Basic setup verification tests for correct setup? VT-d? Other?

272 views
Skip to first unread message

vel...@tutamail.com

unread,
Jan 13, 2018, 2:52:44 PM1/13/18
to qubes-users
I am hoping some folks can help me with some basic tests and commands to verify my Qubes 3.2 is set up correctly:

I ran a qubes command in Dom0 to verify if VT-d is working(https://www.qubes-os.org/doc/security-guidelines/):

qubes-hcl-report AppVM (Name of "AppVM" I was running)

The results were as follows:

It listed my computer, BIOS, XEN version, etc...

It also stated:
HVM: Active
I/O MMU: Active
HAP/SLAT: Yes
TPM: Device present
Remapping: Yes

Per some googling: "....Alternatively, in dom0 (under Qubes OS or Xen more generally) you could grep for "virtualisation" or "VT-d". You should either see "I/O virtualisation enabled" or "I/O virtualisation disabled"...:

In Dom0 I ran the command:

grep "VT-d"
grep "virtualisation"

Nothing really happened after waiting 10 minutes...so I closed the terminal.


My concerns are:
I have VT-d and VT-x enabled in my BIOS....am I actually using this feature?
Any other commands or checks I can do to confirm my installation is done correctly?

Thanks again and happy new years Qube group...thank you again for all you do!

V

Yethal

unread,
Jan 13, 2018, 3:15:28 PM1/13/18
to qubes-users
sudo xl dmesg|grep VT-d

vel...@tutamail.com

unread,
Jan 13, 2018, 3:32:50 PM1/13/18
to qubes-users
Thank you, a lot quicker results...the results were:

XEN Intel VT-d iommu 0 supported page sizes: 4kB
XEN Intel VT-d iommu 1 supported page sizes: 4kB
XEN Intel VT-d Snoop Control not enabled
XEN Intel VT-d Dom0 DMA Passthrough not enabled
XEN Intel VT-d Queued Invalidation enabled
XEN Intel VT-d Interrupt Remapping enabled
XEN Intel VT-d Shared EPT tables not enabled

Does this mean my VT-d functionality is working?

awokd

unread,
Jan 13, 2018, 4:30:24 PM1/13/18
to vel...@tutamail.com, qubes-users
Yes, and from your original message,

>> HVM: Active
>> I/O MMU: Active
>> HAP/SLAT: Yes
>> TPM: Device present
>> Remapping: Yes

These are all what you want to see to confirm it's working. TPM isn't
related to virtualization, but nice to have available for Anti Evil Maid.

vel...@tutamail.com

unread,
Jan 13, 2018, 10:34:19 PM1/13/18
to qubes-users
Thank you awokd and Yethal...learned a lot!

Reply all
Reply to author
Forward
0 new messages