30 approaching EOL, Fedora 31 TemplateVM available, Fedora 32 TemplateVM in testing
On Fri, 2020-05-01 at 21:24 -0700, seshu wrote: > @Miguel thanks! > > and thanks to everyone who provided feedback, this was really > educational > for me. I'm not quite a qubes newbie, but I'm not an expert either. > > The idea from Brend was too sophisticated for me and so I was nervous > about > it. I decided to go with Miguel's approach and that was great. One > change > though. The qvm-stop is now qvm-shutdown, so the instructions I > needed to > use are: > > $ qvm-shutdown --wait sys-usb; \ > qvm-prefs sys-usb template fedora-31; \ > qvm-start sys-usb > > it all work quick and painlessly. This really should be added to the > instructions for updating a templateVM. I'll see if I can add that > into > the documentation. > > Thanks again everyone! > That's good to know. I shall complete this into a script that reverts the change if anything goes wrong. Sven wrote: > So make sure to remove those from your grub/EFI config before > rebooting! > The USB qube will work anyway but if it's not running dom0 will have > USB. If you skip this step you won't be able to control your computer > after reboot. > > We have a tragic case of this every other month in this list. Hearing this, I will postpone following dhorf's advice to create a sys- usb until I am more familiar with the inner workings of Qubes OS. If it was really unrisky and straightforward scripting, why did the Qubes OS installer not offer this choice, let alone just do it? Olaf -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5ae8793a6804f944bd190bde45dcdc7be955.camel%40aatal-apotheke.de.
Re: [qubes-users] Me (anon-whonix AppVM) -> Tor -> VPN, settup with Mullvad VPN
unman: > On Fri, May 01, 2020 at 11:54:27AM +, taran1s wrote: >> >> >> taran1s: >>> >>> >> Chris, I tried now to connect to the kraken.com, which seems to be tor >> unfriendly through me->tor->VPN->kraken.com but it returns error on the >> site "Disabled". >> >> I learned now that despite I use the above connection model, using VPN >> as an exit, I still exit from the tor exit not and not from the VPN. I >> am not sure what broke. >> > > If I understand your model: me->tor->VPN->kraken.com > you are running Tor *through* your VPN - this means that your service > provider sees your connection to the VPN, and your VPN provider sees > your connection to the first Tor hop. > Naturally, when you exit the VPN and set up the TOR circuit, it's a Tor > exit node that connects to kraken. > The VPN is NOT an exit in this model. Nothing has broken. > I am actually using mullvad VPN. The idea is to have the possibility to access websites or services (like kraken.com) that are not tor-friendly. I would like to connect first to Tor through sys-whonix than connect to the VPN through VPN AppVM and from that VPN to connect to the clearnet. I set the AppVMs networking following way: anon-whonix networking set to -> sys-whonix networking set to -> VPN-AppVM proxy that connects to the clearnet. Is that right for my model? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/109885fc-9032-d1ea-b725-5180db8086ae%40mailbox.org. 0xA664B90BD3BE59B3.asc Description: application/pgp-keys
Re: [qubes-users] Dividing Qubes Into Separate Networks (FAILED)
On Sat, May 02, 2020 at 03:14:42AM +, 'Zsolt Bicskey' via qubes-users wrote: > > Set the VLAN correctly? > yes, as I said if I connect a Windows latptop it works right away > > Set all parameters necessary to satisfy any port security on the switch? > Yes, same answer as above actualy, those are not "answers" at all. there is nothing in this description confirming you know how to configure a network interface under linux. since you confirmed the second port is working in general, this is unlikely to be a qubes problem. may be a whatever-your-netvm-distro-is problem. or more likely, a configuration problem. try booting whatever the distro in your netvm is off a USB stick or dvd (== without xen involved), and get the right network interface to work on the right port with that. then copy over the interface configuration to your netvm. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200502080552.GE990%40priv-mua.
Re: [qubes-users] external CD writer
On Sat, May 02, 2020 at 01:23:53AM +0200, Olaf Klinke wrote: > just lacking the knowledge how different writing to a CD is from > reading from CD, on the hardware level. Is there more to burning a CD > than a single block special device? try attaching it as a USB-device instead of a block device. meaning "qvm-usb instead of qvm-block". or "lower part instead of upper part of the device widget". -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200502074454.GD990%40priv-mua.