Attaching a webcam from sys-usb to other appvm

[46co2u+d7n...@guerrillamail.com]

Hi,

Is this possible and how can it be done? Unfortunately I didn't find any how to explaining this.

Thank you

----
Sent using GuerrillaMail.com
Block or report abuse: https://www.guerrillamail.com/abuse/?a=UFR2AB5NVqcQmh2U93EQdRjCStifx8dDiadNcQ%3D%3D

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-08-02 09:29, 46co2u+d7n6f69py4nlk via qubes-users wrote:
> Hi,
>
> Is this possible and how can it be done? Unfortunately I didn't find any
> how to explaining this.
>
>
> Thank you
>

Sorry, that's not supported:

"Other devices, such as USB webcams, will also work, but they will be
accessible only from the USB qube itself, as explained above."

https://www.qubes-os.org/doc/usb/#tocAnchor-1-1-3

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=aJfc
-----END PGP SIGNATURE-----

[Franz]

On Tue, Aug 2, 2016 at 8:19 PM, Andrew David Wong <a...@qubes-os.org> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-08-02 09:29, 46co2u+d7n6f69py4nlk via qubes-users wrote:
> Hi,
>
> Is this possible and how can it be done? Unfortunately I didn't find any
> how to explaining this.
>
>
> Thank you
>

Sorry, that's not supported:

"Other devices, such as USB webcams, will also work, but they will be
accessible only from the USB qube itself, as explained above."

https://www.qubes-os.org/doc/usb/#tocAnchor-1-1-3

but isn't the last paragraph of your link actually mentioning that a USB webcam can be "attached" to a "conferences qube", even if only under 3.2?

Well I do not have yet 3.2, but this seems interesting. May you please elaborate a little bit about the use cases of this last paragraph?

It seems something totally different from the old USB controller assignment. So what is that? Or even more interesting; for what purpose may we use it?

Best

Fran

Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=aJfc
-----END PGP SIGNATURE-----

--
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com.
To post to this group, send email to qubes...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/401a6c9e-efb5-9b75-36a0-124a0b7fb405%40qubes-os.org.

For more options, visit https://groups.google.com/d/optout.

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-08-02 17:07, Franz wrote:
> On Tue, Aug 2, 2016 at 8:19 PM, Andrew David Wong <a...@qubes-os.org>
> wrote:
>
> On 2016-08-02 09:29, 46co2u+d7n6f69py4nlk via qubes-users wrote:
>>>> Hi,
>>>>
>>>> Is this possible and how can it be done? Unfortunately I didn't find
>>>> any how to explaining this.
>>>>
>>>>
>>>> Thank you
>>>>
>
> Sorry, that's not supported:
>
> "Other devices, such as USB webcams, will also work, but they will be
> accessible only from the USB qube itself, as explained above."
>
> https://www.qubes-os.org/doc/usb/#tocAnchor-1-1-3
>
>
>
>> but isn't the last paragraph of your link actually mentioning that a USB
>> webcam can be "attached" to a "conferences qube", even if only under
>> 3.2?
>
>> Well I do not have yet 3.2, but this seems interesting. May you please
>> elaborate a little bit about the use cases of this last paragraph?
>
>> It seems something totally different from the old USB controller
>> assignment. So what is that? Or even more interesting; for what purpose
>> may we use it?
>
>> Best Fran
>

Ah, yes, you're right. I overlooked this new feature introduced in 3.2 because
I haven't had a chance to try it yet. (Also, I don't know whether the OP is on
3.1 or 3.2-rcX, and of course 3.2-rcX is still an RC.)

So, yes, beginning in 3.2, it should be possible to do this. The use case, as
far as I can tell, would be as described in that paragraph: something like
attaching a webcam to a "conference" VM for the purpose of the
teleconferencing. You should be able to use it for that and similar purposes.

- --

Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=P4/m
-----END PGP SIGNATURE-----

[46h6sk+9ay...@guerrillamail.com]

Thank you for the reply. I tried to follow the instructions on the documentation (as illustrated for the conference AppVM) however that does not work. I get a message stating - ERROR: qubes-usb-proxy not installed in the VM - which is not true, I've installed the package and the message is still displayed.

What I'm doing wrong?

[Franz]

On Wed, Aug 3, 2016 at 3:35 PM, 46h6sk+9aybfqrmo0zwg via qubes-users <qubes...@googlegroups.com> wrote:

Thank you for the reply. I tried to follow the instructions on the documentation (as illustrated for the conference AppVM) however that does not work. I get a message stating - ERROR: qubes-usb-proxy not installed in the VM - which is not true, I've installed the package and the message is still displayed.

What I'm doing wrong?

May you confirm you are using Qubes release 3.2?

----
Sent using GuerrillaMail.com
Block or report abuse: https://www.guerrillamail.com/abuse/?a=UFR2AB5NVqcQmh2U93EQdRjCStifx8dDiadNcQ%3D%3D

--
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com.
To post to this group, send email to qubes...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/137f3a431aab9bf9f71ab3d8af88094fea39%40guerrillamail.com.

[46h6sk+9ay...@guerrillamail.com]

Yes, I'm using Qubes 3.2RC2

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-08-03 11:35, 46h6sk+9aybfqrmo0zwg via qubes-users wrote:
> Thank you for the reply. I tried to follow the instructions on the
> documentation (as illustrated for the conference AppVM) however that does
> not work. I get a message stating - ERROR: qubes-usb-proxy not installed in
> the VM - which is not true, I've installed the package and the message is
> still displayed.
>
> What I'm doing wrong?
>

Which version of qubes-usb-proxy do you have?

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=+Ba5
-----END PGP SIGNATURE-----

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Wed, Aug 03, 2016 at 06:35:16PM +0000, 46h6sk+9aybfqrmo0zwg via qubes-users wrote:
> Thank you for the reply. I tried to follow the instructions on the documentation (as illustrated for the conference AppVM) however that does not work. I get a message stating - ERROR: qubes-usb-proxy not installed in the VM - which is not true, I've installed the package and the message is still displayed.
>
> What I'm doing wrong?

Do you have it installed in both sys-usb and target AppVM? Or rather -
respective template(s)?

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXoxvFAAoJENuP0xzK19cs8DoH/iQIXhiixF6O9VlaLckR4N7k
Ytrc7VjjhG7g+1GNLsVIGzCaiurndsKrmgD0p+McT3hIhmlRckh/uHSGuwQGOEeK
MYJcKoyWLXnxpg7wjiFh+GNlD12DvyzjNT+eB8JVmWx4VMcBVeUmRfA7p52KNuke
o8mL+V79Xgj3MMurMU1d5ZQ3cx26/gSsGOAffplNXrilSczN54Z6D1fQCx3Tzn9W
65aYijzUlhlc1Okv4MRu4pl+aj29XamsFpnwIo/AuiIR9Ct9j8+RrJZTINlz6qKU
ibfOVv2dsdcIXCHn83CStAKwrImiYkm6p3InImGIbS5D86xEuT146qnyYcErjlA=
=Yip+
-----END PGP SIGNATURE-----

[46l47g+27i...@guerrillamail.com]

Hi,

I finally managed to put this to work, the missing part was to install the qubes-usb-proxy also on the sys-usb as well (mea culpa) :)
I'm now able to attach the webcam to any AppVM, unfortunately the only caveat is that when I unassigned the device from the AppVM back to the sys-usb I'm not able to get the camera working again on the sys-usb - the device doesn't seem to be present.

Is this the expected behavior?

Thank you.

[Marek Marczykowski-Górecki]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, Aug 04, 2016 at 02:02:59PM +0000, 46l47g+27idcs742td9g via qubes-users wrote:
> Hi,
>
> I finally managed to put this to work, the missing part was to install the qubes-usb-proxy also on the sys-usb as well (mea culpa) :)
> I'm now able to attach the webcam to any AppVM, unfortunately the only caveat is that when I unassigned the device from the AppVM back to the sys-usb I'm not able to get the camera working again on the sys-usb - the device doesn't seem to be present.

Indeed this is how it is working now. Mostly
because device is still connected to usbip-host driver and isn't
switched back to the original one.

> Is this the expected behavior?

That's a good question. I think the most common use case would be to
either:
- use device directly in sys-usb all the time - for example if you use
a different mechanism to make it available to other VMs - like
qvm-block, or simply mount it there and copy to/from files using
qubes file copy
- don't use it in sys-usb at all and only attach to some VM when needed
- like for webcam - you don't have your video call credentials in
sys-usb, but in some other dedicated VM

Generally it is based on assumption that sys-usb serves only as an
interface to the devices, but all the data is stored in some AppVM.

If this is correct, switching device driver back to the original one is
just waste of time.

Joanna, Andrew, what do you think?

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXo1EfAAoJENuP0xzK19csFzEIAJi9bEBcN7RjhNsFa4IGhYBt
uNS9679m9xuHvaIMydLfDVOzYmV98YXix25K8MpzbUbqY4+0aHXvVPmv7jIBem0v
1gCFDIt8v9tl9r0b3XYfP7zgEdoosyyz1FB/fHFAHMHogJs//+F3DxysoA/DLL8i
JMamHvegtunzVq3iJDkSpckFo6MCgBkqb1q4RUkS2F7ZRq5ZpkjE+jL38mCKJVK1
USoGod8fYPMewhGMPs0GABzMzZHdarZU5SyySFWdEfy2/GwSgWQCpMn9WpaGqSSw
qDCHuCpZrwMnRCsPyBGkEP3ZJjtmOKZbHO4LRAZ/hQmyxGxMoH93oqGG5GENBFY=
=yw18
-----END PGP SIGNATURE-----

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I agree. We should assume that sys-usb is compromised (due to the existence of
things like BadUSB). We certainly don't want the user's webcam spying on him
or her from sys-usb, so the safe default would be not to switch the device
driver back to sys-usb (at least not without explicit user consent).

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJXo+xzAAoJENtN07w5UDAwMLQP/iOIsSfBG6WbwEyxNNxMkPb6
RebJeHc86PL+UnVz8VIPEmn0Lwu8we19TCjCUYfR/gvXx1Ey012oOAWJPpwCuRcz
jr+64C7ol9pDsw50k1rZprzV5gHxQYgjsPPrPg004CjuTR2Fm2wq/6oY7hTTXNPi
eWeXKK+cah92pF+mqqKaxKog+DGI2uDjCDhrR1Utbjfijt8KQUeUMEeybDljB6Qj
HaIC+jsDlZi4NPwOduJdpqzjGauXl/ms/0UwmrWRk22MlQXbDZOqN3mPpxWNHv0t
5bRZKVmvF+Ag6p8ZfdXBCxffZaclPA7Y+pPIVbAePiCGXF0xqI9L9kdoufwxb2Zq
wH1ow0ocwIk4AyCMiwTco2tx5xfCCrq5or/kF24wRtBlVInJf3G2PlKCUk0NP1wp
H2yaoxx1kqGWGm08SX1vL/QJ+yL+vCkjuf9fmlngIJCrqCwtUdyhj5kBfz1XkQXZ
9htHkqblCX9WJcR6O6SVpSvKTcE84bkPGqyjygA3kgFH/X3Er1ACQ2VpzmdXdnwk
2/gnueLRA6g0JYICuJ+FiRBOLNtIf9ziqrsJGe7NuvSMim0ObBeG68fq2MYJ6+Tn
zbfINKHMAR2CK7n1NBv5hYSrxlq7p4M7ibh1Bq/s8m6owc3K7GMyE6dAUNMI8UN/
2GOaV0djCayOtihVnhcI
=yeA+
-----END PGP SIGNATURE-----