Ledger Nano S on Qubes OS R3.2

[0x...@secure.mailbox.org]

Hi,

Does anyone actually make Qubes OS R 3.2 working with Ledger Nano S hardware wallet? 

[Franz]

On Sun, Apr 30, 2017 at 7:02 AM, <0x...@secure.mailbox.org> wrote:

Hi,

Does anyone actually make Qubes OS R 3.2 working with Ledger Nano S hardware wallet? 

I used Trezor. but to do that I had to assign a usb controller to the VM dedicated to do that. So it works, but you need a free USB controller which may not be easily available in a laptop. Otherwise you have to use the single USB controller both for usb sticks and Ledger. In other words this means installing the hardware wallet in a sys-usb VM which may not be not security wise. Well maybe I am too paranoid, but, since I have an expresscard slot, bought an expresscard USB controller (working with Linux) and assigned it to the Hardware walleI VM. And it works.

Best

Fran

--
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscribe@googlegroups.com.
To post to this group, send email to qubes...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1008456846.73335.1493546530697%40office.mailbox.org.
For more options, visit https://groups.google.com/d/optout.

[Dave C]

On Sunday, April 30, 2017 at 3:02:23 AM UTC-7, 0x...@secure.mailbox.org wrote:
> Hi,
> Does anyone actually make Qubes OS R 3.2 working with Ledger Nano S hardware wallet? 

Yes.

Follow the Qubes instructions: https://www.qubes-os.org/doc/usb/#attaching-a-single-usb-device-to-a-qube-usb-passthrough

In your AppVM, follow these extra instructions from ledger: http://support.ledgerwallet.com/knowledge_base/topics/ledger-wallet-is-not-recognized-on-linux

What's working for me is these lines appended to `/rw/config/rc.local` in AppVM:

# http://support.ledgerwallet.com/knowledge_base/topics/ledger-wallet-is-not-recognized-on-linux

```
#!/bin/bash
echo "SUBSYSTEMS==\"usb\", ATTRS{idVendor}==\"2581\", ATTRS{idProduct}==\"1b7c\", MODE=\"0660\", OWNER=\"user\", GROUP=\"plugdev\"" >/etc/udev/rules.d/20-hw1.rules
echo "SUBSYSTEMS==\"usb\", ATTRS{idVendor}==\"2581\", ATTRS{idProduct}==\"2b7c\", MODE=\"0660\", OWNER=\"user\", GROUP=\"plugdev\"" >>/etc/udev/rules.d/20-hw1.rules
echo "SUBSYSTEMS==\"usb\", ATTRS{idVendor}==\"2581\", ATTRS{idProduct}==\"3b7c\", MODE=\"0660\", OWNER=\"user\", GROUP=\"plugdev\"" >>/etc/udev/rules.d/20-hw1.rules
echo "SUBSYSTEMS==\"usb\", ATTRS{idVendor}==\"2581\", ATTRS{idProduct}==\"4b7c\", MODE=\"0660\", OWNER=\"user\", GROUP=\"plugdev\"" >>/etc/udev/rules.d/20-hw1.rules
echo "SUBSYSTEMS==\"usb\", ATTRS{idVendor}==\"2581\", ATTRS{idProduct}==\"1807\", MODE=\"0660\", OWNER=\"user\", GROUP=\"plugdev\"" >>/etc/udev/rules.d/20-hw1.rules
echo "SUBSYSTEMS==\"usb\", ATTRS{idVendor}==\"2581\", ATTRS{idProduct}==\"1808\", MODE=\"0660\", OWNER=\"user\", GROUP=\"plugdev\"" >>/etc/udev/rules.d/20-hw1.rules
echo "SUBSYSTEMS==\"usb\", ATTRS{idVendor}==\"2c97\", ATTRS{idProduct}==\"0000\", MODE=\"0660\", OWNER=\"user\", GROUP=\"plugdev\"" >>/etc/udev/rules.d/20-hw1.rules
echo "SUBSYSTEMS==\"usb\", ATTRS{idVendor}==\"2c97\", ATTRS{idProduct}==\"0001\", MODE=\"0660\", OWNER=\"user\", GROUP=\"plugdev\"" >>/etc/udev/rules.d/20-hw1.rules
udevadm trigger
udevadm control --reload-rules
```

Note: every time you switch into or out of an "app" on the ledger, the USB connection reset. So you have to run, in dom0, `qvm-block -a ...` much more frequently than you might expect.

The Ledger Nano is brand new, so I haven't tested much beyond just getting the desktop apps to recognize it.

[Patrick Schleizer]

Experimented with this. Documented it. Feel free to test and contribute
to the instructions.

https://www.whonix.org/wiki/Ledger_Hardware_Wallet

[rodin]

On Sunday, April 30, 2017 at 3:02:23 AM UTC-7, 0x...@secure.mailbox.org wrote:

> Hi,
> Does anyone actually make Qubes OS R 3.2 working with Ledger Nano S hardware wallet? 

Dave C's instructions also work on 4.0rc2.

I wrote a script that allows me to move the Ledger between AppVMs with a global keyboard shortcut:
https://gist.github.com/opposablebrain/fbf2884ab24b3f0c8ff0c36280bec838