Qubes - Revision history

Legoktm: update for Qubes 4.2

2024-05-19T01:11:11Z

update for Qubes 4.2

@@ Line 1: / Line 1: @@
 Note: after restoring from a backup make sure to recreate the templates from the base again to save disk space because of copy-on-write.
 == Template VMs ==
 == dom0 ==
 Create <code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x
@@ Line 65: / Line 22: @@
 </pre>
 == Advanced debugging ==

Legoktm: /* Advanced debugging */ more

2023-03-07T23:17:33Z

Advanced debugging: more

← Older revision		Revision as of 23:17, 7 March 2023
Line 72:		Line 72:

	== Advanced debugging ==		== Advanced debugging ==
			In the grub bootloader you can press "E" on a menu item to edit both the Linux and Xen command lines before booting. Removing "quiet" from Linux will make the boot process verbose and you can see where you get stuck.

	Boot a Qubes installer USB, select rescue mode. Select option #1, enter your decryption password. Ignore the error which says "You have no Linux partitions...", it's wrong and [https://github.com/QubesOS/qubes-issues/issues/5609 a known issue].		Boot a Qubes installer USB, select rescue mode. Select option #1, enter your decryption password. Ignore the error which says "You have no Linux partitions...", it's wrong and [https://github.com/QubesOS/qubes-issues/issues/5609 a known issue].

Legoktm: update; add debugging tips on rescue with help from eaon

2023-03-07T21:30:04Z

update; add debugging tips on rescue with help from eaon

← Older revision		Revision as of 21:30, 7 March 2023
Line 4:		Line 4:

	* DD (km-d11)		* DD (km-d11)
	* ~~media~~ (km-~~f34~~)		* fpf (km-f37)
	** flatpak: ~~handbrake~~, ~~kdenlive~~, ~~picard~~		** flatpak: Signal, Wire, Flatseal, Xournal++
	* ~~personal~~ (km-~~f34~~)		* dev (km-f37)
	** flatpak: ~~Signal~~, ~~xournalpp~~, ~~hexchat~~, ~~runelite, dolphinemu~~		** flatpak: Element, nheko, Flatseal, Kdenlive
	* ~~fpf~~ (km-~~f34~~)		* gpg (km-f37)
	** flatpak: Signal, Wire
⚫	* ~~school~~ (km-~~f34~~)
⚫	* ~~dev~~ (km-~~f34~~)
	** flatpak: Element
	* gpg (km-f34)
	** no network		** no network
	* vault (km-~~f34~~)		* vault (km-f37)
		⚫	* vault-gpg (fedora-37)
	** no network		** no network
			* sd-kernel-builder (km-d11)
⚫	* vault-gpg (fedora-34)
			* sd-dev11
	** no network
			* sd-dev12
⚫	* sys-mullvad-vpn (fedora-34)
		⚫	* sd-ssh (km-f37)
		⚫	* sys-mullvad-vpn (fedora-37)
	** see [https://micahflee.com/2019/11/using-mullvad-in-qubes/ Micah's setup guide]		** see [https://micahflee.com/2019/11/using-mullvad-in-qubes/ Micah's setup guide]
		⚫	* wm-ssh (km-f37)

	== Template VMs ==		== Template VMs ==
Line 26:		Line 25:
	** (from backports) devscripts git-buildpackage dput-ng lintian		** (from backports) devscripts git-buildpackage dput-ng lintian
	** command-not-found gitk git-cola webext-ublock-origin webext-https-everywhere dh-php php-dev dh-buildinfo apache2-dev ack webext-privacy-badger ubuntu-dev-tools pkg-kde-tools dh-python cython3 python3-setuptools neomutt vlc gnome-system-monitor curl php-mbstring php-intl php-sqlite3 php-apcu python3-isort python3-sphinx		** command-not-found gitk git-cola webext-ublock-origin webext-https-everywhere dh-php php-dev dh-buildinfo apache2-dev ack webext-privacy-badger ubuntu-dev-tools pkg-kde-tools dh-python cython3 python3-setuptools neomutt vlc gnome-system-monitor curl php-mbstring php-intl php-sqlite3 php-apcu python3-isort python3-sphinx
	* fedora-34: upstream		* fedora-37: upstream
	* km-~~f34:~~ fork:		* km-f37 fork: (outdated)
	** enabled rpmfusion		** enabled rpmfusion
	*** <code>sudo dnf config-manager --set-enabled rpmfusion-free</code>		*** <code>sudo dnf config-manager --set-enabled rpmfusion-free</code>
Line 33:		Line 32:
	** enabled pycharm-community, vscodium		** enabled pycharm-community, vscodium
	** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community codium nano keepassxc qubes-gpg-split pinentry-gtk tokei sqlite jq git-lfs tox poetry php-devel bind-utils gh mtr traceroute httpd-devel devscripts mariadb		** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community codium nano keepassxc qubes-gpg-split pinentry-gtk tokei sqlite jq git-lfs tox poetry php-devel bind-utils gh mtr traceroute httpd-devel devscripts mariadb
			** other tweaks:
		⚫	*** <code>systemctl mask packagekit</code>
			*** <code>echo "vm.swappiness = 1" \| sudo tee systemctl.conf</code>

	== Config ==		== Config ==
Line 40:		Line 42:
	** <code>sys-usb dom0 allow</code>		** <code>sys-usb dom0 allow</code>
	* <code>/etc/qubes-rpc/policy/qubes.Gpg</code>		* <code>/etc/qubes-rpc/policy/qubes.Gpg</code>
⚫	** <code>DD ~~gpg~~ ~~allow~~</code>
	** <code>dev gpg allow</code>		** <code>dev gpg allow</code>
	** <code>fpf gpg allow</code>		** <code>fpf gpg allow</code>
	** <code>personal gpg allow</code>
	* <code>/etc/qubes-rpc/policy/qubes.GpgImportKey</code>		* <code>/etc/qubes-rpc/policy/qubes.GpgImportKey</code>
	** <code>DD gpg allow</code>
	** <code>dev gpg allow</code>		** <code>dev gpg allow</code>
	** <code>fpf gpg allow</code>		** <code>fpf gpg allow</code>
	** <code>personal gpg allow</code>

	<s>Follow https://github.com/Qubes-Community/Contents/blob/master/docs/customization/dpi-scaling.md for getting it to work with my 4k display.</s> Went back to a non-4k display.		<s>Follow https://github.com/Qubes-Community/Contents/blob/master/docs/customization/dpi-scaling.md for getting it to work with my 4k display.</s> Went back to a non-4k display.
Line 55:		Line 53:
	Appearance -> Style -> Adwaita-dark		Appearance -> Style -> Adwaita-dark

		⚫	Change global copy/paste ([https://forum.qubes-os.org/t/how-to-update-the-copy-paste-key-combination-in-4-1/5056/7 source]):<syntaxhighlight lang="shell-session">
	In <code>/etc/qubes/guid.conf</code>:
	<pre>
	secure_copy_sequence = "Mod4-c";
	secure_paste_sequence = "Mod4-v";
	</pre>

⚫	In ~~Qubes~~ ~~4.1 that no longer works and you need~~ ([https://forum.qubes-os.org/t/how-to-update-the-copy-paste-key-combination-in-4-1/5056/7 source]):<syntaxhighlight lang="shell-session">
	$ qvm-features dom0 gui-default-secure-copy-sequence 'Mod4-c'		$ qvm-features dom0 gui-default-secure-copy-sequence 'Mod4-c'
	$ qvm-features dom0 gui-default-secure-paste-sequence 'Mod4-v'		$ qvm-features dom0 gui-default-secure-paste-sequence 'Mod4-v'

	</syntaxhighlight>		</syntaxhighlight>


	Create <code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x		Create <code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x
Line 77:		Line 68:

	Redshift, following https://www.bryceguinta.me/install-configure-and-autostart-redshift-on-qubes-40.html, except place the config file at <code>~/redshift.conf</code> so it gets included in dom0 backups and use Settings -> Session and Startup to add the autostart entry.		Redshift, following https://www.bryceguinta.me/install-configure-and-autostart-redshift-on-qubes-40.html, except place the config file at <code>~/redshift.conf</code> so it gets included in dom0 backups and use Settings -> Session and Startup to add the autostart entry.

			TODO: Document using the new beta qubes app menu

			== Advanced debugging ==
			Boot a Qubes installer USB, select rescue mode. Select option #1, enter your decryption password. Ignore the error which says "You have no Linux partitions...", it's wrong and [https://github.com/QubesOS/qubes-issues/issues/5609 a known issue].

			If you run e.g. <code>fdisk -l</code>, you should see your disks and VMs. You should be able to mount dom0 with e.g. <code>mkdir /mnt/dom0 && mount /dev/qubes_dom0/root /mnt/dom0</code>. To do stuff in dom0, you might <code>chroot /mnt/dom0.</code>

			If you need <code>/proc</code>, <code>/sys</code>, etc. inside the chroot, see [https://superuser.com/questions/165116/mount-dev-proc-sys-in-a-chroot-environment#417004 this post] for how to mount them.

Legoktm: /* Template VMs */ fix

2022-06-01T17:17:38Z

Template VMs: fix

← Older revision		Revision as of 17:17, 1 June 2022
Line 32:		Line 32:
	*** <code>sudo dnf config-manager --set-enabled rpmfusion-free-updates</code>		*** <code>sudo dnf config-manager --set-enabled rpmfusion-free-updates</code>
	** enabled pycharm-community, vscodium		** enabled pycharm-community, vscodium
	** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 ~~python3.5~~ python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community ~~vscodium~~ nano keepassxc qubes-gpg-split pinentry-gtk tokei sqlite jq git-lfs tox poetry php-devel bind-utils gh mtr traceroute httpd-devel devscripts mariadb		** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community codium nano keepassxc qubes-gpg-split pinentry-gtk tokei sqlite jq git-lfs tox poetry php-devel bind-utils gh mtr traceroute httpd-devel devscripts mariadb

	== Config ==		== Config ==

Legoktm: /* Template VMs */ more packages

2022-06-01T16:43:59Z

Template VMs: more packages

← Older revision		Revision as of 16:43, 1 June 2022
Line 32:		Line 32:
	*** <code>sudo dnf config-manager --set-enabled rpmfusion-free-updates</code>		*** <code>sudo dnf config-manager --set-enabled rpmfusion-free-updates</code>
	** enabled pycharm-community, vscodium		** enabled pycharm-community, vscodium
	** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.5 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community vscodium nano keepassxc qubes-gpg-split pinentry-gtk		** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.5 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community vscodium nano keepassxc qubes-gpg-split pinentry-gtk tokei sqlite jq git-lfs tox poetry php-devel bind-utils gh mtr traceroute httpd-devel devscripts mariadb

	== Config ==		== Config ==

Legoktm: update

2022-02-11T00:58:18Z

update

← Older revision		Revision as of 00:58, 11 February 2022
Line 11:		Line 11:
	** flatpak: Signal, Wire		** flatpak: Signal, Wire
	* school (km-f34)		* school (km-f34)
	* dev (km-~~f33-dev~~)		* dev (km-f34)
	** flatpak: Element~~, nheko~~		** flatpak: Element
	* gpg (km-f34)		* gpg (km-f34)
	** no network		** no network
Line 42:		Line 42:
	** <code>DD gpg allow</code>		** <code>DD gpg allow</code>
	** <code>dev gpg allow</code>		** <code>dev gpg allow</code>
			** <code>fpf gpg allow</code>
	** <code>personal gpg allow</code>		** <code>personal gpg allow</code>
	* <code>/etc/qubes-rpc/policy/qubes.GpgImportKey</code>		* <code>/etc/qubes-rpc/policy/qubes.GpgImportKey</code>
	** <code>DD gpg allow</code>		** <code>DD gpg allow</code>
	** <code>dev gpg allow</code>		** <code>dev gpg allow</code>
			** <code>fpf gpg allow</code>
	** <code>personal gpg allow</code>		** <code>personal gpg allow</code>

	Follow https://github.com/Qubes-Community/Contents/blob/master/docs/customization/dpi-scaling.md for getting it to work with my 4k display.		<s>Follow https://github.com/Qubes-Community/Contents/blob/master/docs/customization/dpi-scaling.md for getting it to work with my 4k display.</s> Went back to a non-4k display.

	== dom0 ==		== dom0 ==
Line 65:		Line 68:


	<code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x		Create <code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x
	<pre>		<pre>
	#!/bin/sh		#!/bin/sh

Legoktm: update

2022-01-23T17:54:28Z

update

← Older revision		Revision as of 17:54, 23 January 2022
Line 8:		Line 8:
	* personal (km-f34)		* personal (km-f34)
	** flatpak: Signal, xournalpp, hexchat, runelite, dolphinemu		** flatpak: Signal, xournalpp, hexchat, runelite, dolphinemu
	* ~~fopf~~ (km-f34)		* fpf (km-f34)
			** flatpak: Signal, Wire
	* school (km-f34)		* school (km-f34)
	* dev (km-f33-dev)		* dev (km-f33-dev)
			** flatpak: Element, nheko
	* gpg (km-f34)		* gpg (km-f34)
	** no network		** no network
	* vault (km-f34~~-vault~~)		* vault (km-f34)
	** no network		** no network
	* vault-gpg (fedora-34)		* vault-gpg (fedora-34)
Line 22:		Line 24:
	== Template VMs ==		== Template VMs ==
	* km-d11: fork:		* km-d11: fork:
	** (from backports) devscripts git-buildpackage dput-ng		** (from backports) devscripts git-buildpackage dput-ng lintian
	** command-not-found gitk git-cola webext-ublock-origin webext-https-everywhere dh-php php-dev ~~lintian-brush~~ dh-buildinfo apache2-dev ack webext-privacy-badger ubuntu-dev-tools pkg-kde-tools dh-python cython3 python3-setuptools neomutt vlc gnome-system-monitor curl php-mbstring php-intl php-sqlite3 php-apcu python3-isort python3-sphinx		** command-not-found gitk git-cola webext-ublock-origin webext-https-everywhere dh-php php-dev dh-buildinfo apache2-dev ack webext-privacy-badger ubuntu-dev-tools pkg-kde-tools dh-python cython3 python3-setuptools neomutt vlc gnome-system-monitor curl php-mbstring php-intl php-sqlite3 php-apcu python3-isort python3-sphinx
	* fedora-34: upstream		* fedora-34: upstream
	* km-f34: fork:		* km-f34: fork:
Line 30:		Line 32:
	*** <code>sudo dnf config-manager --set-enabled rpmfusion-free-updates</code>		*** <code>sudo dnf config-manager --set-enabled rpmfusion-free-updates</code>
	** enabled pycharm-community, vscodium		** enabled pycharm-community, vscodium
	** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.5 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community vscodium		** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.5 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community vscodium nano keepassxc qubes-gpg-split pinentry-gtk
	* km-f34-vault: (fork of minimal)
	** nano keepassxc qubes-gpg-split pinentry-gtk

	== Config ==		== Config ==

Legoktm: Qubes 4.1 clipboard

2022-01-20T07:15:07Z

Qubes 4.1 clipboard

← Older revision		Revision as of 07:15, 20 January 2022
Line 57:		Line 57:
	secure_paste_sequence = "Mod4-v";		secure_paste_sequence = "Mod4-v";
	</pre>		</pre>

			In Qubes 4.1 that no longer works and you need ([https://forum.qubes-os.org/t/how-to-update-the-copy-paste-key-combination-in-4-1/5056/7 source]):<syntaxhighlight lang="shell-session">
			$ qvm-features dom0 gui-default-secure-copy-sequence 'Mod4-c'
			$ qvm-features dom0 gui-default-secure-paste-sequence 'Mod4-v'

			</syntaxhighlight>


	<code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x		<code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x

Legoktm: /* Config */ DPI scaling guide

2021-12-27T07:04:57Z

Config: DPI scaling guide

← Older revision		Revision as of 07:04, 27 December 2021
Line 47:		Line 47:
	** <code>dev gpg allow</code>		** <code>dev gpg allow</code>
	** <code>personal gpg allow</code>		** <code>personal gpg allow</code>
			Follow https://github.com/Qubes-Community/Contents/blob/master/docs/customization/dpi-scaling.md for getting it to work with my 4k display.

	== dom0 ==		== dom0 ==

Legoktm: /* Template VMs */ update debian

2021-12-27T05:32:14Z

Template VMs: update debian

← Older revision		Revision as of 05:32, 27 December 2021
Line 3:		Line 3:
	== VMs ==		== VMs ==

	* DD (km-~~d10-dev~~)		* DD (km-d11)
	* media (km-f34)		* media (km-f34)
	** flatpak: handbrake, kdenlive, picard		** flatpak: handbrake, kdenlive, picard
Line 21:		Line 21:

	== Template VMs ==		== Template VMs ==
	* km-~~d10-dev~~: fork:		* km-d11: fork:
			** (from backports) devscripts git-buildpackage dput-ng
	** devscripts git-buildpackage dput-ng command-not-found gitk git-cola gir1.2-vte-2.91 (reportbug-gtk dep) webext-ublock-origin webext-https-everywhere dh-php php-dev lintian-brush lintian (from backports) dh-buildinfo apache2-dev ack
			** command-not-found gitk git-cola webext-ublock-origin webext-https-everywhere dh-php php-dev lintian-brush dh-buildinfo apache2-dev ack webext-privacy-badger ubuntu-dev-tools pkg-kde-tools dh-python cython3 python3-setuptools neomutt vlc gnome-system-monitor curl php-mbstring php-intl php-sqlite3 php-apcu python3-isort python3-sphinx
	* fedora-34: upstream		* fedora-34: upstream
	* km-f34: fork:		* km-f34: fork: