Re: [qubes-users] sys-firewall domain start failed
On Sunday, May 13, 2018 at 2:30:06 PM UTC-4, para-vak wrote: > Indeed, yet I rarely input anything without 'sudo' behind it... anyway... > Disregard! A fresh install has not reproduced the error! It seems that > ensuring proper formatting of the disk is paramount! GParted + a manual > partitioning in Qubes setup to be sure. > > On May 13, 2018 12:24 PM, awokd wrote: > > > On Sun, May 13, 2018 3:52 pm, 'para-vak' via qubes-users wrote: > > > > > Initial install with default template settings: > > > > > > Upon concluding final configuration after 1st reboot, just after all VMs > > > > > > have been created for the first time, right before first booting into the > > > > > > system: > > > > > > ['/usr/bin/qvm-start: 'sys-firewall'] failed: stdout:"" > > > > > > stderr:"start failed: internal error: libxenlight failed to > > > > > > create new domain 'sys-firewall', see > > > > > > /var/log/libvert/libxl/libxl-driver.log > > > > > > ISO file integrity has been verified. Media tests during a multiple > > > > > > re-install attempts with different media have passed, and yet the error is > > > > > > reproduced. > > > > > > Following suggestion in error message, reveals log is nonexistent. > > > > That is odd, ordinarily it would be sys-net or sys-usb with issues like > > > > that. I think you might have to be su to see that log file. If you qvm-ls, > > > > what is running? If sys-net fails to start, that might cause sys-firewall > > > > to also fail. Also, do a qubes-hcl-report and check the last 5 lines about > > > > HVM, IOMMU, etc. you must run firewallVM in pv mode. then most possibe will start. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e7c4dd51-ae12-4664-b5b5-f130622ccf89%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Qubes R4.0 - no internet working in appVM
On Sunday, May 13, 2018 at 11:59:16 AM UTC-4, awokd wrote: > On Sat, May 12, 2018 7:08 pm, wrote: > > netVM has ok ping to google.com > > firewallVM has no pings > > appVM has also no pings > > > > Maybe it's worth to mention: update template VM was done with success > > (which is a bit odd as update actually was done with success as firewallVM > > has no pings). > > Are you using the default templates and AppVMs, or ones you've restored? > Try doing a reinstall and testing with the default ones only. appVM's are not restored. All is default except I changed to pv mode netVM and firewallVM (in hvm and pvh do not started). Looks like i will back to R3.2 as R4.0 is useless for me with no internet in appVM's. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/905972e6-88d4-40b4-b9a1-a14122d07661%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Qubes R4.0 - no internet working in appVM
On Sunday, May 13, 2018 at 11:59:16 AM UTC-4, awokd wrote: > On Sat, May 12, 2018 7:08 pm, wrote: > > netVM has ok ping to google.com > > firewallVM has no pings > > appVM has also no pings > > > > Maybe it's worth to mention: update template VM was done with success > > (which is a bit odd as update actually was done with success as firewallVM > > has no pings). > > Are you using the default templates and AppVMs, or ones you've restored? > Try doing a reinstall and testing with the default ones only. appVM's are not restored. All is default except I changed to pv mode netVM and firewallVM (in hvm and pvh do not started). Looks like i will back to R3.2 and R4.0 is useless for me with no internet in appVM's. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/41706dca-40d1-4c03-98ea-eafae32aa2fe%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] boot partition on usb stick - how do it?
I'm interesting how can be done puting partition /boot on usb stick. Could anybody write instruction? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/5b424d65-76d7-4a29-812f-b9056e3bc559%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Qubes R4.0 advantange over R3.2 ?
As i have internet connection problem on Qubes R4.0 that i' unable to resolve i probably back to qubes R3.2. My question is Qubes R.4.0 significantly more secure over R3.2? Is version R3.2 has known not resolved issues/vulnerabilities that at version R4.0 are not present? My hardware has HVM but not IOMMU. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1547a60f-d76a-4ebf-b817-66c001bee411%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Qubes R4.0 - no internet working in appVM
netVM has ok ping to google.com firewallVM has no pings appVM has also no pings Maybe it's worth to mention: update template VM was done with success (which is a bit odd as update actually was done with success as firewallVM has no pings). -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/30062c7d-2b7e-45b7-be2c-23526ea2e38a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Qubes R4.0 - no internet working in appVM
On Friday, May 11, 2018 at 3:17:05 PM UTC-4, Qubes Guy wrote: > On Friday, May 11, 2018 at 1:17:24 PM UTC, niepo...@gmail.com wrote: > > Fresh install of Qubes R4.0 and there is no internet connection in appVM - > > firefox just not load websites. > > > > Internet connection actually is ok as I'm able to make update for template > > VM. > > > > What can be reason of this not working internet in app VM and how resolve > > this? > > Is this still a problem? Did you give your AppVM access to the net VM (set > "Networking" to sys-firewall (preferably) or sys-net in the settings dialog > for the AppVM)? Yes, problem still exist. There was sys-firewall connected to appVM as well sys-net and no connection. I have also tried changing template from fedora to debian -internet not working. I have also install chromium browser and connection not working. Very frustrating situation... -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/17e05eba-8641-423c-8536-7e0af93f63c9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Qubes R4.0 - no internet working in appVM
Fresh install of Qubes R4.0 and there is no internet connection in appVM - firefox just not load websites. Internet connection actually is ok as I'm able to make update for template VM. What can be reason of this not working internet in app VM and how resolve this? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/97bb741f-9bdc-4437-b1b1-81389855e5ea%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Preventing VPN leaks once VPN connection is disconnect
> > > >> Also, if you run bitmask just in individual appVMs (instead of proxyVM, > >> which shares the connection with some number of appVMs) then in that > >> situation it probably won't need Qubes-specific rules to prevent leaks. > >> > > > > not true, bitmask in appVM's once VPN is disconnect allow clear and > > unencrypted traffic. > > In this case you're following the usage and threat model that LEAP > designed bitmask for. IOW, the appVM is like a regular Linux PC and the > user must be mindful of the connection state. > > -- > > Chris Laprise, tas...@posteo.net > https://github.com/tasket > https://twitter.com/ttaskett > PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 Is there option to add in firewall appVM rule that allows connection only with VPN server ip? and once connection is disconnect traffic will be stopped? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/574b9390-fcca-494d-af49-cfbc0d01e260%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Preventing VPN leaks once VPN connection is disconnect
> Also, if you run bitmask just in individual appVMs (instead of proxyVM, > which shares the connection with some number of appVMs) then in that > situation it probably won't need Qubes-specific rules to prevent leaks. > not true, bitmask in appVM's once VPN is disconnect allow clear and unencrypted traffic. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ba522a59-f9c1-4105-ab87-754e03106cd8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] dom0 logs - blank window
tried and there is no that file message -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/67cd9b93-d6b0-4526-b203-b85be37ac7ef%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] dom0 logs - blank window
Could anybody tell me what could be reason that at my dom0 there is no logs? GUI>>>logs>>var/log/xen/console/hypervisor.log and show blank window - no single line of log. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e532cdfb-0753-4514-b8f3-2ff2743a4989%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Preventing VPN leaks once VPN connection is disconnect
I'm user of vpn bitmask software and accidentally, from time to time connection disconnect and there is few second to connect again. How is easiest way to set up firewall rules that prevent leaks with clear and unencrypted traffic? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0687c302-1dec-4864-b47d-8e0f5e2a39fd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Bitmask installation problem
I also tried using standalone version of bitmask and program starts but there is info " The VPN requires that certain helpers are installed on your system." and once I click on "Install Helper Files" nothing is happen and can't set up working vpn connection. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/caded9e4-dcc2-4321-96f2-9775f44d3710%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Bitmask installation problem
On Monday, March 19, 2018 at 3:37:22 PM UTC+1, Johannes Graumann wrote: > On Mon, 2018-03-19 at 01:32 -0700, niepowie...@gmail.com wrote: > > Hello, > > > > I'm trying make set up vpn with bitmask application. > > > > I tried install bitmask to debian template. > > > > have done steps listed on bitmask site as below in termainal: > > > > sudo apt install leap-archive-keyring > > sudo sh -c 'echo "deb http://deb.leap.se/client release stretch" > > > /etc/apt/sources.list.d/bitmask.list' > > sudo apt update && sudo apt install bitmask > > > > But there is info as below > > > > Some packages could not be installed. This may mean that you have > > requested an impossible situation or if you are using the unstable > > distribution that some required packages have not yet been created > > or been moved out of Incoming. > > The following information may help to resolve the situation: > > > > The following packages have unmet dependencies: > > bitmask : Depends: bitmask-core but it is not going to be installed > >Depends: bitmask-qt but it is not going to be installed > >Depends: bitmask-vpn but it is not going to be installed > >Depends: bitmask-mail but it is not going to be installed > > E: Unable to correct problems, you have held broken packages. > > > > How can I resolve this problem? Any advices? > > > > Shouldn't you use 'apt-get' (or 'aptitude') instead of plain 'apt'? > > Sincerely, Joh I have used: sudo apt-get install bitmask but no success. Could have any advice how to resolve this problem? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/412fbcf5-caf2-466a-82b8-8788dc417994%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Bitmask installation problem
Hello, I'm trying make set up vpn with bitmask application. I tried install bitmask to debian template. have done steps listed on bitmask site as below in termainal: sudo apt install leap-archive-keyring sudo sh -c 'echo "deb http://deb.leap.se/client release stretch" > /etc/apt/sources.list.d/bitmask.list' sudo apt update && sudo apt install bitmask But there is info as below Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: bitmask : Depends: bitmask-core but it is not going to be installed Depends: bitmask-qt but it is not going to be installed Depends: bitmask-vpn but it is not going to be installed Depends: bitmask-mail but it is not going to be installed E: Unable to correct problems, you have held broken packages. How can I resolve this problem? Any advices? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7a783856-0176-4ee4-a984-ae74299c80bd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Bitmask log with errors - it's normal?
My bitmask application always shows errors (on GUI status is - connected).
Could anybody check below logs and tell if its normal and confirm there is no
reason to worry about it.
[2017-12-18 08:13:29] ERROR - L#None : None:None - Requirements file not found.
IOError(2, 'No such file or directory')
[2017-12-18 08:13:30] WARNING - L#None : None:None - Backend is offline!
[2017-12-18 08:14:16] ERROR - L#455 : twisted.python.log:emit - Unhandled Error
Traceback (most recent call last): File "/usr/lib/python2.7/threading.py", line
783, in __bootstrap self.__bootstrap_inner() File
"/usr/lib/python2.7/threading.py", line 810, in __bootstrap_inner self.run()
File "/usr/lib/python2.7/threading.py", line 763, in run
self.__target(*self.__args, **self.__kwargs) --- ---
File "/usr/lib/python2.7/dist-packages/twisted/python/threadpool.py", line 196,
in _worker result = context.call(ctx, function, *args, **kwargs) File
"/usr/lib/python2.7/dist-packages/twisted/python/context.py", line 118, in
callWithContext return self.currentContext().callWithContext(ctx, func, *args,
**kw) File "/usr/lib/python2.7/dist-packages/twisted/python/context.py", line
81, in callWithContext return func(*args,**kw) File
"/usr/lib/python2.7/dist-packages/leap/bitmask/services/eip/eipbootstrapper.py",
line 73, in _download_config self._download_if_needed) File
"/usr/lib/python2.7/dist-packages/leap/bitmask/services/__init__.py", line 149,
in download_service_config cookies=cookies) File
"/usr/lib/python2.7/dist-packages/requests/sessions.py", line 469, in get
return self.request('GET', url, **kwargs) File
"/usr/lib/python2.7/dist-packages/requests/sessions.py", line 457, in request
resp = self.send(prep, **send_kwargs) File
"/usr/lib/python2.7/dist-packages/requests/sessions.py", line 569, in send r =
adapter.send(request, **kwargs) File
"/usr/lib/python2.7/dist-packages/requests/adapters.py", line 407, in send
raise ConnectionError(err, request=request)
requests.exceptions.ConnectionError: ('Connection aborted.', gaierror(-2, 'Name
or service not known'))
[2017-12-18 08:14:16] ERROR - L#None : None:None - Unable to connect: Problem
with provider
[2017-12-18 08:14:16] ERROR - L#None : None:None - ('Connection aborted.',
gaierror(-2, 'Name or service not known'))
[2017-12-18 08:14:22] WARNING - L#None : None:None - Could not connect to
OpenVPN yet: MissingSocketError()
--
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/498ece5c-65d6-4793-b10e-4bcf0c24d2e4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Bitmask VPN DNS leaks
Also why bitmask connection with proxyVM has leaks and connection bitmask in appVM has no leaks. Any idea? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/57af4c01-ff90-434f-a6ce-d8bee66b0187%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Bitmask VPN DNS leaks
Running Bitmask in appVM has no leaks. Thre are errors show in bitmask logs as below. Colud anybody review them and tell if my bitmas works proper with there errors? - [2017-12-18 17:44:10] ERROR - L#None : None:None - Requirements file not found. IOError(2, 'No such file or directory') [2017-12-18 17:44:11] WARNING - L#None : None:None - Backend is offline! [2017-12-18 17:46:00] WARNING - L#None : None:None - Trying to update eip enabled status but there's no default provider. Disabling EIP for the time being... [2017-12-18 17:46:27] WARNING - L#44 : leap.common.files:check_and_fix_urw_only - Bad permission on /home/user/.config/leap/providers/riseup.net/keys/ca/cacert.pem attempting to set 600 [2017-12-18 17:46:30] WARNING - L#44 : leap.common.files:check_and_fix_urw_only - Bad permission on /home/user/.config/leap/providers/riseup.net/keys/client/openvpn.pem attempting to set 600 [2017-12-18 17:46:33] WARNING - L#None : None:None - Could not connect to OpenVPN yet: MissingSocketError() --- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/85c9dfe5-b771-4394-9aa9-cc4148d58ba8%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Re: Bitmask VPN DNS leaks
On Monday, December 18, 2017 at 11:42:43 AM UTC+1, ajahnm...@gmail.com wrote: > On Monday, December 18, 2017 at 8:50:51 AM UTC, niepo...@gmail.com wrote: > > Do anybody know how prevent or disable dns leak with bitmask vpn provider? > > > > Bitmask when used "out of box" is useless as there are dns leak (checked > > with dnsleaktest.com). > > > > Instruction please. > > Have you set up a proxy-vm for your VPN connection? > > I had DNS leaks with a VPN provider but using a VM prevented it from > happening again > > https://www.qubes-os.org/doc/vpn/ > > If it still leaks, change VPN provider. yes, i use proxy vpn. there is no info in https://www.qubes-os.org/doc/vpn/ how prevent bitmask from leaking dns. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2b0f412c-8d5c-4fc8-a499-03cfc65f0d48%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[qubes-users] Bitmask VPN DNS leaks
Do anybody know how prevent or disable dns leak with bitmask vpn provider? Bitmask when used "out of box" is useless as there are dns leak (checked with dnsleaktest.com). Instruction please. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/d8aacb76-d4a8-41aa-971e-0516388b0ef5%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
