Re: [qubes-users] Re: Lenovo G505S Coreboot

2018-05-04 Thread Andrew B
Got it. I understand I need to build the coreboot image and flash it. However 
still a little confused on how exactly to implement the microcode update? I 
assume its still not a part of the latest coreboot. 

Was it these two files I am looking for changes in?

src/vendorcode/amd/agesa/f15tn/Proc/CPU/Family/0x15/TN/F15TnEquivalenceTable.c  

src/vendorcode/amd/agesa/f15tn/Proc/CPU/Family/0x15/TN/F15TnMicrocodePatch0600110F_Enc.c

or do I understand correctly that I can run these commands at a Debian terminal 
and get the needed output too?

dd skip=5284 iflag=skip_bytes 
if=/lib/firmware/amd-ucode/microcode_amd_fam15h.bin of=amd.bin 
xxd -i amd.bin 

I then copy some/all of that content and paste it into the image file itself?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a21a8d4a-18f9-4ca5-9b28-1c4dae1a3ff2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Lenovo G505S Coreboot

2018-04-30 Thread Andrew B
OK, just to clarify, if I am to build the coreboot image, I need to do that on 
the G505s by say running Debian or Ubuntu (presumably could use a Live 
disc/USB) or similar and building the image as shown here?
https://www.coreboot.org/Board:lenovo/g505s#Building_a_coreboot_image

Then I take the created coreboot.rom file and load it onto a separate computer 
where I can externally flash the G505s as shown here: 
http://dangerousprototypes.com/docs/Flashing_a_BIOS_chip_with_Bus_Pirate

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/40dcefb1-64ab-49d1-911e-b71c4c9b6756%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Offtopic :: reasonable secure routers?

2018-04-13 Thread Andrew B
What's everyone's opinion of the Thinkpenguin router: 
https://thinkpenguin.com/gnu-linux/free-software-wireless-n-mini-vpn-router-tpe-r1100

Has FSF approval and uses LibreCMC.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9983a4a9-4462-448a-bad7-1fdd95c15651%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Another thread on Qubes 4 machines....

2018-04-11 Thread Andrew B
Sorry to beat a dead horse. I am sure folks here are sick of answering hardware 
questions. 

So I understand the dev team currently seems to like the Lenovo Thinkpad X1 
Carbon 5th gen. I assume best to get with 16GB RAM (max) and an SSD. I assume 
you get with Windows10 or 7 and wipe it clean for your Qubes install or even 
need to install some new BIOS? I know some folks here have recommended for 
example the W520 or W530 but these would have to be bought used since they are 
no longer for sale? Would we expect the X1 to have similar feature 
compatibility with Qubes 4 as the W520 or W530? Better the 5th Gen than the 
newest 6th Gen?

I want Qubes because I am interested in security and therefore am willing to 
pay more for the right machine. An ideal machine might be more oriented to open 
source than the Lenovo machines. In that vein I looked at the Thinkpenguin Y 
machine, which seemed to have nice specs plus the ability to get 32GB RAM
https://www.thinkpenguin.com/gnu-linux/penguin-y-gnulinux-laptop
however Thinkpenguin sales told me: 

"I wouldn't expect it to work right given Qubes4 is based off an older driver 
stack. If there is a rolling update to the driver stack I'm not aware of it. I 
believe the core is based on Fedora which has frequent releases rather than a 
rolling driver stack which I think means based on the version of Fedora 
currently used Qubes4 is slightly too far out of date to have support for the 
latest generation hardware. I think even the latest release of Fedora might not 
be adequate as I don't think its listed on either laptop as a supported 
distribution but that might just be the result of nobody checking thus far."

Is that right? So is it generally better to try and setup older hardware with 
Qubes from a strict features-compatibility standpoint?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/652b17ac-7d3f-4763-8fc3-f749e4bebebe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.