Help with 4.0 transition from 3.2?

[vel...@tutamail.com]

I recently transitioned to the new 4.0....thank you Qubes Developers and Community for the effort and help. I really appreciate the better security.

I managed to get 4.0 installed however I am having some challenges and concerns:

1) I am getting numerous ACPI erros when I boot? 4.0 seems to boot, I can login and function but I am concerned. Is this a concern? I didn't get these errors when booting 3.2.

2) I used to be able to download a .iso file, keep it in a VM and boot it from another VM. 3.2 even had a "Boot from .iso" function. I managed to get this working with 4.0 but it is extremely slow and sometimes doesn't work. Was the boot from .iso functionality removed?

3) I am struggling with customizing the DVMs. Specifically I can't delete a DVM. I tried the steps on this link: https://www.qubes-os.org/doc/dispvm-customization/ but it just didn't delete. Are there other instructions available? Maybe some one is willing to post there steps/commands?

4) I am unsure how to add a wireless printer into a DVM? I either can't install the driver i.e. Do I install software into e.g. Print-dvm(based on Debian-9-Gnome), Debian-9-Gnome Template, other?

5) Could be related to 4) above but I have been unable to get my printer to even provide an error(possible networking issue). In 3.2 I would add the printer to the Debian-9-Gnome template and then generate a new "DVM"....

6) When I attempt to update Dom0 after install I get the pop-up from Dom0 that something is happening, I get the "green update" window(similar to 3.2) but then it just stops...no message about "No updates needed" or any response. Is my Dom0 up-to-date?

7) It is my understanding that 4.0 introduces a remote admin function....how do I confirm this is OFF and can never be turned on?

Please understand this is by no means critism...I truly do appreciate the new version and sense it is more secure with the PVH default and with the new code that is under the hood.

Some things that worked well:
* VPN by Tasket works great.
* Love the clean and updated Debian/Fedora templates
* Ability to swap templates and a VM and get the new programs refreshed
* The potential of multiple DVMs and additional drop downs beyond just Firefox

Any help with my questions above would be greatly appreciated and I would be happy to summarize the instructions for users having similar challenges now or going forward.

Thanks again for the effort,

[awokd]

On Tue, April 3, 2018 12:54 pm, vel...@tutamail.com wrote:

>
> 4) I am unsure how to add a wireless printer into a DVM? I either can't
> install the driver i.e. Do I install software into e.g. Print-dvm(based
> on Debian-9-Gnome), Debian-9-Gnome Template, other?

Probably Debian-9-Gnome.

> 5) Could be related to 4) above but I have been unable to get my printer
> to even provide an error(possible networking issue). In 3.2 I would add
> the printer to the Debian-9-Gnome template and then generate a new
> "DVM"....

Try it from the DVM.

> 6) When I attempt to update Dom0 after install I get the pop-up from Dom0
> that something is happening, I get the "green update" window(similar to
> 3.2) but then it just stops...no message about "No updates needed" or any
> response. Is my Dom0 up-to-date?

Use command line instead- "sudo qubes-dom0-update".

Not sure on the others, have you tried searching
https://github.com/QubesOS/qubes-issues/issues ?

[cooloutac]

1. what acpi errors? what they say?

2. dunno, no idea, maye for security purposes?

3. I only can't delete the default dvms. Make sure no other vms are using them as netvm first. I can delete any custom ones I create though np.

4. install and run system-config-printer on the template you are using for the dvm templateyou wish to use for printing. the main template. It is much more confusing its like an extra template. not the one that says dvm, the black colored one. in 4.0 Temporary allow it network access first from qubes manager or qubes-prefs by giving it a network vm first.

6. try update from dom0 terminal and see wha it says.

7. first I've heard of this got any links to exactly what you are referring?

[js...@riseup.net]

cooloutac:

> On Tuesday, April 3, 2018 at 8:54:48 AM UTC-4, vel...@tutamail.com wrote:
>> 7) It is my understanding that 4.0 introduces a remote admin function....how do I confirm this is OFF and can never be turned on?
>

> 7. first I've heard of this got any links to exactly what you are referring?

I think they're talking about this?

https://www.qubes-os.org/news/2017/06/27/qubes-admin-api/

Not sure if that's been implemented yet tho.

-Jackie

[vel...@tutamail.com]

Sorry lots of questions in 1 thread but thank you all for the responses:

Question 1-
The ACPI errors were:

ERROR parsing PCC subspaces from PCCT
[Failed] Failed to start Load Kernel Modules - Followed by [OK] started Apply Kernel Variable/[OK] Started Setup Virtual Console

ACPI error: parse execution failed\_PR.CPU0....PSParse-550....

ACPI error: Namespace lookup failure\_PR.CPU1....PSParge-364....

ACPI error: Namespace lookup failure\_PR.CPU2....PSParge-364....

Using Legacy only boot, Lenovo notebook

Question 2 -
Still slow but functional for what I use this .iso for...the additional templates I can add with 4.0 kinda make me less interested in this functionality. All for the security!!

Question 3, 4, 5 -
I managed to delete the templates I wanted to. Did a fresh install and was smarter the second time. My advice would be to leave the current templates until you are comfortable with the new setup and how they work.

2nd time advice for templates in 4.0-
*Make most configuration changes in the "core" template before creating a new"core"-dvm from which the disposable VMs are spawned from i.e. printer setups in "core" template
*Make changes to firefox in the "new-dvm" that require browser ad-ons
*Don't make any templates default until you get comfortable with multiple templates...painful to have to remove them from your VMs

Pretty slick feature having multiple templates once you get used to managing them!!

Thank you for the help...
Question 6-
Did a manual update in Dom0:
sudo qubes-dom0-update
"No updates needed or available"?? Couldn't remember the exact words but I had to do manual update and I think I am up-to-date.

Question 7-
I found the article(https://www.qubes-os.org/news/2017/06/27/qubes-admin-api/) being considered with Qubes 4.0. I also remember it not being implemented yet but wasn't sure if one had the option to turn this feature off. I totally get the need to have enterprise embrace this project...it really is comforting knowing I am more secure but the remote feature is what turned me off MS and Apple. Just wanted to make sure I wasn't missing something...

Going thru a few growing pains but if my questions helps others and the developers its the best I can do...

Thank you