Should I Continue?

[JimmyJames]

Hello:

I want to install Qubues (for the first time) on a LENOVO Thinkpad T430. The hardware compatibility IOMMU column for that device says "no." The top of the page tells me a IOMMU is required for effective isolation of network VMs and PCI passthrough.""

Does this mean my hope of running Qubes is doomed on this device, and I shouldn't even try to continue?

Thank you very much.

[Tomáš Vondra]

I'm no security expert, but I don't think that's what it means. AFAIK without iommu it's impossible to prevent some types of attack, but there's still plenty of other attacks that Qubes prevents.

regards

[Chris Laprise]

On 10/5/19 12:10 PM, JimmyJames wrote:
> Hello:
>

> I want to install Qubues (for the first time) on a *LENOVO Thinkpad
> T430*
> <https://www.qubes-os.org/hcl/#lenovo_thinkpad-t430-23426qu_i7-3632qm_ivy-bridge_integrated-graphics>.

> The hardware compatibility IOMMU column for that device says "no." The
> top of the page tells me a IOMMU is required for effective isolation of
> network VMs and PCI passthrough

> <https://wiki.xen.org/wiki/Xen_PCI_Passthrough>.""

>
> Does this mean my hope of running Qubes is doomed on this device, and I
> shouldn't even try to continue?
>
> Thank you very much.

It would surprise me if that report didn't suffer from some kind of
error. Maybe the owner forgot to turn on the VT-d setting in the BIOS.

With a Thinkpad T430 its definitely worth trying to continue...its in
one of the most Qubes-compatible product lines.

--

Chris Laprise, tas...@posteo.net
https://github.com/tasket
https://twitter.com/ttaskett
PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886

[JimmyJames]

Reporting Back:

I checked the BIOS, and it did indeed have a VT-d setting, which was already enabled.

I burned 4.0.1 to a DVD, and the first error message (attached) said their was "No IOMMU/VT-d/AMD-Vi, Interrupt Remapping."

Armed with your encouragement, I figured this was mistaken, and clicked onward.

A little later I was prompted to abort because of the fatal error:

DNF Error: Error unpacking rpm package iso-codes-3.70-1.fc25.noarch

Any thoughts?

[awokd]

JimmyJames:

> A little later I was prompted to abort because of the fatal error:
> DNF Error: Error unpacking rpm package iso-codes-3.70-1.fc25.noarch

Did you verify after you burned the DVD?

--
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots

[JimmyJames]

> A little later I was prompted to abort because of the fatal error:
> DNF Error: Error unpacking rpm package iso-codes-3.70-1.fc25.noarch

Did you verify after you burned the DVD?

awokd:

No, I didn't verify the DVD after burning -- I didn't know that was thing people do. I did however verify the ISO with the distribution key (and verified the distribution key with the master) before I burned the DVD.

[awokd]

JimmyJames:

Could be an error on the burn, might as well try another. Most burn
software has a checkbox somewhere to verify after burn. If it still
errors in the same place, try disabling your nvidia (don't ask me why
but this worked for somebody).