Re: [qubes-users] Qubes Structure

2019-12-29 Thread xao
>If you understand very little, then the most paranoid of setups will get  you very little in terms of security, because you will end up making  choices that compromise that security -- or you will just end up wasting a great deal of time on things that don't matter.  I do have some experience i

Re: [qubes-users] Troubleshooting Qubes graphical slowness

2019-12-29 Thread tetrahedra via qubes-users
On Sun, Dec 29, 2019 at 01:44:28PM +, 'awokd' via qubes-users wrote: tetrahedra via qubes-users: On Fri, Dec 27, 2019 at 09:57:16AM +0100, tetrahedra via qubes-users wrote: Unfortunately I need to get work done so have to reboot to "just make it go away" but I am still interested in trouble

Re: [qubes-users] Qubes Structure

2019-12-29 Thread tetrahedra via qubes-users
On Sun, Dec 29, 2019 at 10:56:31AM +0100, xao wrote: Hi!  Sorry for the bad question structure, don't know how to write it properly. I've seen some examples of how people setup their system and the most paranoid ones create separate standalone vm for each application and firewall that allows

Re: [qubes-users] Is it plausible to use Debian template with sys-XXX VM?

2019-12-29 Thread xao
Check this article - https://www.qubes-os.org/doc/templates/minimal/ (scroll down untill you see "Debian" header) It explains what you need to install so that debian template will work as expected.  -- You received this message because you are subscribed to the Google Groups "qubes-users" gro

[qubes-users] Re: Recommended laptop?

2019-12-29 Thread brendan . hoar
On Sunday, December 29, 2019 at 5:35:52 PM UTC-5, Blake S wrote: > > On Wednesday, December 25, 2019 at 10:09:24 PM UTC-6, brend...@gmail.com > wrote: >> >> My own longterm Qubes primary has been a used W520 quad core with four >> 8GB DIMMs for 32GB of RAM. Not bad for 2012 era laptop. [Avoid the

Re: [qubes-users] Qubes/Xen doesn't comply with IOMMU grouping rules for PCI passthru

2019-12-29 Thread brendan . hoar
On Sunday, December 29, 2019 at 7:25:49 PM UTC-5, Claudia wrote: > > Ha. Now that you mention it, I do remember laptops used to have PCIe > slots. But I think those days are pretty much over. > > On a side note, I remembered I saw some error about the IOMMU in the > kernel logs at some point. I j

Re: [qubes-users] Qubes/Xen doesn't comply with IOMMU grouping rules for PCI passthru

2019-12-29 Thread Claudia
December 29, 2019 2:19 PM, "awokd' via qubes-users" wrote: > Claudia: > >> December 26, 2019 12:59 PM, "awokd' via qubes-users" >> wrote: >> >>> Claudia: >>> >>> TLDR; check bottom of https://community.amd.com/thread/241650, looks >>> like there was a recently released related updated. Not

Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency

2019-12-29 Thread mastor
> mastor: > Now I have to solve "unable to reset PCI device, 00:14.0: no  FLR, PM reset > or bus reset available ...", but there's a thread on Github. > > awokd:> Enable the "no strict reset" option for the PCI device that is causing > problems via Qube Settings on the problem VM, then Devices

[qubes-users] Re: Recommended laptop?

2019-12-29 Thread Blake S
On Wednesday, December 25, 2019 at 10:09:24 PM UTC-6, brend...@gmail.com wrote: > > My own longterm Qubes primary has been a used W520 quad core with four 8GB > DIMMs for 32GB of RAM. Not bad for 2012 era laptop. [Avoid the dual core > versions: they only have two memory slots and can only sup

Re: [qubes-users] Qubes 4.0.1 - no grub2 menu during boot

2019-12-29 Thread 'awokd' via qubes-users
trueriver: > Booting into recent install of Qubes 4.0.1 I have just realised I have not > been setting the grub2 menu: it goes right in to loading Xen and then I see > the four Tuxes. Is this an EFI thing, or a new feature of this version? > > (I ask because as well as changing Qubes versions I'

Re: [qubes-users] Is it plausible to use Debian template with sys-XXX VM?

2019-12-29 Thread 'awokd' via qubes-users
trueriver: > I tried simply changing the template in qube settings, and some things worked > and others didn't. Notably sys-usb stops recognising any USB device, and > sys-net doesn't recognise WiFi. > > Is this a stupid idea, or are there straightforward ways to make it work? > > Ideally I'd l

Re: [qubes-users] Using Debian 10 template with D 9 VM; Q 4.0.1

2019-12-29 Thread 'awokd' via qubes-users
trueriver: > Hi, I am upgrading from Qubes 4.0 to 4.0.1 anyway. I notice that there is now > a Debian 10 template and there are clear instructions for how to install, but > that Q 4.0.1 still uses Debian 9. > > > Am I right in thinking that the template from the newer version of Debian > shoul

Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency

2019-12-29 Thread 'awokd' via qubes-users
mas...@tuta.io: > Now I have to solve "unable to reset PCI device, 00:14.0: no  FLR, PM reset > or bus reset available ...", but there's a thread on Github. Enable the "no strict reset" option for the PCI device that is causing problems via Qube Settings on the problem VM, then Devices tab, then

Re: [qubes-users] Backup issues with external USB and ESATA devices

2019-12-29 Thread 'awokd' via qubes-users
Charles Peters: > In late September I backed up qubes using a new WD Elements external > drive. At the time I don't think I had sys-usb installed. Yesterday when > I tried to do the backups I was unable to mount the WD Elements drive, > another USB connected Toshiba hard drive, or the Toshiba dri

Re: [qubes-users] Hyperthreading is turned off by Qubes

2019-12-29 Thread trueriver
>> I'm now wondering if there is a Xen >> setting to force Xen to allocate both virtual cores in the same physical >> core together? > I don't know but I wouldn't expect one to appear in an old xen. > Given R4.0 is 4.8 so if such feature is there, most likely that's not available until some future

[qubes-users] Qubes 4.0.1 - no grub2 menu during boot

2019-12-29 Thread trueriver
Booting into recent install of Qubes 4.0.1 I have just realised I have not been setting the grub2 menu: it goes right in to loading Xen and then I see the four Tuxes. Is this an EFI thing, or a new feature of this version? (I ask because as well as changing Qubes versions I've finally got EFI bo

[qubes-users] Is it plausible to use Debian template with sys-XXX VM?

2019-12-29 Thread trueriver
I tried simply changing the template in qube settings, and some things worked and others didn't. Notably sys-usb stops recognising any USB device, and sys-net doesn't recognise WiFi. Is this a stupid idea, or are there straightforward ways to make it work? Ideally I'd like to stop using fedora

[qubes-users] Using Debian 10 template with D 9 VM; Q 4.0.1

2019-12-29 Thread trueriver
Hi, I am upgrading from Qubes 4.0 to 4.0.1 anyway. I notice that there is now a Debian 10 template and there are clear instructions for how to install, but that Q 4.0.1 still uses Debian 9. Am I right in thinking that the template from the newer version of Debian should just work with VMs crea

Re: [qubes-users] Hyperthreading is turned off by Qubes

2019-12-29 Thread trueriver
Thanks Ilpo. I had half guessed the same. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on th

Re: [qubes-users] Qubes/Xen doesn't comply with IOMMU grouping rulesfor PCI passthru

2019-12-29 Thread 'Ilpo Järvinen' via qubes-users
On Sun, 29 Dec 2019, 'awokd' via qubes-users wrote: > Claudia: > > December 26, 2019 12:59 PM, "awokd' via qubes-users" > > wrote: > > > >> Claudia: > >> > >> TLDR; check bottom of https://community.amd.com/thread/241650, looks > >> like there was a recently released related updated. Not sure i

Re: [qubes-users] Hyperthreading is turned off by Qubes

2019-12-29 Thread 'Ilpo Järvinen' via qubes-users
On Sun, 29 Dec 2019, trueriver wrote: > > HT is turned off intentionally for security purposes. Some of the > Intel CPU vulnerabilities demonstrated within the recent years depend on > the side channels within the resources shared by the threads of the same > physical core. Thus it's advisable to

Re: [qubes-users] Hyperthreading is turned off by Qubes

2019-12-29 Thread trueriver
> HT is turned off intentionally for security purposes. Some of the Intel CPU vulnerabilities demonstrated within the recent years depend on the side channels within the resources shared by the threads of the same physical core. Thus it's advisable to not enable it Thanks for that explanation - y

Re: [qubes-users] Lost USB-Controller, lost tty-credentials, emergency

2019-12-29 Thread mastor
Dec 28, 2019, 19:31 by claud...@disroot.org: > December 28, 2019 6:02 PM, mas...@tuta.io wrote: > >> my USB controller is attached to nothing, but needed for Yubikey login. >> >>> I lost my tty2-credentials (the username), so I'm locked out of the system. >>> BIOS changes don't help. >>> Is ther

Re: [qubes-users] Qubes/Xen doesn't comply with IOMMU grouping rules for PCI passthru

2019-12-29 Thread 'awokd' via qubes-users
Claudia: > December 26, 2019 12:59 PM, "awokd' via qubes-users" > wrote: > >> Claudia: >> >> TLDR; check bottom of https://community.amd.com/thread/241650, looks >> like there was a recently released related updated. Not sure if >> applicable to your situation. > > Thanks for the link! I'm not

Re: [qubes-users] Troubleshooting Qubes graphical slowness

2019-12-29 Thread 'awokd' via qubes-users
tetrahedra via qubes-users: > On Fri, Dec 27, 2019 at 09:57:16AM +0100, tetrahedra via qubes-users wrote: >> Unfortunately I need to get work done so have to reboot to "just make it >> go away" but I am still interested in troubleshooting ideas (for when it >> happens next). Investigate xl top mor

[qubes-users] Qubes Structure

2019-12-29 Thread xao
Hi!  Sorry for the bad question structure, don't know how to write it properly. I've seen some examples of how people setup their system and the most paranoid ones create separate standalone vm for each application and firewall that allows only this application to connect to the internet. Curr