Re: [qubes-users] Re: Does qubes block usb on thunderbolt port?

2020-10-13 Thread Matthias Horn
I find the thunderbolt/usb-c hardware compatibility a mess[1]

The USB-C dock I have uses DisplayLink[2] for output its a pain to get to work 
with Linux and ~impossible on cubes without compromising security of Dom-0[3] 

As far as I know Thunderbolt Docks use DisplayPort pass-through so should just 
work assuming the thunderbolt port your using supports the feature (it may need 
to be enabled in the bios), though I haven’t used any of these so nit sure.

[1] USB (various versions), PCIe, DisplayPort and PowerDelivery all can use the 
same physical plug, and it’s very much not obvious which subset happens to work 
on any given port.
[2] proprietary compressed frame buffer over high bandwidth USB, or apparently 
also (wireless) network.
[3] you need to attach the ports usb controller directly  to Dom-0, and then 
recompile + install the binary blob Display Link driver see 
https://github.com/displaylink-rpm/displaylink-rpm , and then significant 
massaging of the Xorg configuration to get it to play nice.


Sent from my iPad

> On 13 Oct 2020, at 05:34, 'Amir Omidi' via qubes-users 
>  wrote:
> Did any of this ever work? I have a USB C Thunderbolt based hub and I'm 
> unable to get it to output Displayport screens.
> 
> All the USB/ethernet/etc on it work fine though.
> 
> On Thursday, January 9, 2020 at 7:54:49 AM UTC-8 ryan...@ryantate.com wrote:
>> 
>> 
>> On Wednesday, January 8, 2020 at 3:14:03 PM UTC-5, brend...@gmail.com wrote:
>>> 1. Qubes has pcie hotplug disabled in the dom0 kernel, which TB uses for 
>>> PCIe-based thunderbolt devices. This is disabled for security reasons.
>>> 2. The TB alternate mode that supports USBs might not instantiate the PCIe 
>>> USB controller it connects through *until a USB device is connected to that 
>>> port*.
>>> 3. Therefore...depending on BIOS support...you *might* be able to have a 
>>> USB device seen by qubes if the USB device is plugged in at power-on. Even 
>>> if that works, it might be on a USB PCIe controller that is not already 
>>> attached to your sys-usb (if you have one).
>>> 4. If it does work, you might want to create a sys-usb-c which you run only 
>>> after connecting a device to the port at boot time, and assign the (usually 
>>> hidden) PCIe USB controller that that VM only.
>>> 
>>> 
>> 
>> Thanks for the reply! I took a break in the middle of typing my own reply, 
>> for a meeting, so your message came in as I was completing it.
>> 
>> All of your points seem to line up with what I discovered poking around. 
>> Yes, I can get usb-c seen if device connected at power on.
>> 
>> Thanks for the idea of an secondary sys-usb for usb-c! I had not considered 
>> that. If I discover I really need something Usb-c, which seems likely in 
>> time, I will probably do that. For now it's really just my new yubikey, 
>> which I am going to give to someone else and replace with a USB-A/NFC.
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/baf0e219-7c29-473b-ad76-3ba36a44ae8cn%40googlegroups.com.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/026E4A1D-A81A-4906-8665-63121C0FC74A%40gmail.com.


Re: [qubes-users] How to install DisplayLink USB to HDMI converter

2020-02-04 Thread Matthias Horn
hi,

I got this working on my laptop (dual 4K monitors), but It’s complicated, and 
compromised the security of dom0 (if that’s okay for you depends on your 
reasons for using Qubes)

I’ve sketched out the steps i took below, these intentionally are not step by 
step instructions. It’s fragile and you will probably have to do some 
debugging...

- ensure that the USB3 controller that you plug the display link adapter into 
is attached to Dom0 and not Sys-USB (I had to completely disable my sys-usb 
wich breaks other stuff).
This opens up a huge attack surface on Dom0. Only do this if you trust all 
the USB devices you’ll be plugging in...


- I needed to rebuild and install the display link and evdi RPMs. I grabbed the 
latest src.rpm got each and then rpmbuild in Dom0 to get installable packages 
(installing all the build and install dependencies with Qubes-Dom0-update).

This is a terrible idea, I should have used mock in a domU to build the RPMs... 
it’s also not ideal to be installing an untrusted binary blob (display link) in 
dom0

- (probably related to driving 16billion pixels...) I regularly have to restart 
X before I can use the extra screens (stop all vms, remove the X shared memory 
file, restart X, setup the extra screens, start the VMs as needed)

It’s probably  possible to do this in a cleaner way, run display link in the 
sys-usb qube and share the EVDI virtual frame buffer devices between Dom0 and 
Sys-USB, but the later part is probably hard to get working reliably...

Hope this is helpful,

‘Tias


Sent from my iPhone

>> On 3 Feb 2020, at 09:33, Omar Morando  wrote:
> 
> Hello,
> I'm a Qubes user, I'm using version 4.0.1 on my Dell Inspiron 13 5378 with 
> I-7, 16 GB of RAM, 2 TB SSD and everything works well.
> 
> I need to use a USB 3.0 HDMI converter for an external monitor, in addition 
> to the HDMI port built into the laptop. I have read a couple of topics from 
> Reddit about this RPM driver for Fedora but nobody has managed to make it 
> work:
> https://github.com/displaylink-rpm/displaylink-rpm
> Do you have any suggestions? Do you know if someone has managed to install it 
> or if there is a specific version for Qubes? Searching the net, I did not 
> find any other information.
> If you give me support I can do tests that can then be made public for other 
> users.
> Thank you
> 
> 
> Omar Morando
> E // omar.mora...@hotmail.it
> P // +39-348-4024361
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/VI1PR10MB358157310B986B1CD7F2016FF8000%40VI1PR10MB3581.EURPRD10.PROD.OUTLOOK.COM.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/363C3450-1408-44E9-BF0D-CF023D6A1EB2%40gmail.com.


Re: [qubes-users] Re: I passedthrough GPU pci to win7 but can't install driver on windows

2020-01-10 Thread Matthias Horn
I think Nvidia have logic in the (consumer) driver to detect when it’s running 
under XEN (and other hypervisors) and will refuse to load/install in that 
environment.
https://wiki.xen.org/wiki/Xen_VGA_Passthrough_Tested_Adapters

Sent from my iPhone

>> On 10 Jan 2020, at 05:15, xyzo  wrote:
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/fe3f992a-4749-4090-baaf-b3de26a55fb7%40googlegroups.com.
> 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4856BEEC-6304-4126-90F9-C489605962F5%40gmail.com.


Re: [qubes-users] ThinkPad T480

2019-04-30 Thread Matthias Horn
I have a T480 with the i7-8550 and 32gb ram. It’s a nice and powerful laptop.

Everything I have used so for has worked out of the box for, except power 
management.

I have the large auxiliary battery (advertised 27hrs, and I got that running 
windows) with gives me about 3-4 hours running wines (which is ok).
I haven’t yet figured out of to fix the power management, so it runs hot and 
has the poor battery life.

Sent from my iPhone

> On 30 Apr 2019, at 12:16, Zrubi  wrote:
> 
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
>> On 4/30/19 10:31 AM, ljul8...@gmail.com wrote:
>> Intel Core i5-8350U
> 
> I have a T480 with the CPU above.
> 
> However it's not about the CPU, the amount of RAM is more important.
> 
> And be aware, that
> - - you may not able to use the Thunderbolt + the USB-c port,
> - - I also have to hold back the kernel version on the 4.14 line,
> - - the power management part needs (heavy) tuning if you want to use it
> from battery...
> 
> - -- 
> Zrubi
> -BEGIN PGP SIGNATURE-
> 
> iQIzBAEBCAAdFiEEmAe1Y2qfQjTIsHwdVjGlenYHFQ0FAlzILn8ACgkQVjGlenYH
> FQ3AphAAqt4lWnwIvSfK/CQpQ/srsdBptCUe7c4kFPs4YO3NGoTLHr8UJz5YQqKR
> cz5oQk4HTUXsGqFRZTvjDhJvRK9m6351PCyp150LXtmiUap2hQZFPB5Jd32iT3Eg
> Zm0BPWtOx9iM57i8w9JVU+sfG7eOY1s02G+/fi/NzLb0bVZIl9EOFaed+h1FyVNf
> E+DRDmYiAax8bxorHtB2aS0rBPwG/F9i/RFbBtAg0uvQG26+brEyzGuwe1VHvUak
> 2vmG7nd/7nKa6//T/A1ANrkZck8L+O5R84UIGyWrmMlzVlMHw47S2c13j/Y799Up
> r2rYun3l71J0OdqN+b9pFVo5yi8c51vNP7bKBRbzkFuGxDr41mqx3XPgZPSfkmUL
> JhC7j3wwzpc8P71kTe7iApkdcFDVoEVZ7oGMGsmsWHx9kBQzKCyda6oseX5BWnb2
> n6aA7gQ3twHItUY0Dgwc40pZc0mocRoLkrwyf2PoYks8fnHOsO5kj2o8qw62Mf8t
> tssSUKxi+Ti4QISMRKq4MYNi4xPQEJWbadAIVpQamc5fkEfVJlY0tF7U6l2qY3xq
> Mxga9fGziLr/IbdkEWGVqSzzX65GbiR9bM4a3Fj8+efgTSIqN8NS186fGdC4ZtLn
> NHEWd1Q/2c7hEQYkmDyjFT1I9vCOHl6muj5LmuTDC6Om1EJMrD8=
> =SfRw
> -END PGP SIGNATURE-
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/51d8e108-f314-ff32-5da6-1016fb03e697%40zrubi.hu.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1A5A9296-624A-4DE9-B393-4E8BF383E6F9%40gmail.com.
For more options, visit https://groups.google.com/d/optout.