Re: [qubes-users] Computer Models Guaranteed to work with Qubes 4.0?

2017-01-04 Thread 'James Funkhauser' via qubes-users
On Wed, Jan 4, 2017 at 7:25 AM, taii...@gmx.com <'taii...@gmx.com'> wrote:

You'll want a KGPE-D16 motherboard with a 62xx series processor.


Thanks for the advice! Is this what you mean by 62xx series: 
http://ark.intel.com/products/88193/Intel-Core-i5-6200U-Processor-3M-Cache-up-to-2_80-GHz.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/flUGiCWBPr-CA7NkxC9FRbYrsDziq9mQFhjwQ572Zt2jEyac0rbkXM8RclcEEa-h0h-pLXJ7Up1k9bDnPK9QNz4ZGTd_Onm8xOTDXE8eZoQ%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Computer Models Guaranteed to work with Qubes 4.0?

2017-01-04 Thread taii...@gmx.com

On 01/03/2017 04:01 PM, 'James Funkhauser' via qubes-users wrote:


I would like to start saving up for a desktop that will run 4.0 out of the box. Price 
isn't really an issue; what's important is that I have a computer that meets all the 
standards necessary for running 4.0. I have looked at the HCL list, but none of the 
machines have been tested with 4.0 (which I understand, given that it is still in alpha). 
Would it be sufficient to just get a machine with one of the processors listed in the 
ark.intel link on your site's "Minimum requirements for 4.x" page? Or could I 
even just replace my current processor with one of those listed there?

Otherwise, if anyone can point me toward a machine (or better yet, a few 
different machines) that will meet all the necessary requirements, run the OS 
with sufficient hardware isolation, etc., I would be most grateful. Thanks in 
advance for your time.


You'll want a KGPE-D16 motherboard with a 62xx series processor.

It is blob free coreboot compatible and it supports user defined TPM 
CRTM (tpm addon sold separately)


I have one and it is great, supports IOMMU for graphics as well.


Any recent intel isn't going to support libre anything.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/875b6ddc-69a4-ca01-baad-e431eff27f35%40gmx.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Computer Models Guaranteed to work with Qubes 4.0?

2017-01-03 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-03 15:41, James Funkhauser wrote:
> The lowest bar is the minimal requirements.[2] Even the minimal 
> requirements for 4.x are quite secure, since they now include VT-d 
> and VT-x (which weren't minimally required in previous Qubes 
> releases). VT-d is required for isolating devices (e.g., 
> networking, USB),[3] and VT-x is required for running certain
> kinds of VMs (e.g., Windows).[4] This should be relatively easy to 
> achieve, but you have to attend to more than just the CPU's 
> properties. For example, it's not enough that the CPU alone 
> supports VT-d. The motherboard has to support it also.
> 
> I see. I can then shop around for devices that have one of the
> CPUs listed as being compatible. But what about motherboards? Is
> there a compatibility list for those?
> 

Not one that I'm aware of. Typically, you have to check the specs for
the motherboard you're considering purchasing.

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=huBa
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/684a49cf-ead9-205f-1ba2-9b333d72498b%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Computer Models Guaranteed to work with Qubes 4.0?

2017-01-03 Thread 'James Funkhauser' via qubes-users
The lowest bar is the minimal requirements.[2] Even the minimal
requirements for 4.x are quite secure, since they now include VT-d and
VT-x (which weren't minimally required in previous Qubes releases). VT-d
is required for isolating devices (e.g., networking, USB),[3] and VT-x
is required for running certain kinds of VMs (e.g., Windows).[4] This
should be relatively easy to achieve, but you have to attend to more than
just the CPU's properties. For example, it's not enough that the CPU
alone supports VT-d. The motherboard has to support it also.

I see. I can then shop around for devices that have one of the CPUs listed as 
being compatible. But what about motherboards? Is there a compatibility list 
for those?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/NFxdUlBeNwXu8EJh5WZB3WTYOPoRQVCUBG0V-_USoSxri19StS4t4dQIIuXSUwQoLhk4ZKivgxx7N1r9A-GEtpYh77r_oDDkAUUwAZ5zgAI%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Computer Models Guaranteed to work with Qubes 4.0?

2017-01-03 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2017-01-03 13:01, 'James Funkhauser' via qubes-users wrote:
> I would like to start saving up for a desktop that will run 4.0 out
> of the box. Price isn't really an issue; what's important is that I
> have a computer that meets all the standards necessary for running
> 4.0. I have looked at the HCL list, but none of the machines have
> been tested with 4.0 (which I understand, given that it is still in
> alpha). Would it be sufficient to just get a machine with one of the
> processors listed in the ark.intel link on your site's "Minimum
> requirements for 4.x" page? Or could I even just replace my current
> processor with one of those listed there?
> 
> Otherwise, if anyone can point me toward a machine (or better yet, a
> few different machines) that will meet all the necessary
> requirements, run the OS with sufficient hardware isolation, etc., I
> would be most grateful. Thanks in advance for your time.

There are a few different levels of compatibility. The highest is
Qubes-certified hardware. Unfortunately, I'm not aware of any machines
that meet all the certification requirements for Qubes 4.x.[1] But this
shouldn't be too surprising, given that those requirements are
exceptionally stringent and intentionally aspirational.

The second level is the recommended requirements.[2] The fast SSD and
Intel IGP requirements are mainly about convenience and compatibility
(e.g., avoiding the troubleshooting hassles of discrete graphics cards).
A TPM is required for AEM, but if you don't plan on using AEM, then it's
not necessary. A non-USB keyboard or multiple USB controllers is required
if you wish to have a dedicated USB qube and to use it safely, since
otherwise it would control your keyboard (and either your keyboard
controls dom0, or you don't control dom0).

The lowest bar is the minimal requirements.[2] Even the minimal
requirements for 4.x are quite secure, since they now include VT-d and
VT-x (which weren't minimally required in previous Qubes releases). VT-d
is required for isolating devices (e.g., networking, USB),[3] and VT-x
is required for running certain kinds of VMs (e.g., Windows).[4] This
should be relatively easy to achieve, but you have to attend to more than
just the CPU's properties. For example, it's not enough that the CPU
alone supports VT-d. The motherboard has to support it also.

[1] https://www.qubes-os.org/news/2016/07/21/new-hw-certification-for-q4/
[2] https://www.qubes-os.org/doc/system-requirements/#qubes-release-4x
[3] 
https://www.qubes-os.org/doc/user-faq/#can-i-install-qubes-on-a-system-without-vt-d
[4] 
https://www.qubes-os.org/doc/user-faq/#can-i-install-qubes-on-a-system-without-vt-x

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-BEGIN PGP SIGNATURE-
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=m5/i
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/55e1d319-12ba-977f-3901-bcaa34179d3f%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Computer Models Guaranteed to work with Qubes 4.0?

2017-01-03 Thread 'James Funkhauser' via qubes-users
I would like to start saving up for a desktop that will run 4.0 out of the box. 
Price isn't really an issue; what's important is that I have a computer that 
meets all the standards necessary for running 4.0. I have looked at the HCL 
list, but none of the machines have been tested with 4.0 (which I understand, 
given that it is still in alpha). Would it be sufficient to just get a machine 
with one of the processors listed in the ark.intel link on your site's "Minimum 
requirements for 4.x" page? Or could I even just replace my current processor 
with one of those listed there?

Otherwise, if anyone can point me toward a machine (or better yet, a few 
different machines) that will meet all the necessary requirements, run the OS 
with sufficient hardware isolation, etc., I would be most grateful. Thanks in 
advance for your time.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cYX4B2e7z_zFKlAp5kUSuy0HIUAwQfdwR6Y5XwayCbhjbQkAMEU4javhYhGW_QTIj_n4GioIQkZhaYBo8bAtagFzlZKIXLZiXZXgK97oT48%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.