The only glitch was consistent crash when resuming from suspend. I debugged by shutting down service vm's and narrowed it down to sys-usb. Then detached the second USB controller from sys-usb and everything seems to work fine. I did not seem to loose any devices/ports doing this but did not do an exhaustive test.
I have the high-res screen and text is pretty small. Haven't yet figure out how to scale things up in qubes?
Thanks. Unfortunately it seems to have no effect:
echo Xft.dpi: XXX | xrdb -merge
xterm &
produces the same size text regardless of XXX
Is there a good application which definitely should honour this resource that I can use to test?
Thanks. Both methods work. I can just kill the gsd process and the Xft resource is correctly picked up and gives a nice result.
The gsettings approach also works. I did not look into it in detail but the Xft seems to give visually better results.
Thanks for posting the HCL entry. Have you tried AEM since your last post?
I am considering acquiring a T480 and using it with AEM, but it seems to have TPM 2.0 which is a priori incompatible with AEM. However, I stumbled upon a blog post [1] which mentions (in the section "BIOS Configuration") that the TPM of a slightly older ThinkPad model (I think T460p) can be configured to work according to the TPM 1.2 specification and with TXT, so I thought that the newer models could also have such an option. Do you (or anyone else) know if this is the case for T480?
-- Aedin Copper
PS: Since we're at it: The blog post also mentions that Intel AMT can be disabled as well. Can anyone confirm that this is also the case for T480?
[1] https://medium.com/@securitystreak/living-with-qubes-os-r3-2-rc3-for-a-week-1a37e04c799e
> I am considering acquiring a T480 and using it with AEM, but it seems to have TPM 2.0 which is a priori incompatible with AEM. However, I stumbled upon a blog post [1] which mentions (in the section "BIOS Configuration") that the TPM of a slightly older ThinkPad model (I think T460p) can be configured to work according to the TPM 1.2 specification and with TXT, so I thought that the newer models could also have such an option. Do you (or anyone else) know if this is the case for T480?
> PS: Since we're at it: The blog post also mentions that Intel AMT can be disabled as well. Can anyone confirm that this is also the case for T480?
> [1] https://medium.com/@securitystreak/living-with-qubes-os-r3-2-rc3-for-a-week-1a37e04c799e
Well, looks like one just needs to RTFM: In the user guide for T480 [2], the option of switching to TPM 1.2 is not mentioned in the list of configuration options (cf. page 90 (72 in the internal numbering)) (whereas it is mentioned in the guide for T460 [3] (on page 98 (82)). As for AMT, T480 does seem to have an option to disable it (page 88 (70)).
I guess the availability of different options can vary between configurations (e.g. vPro vs. non-vPro) and I haven't checked any of these on real hardware, but it looks like it wouldn't be possible to use AEM on a T480.
-- Aedin Copper
[2]: https://download.lenovo.com/pccbbs/mobiles_pdf/t480_ug_en.pdf
[3]: https://download.lenovo.com/pccbbs/mobiles_pdf/t460_ug_en.pdf
As far as I recall it was simply:
qvm-pci detach sys-usb dom0:3c_00.0
This is the production machine now so can't investigate things further