Qubes 3.2 rc2 has been released!

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Details here:
https://www.qubes-os.org/news/2016/07/28/qubes-OS-3-2-rc2-has-been-released/

As usual, you can download new image from:
https://www.qubes-os.org/downloads/

Users of R3.2 rc1 can just install updates, no need for full reinstall.
For older releases check above page for upgrade instructions.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXmf5AAAoJENuP0xzK19csDmkH/03njjel549paROC+OdUEFUn
s7cz2MXSFuz+b2ck0uEom4wZGOMt2YVn/KbeirvFljMhNhr1U3A8NOYzOoe5TGM5
IXM7YuBsaHQiVJYB8mpjTkHRkOjqoYQ7AVryRJd9oL/Fuz8Ft21wzPOagqFxsFCZ
IX7wvI3bHAGPKJJn2OFImk3HEM2/hdOpVMDJtNpgooEKTi/x+M/O3zRN9S48W2fY
rogc7NeOUMi2qj9cOoEjWvmDR2BxTFs+HAQmWKDQ0gu4ksOtgG2YVWD1VRNqIRi9
B/9Zg0wlGa0Pi/5FNSh6gwLRNFVo2Y+x+htJX4nBPysFQE295IW2DCBqpigSjcE=
=rf1q
-----END PGP SIGNATURE-----

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-07-28 07:43, neilh...@gmail.com wrote:
> Does this come with the newest Xen patch after the exploit yesterday?
>

If you're referring to XSA 182 / QSB #24, then yes. As stated in the
announcement:

> All critical bugs we know of are fixed, including XSA 182, which was
> recently announced in Qubes Security Bulletin #24.

And it links to QSB #24:

https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-024-2016.txt

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=2hBZ
-----END PGP SIGNATURE-----

[Chris Laprise]

On 07/28/2016 08:44 AM, Marek Marczykowski-Górecki wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Details here:
> https://www.qubes-os.org/news/2016/07/28/qubes-OS-3-2-rc2-has-been-released/
>
> As usual, you can download new image from:
> https://www.qubes-os.org/downloads/
>
> Users of R3.2 rc1 can just install updates, no need for full reinstall.
> For older releases check above page for upgrade instructions.
>

Fedora 23 template shows a broken dependency for qubes-db:

Error: nothing provides xen-libs >= 2001:4.6.1-20

If manually add --allowerasing, it just tries to skip updating qubes-db.

Chris

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

That package was still in testing repository. Now should be better.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXmlWCAAoJENuP0xzK19csRxUH/1li8CAJNBz/SYYIew8yLwtT
pgiI2RepbHPEvOg4LcT1kmQCFkUpkoc9SGp5LRBB9dcXg4LmiPhAhrLTIsWclHbD
DAHdrxy+kH5ZBuDAETXv5AR0qIlrkUd9yieXbIXf0ynyaRK0rlLMNSf2s5pr/vYx
GyjAONbiLJLZk4wA98uETFoPNygqWTOiN6xPOiY0bdj5upQJhzH71Rq8iAjRZdzo
E11rfDaxx0HQREbLpufi44yztCnYaNK6J8+yXrhmRq40FQh0QgrCXX/VJ/h6RYC1
6/i4kfUKQbGsa9uNr+MaoNxGbeyLxRJjjRyoZa7+wFYqZr3op71gm7/ZqJ9A1Wc=
=go/X
-----END PGP SIGNATURE-----

[Iestyn Best]

Thank you guys, great work.

Just a little side note, yesterday when I updated it seemed to break my window borders in KDE. I am now using XFCE and all seems fine.

I have not tried KDE again today, just trying to get use to XFCE now as that is your focus now.

[neilh...@gmail.com]

The QUBES website incorrectly lists the file size for 3.2-rc2

It still lists:

"4.8 GB (4,816,109,568 bytes)"

It's actually now small enough to fit within a DVD disc now. 3.92 GB

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-07-28 11:57, Marek Marczykowski-Górecki wrote:
> On Thu, Jul 28, 2016 at 12:49:25PM -0400, Chris Laprise wrote:
>> On 07/28/2016 08:44 AM, Marek Marczykowski-Górecki wrote:
>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
>>>
>>> Details here: https://www.qubes-os.org/news/2016/07/28/
>>> qubes-OS-3-2-rc2-has-been-released/
>>>
>>> As usual, you can download new image from:
>>> https://www.qubes-os.org/downloads/
>>>
>>> Users of R3.2 rc1 can just install updates, no need for full reinstall.
>>> For older releases check above page for upgrade instructions.
>>>
>
>> Fedora 23 template shows a broken dependency for qubes-db:
>
>> Error: nothing provides xen-libs >= 2001:4.6.1-20
>
>> If manually add --allowerasing, it just tries to skip updating qubes-db.
>
> That package was still in testing repository. Now should be better.
>

Marek, another user is still reporting the same problem:

https://groups.google.com/d/msg/qubes-users/hBGELi7w4aQ/q_skPwGoCwAJ

Any ideas?

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=p/XK
-----END PGP SIGNATURE-----

[Qubed One]

Iestyn Best:

> Thank you guys, great work.
>
> Just a little side note, yesterday when I updated it seemed to break my window borders in KDE. I am now using XFCE and all seems fine.
>
> I have not tried KDE again today, just trying to get use to XFCE now as that is your focus now.
>

I can't link to the exact message right now (qubes-devel, Marek, thread
named "Window Borders", fifth message in the thread), but these
instructions fix that issue in KDE:

"Try this:

Go to system settings -> Application Style -> Window Decorations. It
should be set to "Breeze". If it is set to "Plastik", it may be the
cause of the problems.

If this is the case, I think this may be related to KDE update done by
Fedora recently (a lot of kf5-* packages), so unrelated to
qubes-gui-dom0 version."

['109384'0194328'0193284'09132'84098]

Hello,

if I try to upgrade the VMs like described under...

Upgrade Fedora templates:

https://www.qubes-os.org/doc/upgrade-to-r3.2/

I run into this error:

sudo dnf install --enablerepo=qubes*testing --refresh qubes-upgrade-vm

Error: Failed to synchronize cache for repo 'updates'

How I can upgrade the VMs to Q32?

Kind Regards

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I frequently get that message when updating via tor (sys-whonix). I just wait
for a new circuit or manually request a new identity via tor-arm in
sys-whonix by pressing 'n', and that usually fixes it.

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=WcTL
-----END PGP SIGNATURE-----

[arthur....@gmail.com]

Two questions:
1) Do you have a list of specific things that you would like users to check based on changes/fixes you made from RC1 to RC2? I've got RC2 installed and would gladly provide feedback.
2) As a new user to the community, where is the preferred place to post bugs? So far, I've just been dumping them in the qubes-users section (I reported my snd_hda_intel issue), but I'm not sure if that's where you want them to go.

Thanks!

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-07-31 14:10, arthur....@gmail.com wrote:
> Two questions: 1) Do you have a list of specific things that you would
> like users to check based on changes/fixes you made from RC1 to RC2? I've
> got RC2 installed and would gladly provide feedback.

Thank you for offering to test it! It would be great if you could specifically
test the new changes from the previous release candidate. (Marek, do we have a
fine-grained way to view those changes? It looks like our lowest level of
granularity is point releases, e.g., R3.1 to R3.2, but not R3.2-rc1 to
R3.2-rc2.)

Here are the release notes for R3.2:

https://www.qubes-os.org/doc/releases/3.2/release-notes/

As that page points out, you can find more detailed descriptions and
discussions in completed GitHub issues with the "Release 3.2" milestone:

https://github.com/QubesOS/qubes-issues/issues?q=is%3Aissue+sort%3Aupdated-desc+
milestone%3A%22Release+3.2%22+label%3Arelease-notes+is%3Aclosed

(But as I mentioned above, this doesn't really distinguish between changes
that occurred in R3.2-rc1 and R3.2-rc2. I think it would still be helpful to
test both, though.)

> 2) As a new user to the community, where is the preferred place to post
> bugs? So far, I've just been dumping them in the qubes-users section (I
> reported my snd_hda_intel issue), but I'm not sure if that's where you
> want them to go.

Thanks for asking! All bugs have to go into qubes-issues on GitHub eventually
so that we can track what gets fixed, so if you're certain that something is a
bug and you don't mind using GitHub to report it, please feel free to open an
issue on GitHub. However, if you're not sure that something is a bug or if you
don't want to use GitHub for any reason, then it's perfectly fine to write to
the mailing list instead. (Not a big deal either way.)

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=mzPm
-----END PGP SIGNATURE-----

[Andrew "Arthur" Summers]

Awesome! I figured going through the release notes would be the best thing to do, but I imagine that there are some more specific tests that the team would like to have executed. I'll wait for Marek to respond first.

Note that for me, I couldn't get the installer for RC1 to load. 3.1 worked just fine, though. So far, the only big difference I've found is my soundcard not being configured correctly, and it caused things like standby and resume to not work right (already reported, but happy to provide more details - just ask).

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sun, Jul 31, 2016 at 02:32:38PM -0700, Andrew David Wong wrote:
> On 2016-07-31 14:10, arthur....@gmail.com wrote:
> > Two questions: 1) Do you have a list of specific things that you would
> > like users to check based on changes/fixes you made from RC1 to RC2? I've
> > got RC2 installed and would gladly provide feedback.
>
> Thank you for offering to test it! It would be great if you could specifically
> test the new changes from the previous release candidate. (Marek, do we have a
> fine-grained way to view those changes? It looks like our lowest level of
> granularity is point releases, e.g., R3.1 to R3.2, but not R3.2-rc1 to
> R3.2-rc2.)

Indeed, we don't have such high level list. In fact the only real change
was switching away from KDE. Besides that, only a lot of bug fixes.

> Here are the release notes for R3.2:
>
> https://www.qubes-os.org/doc/releases/3.2/release-notes/
>
> As that page points out, you can find more detailed descriptions and
> discussions in completed GitHub issues with the "Release 3.2" milestone:
>
> https://github.com/QubesOS/qubes-issues/issues?q=is%3Aissue+sort%3Aupdated-desc+
> milestone%3A%22Release+3.2%22+label%3Arelease-notes+is%3Aclosed
>
> (But as I mentioned above, this doesn't really distinguish between changes
> that occurred in R3.2-rc1 and R3.2-rc2. I think it would still be helpful to
> test both, though.)
>
> > 2) As a new user to the community, where is the preferred place to post
> > bugs? So far, I've just been dumping them in the qubes-users section (I
> > reported my snd_hda_intel issue), but I'm not sure if that's where you
> > want them to go.
>
> Thanks for asking! All bugs have to go into qubes-issues on GitHub eventually
> so that we can track what gets fixed, so if you're certain that something is a
> bug and you don't mind using GitHub to report it, please feel free to open an
> issue on GitHub. However, if you're not sure that something is a bug or if you
> don't want to use GitHub for any reason, then it's perfectly fine to write to
> the mailing list instead. (Not a big deal either way.)

Yes, exactly.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXnoz7AAoJENuP0xzK19csIpAH/0xS5qPXuDnpGZwnYCf6Mx9a
tBPupuJxg99ls6eUvh34lf3wQQxQQlq7usH62DIheCdtd4fUKrjRFoRQt4GipgBo
unTSGbtH1ctg2zn+LLmNpKRxWP9A25bvjXBH2DPWXVxvbKpQv8LBhB5m1V2epBqV
lxxoOoIb3N/OBJgD0+R7wdY0+WnlFiDBxfpIAXWdV+Ste0ZfNKZuKSyT/zPXWr83
VKGXXgXn0tiitGwTP5iNXHxf0bvE/Rz/XJGsAuTNx0HHR5fZriaocwt2uuqLpuf9
t27sEdX1aJ85AulqAMi6zEpDYZHReWW7GJOJymUpVRWuhdurNZVHxZkTXLsMapI=
=4Ajf
-----END PGP SIGNATURE-----

[raah...@gmail.com]

fresh install went well. Everything good so far. Nice to see a restart vm button in qubes-manager now.