Re: [qubes-users] ThinkPad T480

[Hugo Costa]

On Tuesday, 30 April 2019 13:02:45 UTC+1, Matthias Horn  wrote:
> I have a T480 with the i7-8550 and 32gb ram. It’s a nice and powerful laptop.
> 
> Everything I have used so for has worked out of the box for, except power 
> management.
> 
> I have the large auxiliary battery (advertised 27hrs, and I got that running 
> windows) with gives me about 3-4 hours running wines (which is ok).
> I haven’t yet figured out of to fix the power management, so it runs hot and 
> has the poor battery life.
> 
> Sent from my iPhone
> 
> > On 30 Apr 2019, at 12:16, Zrubi  wrote:
> > 
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA256
> > 
> >> On 4/30/19 10:31 AM, ljul8...@gmail.com wrote:
> >> Intel Core i5-8350U
> > 
> > I have a T480 with the CPU above.
> > 
> > However it's not about the CPU, the amount of RAM is more important.
> > 
> > And be aware, that
> > - - you may not able to use the Thunderbolt + the USB-c port,
> > - - I also have to hold back the kernel version on the 4.14 line,
> > - - the power management part needs (heavy) tuning if you want to use it
> > from battery...
> > 
> > - -- 
> > Zrubi
> > -BEGIN PGP SIGNATURE-
> > 
> > iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlzILn8ACgkQVjGlenYH
> > FQ3AphAAqt4lWnwIvSfK/CQpQ/srsdBptCUe7c4kFPs4YO3NGoTLHr8UJz5YQqKR
> > cz5oQk4HTUXsGqFRZTvjDhJvRK9m6351PCyp150LXtmiUap2hQZFPB5Jd32iT3Eg
> > Zm0BPWtOx9iM57i8w9JVU+sfG7eOY1s02G+/fi/NzLb0bVZIl9EOFaed+h1FyVNf
> > E+DRDmYiAax8bxorHtB2aS0rBPwG/F9i/RFbBtAg0uvQG26+brEyzGuwe1VHvUak
> > 2vmG7nd/7nKa6//T/A1ANrkZck8L+O5R84UIGyWrmMlzVlMHw47S2c13j/Y799Up
> > r2rYun3l71J0OdqN+b9pFVo5yi8c51vNP7bKBRbzkFuGxDr41mqx3XPgZPSfkmUL
> > JhC7j3wwzpc8P71kTe7iApkdcFDVoEVZ7oGMGsmsWHx9kBQzKCyda6oseX5BWnb2
> > n6aA7gQ3twHItUY0Dgwc40pZc0mocRoLkrwyf2PoYks8fnHOsO5kj2o8qw62Mf8t
> > tssSUKxi+Ti4QISMRKq4MYNi4xPQEJWbadAIVpQamc5fkEfVJlY0tF7U6l2qY3xq
> > Mxga9fGziLr/IbdkEWGVqSzzX65GbiR9bM4a3Fj8+efgTSIqN8NS186fGdC4ZtLn
> > NHEWd1Q/2c7hEQYkmDyjFT1I9vCOHl6muj5LmuTDC6Om1EJMrD8=
> > =SfRw
> > -END PGP SIGNATURE-
> > 
> > -- 
> > You received this message because you are subscribed to the Google Groups 
> > "qubes-users" group.
> > To unsubscribe from this group and stop receiving emails from it, send an 
> > email to qubes-users+unsubscr...@googlegroups.com.
> > To post to this group, send email to qubes-users@googlegroups.com.
> > To view this discussion on the web visit 
> > https://groups.google.com/d/msgid/qubes-users/51d8e108-f314-ff32-5da6-1016fb03e697%40zrubi.hu.
> > For more options, visit https://groups.google.com/d/optout.

Powertop and tlp don't cut it for you? I use it on my X1 Carbon (lower gen) and 
have about 4h of usage running mostly web.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f8f4b92e-2ed3-439c-a2ae-9acbd6fb1045%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] QWT and win updates

[Hugo Costa]

On Wednesday, 13 March 2019 11:12:46 UTC, unman  wrote:
> On Tue, Mar 12, 2019 at 04:53:02PM -0300, Franz wrote:
> > I installed again windows following this
> > https://www.qubes-os.org/doc/windows-vm/#xen-pv-drivers-and-qubes-windows-tools
> > 
> > Windows now is working and fully updated but no additional driver is
> > installed.
> > 
> > Reading this tutorial many times, for me, it is not yet clear what the
> > following means:
> > 
> > "If you plan to update your newly installed Windows VM it is recommended
> > that you do so *before* installing Qubes Windows Tools (QWT). If QWT are
> > installed, you should temporarily re-enable the standard VGA adapter in
> > Windows and disable Qubes’ (see the section above)."
> > 
> > Does it mean that once QWT is installed I can no more regularly update my
> > system, unless every time remember to do some strange and not well
> > understood VGA tweaking?
> > 
> > This seems very strange because on 3.2 I always updated windows even if QWT
> > was already installed, with no issues.
> > 
> > So did this really change with Qubes 4.0
> > 
> > Best
> 
> That is the implication.
> You could test this by updating *without* changing the adapter.
> If everything works as expected, head over to
> www.qubes-os.org/doc/windows-vm and edit that page.
> You can help improve Qubes by doing this.

I believe the "don't update" message has always been there, it didn't change 
from Q3.2 to Q4.x. But, obviously, the processes used to provide Qubes 
integration may stop working due to a certain update, so it's a valid warning.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4add9b5b-7ee2-4604-a1a5-bf775223bd71%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] not enough memory to start domain "xyz"

[Hugo Costa]

On Saturday, 16 February 2019 12:11:05 UTC, Johannes Graumann  wrote:
> On Sat, 2019-02-16 at 11:21 +0100, evo wrote:
> > 
> > On 2/16/19 11:17 AM, Johannes Graumann wrote:
> > > On Sat, 2019-02-16 at 11:08 +0100, evo wrote:
> > > > Hey!
> > > > 
> > > > I got the  message that i don't have enough memory to start a
> > > > domain.
> > > > How can i understand, what exactly the problem is?
> > > > Is it a RAM problem on the dom, or in the domain itself, or on
> > > > the
> > > > whole
> > > > system?
> > > Others must answer this.
> > > 
> > > > By the way, how can i check up how much RAM i have in the whole
> > > > laptop?
> > > > (I forgot it :D )
> > > 'free -m' on the CLI does the trick.
> > > 
> > > Joh
> > > 
> > 
> > thanks.
> > i knew about free -m, but i don't know where should i type it, to get
> > the whole RAM on the machine. What is CLI? :)
> > 
> 
> 'Command line interface'. Open a Shell on dom0 and type in that
> command.

It's a RAM problem. The way I usually do it (limited to 8gb on my machine) is I 
open the vms that need more resources first (in my case, win vms), otherwise 
you get that.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/62109a60-0bef-4d60-bac6-43e121a10af3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes sometimes crashes when connecting the charger

[Hugo Costa]

On Saturday, 19 January 2019 21:59:00 UTC, Hugo Costa  wrote:
> Hey,
> 
> So, weird problem I've been having for a while. I have a bad charger, when I 
> connect it, it isn't always recognised, it's a fact that I've tested and 
> concluded to be associated to faulty engineering on the connector on the 
> board, too loose already. Nonetheless, this problem only happened in Qubes 
> (tried on other os's). Sometimes connecting the charger simply kills qubes. 
> VMs freeze, the Manager is frozen, the statusbar disappears and it just stays 
> like that until I reboot. Today trying to reproduce the bug again I got an 
> error window:
> 
> Critical error in Domains Widget
> Error: g-io-error-quark: Error reading from file: Input/output error (0)
> 
> tl;dr - faulty charger connector, sometimes when connecting computer goes 
> into what I'd describe to be read-only mode and does not allow me to do 
> anything (in vms or dom0), having to reboot.
> 
> I've tried tinkering with the bios (which is updated), but have not yielded 
> anything.
> 
> Specs: Lenovo Yoga S1 Laptop (2014), latest Q4.(?), fedora 28 templates
> 
> Thanks for taking the time!
> 
> Hugo

Also, when trying to shutdown, I'm met with:
print_req_error: I/O error, dev sda, sector xx (5 different ones, usually 
in pairs)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/95a44200-ae79-4797-ab53-4752332f4f22%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Qubes sometimes crashes when connecting the charger

[Hugo Costa]

Hey,

So, weird problem I've been having for a while. I have a bad charger, when I 
connect it, it isn't always recognised, it's a fact that I've tested and 
concluded to be associated to faulty engineering on the connector on the board, 
too loose already. Nonetheless, this problem only happened in Qubes (tried on 
other os's). Sometimes connecting the charger simply kills qubes. VMs freeze, 
the Manager is frozen, the statusbar disappears and it just stays like that 
until I reboot. Today trying to reproduce the bug again I got an error window:

Critical error in Domains Widget
Error: g-io-error-quark: Error reading from file: Input/output error (0)

tl;dr - faulty charger connector, sometimes when connecting computer goes into 
what I'd describe to be read-only mode and does not allow me to do anything (in 
vms or dom0), having to reboot.

I've tried tinkering with the bios (which is updated), but have not yielded 
anything.

Specs: Lenovo Yoga S1 Laptop (2014), latest Q4.(?), fedora 28 templates

Thanks for taking the time!

Hugo

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c9f21f1f-9d02-44c2-a0de-c36ce63c977e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Questions

[Hugo Costa]

On Wednesday, 19 December 2018 21:56:09 UTC, John Smiley  wrote:
> If one were to invest in a new laptop today for Qubes use exclusively and 
> price wasn't a major factor, which one(s) make the top of the list?  Assume 
> you want the best security possible and are willing to invest the time to 
> learn and configure Qubes/Whonix to get it.  Also assume you want something 
> that will take advantage of features that are planned for near-term 
> Qubes/Whonix release.
> 
> Are there laptops that haven't hit the market yet that would be worth waiting 
> for (i.e. better than any in the list from above)?
> 
> Assume you want Anti-Evil-Maid and therefore need a TPM chip.  Does that 
> change which laptops are at the top of the list and why?  Is it worth giving 
> up the TPM chip if you aren't all that concerned about Evil Maid?  Pretty 
> much every laptop has them these days, so a follow up question to this one 
> would be how the TPM is implemented (discrete, integrated, firmware, 
> software)?   Should the BIOS be set to use 1.2 or 2.0 for Qubes?
> 
> More on the BIOS - should UEFI be turned off?  Thunderbolt?  Secure boot 
> should be disabled, I know.  What about power management?  Anything else (ex: 
> if the laptop is Intel, ME should be disabled, correct)?
> 
> Do the keyboard and mouse/trackpad on a laptop use the USB interface?  If so, 
> what is the best way to address that (buy an external PS/2 keyboard and 
> mouse)?  If not, are the "safe" in the sense that only dom0 has control of 
> them and no other qubes can snoop as would be the case for USB?
> 
> Are there things that can be done with a home router/firewall (such as a 
> dedicated pfSense box) that improve security when using Qubes/Whonix and if 
> so, what would they be?
> 
> Lot's of other questions, but this is is probably more than enough for one 
> thread.

https://www.qubes-os.org/doc/certified-hardware/ and the HCL is the place to 
look. But right now, there is no new laptop that checks all the boxes. The one 
privacy advocates usually turn to as a "step in the right direction" is 
obviously Purism's lineup, which I advise you to check out.

Regarding network security, Qubes already has a firewall template, but there 
are alternatives. There are some open source alternatives regarding routers, 
both regarding software and the hardware it runs on. I'd like to point you 
towards this website https://infosec-handbook.eu/as-hns/, they have written a 
bunch on home network security. I'd argue it's a bit useless, assuming you use 
any type of VPN service.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cbe4d271-00b4-4b63-a064-e2c9703d78be%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: How risky is GPU pass-through?

[Hugo Costa]

On Sunday, 23 December 2018 20:34:48 UTC, Demi M. Obenour  wrote:
> Someone I know is interested in using QubesOS.  However, they are also a
> gamer: if they could not have a Windows VM with access to a dedicated
> graphics card for use by games, then QubesOS is not an option for them.
> 
> How risky is GPU pass-through?  My understanding is that on most
> laptops, the primary (internal) display is connected to the integrated
> GPU.  Therefore, it appears to me that the risks are no more than
> pass-through of the USB, Ethernet, or wireless controllers, all of which
> QubesOS does by default.

Best option would be to dual boot. Unless that person is always switching from 
game to desktop, this solution could probably be an acceptable compromise.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/544d1f67-8cba-45d5-8c6f-ac3748b5d316%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: screen brightness

[Hugo Costa]

On Friday, 21 December 2018 22:44:36 UTC, haaber  wrote:
> I run Q4 on a dell notebook.The "screen brightness" key-combination 
> leans qubes to show a screen brightness icon, but I cannot change 
> brightness at all.Is this maybe a setting somewhere? Especially in 
> evening hours this is really a pain in the eye ...  Bernhard

I believe that setting is imported from Fedora, maybe try and search "Dell 
model insertname fedora brightness"? 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7a15881f-bc12-467a-b089-92928049f73c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Windows7 HVM with no internet connection

[Hugo Costa]

On Tuesday, 6 November 2018 10:49:06 UTC, Black Beard  wrote:
> Hey guys,
> 
> since i upgrade my Fedora 26 to 28 my windows7 vm has no internet connection 
> anymore.
> 
> The old Version of Fedora i deleted completly and i saw that the 
> configuration run over Fedora-26-dvm. The other option is Whonix.
> 
> Whonix i want upgrade in the next days, but before i want fix the probleme 
> with the connectivity. Over Debian9 and Fedora i can use the internet.
> 
> Did anyone know to fix the probleme, or can post the correct configs?
> 
> About every message i would be happy.
> 
> regards

https://github.com/QubesOS/qubes-issues/issues/3585

Issue one solved it for me

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/175f3600-41bf-4378-a6e3-f539832c3f45%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: My touchpad and mouse didn't work

[Hugo Costa]

On Saturday, 13 October 2018 21:13:58 UTC+1, Máté Kovács  wrote:
> Hi
> Somehow I turned off my touchpad in Qubes, and it get stucked in the middle 
> of the screen.
> How can I navigate myself to dom0 console with my notebook's keyboard?

I usually just restart the computer when something like that happens. But in 
your case, I'd probably just alt tab into the Qube Manager and go on from there.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/75a05f38-5e5e-4959-8842-978820476b33%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Installed software gets remove after reboot

[Hugo Costa]

On Monday, 17 September 2018 11:13:04 UTC+1, awokd  wrote:
> Stuart Perkins:
> > 
> > 
> > On Sun, 16 Sep 2018 23:47:08 -0700 (PDT)
> > Hugo Costa  wrote:
> > 
> >> Hey,
> >>
> >> I couldn't find the answer to this problem that has been annoying me for a 
> >> while. Basically, Qubes 4.0, fedora 28 and PVH qubes. 
> >> Problem is simple. I install something in qube X, I reboot my machine and 
> >> it's not there anymore. I've tried several ways but this always happens. 
> >> The only way for me to have a piece of software constantly in my qubes is 
> >> by installing it in the template. 
> >>
> >> Is there a way to make sure the software stays installed in the qube 
> >> without having to install it on the template?
> >>
> >> Regards,
> >>
> >> Hugo
> >>
> > 
> > That would defeat the purpose of the template.  If you only want this 
> > software in ONE qube, consider creating a special template.  The whole 
> > template concept is to prevent changes to the software from persisting 
> > unless done in the template (intentionally).  Separation of software and 
> > data.
> 
> What Stuart said- see
> https://www.qubes-os.org/getting-started/#appvms-qubes-and-templatevms.
> You can also create a Standalone qube if you don't need/want the benefit
> of templates on that single qube.

Makes perfect sense, thank you for both answers. I'll get a standalone for this 
software.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d79c36b7-c86c-4ad9-9d97-3c165741c061%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Installed software gets remove after reboot

[Hugo Costa]

Hey,

I couldn't find the answer to this problem that has been annoying me for a 
while. Basically, Qubes 4.0, fedora 28 and PVH qubes. 
Problem is simple. I install something in qube X, I reboot my machine and it's 
not there anymore. I've tried several ways but this always happens. The only 
way for me to have a piece of software constantly in my qubes is by installing 
it in the template. 

Is there a way to make sure the software stays installed in the qube without 
having to install it on the template?

Regards,

Hugo

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/14e8f1e6-0b91-4ac1-9fba-6b22213bc917%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Best laptop for qubes 4.0 ?

[Hugo Costa]

On Friday, 27 October 2017 09:17:49 UTC+1, rodge...@gmail.com  wrote:
> 0. bios 
> 
> coreboot 
> 
> https://firmware.intel.com/learn/fsp/about-intel-fsp
> http://blog.ptsecurity.com/2017/08/disabling-intel-me.html
> 
> 1. cpu 
> 
> SLAT (EPT) Intel VT-x 
> 
> https://ark.intel.com/Search/FeatureFilter?productType=processors=true=Mobile
> 
> 2. ram 32-64gb 
> 
> 3. video 
> 
> integrated intel HD or nVidia Quadro (?)
> 
> 4. SSD 1TB +
> 
> 5. Disabled micro and webcam
> 
> Is that correctly ? such a laptop will cost about 2000 dollars, maybe its top 
> Thinkpad workstation, but coreboot flashes only T2xx/T4xx old models.

Well, those requirements, I'd go for a W5XX, I believe it's the workstation 
series that should handle your requests.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/486d5625-4ad5-4ce6-b301-06121c1f85f0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: How to Make APP Fonts Larger [Solved]

[Hugo Costa]

On Tuesday, 3 October 2017 20:24:06 UTC+1, Ray Joseph  wrote:
> I found that right clicking on the desktop produced a menu with the item 
> Applications.  This has a menu item System Tools.  The included item here is 
> Appearance.  The tab in Appearance is Fonts.  This is where it gets fun.  The 
> Default font changes the fonts right on the app so it has instant feedback.  
> At the bottom of this Appearance window is a Custom DPI setting.  Luckily, I 
> had a terminal open.  Where I really had a challenge with font size is in the 
> terminal.  By increasing the DPI, the terminal fonts grew.  They grew so fast 
> that all the fonts went off the page.  I just hit the Enter/Return key and it 
> was aligned again.  I increased the DPI to 164 and the terminal was just what 
> I needed.
> 
> I hope this helps others.  I sure it will help me the next time I reload the 
> system and have forgotten what to do.
> 
> Ray

I've tried this, and the menus do change, but the apps don't. I'm unable to 
change the appearance on AppVMs, and the changes in Dom0 do not affect them. 
What can I do?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ca7f574c-822d-44e8-8cf5-da274b0450d4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Reasonably secure laptop with touchscreen and enough ram for dictation in Windows App-VM?

[Hugo Costa]

> 1) Is there anything except for the AMT/vPro aspect of the hardware security 
> that I might have overlooked that is critical when evaluating the Lenovo 
> Yogas safety? 

Intel ME. In December, two russian researchers are going to show how to run 
code on this chip. It was developed by Intel and the NSA and it's on every Core 
i something.
> 
> 2) Should one in general be sceptic towards Lenovo even when they are using 
> hardware from other manufacturers?
> 
You should be sceptic about everything.

> 3) are there a Qubes user out there who are already using a laptop with touch 
> screen and enough ram, running Qubes? What laptop model are you using and 
> would you recommend it?

I have one, Yoga S1, and it has native support for everything. But it has Intel 
ME. If you really want to go free, maybe try the X200T. It has a Core2Duo, 
meaning you can install freeboot and disable ME. I think 16GB is possible, but 
be aware that you won't be able to run a lot.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5985f3ee-d862-410f-bce5-f1574e2a2490%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Russian characters not displayed properly

[Hugo Costa]

On Saturday, 30 September 2017 09:15:43 UTC+1, Alex  wrote:
> On 09/30/2017 10:05 AM, Hugo Costa wrote:
> > Hey,
> > 
> > https://i.imgur.com/qfiXjPw.png
> > 
> > How can I fix it? This also happens with characters like á, â, õ,
> > etc. Qubes is in English btw
> > 
> > Thanks
> > 
> This is not a bug, but intended behavior. The rationale behind this is
> that with full unicode display, malicious apps could pretend to be other
> windows while avoiding software-level confusion via similar glyphs.
> 
> This is obviously a major inconvenience if the main/preferred culture of
> the user does not make use of the latin alphabet, which is the only one
> included in ASCII-censored mode; all other glyphs are replaced with an
> underscore.
> 
> You can enable utf-8 window titles either for all the system or per-VM
> (which I recommend, leaving the "untrusted" ones censored) in a file in
> dom0, at /etc/qubes/guid.conf.
> 
> The syntax is pretty self-explanatory, however:
>  * To enable system-wide, add "allow_utf8_titles=true;" inside the
> "global:" section
>  * To enable per-VM, add "allow_utf8_titles=true;" in an
> appropriately-named section of the "VM:" section (the name should be the
> same as the VM you intend to "uncensor").
> 
> The logic is the same as https://www.qubes-os.org/doc/full-screen-mode/
> and actually, since we've already seen this question before on this very
> mailing list, I'd suggest adding an article in the documentation about
> this setting. Mostly arabic and cyrillic writing users will benefit
> (yes, others too, but the requests we've received up to now are from
> those cultures).
> 
> -- 
> Alex

Oh I see, thank you! Yeah it does make sense. There should be a warning for 
non-English installations too, since Soviet, European, Arab, etc languages, all 
have non-ASCII characters. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fef6aeed-9aa9-4710-ae50-a01f1c55061e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Russian characters not displayed properly

[Hugo Costa]

Hey,

https://i.imgur.com/qfiXjPw.png

How can I fix it? This also happens with characters like á, â, õ, etc. Qubes is 
in English btw

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1c208d54-7792-4f76-b268-933b434e1ff4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Anyone disabled the Intel ME yet?

[Hugo Costa]

On Thursday, 21 September 2017 07:23:01 UTC+1, Alex  wrote:
> Replying to this thread to report that somebody DID ACTUALLY find an
> exploitable vulnerability in the latest IME 11+, and they will be
> sharing nothing less that this UNSIGNED CODE EXECUTION vuln at blackhat
> europe 2017.
> 
> Abstract here:
> https://www.blackhat.com/eu-17/briefings/schedule/#how-to-hack-a-turned-off-computer-or-running-unsigned-code-in-intel-management-engine-8668
> 
> Title is pretty scary, but we'll see if it's actually that dangerous...
> 
> -- 
> Alex

Was going to post the same. 2 Russian researchers that a couple weeks ago found 
out a way to clean some modules on Intel ME now have found a significative 
exploit that allows them to actually run code on a piece of hardware with 
direct access to the network. The scary thing is - it's impossible to detect.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2f3a80dc-0bfa-4e07-a5ee-16606b435275%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Optimize Battery runtime with TLP for (Was [qubes-users] Lenovo X230 - List of USB-Ports and USB-Controllers (Layout))

[Hugo Costa]

On Friday, 15 September 2017 04:06:06 UTC+1, tai...@gmx.com  wrote:
> On 09/14/2017 08:30 PM, 'P R' via qubes-users wrote:
> 
> > Hello Taiidan,
> >
> > Am 14.09.2017 7:33 vorm. schrieb "taii...@gmx.com" :
> >
> > It is because of the VM overhead (close ones you don't need), you should
> > also set cpu powersave to "on demand" and force pci-e aspm.
> >
> > In comparison I get around 5 hours of battery life with a 65Wh battery.
> >
> >
> > I have no installed TLP in dom0 via 'sudo qubes-dom0-update tlp tlp-rdw'.
> >
> > Next step was to start TLP via 'sudo tlp start' and went straight into
> > battery mode. You can always switch via 'sudo tlp bat' or 'sudo tlp ac'.
> > As far as I know TLP will do so automatically.
> >
> > I have switched of all App/Sys-VMs and if dom0 is running the x230 is using
> > ~7.000 - 7.700 mW.
> > Battery runtime is now given with ~12-13 hours, which sounds unrealistic to
> > me and of course it doesn't make sense to run Qubes without any AppVM :-)
> >
> > With some AppVMs running like:
> > sys-net / sys-firewall / sys-usb / Webbrowser AppVM, attached USB Mouse,
> > Wifi enabled and doing some Webbrowsing battery is now using ~11.000-13.500
> > mW.
> > Battery runtime is now estimated with 7 hours.
> >
> > So it seems that TLP makes big difference when it installed.
> >
> > I have installed it not only in dom0, but also my AppVM templates.
> >
> > - P
> Excellent, so you are satisfied now? :D
> 
> Thanks for the info, I have never heard of TLP before.

Me too, I'll have to try it out. I've been using Intel's Powertop and I must 
say, the difference is considerable, so maybe it'll improve with this TLP?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/f46027a7-667d-4e4b-b540-50402964a0d6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Windows HVM has network access, but claims there isn't

[Hugo Costa]

That's odd. You have already installed Qubes Tools too, correct? I remember
doing that once and having the profile resetted, but still working.

On 10 September 2017 at 23:57, Franz <169...@gmail.com> wrote:

>
>
> On Sun, Sep 10, 2017 at 12:42 PM, Hugo Costa <hugonco...@gmail.com> wrote:
>
>> On Saturday, 9 September 2017 15:18:56 UTC+1, Francesco  wrote:
>> > Hello,
>> >
>> > some strange behavior. on Windows HVM template as well as dependent
>> VMs. In all of them internet is working. I am sure of that because:
>> > 1. on cmd pinging google or amazon works
>> > 2. a banking application is able to connect and operate
>> >
>> > but the icon on the system tray states: identifying... no network access
>> >
>> > worse amazon Kindle for PC believes that and is unable to connect.
>> >
>> > So I wonder if there is a way to tell the system tray that internet is
>> already connected. Maybe that after that also Kindle will understand that.
>> >
>> >
>> > If I click on the system tray there are lots of options, but all seem
>> directed to create a new connection: wireless, dial-up, router etc, not to
>> join an existing connection.
>> >
>> >
>> > Hope there is an easy answer... Thanks
>> > Best
>> > Fran
>>
>> Make sure to configure everything by hand. So, go to the properties of
>> your ethernet connection in Windows, IPv4 and make sure to use the IP
>> address, subnet mask and default gateway you can find in the settings of
>> the VM. Restart and it should work.
>>
>>
> Tried that, and it works. Many thanks,  but it does not keep the new
> settings. After reboot  all fields are empty and again no network.
>
>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "qubes-users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to qubes-users+unsubscr...@googlegroups.com.
>> To post to this group, send email to qubes-users@googlegroups.com.
>> To view this discussion on the web visit https://groups.google.com/d/ms
>> gid/qubes-users/1a94286d-f839-467f-a485-e38240359008%40googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>


-- 
Hugo Costa

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABzYznyAQTnHL-pToF-1XZ1Tr1FN9yWkMU3GK3h2ZHBmahYgGw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Windows HVM has network access, but claims there isn't

[Hugo Costa]

On Saturday, 9 September 2017 15:18:56 UTC+1, Francesco  wrote:
> Hello,
> 
> some strange behavior. on Windows HVM template as well as dependent VMs. In 
> all of them internet is working. I am sure of that because:
> 1. on cmd pinging google or amazon works
> 2. a banking application is able to connect and operate
> 
> but the icon on the system tray states: identifying... no network access
> 
> worse amazon Kindle for PC believes that and is unable to connect.
> 
> So I wonder if there is a way to tell the system tray that internet is 
> already connected. Maybe that after that also Kindle will understand that.
> 
> 
> If I click on the system tray there are lots of options, but all seem 
> directed to create a new connection: wireless, dial-up, router etc, not to 
> join an existing connection.
> 
> 
> Hope there is an easy answer... Thanks
> Best
> Fran

Make sure to configure everything by hand. So, go to the properties of your 
ethernet connection in Windows, IPv4 and make sure to use the IP address, 
subnet mask and default gateway you can find in the settings of the VM. Restart 
and it should work.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1a94286d-f839-467f-a485-e38240359008%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes 3.2 on Lenovo Thinkpad P51

[Hugo Costa]

On Sunday, 10 September 2017 11:35:42 UTC+1, Swâmi Petaramesh  wrote:
> Hi,
> 
> I could get Qubes 3.2 to boot and install on a Lenovo Thinkpad P51, by
> creating the USB install key according to Dave's advice at :
> 
> https://groups.google.com/forum/#!topic/qubes-users/4VsKdxnKHBk
> 
> However, once installed, Qubes will not boot. The "Qubes" UEFI entry is
> created, but the system doesn't seem to believe there's anything
> bootable in there.
> 
> Using the same method, Qubes 4.0 RC1 will install, AND boot. (but it's
> incomplete and Alpha IMHO)
> 
> I wonder is the fact that Qubes 3.2 will not boot after installation on
> this machine could be related to Xen or kernel version, and I wonder If
> I could try to upgrade them to the latest availables during install or
> immediately after it, before attempting to reboot.
> 
> But I have no clue about whether this can be done with respect to Qubes
> very specific architecture, and how I could possibly do it.
> 
> Any help would be much appreciated.
> 
> TIA.
> 
> -- 
> Swâmi Petaramesh  PGP 9076E32E

Have you followed all the ThinkPad focused advices? 
https://www.qubes-os.org/doc/thinkpad-troubleshooting/

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8295a680-1927-49a8-a179-6107240c0451%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Can't figure out how to configure WiFi (Qubes 3.2)

[Hugo Costa]

On Saturday, 26 August 2017 00:54:49 UTC+1, Person  wrote:
> This is honestly a pretty stupid question, but no matter how I search, I 
> can't find the button that allows me to connect to WiFi. What do I do?

Use network manager, it should activate the applet and allow you to setup your 
network :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b856c49c-8900-4b8c-8d43-c91bcad1a4b9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: No Network access

[Hugo Costa]

On Saturday, 26 August 2017 05:41:19 UTC+1, ZBM -2  wrote:
> I'm running Qubes 3.2 on an Asus R541U
> My system isn't able to utilize the built in Ethernet and Wifi adapters.
> lspci command in sys-net shows both of them. 
> ifconfig shows lo and vif2.0 interfaces.
> 
> I tried to perform "sudo dnf install linux-firmware" as recommended by the 
> user's FAQ and get "Error: Failed to synchronize cache for repo 'updates'"
> (by the way, the faq still has yum instead of dnf)
> I'm currently trying to find an offline workaround or solution. I would 
> appreciate assistance in that endeavor, or alternately, a heads up that I 
> need to find another tree to bark up.

When I first instaled qubes, I remember using network manager, after that, the 
applet always appeared on the taskbar.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c549e154-5c43-4a7d-9b9f-00e4ae8932f5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - Lenovo Thinkpad T460p

[Hugo Costa]

On Saturday, 26 August 2017 12:26:43 UTC+1, Stig Sandbeck Mathisen  wrote:
> Hugo Costa <hugonco...@gmail.com> writes:
> 
> > On Monday, 26 December 2016 21:32:38 UTC, sti...@gmail.com  wrote:
> >> Suspend works fine, resume does not work at all.
> >> 
> >> Updating from kernel 4.4.x to kernel 4.8.12 from the unstable
> >> repository reduced idle power usage from ~15 W to 8 W.
> >> 
> >> Tuning the power usage further with values recommended by powertop
> >> reduces power usage to 6.8 W.
> >
> > Which programme do you use to check these values? I'm having a few
> > battery problems with my Yoga S1
> 
> Hello,
> 
> I used "powertop" to read those values and change some tuning parameters
> interactively.
> 
> Run it as root in a console window, hit "tab" a few times to change
> perspective, and see how altering each tuning value from inside the
> program affects power usage.
> 
> Note that enabling power saving on, for instance, the mouse may turn off
> its movement sensor until you click something. :)
> 
> Changing tuning parameters from inside powertop is not permanent, they
> last until the next boot.
> 
> 
> -- 
> Stig Sandbeck Mathisen
> https://fnord.no/

Yeah, I digged around after posting, already setup a startup command with 
--auto-tune, my battery is so much better, I can't believe it! :) Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ee992905-5552-4a24-bbbe-2ba6ea61a2e6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: New comer to QubesOS : pre install advices

[Hugo Costa]

On Thursday, 24 August 2017 21:05:41 UTC+1, deadbrain  wrote:
> Thanks Hugo for your detailed answer
> 
> 
> > I don't understand this, when you connect a new display, configure it on 
> > the Display menu on Dom0 and push the VM you want to present over there, 
> > it's not much different than a normal Linux installation.
> 
> I did not try the install yet. The tricky point is on such hardware 
> Lenovo does not wire both cards with outputs (HDMI)

Oh, in that case, you should check the HCL (https://www.qubes-os.org/hcl/) and 
look laptops with similar specs, maybe they have already faced that problem.

> >> - do you have partitioning layout advices ?
> > The setup already gives you a layout, you can tweak the sizes should you 
> > want that.
> perfect
> >> - I have read some docs on the website and watched videos but I did not 
> >> find much information about creating VM template (you provide Fedora 23 
> >> and Debian  8) but I would need fresher software  so at least Debian 9 aka 
> >> Stretch or may be Debian testing/unstable... Is it simple a matter of 
> >> changing debian.list file in the template ?
> > You can install any distro on a template. But if you want to save some 
> > time, you can clone the Debian 8 template and upgrade it to Debian 9 :) (I 
> > remember seeing a tutorial for that in the Kali documentation)
> 
> Ok I will do thatSounds to be the most obvious way
> >> - Do you have special configuration files/ advices about power consumption 
> >> ?
> > Also interested in this question, my Thinkpad doesn't last a long time with 
> > Qubes, even with only one VM running (may be the battery though). Until 
> > now, I was only able to tweak with the normal power settings - when to turn 
> > off the screen, brightness, etc.
> Did you apply powertop advices on your DOM0?

I have not, it appears not a lot of people have either, anyway, it doesn't 
appear to be that beneficial 
(https://groups.google.com/d/msg/qubes-users/-xXKdAkIjxU/GJDbRTQ6CgAJ)

> 
> >> I can't wait to test this so exciting piece of software 
> >>
> >> Kind regards
> >> Jerome
> >>
> >> PS:
> >> I did not find much information about install on bare metal (many 
> >> articles/videos are related to install inside VirtualBox / Vmware)..
> > Well, in order to record it without using a camera, it's easier to do it in 
> > a VM. But don't worry, it's the same.
> >>
> >> I will add another question dealing with UEFI install ...
> > Check the Thinkpad documentation, but I'll tell you right now, when you get 
> > the computer, first thing you need to do is access the BIOS and remove 
> > Secure Boot and change UEFI to Legacy Only.
> 
> That 's one of the first done after receiving the machine -)
> >> My laptop ships with Windows (10 I think) is it possible to keep it 
> >> installed ?
> > You can, but do remember the security issues Windows 10 might bring you. 
> > You can just install a Win7 vm on Qubes and use your programmes there, I 
> > mean, you have a beast of a computer. Anyway, if you do want it, you'll 
> > have to resize the Win10 partition in order to have space for Qubes.
> 
> It was only for one special software (IDE for embedded programming) but 
> I received one email today and it's stopped..so my question is obsolete
> 
> 
> Thanks again

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/61917b0a-806b-493f-985c-9e87465dba3a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Is it possible to add ricing tools for basic Qubes 3.2 repo?

[Hugo Costa]

On Sunday, 20 August 2017 17:51:28 UTC+1, turb...@gmail.com  wrote:
> Hi. Newbie question is at possible to add CLI/Ncurses tools for Qubes? 
> Also in Qubes 3.2 Installation problems with Compton and many others useful 
> tools. Thanks!
> 
> https://rizonrice.github.io/resources
> http://blog.micahcowell.com/blog/basics-of-ricing
> https://fun.irq.dk/funroll-loops.org
> https://nixers.net/showthread.php?tid=1566
> http://linuxbbq.org/cream.html
> http://archive.is/a36v
> Bean: http://i.imgur.com/BziH1iE.png
> https://github.com/thelostt/ricing
> https://www.reddit.com/r/unixporn/wiki/index
> https://github.com/nixers-projects/ricerous
> https://wiki.installgentoo.com/index.php...nux_ricing
> http://help.unc.edu/help/unix-customizin...vironment
> https://www.cs.odu.edu/~zeil/cs252/f16/Public/custom
> http://unix.stackexchange.com/questions/...oductivity
> https://rizonrice.github.io/resources
> http://blog.micahcowell.com/blog/basics-of-ricing
> http://apcmag.com/create-totally-custom-...sktop.htm
> http://8ch.net/rice
> https://rizonrice.github.io/resources

Well, you're able to change the DE, there is some documentation on that, you 
can change to i3 if you wish, but I'm guessing people that use this OS have 
other priorities.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/025cc999-dc1d-42ab-8e19-d37bdcf4852a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: HCL - Lenovo Thinkpad T460p

[Hugo Costa]

On Monday, 26 December 2016 21:32:38 UTC, sti...@gmail.com  wrote:
> Suspend works fine, resume does not work at all.
> 
> Updating from kernel 4.4.x to kernel 4.8.12 from the unstable repository 
> reduced idle power usage from ~15 W to 8 W.
> 
> Tuning the power usage further with values recommended by powertop reduces 
> power usage to 6.8 W.

Which programme do you use to check these values? I'm having a few battery 
problems with my Yoga S1

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/db3bb470-593e-472f-99a7-611481cb2f1c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: New comer to QubesOS : pre install advices

[Hugo Costa]

On Thursday, 24 August 2017 09:46:43 UTC+1, jerome@gmail.com  wrote:
> Hi all,
> I am about installing QubesOS on a brand new laptop (Thinkpad P51 with 64Gb 
> and big SSD drivers). This laptop is a very recent one so I can't find it in 
> the HCL (or the previous P50 model).
> I need a few advices:
> - to use videoprojector I will need to activate the Nvidia Quadro card ,  so 
> is the Bumblebee system working with DOM0 or should I use the only NVidia and 
> disable Bumblebee /  Intel integrated card... I don't need much graphical 
> power but I fear that the graphics output is wired to the only Nvidia card -(

I don't understand this, when you connect a new display, configure it on the 
Display menu on Dom0 and push the VM you want to present over there, it's not 
much different than a normal Linux installation.
> 
> - do you have partitioning layout advices ?

The setup already gives you a layout, you can tweak the sizes should you want 
that.

> 
> - I have read some docs on the website and watched videos but I did not find 
> much information about creating VM template (you provide Fedora 23 and Debian 
>  8) but I would need fresher software  so at least Debian 9 aka Stretch or 
> may be Debian testing/unstable... Is it simple a matter of changing 
> debian.list file in the template ?

You can install any distro on a template. But if you want to save some time, 
you can clone the Debian 8 template and upgrade it to Debian 9 :) (I remember 
seeing a tutorial for that in the Kali documentation)

> 
> - Do you have special configuration files/ advices about power consumption ?

Also interested in this question, my Thinkpad doesn't last a long time with 
Qubes, even with only one VM running (may be the battery though). Until now, I 
was only able to tweak with the normal power settings - when to turn off the 
screen, brightness, etc.

> 
> I can't wait to test this so exciting piece of software 
> 
> Kind regards
> Jerome
> 
> PS:
> I did not find much information about install on bare metal (many 
> articles/videos are related to install inside VirtualBox / Vmware)..

Well, in order to record it without using a camera, it's easier to do it in a 
VM. But don't worry, it's the same.
> 
> 
> I will add another question dealing with UEFI install ...

Check the Thinkpad documentation, but I'll tell you right now, when you get the 
computer, first thing you need to do is access the BIOS and remove Secure Boot 
and change UEFI to Legacy Only.
> My laptop ships with Windows (10 I think) is it possible to keep it installed 
> ?

You can, but do remember the security issues Windows 10 might bring you. You 
can just install a Win7 vm on Qubes and use your programmes there, I mean, you 
have a beast of a computer. Anyway, if you do want it, you'll have to resize 
the Win10 partition in order to have space for Qubes.

> I have a backup solution while changing the disk and installing as the only 
> OS... So this is really a bonus but not mandatory for me...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/11f68bb1-e215-4ab1-9501-43758658a036%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Windows 7 problems (R3.2)

[Hugo Costa]

Ok guys, I'd like to thank you all again, I've managed to get it working 
correctly! So, for those wondering, this is how I did it.

1 - Create a new TemplateHVM, add the ISO, put in 2048mb ram, increase the 
storage size from 20gb to at least 40, start in debug mode.

1b - if you get stuck on the glowing logo, follow this 
(https://github.com/QubesOS/qubes-issues/issues/2488)

2 - Install everything. I went with Win7 Pro x64 (remember Qubes Win Tools only 
work on Win7 x64). When you get to the naming part, remember to use no password 
and choose no automatic updates.

3 - After that, I updated everything, both mandatory and optional. Shutdown, 
restart, make sure all the updates are configured.

4 - Update the qrexec_timeout to 300 like the original tutorial indicates

5 - Reboot the VM using the latest qubes windows tools. Install everything, 
make sure you don't reboot at the first message (Xen will ask you to reboot, 
say no, continue with the installation). After that, everything should be done. 
Shut it down, go to the settings, enable Seemless GUI and try it out!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6eb4d444-e79e-4f0a-b170-ef314bbb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Re: Qubes Windows 10?

[Hugo Costa]

On Wednesday, 23 August 2017 20:45:55 UTC+1, Pete Howell  wrote:
> I tried to pull from the testing repository with the following:
> 
> > qubes-dom0-update --enablerepo=qubes-dom0-current-testing 
> > qubes-windows-tools
> 
> It lists version 3.2.2-3 as available, but downloaded failed -- "All mirrors 
> were tried".
> 
> How can one get the test version?
> 
> On Saturday, September 17, 2016 at 1:55:58 AM UTC-6, Pawel Debski wrote:
> > Folks,
> > 
> > I have Qubes 3.2 up, updated &
> > running like a charm. Now the Microsoft challenge. The doc @
> > https://www.qubes-os.org/doc/windows-appvms/ instructs to use
> > Windows 7. Do you suggest to stick with version 7 or go ahead to
> > 10 / 8?
> > 
> >   
> > 
> > -- 
> > 
> >   
> > 
> > Z powazaniem / Best Regards
> > 
> > Mit freundlichen Gruessen / Meilleures salutations
> > 
> > Pawel Debski

That's weird, I used that command yesterday and it worked perfectly. Maybe try 
on a different network?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/271c6fe7-0b05-4b48-8bdd-a60ade4b97fe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Windows 7 problems (R3.2)

[Hugo Costa]

Thank you for your answers.

I've tried using an earlier version of the Windows tools (3.2.1-3) and the
problem persists. I'll have to try it in a new vm with no updates (this one
was fully updated, already came with SP1 out-of-the-ISO). My VM isn't a
template, I was a bit lazy.

I've also noticed a new error. Qubes is unable to start the qrexec-daemon.

Thanks!

On 10 August 2017 at 18:38, <hugonco...@gmail.com> wrote:

> Hey,
>
> Installed everything, had to use this method https://github.com/QubesOS/
> qubes-issues/issues/2488, and now it "works".
>
> If I start the VM in Seemless GUI, it goes on but doesn't open any
> application (with and without debug mode on).
> If I start the VM without Seemless GUI, it only goes on with debug mode
> on, otherwise it'll follow the above pattern.
>
> Also, 2nd problem, I've installed MS Office, I've copied the shortcuts to
> the "All Programs" folder and I'm unable to find them in the "Applications"
> tab in the VM config. Is there anything I can do? Also, other installed
> programmes don't appear on the list, it's not just Office.
>
> Thanks for your time!
>
> Hugo
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "qubes-users" group.
> To unsubscribe from this topic, visit https://groups.google.com/d/
> topic/qubes-users/PrgPTjNJPHw/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-users/56cb754b-3c5f-4d6d-99be-3a62538a840f%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Hugo Costa

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABzYznwPx5K3VWFs4wx%3DKdpUaAGXpkhjFPR9_SJNuC-SohR7Aw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] HCL - Lenovo Thinkpad S1

[Hugo Costa]

Disable Secure Boot, change to "Legacy Only" and disable Virtualization.
The lock button on the side isn't mapped by default. You may enable VT-d
after the installation.

-- 
Hugo Costa

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABzYznxw-oSZ7rZ-6fAgpF9XyU75FpLCFQHT_u-NTtqnht-Ocw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Qubes-HCL-LENOVO-20CD0038PG-20170811-172149.yml
Description: application/yaml

[qubes-users] Re: Upgrading fedora 23 to 25 Problem

[Hugo Costa]

Good to know! My way may be a bit more efficient than installing 24 and
then 25, but it's important to remember that it'll erase the configs you
may have had on it.

On 10 August 2017 at 21:24, <frkla1...@gmail.com> wrote:

> Hi!
>
> Thx for the answer!
>
> I already installed fedora 24 and I upgraded than to 25. It worked :-)
>
> But your way sounds more efficient ;-)




-- 
Hugo Costa

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/CABzYznwVA_4eGzuGMYQq7wsZ2z-vvT9aMFTSXVkSy7yJVS8s2w%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.