HCL - Lenovo Thinkpad X250

[Miguel Jacq]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The below is all 3.0-RC-1. I couldn't installed Qubes 2 on the X250, I
think due to too old kernel.



What works:

- - The install (with encrypted LVM)
- - Wifi
- - Standard functionality, DispVMs
- - Tweaks per the Documentation such as Split GPG, Dom0 SSD Trim etc
- - Sound in AppVMs (but only mute/unmute button does anything in terms
of function key. The up/down volume UI increases/decreases visually,
but the sound doesn't)


What works (with a bit of tweaking):

- - Volume function keys - had to set psmouse.proto=imps in grub config
(but as above, up/down volume keys don't actually increase/decrese
sound. At least the UI visually responds to the key press though.
Mute/unmute is fine)


What sometimes doesn't work:

- - boot-up sometimes doesn't reach login screen but just hangs on the
last 2 start-up tasks (according to console 1, something to do with
waiting for Plymouth login screen to start). Haven't found a pattern
for how this is triggered - happens either on AC power or battery at
least once a day, and doesn't matter if graceful shutdown or forced,
preceded the problematic boot.

There are always errors in /var/log/messages on the dom0 when the
failed boot occurs, related to mounts and DNS. I have attached the
interesting parts of the boot messages to this e-mail too

- - resume from sleep/hibernation usually crashes NetworkManager.
Restart of sys-net/sys-firewall, or reboot entirely, resolves the issue

- - updating of packages in Fedora TemplateVM can result in no
networking on reboot (per item in 'Common Problems' in UserFaq, the
workaround works for me each time)


What doesn't work:

- - webcam doesn't seem to be detected
- - brightness function keys
- - can't seem to save encrypted drafts in Thinkpad with Enigmail, GPG 2
and the standard Split GPG technique. Enigmail says 'Encrypt draft
messages on saving: The email address or key ID '0xB6033547' can't be
matched to a valid, not expired OpenPGP key' (e.g as if it has not
queried the GPG VM for some reason). Or it could be an upstream bug.

Not yet tested:

- - Ethernet
- - VGA
- - USB controllers



Let me know if you require any other info from this system.

Thank you for making this excellent distribution, I'm really enjoying
Qubes 3.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJVRFTiAAoJEM5kOiC2AzVHoFcP/2r4p9JaV1qg5jyB7tfThuMn
y+qpdBqEYjUFUa4pPiiqPPgciHjODdIjoSoYdQtLy8Dk9yL+nZTOCrNygTBMBGkW
FQHIEtL1tRTgwwXBlcJ74CFC6g5wB3tvhllsQCQpqGxH5xMrZQhYT14tVBrfob+Z
fX5I4qvqjGG7k2Ycoc+RsJXU+8xHuoWZZ4oT0njcAI/xbXTMM1rK97U/OKF3nuMr
R44dMjhCjTTn+sGil9UjenEdDGR+myPexf5scd4H1pJxBAtgaSavMnSh7dAtNzkw
sajFgX9RH5lW7o8fmMtvv+yOBOVlZbfoYfYD2mc4SiFN+BZbb0GpPhn3sSlRoQ+P
ufyOayStL0EX9iDbQ4bcmPcnDeohrB/1C9mhfYX1dANJbpiL8vpjRvcN68PDitYA
gRFwegUDUrkQDx9T1k3x9rpb+mK0bh5JTqxK9FAcMGJawFEJk7t6qd265tOJx4BU
iEStk3+i9+A4ZmCT3ck759MSz+vctRXuYBu1paLqpKutBNUwZQjSoLDqQCUtKGGU
Iw9+PCZGiU89PBt7UKXf4dDTufLrSfPhGXbNncuivKulglVWgwstE+pgmKgdnRUC
hd45XnbwKC7QCkrnNIkJrNvpFWo0tSsfUcnk/x+lLE/7314/pgrwi3RoH80acjgt
AR7Q9XyBfnLEciVF1jfH
=YnGV
-----END PGP SIGNATURE-----

[Joonas Lehtonen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

thanks for sending this,
it encouraged me to try 3.0-rc1 as well!

Unfortunately the 3.0-rc1 announcement did not make clear that we can
use Qubes OS on these devices as well now. (support for it has been
planed for the next "2-3 months" - dated 2015-04-15)


-----BEGIN PGP SIGNATURE-----
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=chy7
-----END PGP SIGNATURE-----

[Paul Harvey]

Hi Miguel & Joonas,

> On Saturday, 2 May 2015 14:39:11 UTC+10, Miguel Jacq wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256

> The below is all 3.0-RC-1. I couldn't installed Qubes 2 on the X250, I
> think due to too old kernel.

The HCL report indicates IOMMU disabled. That's a little disappointing - are there any BIOS settings or firmware updates which might change that result?

[Joonas Lehtonen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

>> The below is all 3.0-RC-1. I couldn't installed Qubes 2 on the
>> X250, I
>>> think due to too old kernel.
> The HCL report indicates IOMMU disabled.

have a look at:
https://www.qubes-os.org/hcl/

https://groups.google.com/forum/#!msg/qubes-users/vYvNIHx4pWQ/D6WxypOvmP4J
-----BEGIN PGP SIGNATURE-----
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=nMGi
-----END PGP SIGNATURE-----

[Paul Harvey]

On 16 September 2015 at 04:20, Joonas Lehtonen

<joonas....@openmailbox.org> wrote:
>>> The below is all 3.0-RC-1. I couldn't installed Qubes 2 on the
>>> X250, I
>>>> think due to too old kernel.
>> The HCL report indicates IOMMU disabled.
>
> have a look at:
> https://www.qubes-os.org/hcl/

That table is exactly how I ended up asking the question here :)

It seems the basis for that "IOMMU: no" in the HCL table for the X250
is a user-submitted HCL report. I'm wondering if Miguel tried
reviewing BIOS settings. In my X230, "Intel (R) Virtualization
Technology" and "Intel (R) VT-d Feature" can be enabled/disabled from
the Security -> Virtualization menu.

[cprise]

IIRC Lenovo leaves Vt-d disabled by default, so it must be manually
turned on in the BIOS settings.

[Joonas Lehtonen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

> On 16 September 2015 at 04:20, Joonas Lehtonen
> <joonas....@openmailbox.org> wrote:
>>>> The below is all 3.0-RC-1. I couldn't installed Qubes 2 on
>>>> the X250, I
>>>>> think due to too old kernel.
>>> The HCL report indicates IOMMU disabled.
>>
>> have a look at: https://www.qubes-os.org/hcl/
>
> That table is exactly how I ended up asking the question here :)

Well if I search that table
https://www.qubes-os.org/hcl/

for T450 I find a row which says 'yes' in the IOMMU column and links
to David's HCL report (URL also in my last email).

I don't see the problem.
-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJV+e6pAAoJENGIB/ssoMC2kDAP/RF3oqJJoSVArcQOjtiH+Xxc
9uBxvMI3Q0r73+6vWrvNnib5Ee+jyY03rk3p+VTW6FvSR6exnrNwXofOocxQXVzJ
3tskAYcJ1Pq2syMJWIgQaz6K6McG+TGYTYgywcIe2nO7Lex8DLbny9ZGtzlWchKO
u+V/a9aB58ZxLY1s7d/s3RjZdDE7ZJPbE4NjHGbTkiuJ05JKouHFZuRK75YGOtq9
aVb29dF9cjofNHT72AwxWNsf7ywzKE35/jLy1UjE0HdJ310uxrE/myobSkQ4d+Zj
S4ys2psBrOOEbm3SH3UwIcvsIC4ycwqTdPivhCQQKUmVtrQXHADpkgC3kmdfoyGx
I3WBb+JKTlylbIIcxIFKzP/PtTh8Bx4dp0gadQPpgtG17BL+Nu0c/KzwhOPstSRP
d4NbPub7WJj0wrsnVQGOb5E4hXtkdID3ZJZG4T4KrQJXHPp4Cpv6KFMae4uHmW5a
ZUdwgpquz+qkdyO/RZtapVi0hyPQOVL9fyxHiENT4l62xQd99U9alqK2PCx/OmDC
7lB1RiP8SmWhSb33rpqmfjK6yTzHbDm7alntZqXhpkN7dtCHjdLYXhMglVv1TP9f
yqQYLOs+PY9z2KNWwSYsp4fdDCOqbysY3WF9NaYuLIlZZYrjysHkYOVcySaK9MgY
xSimpWf7lugoS/DUke3y
=Yh2I
-----END PGP SIGNATURE-----

[Paul Harvey]

On 17 September 2015 at 08:35, Joonas Lehtonen

<joonas....@openmailbox.org> wrote:
>> On 16 September 2015 at 04:20, Joonas Lehtonen
>> <joonas....@openmailbox.org> wrote:
>>>>> The below is all 3.0-RC-1. I couldn't installed Qubes 2 on
>>>>> the X250, I
>>>>>> think due to too old kernel.
>>>> The HCL report indicates IOMMU disabled.
>>>
>>> have a look at: https://www.qubes-os.org/hcl/
>>
>> That table is exactly how I ended up asking the question here :)
>
> Well if I search that table
> https://www.qubes-os.org/hcl/
>
> for T450 I find a row which says 'yes' in the IOMMU column and links
> to David's HCL report (URL also in my last email).
>
> I don't see the problem.

The problem is with the X250 entry, not T450. It's showing "IOMMU: no"
in the HCL table.

[thinkpad user]

Thanks for sharing the info! Is there any issues left, or everything works fine?