Qubes Network Setup Service

[Adam]

Hi

I have successfully install Qubes 3.2-r1 on a lenovo x220
I have player around with templates and AppVMs and thought i would try Windows 7.

I successfully install windows in a HVM Template and then installled Qubes Windows Tools which again appears to be successful. I am don't get any networking as Qubes Network Setup Fails to start. I am a Xen PV Netowrk adapter as installed by QWT.

I am not sure where to start debugging this,

i ran my windows HVM Tempate (win7) in debug mode and checked the logs

/var/log/xen/console/guest-win7.log --> empty
/var/log/xen/xonsole/guest-win7-dm.log
- lots of output but the following line standsout

XENNET|AdapterSetInformation: UNSUPPORTED OID 00010118

/var/log/qubes/guid.win7.log
/var/log/qubes/qrexec.win7.log
both don't show anything that stands out.

inside win7

qga.log

[20160714.103340.752-1900-E] QpsConnect: open read pipe failed with error 2: The system cannot find the file specified.
[20160714.103340.752-1900-E] connect_to_daemon: connect to server failed with error 2: The system cannot find the file specified.
[20160714.103340.752-1900-E] GetDomainName: qdb_open failed with error 2: The system cannot find the file specified.
[20160714.103340.752-1900-W] Init: Failed to read domain name, using host name
[20160714.103340.814-1900-W] VchanReceiveBuffer: (00000000004A3B90, msg_xconf): no data, blocking read
[20160714.103342.357-1900-W] HandleServerData: got unknown msg type 127, ignoring
[20160714.103408.971-1900-W] VchanReceiveBuffer: (00000000004A3B90, msg_motion): no data, blocking read
[20160714.103422.933-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103422.933-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103424.664-1900-W] HandleButton: unknown button pressed/released 0x6
[20160714.103424.664-1900-W] HandleButton: unknown button pressed/released 0x6
[20160714.103424.883-1900-W] HandleButton: unknown button pressed/released 0x6
[20160714.103424.883-1900-W] HandleButton: unknown button pressed/released 0x6
[20160714.103426.115-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103426.131-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103426.568-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103426.568-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103426.677-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103426.677-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103427.098-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103427.114-1900-W] HandleButton: unknown button pressed/released 0x7
[20160714.103435.522-1900-W] VchanReceiveBuffer: (00000000004A3B90, msg_motion): no data, blocking read

Not sure what to do now

Cheers
Adam

[Drew White]

On Thursday, 14 July 2016 22:09:21 UTC+10, Adam wrote:
> Hi
>
> I have successfully install Qubes 3.2-r1 on a lenovo x220
> I have player around with templates and AppVMs and thought i would try Windows 7.
>
> I successfully install windows in a HVM Template and then installled Qubes Windows Tools which again appears to be successful. I am don't get any networking as Qubes Network Setup Fails to start. I am a Xen PV Netowrk adapter as installed by QWT.
>

This networking issue is usual.

It doesn't set the networking adaptor properly during initialisation.

Check the settings.
then set the DNS server to something.
Google DNS A is 8.8.8.8

Then you should have an internet conection.
Or else, if that doesn't solve it, it could be the Gateway, so just set all settings manually.

Then it should work.

[Adam]

I don't even get a ip so assigning a new dns server won't help.

I think its a communication problem between windows and dom0, but i don't know enough to diagnose it further.

[Alex]

On 07/14/2016 02:40 PM, Adam wrote:
>
> I don't even get a ip so assigning a new dns server won't help.
>
> I think its a communication problem between windows and dom0, but i
> don't know enough to diagnose it further.
>

dom0 does not have any networking; this functionality is deferred to
net-vm and firewall-vm.

Your windows HVM should either have
- a network device assigned to itself (not recommended)
- a firewall-vm set as its net-vm

The latter case is preferred, and the firewall-vm should have a net-vm
set as its net-vm. In the net-vm there should be at least one network
device assigned, and in the default setup the NetworkManager applet
should appear by itself in the system tray when the net-vm is started up.

Network configuration on the LAN/internet side is done on the net-vm,
usually (but not necessarily) via the NetworkManager gui applet, and the
Windows HVM will only have to start its virtual network device (if
successfully installed by the Qubes Windows tools) and receive a private
IP address in the 10.0.0.0/8 network by the firewall-vm.

Please check this situation on your computer, and report any difference;
this may help find the problem.

--
Alex

[Drew White]

> I don't even get a ip so assigning a new dns server won't help.

Look in the Qubes Manager, that's the one you give it.

[Adam]

Hi Alex and Drew

I understand the global view of networking in QubesOS, I have a net VM, a firewall VM, a proxy VM and a standard app VM all working nicely and my app VM can surf the web securely.

I never said dom0 and win7 communicated via network, had had assumed, maybe incorrectly, that dom0 via Qubes db or something to each VM what it's IP address is and scripts inside the VM set the ip correctly.

I know my problem is Qubes Network Setup service in side my windows HVM failing to start, and it won't start when I manually try to start it from the services app.

I don't want to just assign the Nic an IP as that's not what's suppose to happen, I want to figure out what's going on, so I can tell others what went wrong, why it went wrong and how to fix it!

Has anyone had a problem with "Qubes Network Setup" service failing to start? (please note this is a Windows application(service)

Cheers
Adam

[Alex]

On 07/14/2016 03:46 PM, Adam wrote:
> Hi Alex and Drew
>
> I understand the global view of networking in QubesOS, I have a net
> VM, a firewall VM, a proxy VM and a standard app VM all working
> nicely and my app VM can surf the web securely.
>
> I never said dom0 and win7 communicated via network, had had assumed,
> maybe incorrectly, that dom0 via Qubes db or something to each VM
> what it's IP address is and scripts inside the VM set the ip
> correctly.

I'm sorry, I must have assumed that "communication problem between
windows and dom0" implied a *network* communication. My bad.

Is there any log related to this service in the windows event log?

Could you please try to disable aero (and anything related to 3d - yes I
know that the problem is with networking and that it should not be
related to 3d graphics) and restart the VM?

Last, could you try to whip up another win 7 hvm and just... try again?

Please note that these are just guesses, after a bit of googling around,
and not actual step-by-step troubleshooting. It's to gather more
information until somebody who is actually expert in the matter replies
to the thread.

--
Alex

[Drew White]

On Thursday, 14 July 2016 23:46:56 UTC+10, Adam wrote:
> I understand the global view of networking in QubesOS, I have a net VM, a firewall VM, a proxy VM and a standard app VM all working nicely and my app VM can surf the web securely.

I have Windows AppVMs working happily doing what I said to do, to work around the issue with missing communication between them.

> I never said dom0 and win7 communicated via network, had had assumed, maybe incorrectly, that dom0 via Qubes db or something to each VM what it's IP address is and scripts inside the VM set the ip correctly.

It attaches it viathe XEn backing, using a specific command that attaches it.

> I know my problem is Qubes Network Setup service in side my windows HVM failing to start, and it won't start when I manually try to start it from the services app.

There are issues with Qubes-Windows-Tools, and they need to COMPLETELY rewrite them. There have been bugs in it since they first brought them into Qubes, and the issues still remain unresolved. I doubt that the issues will ever be fixed.

> I don't want to just assign the Nic an IP as that's not what's suppose to happen, I want to figure out what's going on, so I can tell others what went wrong, why it went wrong and how to fix it!

I've looked into it since Qubes 2.0 RC1, and there has been no resolution yet.
So if you assign the IPs that it is meant to have, then you can at least use the AppVM for now.

> Has anyone had a problem with "Qubes Network Setup" service failing to start? (please note this is a Windows application(service)

My service starts fine, but 99% of the time, it doesn't work.
I still have not found anything in the Qubes Logs OR the Windows Logs to identify the issue.

In conclusion, we have to wait for the issues in the Windows Tools to be resolved. There are many that will cause issues and just happen with no reason except for bad coding/vision at some point that is causing them to break.

I have all the code, but I don't know C.
I'm thinking of taking the code and rewriting the tools completely just to get rid of the bugs that many many many many people complain about that have not been resolved since the tools came out in Qubes.

[Drew White]

> Is there any log related to this service in the windows event log?

Have you checked the Windows Qubes Logs?
If you have Qubes Tools installed, they would be wherever you set the logs to be put.
Typically that is on the private.img drive.
If you don't have them installed, you won't have those logs, and can only check the Windows Event Log, if you have it logging everything for debug, not just critical.

> Could you please try to disable aero (and anything related to 3d - yes I
> know that the problem is with networking and that it should not be
> related to 3d graphics) and restart the VM?

I always have Aero turned off on Windows, whether it's a bare metal or a virtual. And I still have the issue on the Guest.

> Last, could you try to whip up another win 7 hvm and just... try again?

Whip up another won't make much difference. Also depends on the updates installed on the VM. What updates are installed? What antivirus/firewall/malware protection do you have Adam?

> Please note that these are just guesses, after a bit of googling around,
> and not actual step-by-step troubleshooting. It's to gather more
> information until somebody who is actually expert in the matter replies
> to the thread.

If you need an expert, then you need Marek, one of the programmers. He may be able to help, he has assisted in resolving many of my issues I've had over time.

[Jeremy Rand]

Drew White:

>
> There are many that will cause issues and just happen with no reason except for bad coding/vision at some point that is causing them to break.
>
> I have all the code, but I don't know C.

Wow. So Drew doesn't know the language the code is written in, but is
*confident* that the problems are due to "bad coding/vision" rather
than, say, the fact that Windows API's are insanely complex and have
near-useless documentation? (Marek has pointed out that issue multiple
times, and I can confirm that it's true for the limited set of Windows
API's that I've had the misfortune of having to reverse-engineer).

Congrats Drew, I'm finally taking the time to reroute all incoming
messages from drew....@gmail.com to /dev/null.

@Marek and the other Qubes devs -- sorry you have to put up with people
like him. Your work is very much appreciated by the vast majority of
Qubes users. Keep on doing what you're doing!

Cheers,
-Jeremy Rand

[Drew White]

On Saturday, 16 July 2016 06:05:29 UTC+10, Jeremy Rand wrote:
> Drew White:
> >
> > There are many that will cause issues and just happen with no reason except for bad coding/vision at some point that is causing them to break.
> >
> > I have all the code, but I don't know C.
>
> Wow. So Drew doesn't know the language the code is written in, but is
> *confident* that the problems are due to "bad coding/vision" rather
> than, say, the fact that Windows API's are insanely complex and have
> near-useless documentation? (Marek has pointed out that issue multiple
> times, and I can confirm that it's true for the limited set of Windows
> API's that I've had the misfortune of having to reverse-engineer).

When the programmers change, the old coding style isn't the new persons style and they have to TRY to make sense of all the code of the other person, if it's not commented well enough then it becomes hard, and thus mistakes can happen.
But I said that that was ONE of the options, if you didn't notice I made 2 options there that were POSSIBILITIES.
So I said 2 things... you ONLY looked at ONE.
You assault ME for making a statement where YOU ONLY looked at ONE, and you think I'm the bad person because of that?

> Congrats Drew, I'm finally taking the time to reroute all incoming
> messages from drew....@gmail.com to /dev/null.

That's okay, you can block that address if you want, I'll just post from a different account every day just to annoy you. :} naa, I wouldn't do that, I'm not that much of a prick. But to block all my accounts, you would have to block some other people that you think are different people, but are actually me. lol

> @Marek and the other Qubes devs -- sorry you have to put up with people
> like him. Your work is very much appreciated by the vast majority of
> Qubes users. Keep on doing what you're doing!

Marek is one of the few people on here that I'll pay 100% attention to, because he knows what he's talking about. I respect him a great deal. There are a few people on here I think are just, yeah, I won' t get into that. But some of them I think are not quite right. YOU, Jeremy, are one of the people I dislike more than anyone I have ever met or heard from online.

[Achim Patzner]

Am 16. Juli 2016 6:59:38 vorm. schrieb Drew White <drew....@gmail.com>:
>> Congrats Drew, I'm finally taking the time to reroute all incoming messages
>> from drew....@gmail.com to /dev/null.
>
> That's okay, you can block that address if you want, I'll just post from a
> different account every day just to annoy you. :} naa, I wouldn't do that,
> I'm not that much of a prick. But to block all my accounts, you would have
> to block some other people that you think are different people, but are
> actually me. lol

In the good old time on Usenet we always thought "if adding that jerk to
the local kill file didn't suffice we could add him to the kill file at
kgbvax and specialists were going to take care of the problem in the real
world". Maybe it's still active.

> YOU, Jeremy, are one of the people I dislike more than anyone I have ever
> met or heard from online.

Some rabbi told me once "if you're pointing a finger at a person there will
be four fingers pointing at yourself".


Achim

[Adam]

Does anyone actually have any ideas about my original post?

Cheers
Adam

[ad...@adamsteen.com.au]

to add some more debugging info, the windows event logger keeps showing this error

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

[Drew White]

On Saturday, 16 July 2016 19:00:34 UTC+10, Achim Patzner wrote:
> > YOU, Jeremy, are one of the people I dislike more than anyone I have ever
> > met or heard from online.
>
> Some rabbi told me once "if you're pointing a finger at a person there will
> be four fingers pointing at yourself".

Let the fingers point all they want, if they don't earn my respect then such as life.
There are people on here that I respect a great deal, And there are those, like Jeremy, that I want nothing to do with ever and I hate. I don't respect him in the least.

As for the OP, I've got no idea now. I don't know how their query structure is set up, so I'm at a loss, sorry. that debugging info got me stumped.