Hi Frédéric,
On Sun, Mar 21, 2021 at 11:33:05PM +0100, Frédéric Pierret wrote:
> Due to recent troubles with kernels 5.4.X and 5.10.X, I've decided to add
> again to this weekly pipeline, the build of a fresh Qubes R4.1 ISO. I don't
> build any package or any template. It uses only Qubes OS reposi
hi,
so I think I'm experiencing https://bugs.freedesktop.org/show_bug.cgi?id=112296
when running Qubes 4.0 with a 4.19 kernel on a x230, that is, since the
following
line appeared in Xorg.0.log:
==> /var/log/Xorg.0.log <==
[ 19271.994] (EE) intel(0): Failed to submit rendering commands (No such
hi,
unman wrote today:
Please consider the guidelines and be respectful and polite to others.
None of these accusations of trolling help build the commmunity, or
advance Qubes.
and while I totally agree with this I've also decided that the latest
conspirancies and insults on th
On Wed, Feb 06, 2019 at 12:51:04PM -0600, John Goold wrote:
> It's an interesting discussion.
yes, but it's also entirely off-topic for this list. please stop it.
--
tschau,
Holger
---
holger@(de
On Wed, Feb 06, 2019 at 11:34:57AM -0500, kitchm via Forum wrote:
> [...] BTW, you are certainly not polite,
> but you are obviously such a whiner since you continue to
> whine about me and make this personal.
can you all please stop your ad-hominem attacks and off-topic
discussions and keep this
On Mon, Jan 28, 2019 at 11:46:55AM -0600, Stuart Perkins wrote:
> Up to a certain manufacture, you can go to coreboot and lose the ME entirely.
> After that point, setting the HAP bit may be your best option. We need
> someone to to reverse engineer the ME and implement enough of it in coreboot
On Sun, Jan 27, 2019 at 12:54:26AM +, unman wrote:
> > Keep in mind that all PGP Debian/Ubuntu signing keys have been stolen
> Do you have *any* evidence for this claim?
I *believe* they probably misunderstood evil32.com and it's fallout.
--
tschüß,
Holger
-
On Sun, Jan 27, 2019 at 02:37:16AM -0800, goldsm...@riseup.net wrote:
> > 2/
> > Imagine that apt-transport-https *had* been adopted - have you actually
> > looked at the list of vulnerabilities in libcurlnd the various
> > breakages in the TLS CA system?
that. plus, apt is running as root and ap
On Thu, Nov 15, 2018 at 10:07:31AM +0100, qubes-...@tutanota.com wrote:
> > has this (updating the HCL for Librem 13v2) happend now?
this was and is my point, here+now.
--
cheers,
Holger
---
holg
On Sat, Nov 10, 2018 at 09:24:40AM -0800, Kyle Rankin wrote:
> It's a shame this thread got hijacked by people...
[...discussing other stuff...]
> Could someone who is responsible for the HCL please update it with the data
> I've provided in this thread? This would update the HCL with a version of
On Sun, Nov 11, 2018 at 03:45:21PM +, unman wrote:
> lenovo x230s are still widely available, and great for Qubes.
while I agree with that, I want to point out that they contain several
non free blobs which cannot be changed.
just because there was so much purism bashing in this thread. :-D
On Sat, Nov 10, 2018 at 09:24:40AM -0800, Kyle Rankin wrote:
> It's a shame this thread got hijacked by people slandering the company.
indeed.
> PS. For what it's worth we continue to work earnestly behind the scenes to
> liberate the remaining binary blobs (FSP and what remains of the ME after
>
On Tue, Nov 06, 2018 at 07:09:52AM -0800, jonbrownmaste...@gmail.com wrote:
> Does this effect Qubes OS?
no. (Qubes OS uses software encryption. You can however manually enable
hardware encryption like you can on any OS.)
--
cheers,
Holger
-
On Sat, Oct 27, 2018 at 03:08:22AM +0200, Maillist wrote:
> Unfortunately, with coreboot (assuming you mean a security relevant
> coreboot), there are none which fit your specs.However, its possible to
> hack a 13.3 FHD display in an x230.
https://forum.thinkpads.com/viewtopic.php?t=122640 explain
On Wed, Oct 24, 2018 at 02:13:58AM -0700, mike wrote:
> Could anyone please share some Qubes + i3 tips and tricks?
> For instance, how do you launch applications from different qubes using dmenu?
> What is the actual command to launch an application in a qube?
> Where can I find a source/config for
hi,
On Sun, Oct 21, 2018 at 05:05:54PM -0700, Josefa Hays wrote:
> I've been using the Enigmail-plugin for many years. However I just
> realized it had disappeared from Thunderbird. When trying to reinstall
> it in the Debian-9 template I get the following error:
[...]
> I realize this is (probab
On Fri, Oct 05, 2018 at 10:26:18PM -0500, Andrew David Wong wrote:
> the Qubes OS
> Project will continue to support Qubes 3.2 as planned until 2019-03-28. [6]
thank you, Qubes OS!
> [...] Users who decide to continue using Whonix on Qubes 3.2 do so
> at their own risk.
this has been the case a
On Mon, Sep 24, 2018 at 06:52:30PM -0300, Franz wrote:
> I understand that the Lenovo x230 does not have the power to properly set
> the two displays each with the correct resolution, but in mirror mode, they
> are exactly the same and it works.
I use an x230 here with an external 4k display and i
On Tue, Sep 18, 2018 at 03:11:10PM -0700, Guy Frank wrote:
> Could someone clue me in on whether it's unusual for dom0 to be perpetually
> running the processor at at least 105% all the time according to xentop?
13% here, when not displaying anything else on the screen. 27% when
playing music...
On Thu, Sep 13, 2018 at 09:00:40PM -0500, Andrew David Wong wrote:
> * One month after a new stable version of Qubes OS is released, Whonix
>TemplateVMs will no longer be supported on any older version of Qubes
>OS.
I'm quite disappointed by this.
--
cheers,
Holger
--
On Tue, Aug 14, 2018 at 07:42:00PM +, Patrick Schleizer wrote:
> Now reference here:
> https://www.whonix.org/wiki/Monero
>
>
> I am wondering how to save users from as many manual steps as possible.
since a bit more than 2 weeks monero can be installed on stretch with
'sudo apt install -t s
On Thu, May 24, 2018 at 07:29:18PM -0500, Andrew David Wong wrote:
> Thank you for the correction. I've updated the announcement on the
> website to clarify this:
> https://github.com/QubesOS/qubes-posts/commit/3db9a35e297b3defa0863f8ab02ebd56e8384053
thank you, looks good!
--
cheers,
H
On Wed, May 23, 2018 at 08:21:12PM -0500, Andrew David Wong wrote:
> Fedora 26 will reach EOL ([end-of-life]) on 2018-06-01, and Debian 8
> (["Jessie" full, not LTS][debian-releases]) will reach EOL on
> 2018-06-06. We strongly recommend that all Qubes users upgrade their
> Fedora 26 and Debian 8 T
hi,
I've been trying to use sweethome3d from Debian stretch (so "apt install
sweethome3d") but I cannot draw any walls or rooms, the tool immediatly
stops with a 0cm length wall.
I tried this with Qubes and the i3 window-manager, while I know that a
friend uses sweethome3d and i3 on plain Debian
On Mon, May 14, 2018 at 03:34:00AM -0700, cr33dc0...@gmail.com wrote:
> Does anyone know how to use cd command with qvm-run?
qvm-run --pass-io personal "cd /home/user/Desktop/ ; ls"
--
cheers,
Holger
--
You received this message because you are subscribed to the Google Groups
"qubes-
On Fri, May 04, 2018 at 09:01:13AM -0700, Reza wrote:
> 3) I click on "settings" icon (the wheel)and I increase the "private storage
> max size" from 2048 to its max value 10240 (written right below as 'system
> storage max size').
you want to increase the private storage size, not the system st
Hi,
On Fri, Apr 06, 2018 at 08:25:37PM +0200, 799 wrote:
> as described in the howto I have extracted the vga.rom from my own
> BIOS-files.
> I can use resume and the laptop reconnects its network adapters as soon as
> it wakes up.
> So far no issues at all.
thanks for explaining.
> > The corebo
hi,
On Fri, Apr 06, 2018 at 09:22:52AM +, 799 wrote:
> As mentioned I have also drafted a how-to to setup Coreboot on a X230,
> including building the pi, flashrom and extracting Blobs.
out of curiosity: does resume work reliably for you? For me it didnt
with coreboot (and the free VGA bios)
On Thu, Mar 29, 2018 at 03:38:34PM -0400, taii...@gmx.com wrote:
> My issue is with purisms incredibly dishonest marketing, their pressure
> campaigns on the FSF, their insulting of their competitors - not their
> existence in general or the practice of selling of laptops that are only
> slightly m
On Sun, Mar 11, 2018 at 02:11:02PM +0100, haaber wrote:
> I don't know what this 3D-thing, is I'll learn it. I have, in the
> meanwhile, tested the attached file, that distinguishes also running,
> paused and halted VM's. For the moment this is completely sufficient for
> me. Maybe I'll add the com
On Fri, Mar 02, 2018 at 07:10:22PM +, Holger Levsen wrote:
> On Tue, Feb 27, 2018 at 03:23:50PM +0100, haaber wrote:
> > to have the shell behave nicer. If I have some free time, I might
> > customize this stub to suggest available options to all qvm-* and
> > qubes-* com
On Tue, Feb 27, 2018 at 03:23:50PM +0100, haaber wrote:
> to have the shell behave nicer. If I have some free time, I might
> customize this stub to suggest available options to all qvm-* and
> qubes-* commands. I am surprised that I might be the first one to
> discuss this subject (?!) Bernhard
On Wed, Feb 07, 2018 at 11:01:33AM +0100, Marek Marczykowski-Górecki wrote:
> I think this is just about estimation of used disk space - one package
> is already installed and rpm know how much disk space is really used,
> the other one have only some estimation in rpm metadata.
ah, right. I'm a f
hi,
on 3.2 I ran "sudo qubes-dom0-update" this morning, followed by "sudo
qubes-dom0-update --enablerepo=qubes-dom0-current-testing --action=upgrade
kernel-qubes-vm"
which then prompted me with this:
Installing:
kernel x86_64 1000:4.14.13-3.pvops.qubes
qubes-dom
On Thu, Feb 01, 2018 at 09:58:34AM -0800, alexclay...@gmail.com wrote:
> Are there plans for the final 4.0 release to have a direct upgrade path from
> 3.2? Or do we just backup all of our VMs, fresh install 4.0, then restore our
> VMs?
the latter.
--
cheers,
Holger
--
You received
hi,
I was just doing a backup (using the qvm-backup cli tool on 3.2) which then
suddenly crashed with this line:
-> Backing up files: 78%... ERROR: Failed to perform backup: error in addproc
I couldn't investigate further yet, but I suppose it failed to backup a
specific VM - which is bad - and
On Fri, Jan 12, 2018 at 01:04:23PM +, 'Tom Zander' via qubes-users wrote:
> On Friday, 12 January 2018 11:18:19 GMT 'awokd' via qubes-users wrote:
> > Would it be of value if I went through the published Docs and added these
> > version headers? Should newer versions be added at the top (so 4.0
On Thu, Jan 04, 2018 at 05:40:27AM -0800, stephenatve...@gmail.com wrote:
> On Thursday, 4 January 2018 13:39:46 UTC+1, eva...@openmailbox.org wrote:
> > 3.2 affected? When patch will be available? :(
> My impression is that 3.2 isn't being patched pending 4.0, but I could be
> wrong there.
you
On Fri, Dec 22, 2017 at 02:34:41AM -0800, Reynir Björnsson wrote:
> It may be a coincidence, but when it happened to me I got sys-net running by
> shutting down sys-whonix first. I've since disabled sys-whonix and haven't
> had the issue again, although I haven't been rebooting much since.
I bel
On Wed, Dec 20, 2017 at 10:04:57PM +0100, donoban wrote:
> If I'm not wrong you have to configure the rules for the firewall before
> building the kernel image? Once you start it you have no way for change
> rules?
yes, this is true currently. but then I have been using Qubes for nearly
a year wit
On Wed, Dec 20, 2017 at 01:15:23PM +0100, 'Tom Zander' via qubes-users wrote:
> On Wednesday, 20 December 2017 11:59:26 CET Holger Levsen wrote:
> > oh, and if you want to securly erase data, use /dev/random, not
> > /dev/urandom.
>
> This is not good advice, your
On Wed, Dec 20, 2017 at 12:50:38AM +0100, Ángel wrote:
> openssl enc -aes-256-ctr -pass pass:"$(dd if=/dev/urandom bs=128 count=1
> 2>/dev/null | base64)" -nosalt | pv -bartpes | sudo dd bs=64K of=/dev/sd"X"
on Debian this is much easier done with
sudo apt install wipe
sudo wipe /dev/sda
On Sat, Dec 16, 2017 at 02:21:30PM -, 'awokd' via qubes-users wrote:
> Getting crashes on domU boot with an assigned Atheros wireless PCIe card
> under Qubes 4.0rc3 with both PV and HVM. Any suggestions how to accomplish
> it? Some of the posts/threads I find go back to 2010 but I'm still
> stu
On Sun, Dec 10, 2017 at 03:05:11PM +0100, Robert Walz wrote:
> Does anybody know how to kexec the xen hypervisor?
http://osresearch.net/ uses kexec to boot Qubes.
--
cheers,
Holger
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To un
On Sun, Nov 26, 2017 at 05:50:17PM +, Unman wrote:
> > > It's a bug Holger.
> > > Scoot on over to GitHub and raise an issue
> > is it really? I cannot believe it's broken (in 3.2) and noone has raised
> > an issue yet…
> Well someone has to be first :-)
>
> truth , I dont think that many peop
On Sun, Nov 26, 2017 at 04:40:08PM +, Unman wrote:
> On Sun, Nov 26, 2017 at 04:22:04PM +0000, Holger Levsen wrote:
> > on 3.2:
using debian-9 I should have said too…
> > $ qvm-convert-img image.jpg image_clean.jpg
[...]
> > ValueError: No icon received
> >
>
hi,
on 3.2:
$ qvm-convert-img image.jpg image_clean.jpg
Traceback (most recent call last):
File "/usr/lib/qubes/qimg-convert-client", line 47, in
main()
File "/usr/lib/qubes/qimg-convert-client", line 41, in main
img = qubes.imgconverter.Image.get_through_dvm(args.src)
File "/usr/l
On Tue, Nov 07, 2017 at 06:56:00AM -0800, Yuraeitha wrote:
> Do you happen to know if issues of the backup and backup-restore has been
> fixed though?
no, it will need brave testers like you to find out ;)
I'd suggest to backup 3.2, install 4.0 on a new/another disk and see if
restore works. If
On Mon, Nov 06, 2017 at 07:35:58PM -0800, jkitt wrote:
> Is this just a case of running a Dom0 update? Or would I have to manually
> install the stable release?
> FYI: I'm still on 3.2.
you need to backup 3.2, install 4.0 and restore the backup. this is
described in the release notes.
--
cheer
On Sat, Nov 04, 2017 at 03:53:32PM -0700, 'Marek Jenkins' via qubes-users wrote:
> so from my understanding, "blobs" is a synonym for proprietary code, right ?
it's a synonym for "binary object" where in general you don't have the
source code.
> I mean if it doesn't really matter for security I
On Sat, Nov 04, 2017 at 10:57:30AM -0700, 'Marek Jenkins' via qubes-users wrote:
> What is the difference between Coreboot and Libreboot ?
Libreboot is Coreboot with all the non-free blobs removed (and no free
software added instead). So if you happen to have hardware which needs
those blobs, you
On Thu, Oct 19, 2017 at 01:55:08PM +0200, deadbrain wrote:
> thanks for the answer I may use a Debian/sid plus siduction kernel
> inside this VM For my use case standard headers are sufficient , I don't
> see the value added to install its own kernel, could you give more details
> please?
On Thu, Oct 19, 2017 at 04:29:51AM -0700, jerome.moli...@gmail.com wrote:
> -> 2) From time to time I am providing Java consulting, and now many
> customers use docker containers (no comments -) ) ... Is it possible inside a
> VM to run Docker ? No problem with firewalling & other stuff...
yes,
On Wed, Oct 18, 2017 at 10:59:52AM +, Holger Levsen wrote:
> apt gets: cannot connect to 10.137.255.254…
still not sure why this happened (and why now), but running systemctl on sys-net
made it obvious what the fix was:
sudo service qubes-updates-proxy restart
--
cheers,
Hol
Hi,
I'm running 3.2 and this week for the first time template VMs lost connectivity,
as in they couldnt connect to their software repos anymore. A reboot "fixed"
this and I could update them again. Then, yesterday, they lost connectivity
again…
apt gets: cannot connect to 10.137.255.254…
and
u
On Sat, Oct 14, 2017 at 03:03:39PM +, Holger Levsen wrote:
> I've done the same… just with a slightly different result, though the same
> outcome, the VM
> in question doesnt boot :(
running "sudo update-initramfs -c -k all" fixed this for me…
--
cheers,
On Wed, Feb 08, 2017 at 03:58:57PM -0800, nicholas roveda wrote:
> I've just update the Kernel inside of the Debian Template to the 4.9.2
> version and now, the machine can't start.
>
> - I installed grub2-xen in dom0
>
> - I installed 'qubes-kernel-vm-support', 'kernel-package' and 'grub2-commo
On Sun, Oct 08, 2017 at 02:18:06PM +0200, Marek Marczykowski-Górecki wrote:
> I've seen this some time ago and `echo 3 > /proc/sys/vm/drop_caches`
> helped. No idea why it is spinning...
I decided to better use 'echo 3 | sudo tee /proc/sys/vm/drop_caches' and that
that worked nicely indeed, I got
Hi,
so, that Qube was idling and well below it's max memory usage…
On Sun, Oct 08, 2017 at 07:45:58PM +0200, Marek Marczykowski-Górecki wrote:
> > > I've seen this some time ago and `echo 3 > /proc/sys/vm/drop_caches`
> > > helped. No idea why it is spinning...
thanks, Marek. I'll try this the
Hi,
so kswapd0 is using 100% CPU in one of my Qubes and this makes the fan spin
and noisy… and that Qube is hardly using any swap at all:
$ free
totalusedfree shared buff/cache available
Mem:1888212 776484 640712 70296 471016
On Thu, Sep 28, 2017 at 10:24:54AM -0400, 'One7two99' via qubes-users wrote:
> I've recently seen the window manager "awesome" in action which I haven't
> heard of before.I would like to give it a try on my Qubes 3.2 installation.
I've been using awesome for almost 10 years and when I switched to
On Thu, Sep 28, 2017 at 01:21:52AM -0700, Coracle wrote:
> I'm getting the message here and elsewhere that Qubes OS doesn't yet support
> extended desktops or multiple monitors.
no, that's wrong. Qubes supports multiple displays just fine, it's just based
on an 1-2 year old version of Fedora, so
Hi,
I've just realized that (almost) everytime after my laptop resumes, I run
qvm-run sys-net "killall nm-applet ; nm-applet" manually and that's a bit silly,
so I want to automate this this workaround (certainly hoping nm-applet will
behave better in 4.0…) so I wonder if there's a better way than
On Tue, Aug 15, 2017 at 07:28:58AM +0200, Graumann, Johannes wrote:
> Can anyone enlighten me why 4.0-rc1 does not (yet?) have
> 'qvm-trim-template'? Is this not yet implemented or not needed any longer
> given the new infrastructure?
I'm curious about this as well.
There is https://github.com/Qu
On Sun, Aug 27, 2017 at 10:33:16PM -0500, Andrew David Wong wrote:
> > That sounds reasonable. Could we perhaps have a link to these
> > videos (as well as all other third-party materials about Qubes)
> > somewhere on the mailing group/IRC channel so that newcomers can
> > get acquainted with them?
On Tue, Aug 15, 2017 at 04:05:27PM +0200, Marek Marczykowski-Górecki wrote:
> Actually:
> sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing
done this now, worked nicely, also rebooted into it and everything seems
to be fine. thanks!
--
cheers,
Holger
--
You received this
On Tue, Aug 15, 2017 at 04:05:27PM +0200, Marek Marczykowski-Górecki wrote:
> Actually:
> sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing
q.e.d. & thanks!
--
cheers,
Holger
--
You received this message because you are subscribed to the Google Groups
"qubes-users" gro
Hi,
first of all: thanks for this handling this update!
On Tue, Aug 15, 2017 at 08:31:31AM -0500, Andrew David Wong wrote:
> Patching
> =
[...]
> The packages are to be installed in dom0 via the qubes-dom0-update command or
> via the Qubes VM Manager. A system restart will be required aft
On Tue, Aug 01, 2017 at 01:06:24PM +0200, Marek Marczykowski-Górecki wrote:
> > I fail to install kernel 4.9.35 on Qubes 3.2, any hints how I can
> > accomplish this?
> > [user@dom0 ~]$ LANG=C sudo qubes-dom0-update
> > --enablerepo=qubes-dom0-current-testing kernel kernel-qubes-vm
> Try addin
On Mon, Jul 31, 2017 at 10:53:31PM -0700, Foppe de Haan wrote:
> 'sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing --best
> --allowerasing' shouldn't error like that.
sadly no:
[user@dom0 ~]$ LANG=C sudo qubes-dom0-update
--enablerepo=qubes-dom0-current-testing kernel --best
Usi
On Mon, Jul 31, 2017 at 10:11:56PM -0700, Foppe de Haan wrote:
> and if you add --best --allowerasing to the command?
commandline error, no such option :(
--
cheers,
Holger
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscrib
On Mon, Jul 31, 2017 at 09:17:43PM +, Holger Levsen wrote:
> Now I get another error OTOH, but I'll try a fresh reinstallation of 4.0rc1
> first, before
> reporting that exact error…
whoohooo - that fresh installation on an x260 for the first time showed
reliable suspend+resu
On Mon, Jul 31, 2017 at 02:38:32PM -0700, Foppe de Haan wrote:
> Try manually installing perl-Math-BigInt first?
hah, I only tried installing the kernel and qubes-kernel-vm but not that
package. Installing perl-Math-BigInt succeeded but then I still get this:
[user@dom0 ~]$ LANG=C sudo qubes-dom
On Mon, Jul 31, 2017 at 10:46:19PM +0200, Marek Marczykowski-Górecki wrote:
> Do you have VT-x enabled in BIOS?
doh, indeed it was disabled. (Which slightly puzzles me as I had running Qubes
3.2 running
on this machine before…)
Now I get another error OTOH, but I'll try a fresh reinstallation of
Hi,
I fail to install kernel 4.9.35 on Qubes 3.2, any hints how I can accomplish
this?
[user@dom0 ~]$ LANG=C sudo qubes-dom0-update
--enablerepo=qubes-dom0-current-testing kernel kernel-qubes-vm
Using sys-firewall as UpdateVM to download updates for Dom0; this may take some
time...
Running
On Mon, Jul 31, 2017 at 01:43:20PM +0200, Marek Marczykowski-Górecki wrote:
> We have just released Qubes 4.0-rc1:
awesome!
I've installed it on a lenovo x260 and upon the end of the installation I had
some
error concerning sys-firewall stating "could not find capabilities for
arch=x86_64",
de
On Wed, Jun 21, 2017 at 10:00:00AM +, Michael Carbone wrote:
> FYI x220 also has heads support:
> https://github.com/osresearch/heads/pull/190
oh nice! (so they should update their docs… :)
--
cheers,
Holger
--
You received this message because you are subscribed to the Google Gro
On Wed, Jun 21, 2017 at 09:57:25AM +0200, math blanc wrote:
> Installing Qubes OS 3.x on a X200 sounds like a bad idea to me, isn't ?
I'd rather choose an x220 or x230, where you can also clean the ME.
Plus, an x230 is supported by heads, which you might also like to use.
(see https://osresearch
On Tue, May 30, 2017 at 10:52:10PM -0500, Andrew David Wong wrote:
> Please join me in thanking two invaluable members of our community --
> unman and magicadu -- for donating their time and talents. They have
> just finished rigorously and painstakingly testing Milestone 3.1
> issues in order to h
On Sun, May 21, 2017 at 07:00:04AM -0700, Finsh wrote:
> i recently got interested in the Qubes and i'm thinking on installing it
> on a Lenovo X1 Carbon 1gen Type: 3460-1F4.
>
> I couldn't find this specific Model in the HCL, are there any known issues?
I've installed Qubes on mine before it ra
On Sat, May 13, 2017 at 02:55:12PM -0500, Andrew David Wong wrote:
> > you really dont protect your gpg key with a passphrase??
> See: https://www.qubes-os.org/doc/split-gpg/
oh wow :(
> Why is that a problem? It's only visible in dom0. If an attacker is in
> dom0, it's already game over.
no, t
On Sun, May 07, 2017 at 12:23:47PM -0500, Andrew David Wong wrote:
> 1. LUKS passphrase
> 2. Backup passphrase
> 3. Screen locker passphrase
> Managing these three allows me to have an arbitrary number of
> additional secrets in VMs without having to remember anything else.
you really dont protect
On Tue, May 02, 2017 at 07:10:05AM -0500, Andrew David Wong wrote:
> We have just published Qubes Security Bulletin (QSB) #30:
> Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214).
sad news, but very well written, thanks a lot for taking the time to do so!
> Commentary
> ==
On Wed, Apr 19, 2017 at 08:49:12AM -0700, sackerbo...@gmail.com wrote:
> I would love to have a few of these!!
printing them is easy, even if getting them printed for free.
what's harder is getting a design. does someone have one?
--
cheers,
Holger
--
You received this message becaus
On Wed, Apr 19, 2017 at 11:42:16AM +0200, c...@company.com wrote:
> I've upgraded my debian-8 template to debian-9 (stretch). Now I want to
> install vmware player and it asks me where the kernel headers are located.
> I could not find them in /usr/src and I also can't find them via apt-cache
> sea
On Sun, Apr 16, 2017 at 05:44:12PM -0600, Reg Tiangha wrote:
> That said, being able to right-click in Qubes Manager and quickly launch
> any kind of terminal program would be a super useful feature to have.
absolutly.
should also have a customisable default list of terminals to try as well
as a
On Wed, Apr 12, 2017 at 08:42:49AM -0700, jacoblorenzipo...@gmail.com wrote:
> bios update resulted in loosing qubes option in efi boot menu
> I can boot into qubes boot repair but not sure what to do after
> Any suggestions?
after you chrooted into the system as suggested by the repair script,
On Sat, Apr 08, 2017 at 12:03:55AM -0400, Chris Laprise wrote:
> I think 'rpm -qa' is essentially saying the package is installed.
I think you misread the output I posted, it was:
[user@dom0 ~]$ rpm -qa |grep kernel
qubes-core-dom0-linux-kernel-install-3.2.12-1.fc23.x86_64
kernel-4.4.14-11.pvops.
Hi,
"long ago" I successfully installed kernel-4.8.12-12 from the
qubes-dom0-unstable repo and today I realized that maybe Qubes
would be more stable for me, if I'd also install kernel-qubes-vm
4.8.12-12 instead of still using 4.4.38 in the VMs…
But…
[user@dom0 ~]$ sudo qubes-dom0-update --enabl
On Wed, Mar 22, 2017 at 03:08:00PM +0300, Oleg Artemiev wrote:
> > why do you have to reboot?
> Cost of reboot in __understanding__ what the hell is the reason is
> less than cost of restoring correct state after reboot.
>
> I feel like queue in some code is failing to grow.
> Usually I detect suc
Hi Oleg,
you missed on important bit of information:
On Wed, Mar 22, 2017 at 12:12:58PM +0300, Oleg Artemiev wrote:
> I have to reboot Qubes R3.2 a few times a day. What do I do wrong?
why do you have to reboot?
> reproduceable: daily on my workstation
>
> impact: ability to run 10-15 VMs is
On Sat, Mar 18, 2017 at 11:14:07AM -0700, cooloutac wrote:
> On Saturday, March 18, 2017 at 2:11:50 PM UTC-4, cooloutac wrote:
> > I'm starting to think you're the joke.
> Instead of arrogantly telling someone to do a simple search if you are too
> lazy to give a solution. Do everyone a favor a
On Tue, Mar 14, 2017 at 10:50:05PM +0100, evo wrote:
> there stands 500GB now (it was a mistake with a zero :D) and i don't
> have more than 120GB. But the data on this VM is not more than 20GB.
> So will it make any problems, if i have 500GB in the "max size"?
create a new vm now, with 25gb priva
On Thu, Mar 09, 2017 at 10:06:24PM -0800, Drew White wrote:
> systemd is bad, things were simpler and easier without it.
you think having a 1000 ways to start deamons (written and maintained by
a 1000 people) is more secure and simpler? That's a curious POV…
--
cheers,
Holger
--
You r
On Thu, Mar 09, 2017 at 02:26:29PM -0800, Grzesiek Chodzicki wrote:
> W dniu czwartek, 9 marca 2017 23:19:23 UTC+1 użytkownik evo napisał:
> > Am 03/09/2017 um 11:12 PM schrieb Grzesiek Chodzicki:
> > > W dniu czwartek, 9 marca 2017 21:41:02 UTC+1 użytkownik evo napisał:
> > >> On 03/09/2017 09:11
On Fri, Mar 03, 2017 at 10:38:04PM +, Holger Levsen wrote:
> so I've read qubes-doc.git/configuration/salt.md and wonder, /srv/salt is
> installed by the qubes packages and the document says the Qubes salt API is
> supposed to change between minor release - so where am I suppose
Hi Vít,
On Sat, Mar 04, 2017 at 09:53:31AM -0800, Vít Šesták wrote:
> Holger, restore is already implemented in some basic form. (I havre mentioned
> it here on Mar 1.)
I'm sorry, I was wrong indeed and a bit too sarcastic too. I guess this was
due to your initial mail where there was no restor
Hi,
so I've read qubes-doc.git/configuration/salt.md and wonder, /srv/salt is
installed by the qubes packages and the document says the Qubes salt API is
supposed to change between minor release - so where am I supposed to put
*my* salt config?
Also what best practices / tools exist to maintain t
On Fri, Mar 03, 2017 at 12:42:56PM -0800, Vít Šesták wrote:
> Well, I don't see any problem with restore. This is roughly what dom0 does
> (or initiates):
Vít, please design and *test* your restore. Nobody wants backup, everybody
wants restore.
--
cheers,
Holger
--
You received this
On Mon, Feb 27, 2017 at 03:42:51PM -0500, Chris Laprise wrote:
> Do either of you use anti-evil-maid?
not yet.
--
cheers,
Holger
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails
1 - 100 of 130 matches
Mail list logo