Dell Latitude E6320 HCL + questions

238 views
Skip to first unread message

Alex

unread,
Apr 24, 2013, 5:26:27 PM4/24/13
to qubes...@googlegroups.com
Hi Qubes team

Thank you for a fantastic project - I like the principle and the system is already very usable.

Attaching a HCL report from my Dell E6320 laptop with 4GB of RAM on which Qubes works quite decently performance-wise.

Some observations follow - your guidance would be appreciated:

1. [Bug?] In Qubes VM Manager going to About -> Qubes OS returns "Qubes OS Release 1.0" even though this is V2 R2

2. [Fedora issue?] When asking the laptop to power off (via KDE's shutdown GUI, we sometimes get stuck in the following console state:

[...]
Powering off.
[nnnnn.nnnnnn] Power down.

The power is not actually cut, one has to press the physical power button for the laptop to power off.

3. How is it possible to install non-rpm applications like TrueCrypt? A universal and a domain-specific way would be useful.

4. Memory usage: Straight after boot, my Firewallvm domain consumes approx. 730MB of RAM. Why is so much memory necessary?

5. [bug?] In Qubes VM Manager asking it to backup VMs fails with:
[Dom0] Houston, we have a problem...
Whoops. A critical error has occured (<- btw this should be "occurred"). This is most likely a bug in Qubes Manager.

TypeError: C++ type 'list' is not supported as a slot argument type
at line 1567
of file /usr/lib64/python2.7/site-packages/qubesmanager/main.py

In the details frame the text is:
----
line: self.connect(self.select_vms_widget, SIGNAL("items_removed(list)"), self.vms_removed)
func: __init__
line no.: 89
file: /usr/lib64/python2.7/site-packages/qubesmanager/backup.py
----
line: backup_window = BackupVMsWindow(app, self.qvm_collection, self.blk_manager, self.shutdown_vm)
func: action_backup_triggered
line no.: 1567
file: /usr/lib64/python2.7/site-packages/qubesmanager/main.py

6. [bug?] Sometimes VMs fail to start. The message is "[Dom0 Qrexec daemon - Kdialog: Timeout while trying connecting to qrexec agent (Xen domain ID:5). Do you want to wait next 60 seconds?"
Invariably waiting for those next 60 seconds does not result in a successful launch, but rather in a message in the "Notifications" panel of KDE saying "Error while starting the 'untrusted' VM: ERROR: Cannot execute qrexec_daemon!

Thanks

Alex
Qubes-HCL-Dell_Inc.-Latitude_E6320-20130423.cpio.gz
Qubes-HCL-Dell_Inc.-Latitude_E6320-20130423.txt

Marek Marczykowski

unread,
Apr 25, 2013, 8:03:00 AM4/25/13
to Alex, qubes...@googlegroups.com
On 24.04.2013 23:26, Alex wrote:
> Hi Qubes team
>
> Thank you for a fantastic project - I like the principle and the system is
> already very usable.
>
> Attaching a HCL report from my Dell E6320 laptop with 4GB of RAM on which
> Qubes works quite decently performance-wise.
>
> Some observations follow - your guidance would be appreciated:
>
> 1. [Bug?] In Qubes VM Manager going to About -> Qubes OS returns "Qubes OS
> Release 1.0" even though this is V2 R2

Ah, indeed, thanks!

> 2. [Fedora issue?] When asking the laptop to power off (via KDE's shutdown
> GUI, we sometimes get stuck in the following console state:
>
> [...]
> Powering off.
> [nnnnn.nnnnnn] Power down.
>
> The power is not actually cut, one has to press the physical power button
> for the laptop to power off.

Strange... Is it deterministic problem, or happens only sometimes? Perhaps
kernel upgrade will fix this issue. I'm still not sure which kernel will be in
R2 beta3 (and final R2) release.

> 3. How is it possible to install non-rpm applications like TrueCrypt? A
> universal and a domain-specific way would be useful.

Yes, same as in other linux distributions. If you want install such software
in dom0 (which is bad idea in most cases), you need to copy file there in the
first place:
http://wiki.qubes-os.org/trac/wiki/CopyToDomZero

> 4. Memory usage: Straight after boot, my Firewallvm domain consumes approx.
> 730MB of RAM. Why is so much memory necessary?

Memory is assigned to VMs proportionally to requirements. Just after system
boot there are very low memory needs, so free RAM is distributed among all VMs
(which have dynamic memory management enabled - netvm hasn't).

> 5. [bug?] In Qubes VM Manager asking it to backup VMs fails with:
> [Dom0] Houston, we have a problem...
> Whoops. A critical error has occured (<- btw this should be "occurred").
> This is most likely a bug in Qubes Manager.

I know, this is already fixed in git repo, but still we haven't released new
package...

> 6. [bug?] Sometimes VMs fail to start. The message is "[Dom0 Qrexec daemon
> - Kdialog: Timeout while trying connecting to qrexec agent (Xen domain
> ID:5). Do you want to wait next 60 seconds?"
> Invariably waiting for those next 60 seconds does not result in a
> successful launch, but rather in a message in the "Notifications" panel of
> KDE saying "Error while starting the 'untrusted' VM: ERROR: Cannot execute
> qrexec_daemon!

Check /var/log/xen/console/guest-unstrusted.log. This file should be available
in Qubes Manager (right click on VM). Also check "xl list" output before you
click anything in the message window - is the "untrusted" VM present there?
What is its state and time used?

--
Best Regards / Pozdrawiam,
Marek Marczykowski
Invisible Things Lab

signature.asc

ix4...@gmail.com

unread,
Apr 29, 2013, 4:28:05 AM4/29/13
to qubes...@googlegroups.com
On 25 April 2013 13:03, Marek Marczykowski <marm...@invisiblethingslab.com> wrote:
On 24.04.2013 23:26, Alex wrote:
> Hi Qubes team
>
> Thank you for a fantastic project - I like the principle and the system is
> already very usable.
>
> Attaching a HCL report from my Dell E6320 laptop with 4GB of RAM on which
> Qubes works quite decently performance-wise.
>
> Some observations follow - your guidance would be appreciated:
>
> 1. [Bug?] In Qubes VM Manager going to About -> Qubes OS returns "Qubes OS
> Release 1.0" even though this is V2 R2

Ah, indeed, thanks!

> 2. [Fedora issue?] When asking the laptop to power off (via KDE's shutdown
> GUI, we sometimes get stuck in the following console state:
>
> [...]
> Powering off.
> [nnnnn.nnnnnn] Power down.
>
> The power is not actually cut, one has to press the physical power button
> for the laptop to power off.

Strange... Is it deterministic problem, or happens only sometimes? Perhaps
kernel upgrade will fix this issue. I'm still not sure which kernel will be in
R2 beta3 (and final R2) release.


Only sometimes - I can't discern a pattern to trigger it. Happens with restart as well.

 
> 3. How is it possible to install non-rpm applications like TrueCrypt? A
> universal and a domain-specific way would be useful.

Yes, same as in other linux distributions. If you want install such software
in dom0 (which is bad idea in most cases), you need to copy file there in the
first place:
http://wiki.qubes-os.org/trac/wiki/CopyToDomZero


I agree it's a bad idea to install stuff on Dom0. What I am trying to do is install a non-rpm application in, say, the Personal domain. If I install TrueCrypt (which is delivered as a .tar.gz and installs a couple of binaries in /usr/bin), next time I start the domain's VM, truecrypt is not there. The binaries are gone. Same with the template VM - if I unstall TrueCrypt from its tar.gz, next time I start any AppVM, or the TemplateVM itself, TrueCrypt binaries are no longer there.
 
> 4. Memory usage: Straight after boot, my Firewallvm domain consumes approx.
> 730MB of RAM. Why is so much memory necessary?

Memory is assigned to VMs proportionally to requirements. Just after system
boot there are very low memory needs, so free RAM is distributed among all VMs
(which have dynamic memory management enabled - netvm hasn't).

> 5. [bug?] In Qubes VM Manager asking it to backup VMs fails with:
> [Dom0] Houston, we have a problem...
> Whoops. A critical error has occured (<- btw this should be "occurred").
> This is most likely a bug in Qubes Manager.

I know, this is already fixed in git repo, but still we haven't released new
package...

> 6. [bug?] Sometimes VMs fail to start. The message is "[Dom0 Qrexec daemon
> - Kdialog: Timeout while trying connecting to qrexec agent (Xen domain
> ID:5). Do you want to wait next 60 seconds?"
> Invariably waiting for those next 60 seconds does not result in a
> successful launch, but rather in a message in the "Notifications" panel of
> KDE saying "Error while starting the 'untrusted' VM: ERROR: Cannot execute
> qrexec_daemon!

Check /var/log/xen/console/guest-unstrusted.log. This file should be available
in Qubes Manager (right click on VM). Also check "xl list" output before you
click anything in the message window - is the "untrusted" VM present there?
What is its state and time used?

This happens, seemingly randomly, with any AppVM. While I wait for the originally requested AppVM to start, starting another AppVM (e.g. "work"), makes the original AppVM immediately appear as well. Here are some logs from when my personal AppVM would not appear after a fresh boot:

/var/log/xen/console/guest-personal.log:
<snip>
[    0.000000] Initializing cgroup subsys cpuset
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Linux version 3.7.6-2.pvops.qubes.x86_64 (user@qubes) (gcc version 4.7.2 20121109 (Red Hat 4.7.2-8) (GCC) ) #1 SMP Wed Feb 27 10:19:50 UTC 2013
[    0.000000] Command line: root=/dev/mapper/dmroot ro nomodeset console=hvc0 rd_NO_PLYMOUTH 3
[    0.000000] ACPI in unprivileged domain disabled
[    0.000000] e820: BIOS-provided physical RAM map:
[    0.000000] Xen: [mem 0x0000000000000000-0x000000000009ffff] usable
[    0.000000] Xen: [mem 0x00000000000a0000-0x00000000000fffff] reserved
[    0.000000] Xen: [mem 0x0000000000100000-0x000000007cbfffff] usable
[    0.000000] NX (Execute Disable) protection: active
[    0.000000] DMI not present or invalid.
[    0.000000] No AGP bridge found
[    0.000000] e820: last_pfn = 0x7cc00 max_arch_pfn = 0x400000000
[    0.000000] x2apic enabled by BIOS, switching to x2apic ops
[    0.000000] init_memory_mapping: [mem 0x00000000-0x7cbfffff]
[    0.000000] RAMDISK: [mem 0x02021000-0x0384cfff]
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x00010000-0x00ffffff]
[    0.000000]   DMA32    [mem 0x01000000-0xffffffff]
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00010000-0x0009ffff]
[    0.000000]   node   0: [mem 0x00100000-0x7cbfffff]
[    0.000000] SFI: Simple Firmware Interface v0.81 http://simplefirmware.org
[    0.000000] smpboot: Allowing 4 CPUs, 0 hotplug CPUs
[    0.000000] e820: [mem 0x7cc00000-0xffffffff] available for PCI devices
[    0.000000] Booting paravirtualized kernel on Xen
[    0.000000] Xen version: 4.1.2 (preserve-AD)
[    0.000000] setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1
[    0.000000] PERCPU: Embedded 28 pages/cpu @ffff880018c00000 s83648 r8192 d22848 u524288
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 503872
[    0.000000] Kernel command line: root=/dev/mapper/dmroot ro nomodeset console=hvc0 rd_NO_PLYMOUTH 3
[    0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes)
[    0.000000] Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes)
[    0.000000] Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes)
[    0.000000] __ex_table already sorted, skipping sort
[    0.000000] Checking aperture...
[    0.000000] No AGP bridge found
[    0.000000] Memory: 334700k/2043904k available (4702k kernel code, 448k absent, 1708756k reserved, 6040k data, 600k init)
[    0.000000] Hierarchical RCU implementation.
[    0.000000]     RCU dyntick-idle grace-period acceleration is enabled.
[    0.000000]     RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4.
[    0.000000] NR_IRQS:33024 nr_irqs:304 16
[    0.000000] Console: colour dummy device 80x25
[    0.000000] console [tty0] enabled
[    0.000000] console [hvc0] enabled
[    0.000000] installing Xen timer for CPU 0
[    0.000000] tsc: Detected 2594.214 MHz processor
[    0.004000] Calibrating delay loop (skipped), value calculated using timer frequency.. 5188.42 BogoMIPS (lpj=10376856)
[    0.004000] pid_max: default: 32768 minimum: 301
[    0.004000] Mount-cache hash table entries: 256
[    0.004000] Initializing cgroup subsys cpuacct
[    0.004000] Initializing cgroup subsys devices
[    0.004000] Initializing cgroup subsys freezer
[    0.004000] Initializing cgroup subsys net_cls
[    0.004000] Initializing cgroup subsys blkio
[    0.004000] ENERGY_PERF_BIAS: Set to 'normal', was 'performance'
[    0.004000] ENERGY_PERF_BIAS: View and update with x86_energy_perf_policy(8)
[    0.004000] CPU: Physical Processor ID: 0
[    0.004000] CPU: Processor Core ID: 1
[    0.004000] Last level iTLB entries: 4KB 512, 2MB 0, 4MB 0
[    0.004000] Last level dTLB entries: 4KB 512, 2MB 32, 4MB 32
[    0.004000] tlb_flushall_shift: 5
[    0.016392] Performance Events: unsupported p6 CPU model 42 no PMU driver, software events only.
[    0.016868] installing Xen timer for CPU 1
[    0.016901] SMP alternatives: switching to SMP code
[    0.034105] installing Xen timer for CPU 2
[    0.034398] installing Xen timer for CPU 3
[    0.034589] Brought up 4 CPUs
[    0.040099] devtmpfs: initialized
[    0.040811] Grant tables using version 2 layout.
[    0.040811] Grant table initialized
[    0.040811] regulator-dummy: no parameters
[    0.057178] RTC time: 165:165:165, date: 165/165/65
[    0.057478] NET: Registered protocol family 16
[    0.060390] PCI: setting up Xen PCI frontend stub
[    0.060833] bio: create slab <bio-0> at 0
[    0.064088] ACPI: Interpreter disabled.
[    0.064107] xen/balloon: Initialising balloon driver.
[    0.072059] xen-balloon: Initialising balloon driver.
[    0.072203] vgaarb: loaded
[    0.072203] PCI: System does not support PCI
[    0.072203] PCI: System does not support PCI
[    0.072352] Switching to clocksource xen
[    0.078338] pnp: PnP ACPI: disabled
[    0.081763] NET: Registered protocol family 2
[    0.082031] TCP established hash table entries: 65536 (order: 8, 1048576 bytes)
[    0.082281] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes)
[    0.082418] TCP: Hash tables configured (established 65536 bind 65536)
[    0.082438] TCP: reno registered
[    0.082444] UDP hash table entries: 1024 (order: 3, 32768 bytes)
[    0.082455] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes)
[    0.082698] NET: Registered protocol family 1
[    0.082755] Unpacking initramfs...
[    0.158776] Freeing initrd memory: 24752k freed
[    0.163752] platform rtc_cmos: registered platform RTC device (no PNP device found)
[    0.171226] audit: initializing netlink socket (disabled)
[    0.171245] type=2000 audit(1855209762.987:1): initialized
[    0.224977] VFS: Disk quotas dquot_6.5.2
[    0.225204] Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    0.225564] msgmni has been set to 702
[    0.226752] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)
[    0.226763] io scheduler noop registered
[    0.226858] io scheduler deadline registered
[    0.226906] io scheduler cfq registered (default)
[    0.237001] pcifront pci-0: Installing PCI frontend
[    0.237023] Warning: only able to allocate 4 MB for software IO TLB
[    0.238916] software IO TLB [mem 0x03000000-0x033fffff] (4MB) mapped at [ffff880003000000-ffff8800033fffff]
[    0.241364] pcifront pci-0: Creating PCI Frontend Bus 0000:00
[    0.241412] pcifront pci-0: PCI host bridge to bus 0000:00
[    0.241418] pci_bus 0000:00: root bus resource [io  0x0000-0xffff]
[    0.241424] pci_bus 0000:00: root bus resource [mem 0x00000000-0xfffffffff]
[    0.241431] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.247902] Event-channel device installed.
[    0.326739] Non-volatile memory driver v1.3
[    0.327427] loop: module loaded
[    0.327467] libphy: Fixed MDIO Bus: probed
[    0.327489] i8042: PNP: No PS/2 controller found. Probing ports directly.
[    1.421029] i8042: No controller found
[    1.421185] mousedev: PS/2 mouse device common for all mice
[    1.480934] rtc_cmos rtc_cmos: rtc core: registered rtc_cmos as rtc0
[    1.480997] rtc_cmos: probe of rtc_cmos failed with error -38
[    1.481075] device-mapper: uevent: version 1.0.3
[    1.481146] device-mapper: ioctl: 4.23.0-ioctl (2012-07-25) initialised: dm-d...@redhat.com
[    1.481228] TCP: cubic registered
[    1.481308] NET: Registered protocol family 10
[    1.481450] Key type dns_resolver registered
[    1.481572] registered taskstats version 1
[    1.481588] XENBUS: Device with no driver: device/vbd/51712
[    1.481591] XENBUS: Device with no driver: device/vbd/51728
[    1.481593] XENBUS: Device with no driver: device/vbd/51744
[    1.481596] XENBUS: Device with no driver: device/vbd/51760
[    1.481598] XENBUS: Device with no driver: device/vif/0
[    1.481662]   Magic number: 1:252:3141
[    1.481733] /home/user/qubes-src/kernel/kernel-3.7.6/linux-3.7.6/drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
[    1.484591] Freeing unused kernel memory: 600k freed
[    1.484716] Write protecting the kernel read-only data: 10240k
[    1.488420] Freeing unused kernel memory: 1432k freed
[    1.489284] Freeing unused kernel memory: 1968k freed
[    1.500249] systemd[1]: systemd 197 running in system mode. (+PAM +LIBWRAP +AUDIT +SELINUX +IMA +SYSVINIT +LIBCRYPTSETUP +GCRYPT +ACL +XZ)
[    1.500374] systemd[1]: Running in initial RAM disk.

Welcome to [0;34mFedora 18 (Spherical Cow) dracut-024-23.git20130118.fc18 (Initramfs) [0m!

[    1.501031] systemd[1]: Failed to insert module 'autofs4'
[    1.501156] systemd[1]: No hostname configured.
[    1.501173] systemd[1]: Set hostname to <localhost>.
[    1.501306] systemd[1]: Initializing machine ID from random generator.
cp: omitting directory '/etc/systemd/system/basic.target.wants'
cp: omitting directory '/etc/systemd/system/initrd-switch-root.target.requires'
cp: omitting directory '/etc/systemd/system/sysinit.target.wants'
[    1.515177] systemd[1]: Starting Encrypted Volumes.
[ [1;32m  OK  [0m] Reached target Encrypted Volumes.
[    1.515233] systemd[1]: Reached target Encrypted Volumes.
[    1.515257] systemd[1]: Starting Dispatch Password Requests to Console Directory Watch.
[    1.515326] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
[    1.515389] systemd[1]: Starting udev Kernel Socket.
[ [1;32m  OK  [0m] Listening on udev Kernel Socket.
[    1.515451] systemd[1]: Listening on udev Kernel Socket.
[    1.515507] systemd[1]: Starting udev Control Socket.
[ [1;32m  OK  [0m] Listening on udev Control Socket.
[    1.515566] systemd[1]: Listening on udev Control Socket.
[    1.515581] systemd[1]: Starting Journal Socket.
[ [1;32m  OK  [0m] Listening on Journal Socket.
[    1.515662] systemd[1]: Listening on Journal Socket.
[    1.515680] systemd[1]: Starting dracut cmdline hook...
         Starting dracut cmdline hook...
[    1.530524] systemd[1]: Started Load Kernel Modules.
[    1.530549] systemd[1]: Starting Journal Service...
         Starting Journal Service...
[ [1;32m  OK  [0m] Started Journal Service.
[    1.544481] systemd[1]: Started Journal Service.
[    1.544741] systemd[1]: Starting Sockets.
[ [1;32m  OK  [0m] Reached target Sockets.
[    1.544780] systemd[1]: Reached target Sockets.
[    1.544805] systemd[1]: Starting Swap.
[ [1;32m  OK  [0m] Reached target Swap.
[    1.544834] systemd[1]: Reached target Swap.
[    1.544848] systemd[1]: Starting Local File Systems.
[ [1;32m  OK  [0m] Reached target Local File Systems.
[    1.621936] systemd[1]: Reached target Local File Systems.
[ [1;32m  OK  [0m] Started dracut cmdline hook.
[    1.680164] systemd[1]: Started dracut cmdline hook.
[    1.680272] systemd[1]: Starting Setup Virtual Console...
         Starting Setup Virtual Console...
[    1.688280] systemd[1]: Starting dracut pre-udev hook...
         Starting dracut pre-udev hook...
[ [1;32m  OK  [0m] Started Setup Virtual Console.
[    1.704193] systemd[1]: Started Setup Virtual Console.
[    1.704299] systemd[1]: Starting System Initialization.
[ [1;32m  OK  [0m] Reached target System Initialization.
[    1.704336] systemd[1]: Reached target System Initialization.
[    1.716323] blkfront: xvda: flush diskcache: enabled
[    1.721530]  xvda: unknown partition table
[    1.729945] blkfront: xvdb: flush diskcache: enabled
[    1.730858]  xvdb: unknown partition table
[    1.731429] Setting capacity to 12582912
[    1.731436] xvdb: detected capacity change from 0 to 6442450944
[    1.733393] blkfront: xvdc: flush diskcache: enabled
[    1.735364]  xvdc: xvdc1 xvdc2
[    1.740411] Setting capacity to 23068672
[    1.740419] xvdc: detected capacity change from 0 to 11811160064
[    1.743982] blkfront: xvdd: barrier or flush: disabled
[    1.745397]  xvdd: unknown partition table
[    1.845883] bio: create slab <bio-1> at 1
[ [1;32m  OK  [0m] Started dracut pre-udev hook.
[    1.852234] systemd[1]: Started dracut pre-udev hook.
[    1.852392] systemd[1]: Starting udev Kernel Device Manager...
         Starting udev Kernel Device Manager...
[    1.895307] systemd-udevd[132]: starting version 197
[ [1;32m  OK  [0m] Started udev Kernel Device Manager.
[    1.895861] systemd[1]: Started udev Kernel Device Manager.
[    1.896298] systemd[1]: Starting dracut pre-trigger hook...
         Starting dracut pre-trigger hook...
[    1.924298] systemd[1]: Starting Basic System.
[ [1;32m  OK  [0m] Reached target Basic System.
[    1.924361] systemd[1]: Reached target Basic System.
[    2.060246] systemd[1]: Started dracut pre-trigger hook.
[    2.060604] systemd[1]: Starting udev Coldplug all Devices...
[    2.172192] systemd[1]: Started udev Coldplug all Devices.
[    2.172327] systemd[1]: Starting dracut initqueue hook...
[    2.226217] EXT4-fs (dm-0): INFO: recovery required on readonly filesystem
[    2.226228] EXT4-fs (dm-0): write access will be enabled during recovery
[    2.451087] EXT4-fs (dm-0): orphan cleanup on readonly fs
[    2.451477] EXT4-fs (dm-0): 7 orphan inodes deleted
[    2.451491] EXT4-fs (dm-0): recovery complete
[    2.749212] EXT4-fs (dm-0): mounted filesystem with ordered data mode. Opts: (null)
[    2.986472] EXT4-fs (dm-0): mounted filesystem with ordered data mode. Opts: (null)
[    3.020307] systemd[1]: Started dracut initqueue hook.
[    3.020895] systemd[1]: Starting dracut pre-pivot and cleanup hook...
dracut-pre-pivot[263]: mount: /dev/xvdd is write-protected, mounting read-only
[    3.060999] kjournald starting.  Commit interval 5 seconds
[    3.061013] EXT3-fs (xvdd): mounted filesystem with ordered data mode
[    3.142503] systemd[1]: Stopping udev Coldplug all Devices...
[    3.142892] systemd[1]: Stopped udev Coldplug all Devices.
[    3.143154] systemd[1]: Stopping dracut pre-pivot and cleanup hook...
[    3.143195] systemd[1]: Stopping Basic System.
[    3.143235] systemd[1]: Stopped target Basic System.
[    3.143273] systemd[1]: Stopping Dispatch Password Requests to Console Directory Watch.
[    3.144465] systemd[1]: Stopped Dispatch Password Requests to Console Directory Watch.
[    3.144581] systemd[1]: Stopping Sockets.
[    3.144642] systemd[1]: Stopped target Sockets.
[    3.144695] systemd[1]: Stopping System Initialization.
[    3.144751] systemd[1]: Stopped target System Initialization.
[    3.144813] systemd[1]: Stopping Setup Virtual Console...
[    3.145147] systemd[1]: Stopped Setup Virtual Console.
[    3.145406] systemd[1]: Stopping Encrypted Volumes.
[    3.145472] systemd[1]: Stopped target Encrypted Volumes.
[    3.145526] systemd[1]: Stopping Swap.
[    3.145581] systemd[1]: Stopped target Swap.
[    3.145632] systemd[1]: Stopping Local File Systems.
[    3.145691] systemd[1]: Stopped target Local File Systems.
[    3.145759] systemd[1]: Stopping udev Kernel Device Manager...
[    3.168748] systemd[1]: Stopped dracut pre-pivot and cleanup hook.
[    3.170063] systemd[1]: Stopped udev Kernel Device Manager.
[    3.170117] systemd[1]: Stopping udev Kernel Socket.
[    3.170165] systemd[1]: Closed udev Kernel Socket.
[    3.170177] systemd[1]: Stopping udev Control Socket.
[    3.170210] systemd[1]: Closed udev Control Socket.
[    3.170226] systemd[1]: Starting Cleanup udevd DB...
[    3.216758] systemd[1]: Started Cleanup udevd DB.
[    3.217031] systemd[1]: Starting Switch Root.
[    3.217043] systemd[1]: Reached target Switch Root.
[    3.217056] systemd[1]: Starting Switch Root...
[    3.270059] systemd[1]: Switching root.
[    3.317753] systemd-journald[55]: Received SIGTERM

Welcome to [0;34mFedora 18 (Spherical Cow) [0m!

         Expecting device dev-hvc0.device...
[ [1;32m  OK  [0m] Reached target Remote File Systems.
[ [1;32m  OK  [0m] Listening on Syslog Socket.
[ [1;32m  OK  [0m] Reached target Syslog.
         Starting Collect Read-Ahead Data...
         Starting Replay Read-Ahead Data...
[ [1;32m  OK  [0m] Listening on Delayed Shutdown Socket.
[ [1;32m  OK  [0m] Listening on /dev/initctl Compatibility Named Pipe.
[ [1;32m  OK  [0m] Listening on Device-mapper event daemon FIFOs.
         Mounting POSIX Message Queue File System...
         Mounting Debug File System...
[ [1;32m  OK  [0m] Listening on udev Kernel Socket.
[ [1;32m  OK  [0m] Listening on udev Control Socket.
         Starting udev Coldplug all Devices...
         Starting udev Kernel Device Manager...
[ [1;32m  OK  [0m] Set up automount Arbitrary Executable File Formats F...utomount Point.
[ [1;32m  OK  [0m] Reached target Encrypted Volumes.
         Expecting device dev-xvdc1.device...
         Mounting Temporary Directory...
[    3.620323] systemd-udevd[298]: starting version 197
[ [1;32m  OK  [0m] Started Collect Read-Ahead Data.
[ [1;32m  OK  [0m] Started Replay Read-Ahead Data.
[ [1;32m  OK  [0m] Started udev Kernel Device Manager.
[ [1;32m  OK  [0m] Mounted POSIX Message Queue File System.
[ [1;32m  OK  [0m] Mounted Debug File System.
[ [1;32m  OK  [0m] Mounted Temporary Directory.
         Starting Load legacy module configuration...
[    3.749745] microcode: CPU0 sig=0x206a7, pf=0x10, revision=0x1a
[    3.752826] microcode: CPU0 update to revision 0x28 failed
[    3.755022] microcode: CPU1 sig=0x206a7, pf=0x10, revision=0x1a
[    3.816269] microcode: CPU1 update to revision 0x28 failed
[    3.816364] microcode: CPU2 sig=0x206a7, pf=0x10, revision=0x1a
[    3.816424] microcode: CPU2 update to revision 0x28 failed
[    3.816436] microcode: CPU3 sig=0x206a7, pf=0x10, revision=0x1a
[    3.816576] microcode: CPU3 update to revision 0x28 failed
[    3.816628] microcode: Microcode Update Driver: v2.00 <tig...@aivazian.fsnet.co.uk>, Peter Oruba
         Starting Remount Root and Kernel File Systems...
[    3.854596] input: PC Speaker as /devices/platform/pcspkr/input/input0
[    3.854847] Initialising Xen virtual ethernet driver.
         Starting Setup Virtual Console...
[    3.889375] EXT4-fs (dm-0): re-mounted. Opts: (null)
         Starting Load Kernel Modules...
[    3.948453] usbcore: registered new interface driver usbfs
[    3.948598] usbcore: registered new interface driver hub
[    3.949174] usbcore: registered new device driver usb
         Starting Set Up Additional Binary Formats...
[    3.959039] dummy_hcd dummy_hcd: USB Host+Gadget Emulator, driver 02 May 2005
[    3.959053] dummy_hcd dummy_hcd: Dummy host controller
[    3.959059] dummy_hcd dummy_hcd: new USB bus registered, assigned bus number 1
[    3.959171] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    3.959239] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    3.959247] usb usb1: Product: Dummy host controller
[    3.959252] usb usb1: Manufacturer: Linux 3.7.6-2.pvops.qubes.x86_64 dummy_hcd
[    3.959360] usb usb1: SerialNumber: dummy_hcd
[    3.959524] hub 1-0:1.0: USB hub found
[    3.959536] hub 1-0:1.0: 1 port detected
         Starting Apply Kernel Variables...
[ [1;32m  OK  [0m] Stopped Trigger Flushing of Journal to Persistent Storage.
         Stopping Journal Service...
[ [1;32m  OK  [0m] Stopped Journal Service.
         Starting Journal Service...
[ [1;32m  OK  [0m] Started Journal Service.
[ [1;32m  OK  [0m] Started udev Coldplug all Devices.
[ [1;32m  OK  [0m] Started Load legacy module configuration.
[ [1;32m  OK  [0m] Started Remount Root and Kernel File Systems.
[ [1;32m  OK  [0m] Started Setup Virtual Console.
[ [1;32m  OK  [0m] Started Load Kernel Modules.
[ [1;32m  OK  [0m] Started Apply Kernel Variables.
[ [1;32m  OK  [0m] Reached target Local File Systems (Pre).
         Mounting /proc/xen...
         Starting Configure read-only root support...
         Starting Load Random Seed...
[ [1;32m  OK  [0m] Found device /dev/hvc0.
         Mounting Arbitrary Executable File Formats File System...
[ [1;32m  OK  [0m] Mounted /proc/xen.
[ [1;32m  OK  [0m] Started Configure read-only root support.
[ [1;32m  OK  [0m] Started Load Random Seed.
[ [1;32m  OK  [0m] Mounted Arbitrary Executable File Formats File System.
[ [1;32m  OK  [0m] Reached target Local File Systems.
         Starting Init Qubes Services settings...
         Starting Trigger Flushing of Journal to Persistent Storage...
         Starting Recreate Volatile Files and Directories...
[ [1;32m  OK  [0m] Started Set Up Additional Binary Formats.
[ [1;32m  OK  [0m] Started Recreate Volatile Files and Directories.
[ [1;32m  OK  [0m] Started Init Qubes Services settings.
[    4.878014] systemd-journald[411]: Received SIGUSR1
[ [1;32m  OK  [0m] Started Trigger Flushing of Journal to Persistent Storage.
[ [1;32m  OK  [0m] Found device /dev/xvdc1.
         Activating swap /dev/xvdc1...
[    7.124678] Adding 1048572k swap on /dev/xvdc1.  Priority:-1 extents:1 across:1048572k SS
[ [1;32m  OK  [0m] Activated swap /dev/xvdc1.
[ [1;32m  OK  [0m] Reached target Swap.
[ [1;32m  OK  [0m] Reached target System Initialization.
[ [1;32m  OK  [0m] Listening on PC/SC Smart Card Daemon Activation Socket.
[ [1;32m  OK  [0m] Listening on Avahi mDNS/DNS-SD Stack Activation Socket.
[ [1;32m  OK  [0m] Listening on CUPS Printing Service Sockets.
[ [1;32m  OK  [0m] Listening on D-Bus System Message Bus Socket.
[ [1;32m  OK  [0m] Reached target Sockets.
[ [1;32m  OK  [0m] Reached target Basic System.
         Starting IPv6 firewall with ip6tables...
         Starting irqbalance daemon...
         Starting Self Monitoring and Reporting Technology (SMART) Daemon...
[ [1;32m  OK  [0m] Started Self Monitoring and Reporting Technology (SMART) Daemon.
         Starting ISDN Services...
[    7.212743] ip6_tables: (C) 2000-2006 Netfilter Core Team
         Starting Qubes misc post-boot actions...
         Starting ABRT Automated Bug Reporting Tool...
[ [1;32m  OK  [0m] Started ABRT Automated Bug Reporting Tool.
         Starting ABRT Xorg log watcher...
[ [1;32m  OK  [0m] Started ABRT Xorg log watcher.
         Starting ABRT kernel log watcher...
[ [1;32m  OK  [0m] Started ABRT kernel log watcher.
         Starting Harvest vmcores for ABRT...
         Starting Install ABRT coredump hook...
         Starting Restorecon maintaining path file context...
         Starting Qubes memory information reporter...
         Starting IPv4 firewall with iptables...
         Starting Hardware RNG Entropy Gatherer Daemon...
[ [1;32m  OK  [0m] Started Hardware RNG Entropy Gatherer Daemon.
         Starting Qubes remote exec agent...
[ [1;32m  OK  [0m] Started Qubes remote exec agent.
         Starting Login Service...
[    7.443217] u2mfn_mmap: entering, private=          (null)
[    7.443232] u2mfn_mmap: calling remap return 0
[    7.445266] ip_tables: (C) 2000-2006 Netfilter Core Team
[    7.449062] nf_conntrack version 0.5.0 (2839 buckets, 11356 max)
         Starting Avahi mDNS/DNS-SD Stack...
         Starting System Logging Service...
[ [1;32m  OK  [0m] Started System Logging Service.
         Starting Permit User Sessions...
         Starting D-Bus System Message Bus...
[ [1;32m  OK  [0m] Started D-Bus System Message Bus.
[ [1;32m  OK  [0m] Started IPv6 firewall with ip6tables.
[ [1;32m  OK  [0m] Started irqbalance daemon.
[ [1;31mFAILED [0m] Failed to start ISDN Services.
See 'systemctl status isdn.service' for details.
[ [1;32m  OK  [0m] Started Harvest vmcores for ABRT.
[ [1;32m  OK  [0m] Started Install ABRT coredump hook.
[ [1;32m  OK  [0m] Started Restorecon maintaining path file context.
[ [1;32m  OK  [0m] Started Qubes memory information reporter.
[ [1;32m  OK  [0m] Started IPv4 firewall with iptables.
[ [1;32m  OK  [0m] Started Permit User Sessions.
         Starting Job spooling tools...
[ [1;32m  OK  [0m] Started Job spooling tools.
         Starting Serial Getty on hvc0...
[ [1;32m  OK  [0m] Started Serial Getty on hvc0.
[ [1;32m  OK  [0m] Reached target Login Prompts.
[ [1;32m  OK  [0m] Started Login Service.
[ [1;32m  OK  [0m] Started Avahi mDNS/DNS-SD Stack.
[    7.647753] EXT4-fs (xvdb): recovery complete
[    7.713164] EXT4-fs (xvdb): mounted filesystem with ordered data mode. Opts: (null)
[ [1;32m  OK  [0m] Started Qubes misc post-boot actions.
         Starting Qubes GUI Agent...
[ [1;32m  OK  [0m] Reached target Network.
         Starting Sendmail Mail Transport Agent...
[ [1;32m  OK  [0m] Started Qubes GUI Agent.
[    7.921937] u2mfn_mmap: entering, private=          (null)
[    7.921968] u2mfn_mmap: calling remap return 0
[ [1;32m  OK  [0m] Started Sendmail Mail Transport Agent.
         Starting Sendmail Mail Transport Client...
[ [1;32m  OK  [0m] Started Sendmail Mail Transport Client.
[ [1;32m  OK  [0m] Reached target Multi-User.
[r [H [J

Fedora release 18 (Spherical Cow)
Kernel 3.7.6-2.pvops.qubes.x86_64 on an x86_64 (hvc0)

personal login: [    9.325652] fuse init (API version 7.20)
[   12.019874] u2mfn_mmap: entering, private=          (null)
[   12.019892] u2mfn_mmap: calling remap return 0
[   12.437215] u2mfn_mmap: entering, private=          (null)
[   12.437404] u2mfn_mmap: calling remap return 0
[   15.303832] hrtimer: interrupt took 76552582 ns


I can't tell if anything fishy is going on from this log.

The next one I checked was more interesting:
/var/log/qubes/quid.3.log:

Icon size: 48x48
Created 0x3000003(0x800001) parent 0x0(0x131) ovr=0
Created 0x3000004(0xe00001) parent 0x0(0x131) ovr=0
Created 0x3000005(0x1000001) parent 0x0(0x131) ovr=0
Created 0x3000006(0x1000003) parent 0x0(0x131) ovr=0
Created 0x3000007(0xe00003) parent 0x0(0x131) ovr=0
 XDestroyWindow 0x3000007
Created 0x3000008(0xe00006) parent 0x0(0x131) ovr=0
docking window 0x3000008
cannot lookup 0x3000007 in wid2windowdata
cannot lookup 0x3000007 in wid2windowdata
cannot lookup 0x3000007 in wid2windowdata
cannot lookup 0x3000007 in wid2windowdata
cannot lookup 0x3000007 in wid2windowdata
cannot lookup 0x3000007 in wid2windowdata
cannot lookup 0x3000007 in wid2windowdata
cannot lookup 0x3000007 in wid2windowdata
cannot lookup 0x3000007 in wid2windowdata
 XDestroyWindow 0x3000008
cannot lookup 0x3000008 in wid2windowdata
cannot lookup 0x3000008 in wid2windowdata
cannot lookup 0x3000008 in wid2windowdata
cannot lookup 0x3000008 in wid2windowdata
cannot lookup 0x3000008 in wid2windowdata
cannot lookup 0x3000008 in wid2windowdata
cannot lookup 0x3000008 in wid2windowdata
cannot lookup 0x3000008 in wid2windowdata
cannot lookup 0x3000008 in wid2windowdata
Created 0x300000b(0xe00009) parent 0x0(0x131) ovr=0
docking window 0x3000006
invalid PMaxSize for 0x3000006 (0/0)
invalid PResizeInc for 0x3000006 (0/0)
Created 0x300000e(0x1200001) parent 0x0(0x131) ovr=0
Created 0x300000f(0x1000007) parent 0x0(0x131) ovr=1
Created 0x3000010(0xe0000b) parent 0x0(0x131) ovr=0
Created 0x3000011(0xe0000d) parent 0x0(0x131) ovr=1
Created 0x3000012(0x1800001) parent 0x0(0x131) ovr=0
Created 0x3000013(0x1800003) parent 0x0(0x131) ovr=0
Created 0x3000014(0x1800008) parent 0x0(0x131) ovr=1
invalid PMaxSize for 0x3000013 (0/0)
invalid PResizeInc for 0x3000013 (0/0)
Created 0x3000018(0x180003c) parent 0x0(0x131) ovr=1
Created 0x300001c(0x18000e3) parent 0x0(0x131) ovr=1
invalid PResizeInc for 0x300001c (0/0)
 XDestroyWindow 0x300001c
cannot lookup 0x300001c in wid2windowdata
cannot lookup 0x300001c in wid2windowdata
cannot lookup 0x300001c in wid2windowdata
cannot lookup 0x300001c in wid2windowdata
cannot lookup 0x300001c in wid2windowdata
cannot lookup 0x300001c in wid2windowdata
cannot lookup 0x300001c in wid2windowdata
cannot lookup 0x300001c in wid2windowdata
cannot lookup 0x300001c in wid2windowdata
Created 0x3000022(0x1800154) parent 0x0(0x131) ovr=1
invalid PMinSize for 0x3000022 (0/0)
invalid PMaxSize for 0x3000022 (0/0)
invalid PResizeInc for 0x3000022 (0/0)
invalid PBaseSize for 0x3000022 (0/0)
Created 0x3000023(0x1800158) parent 0x0(0x131) ovr=1
Created 0x3000024(0x180016c) parent 0x0(0x131) ovr=1
invalid PResizeInc for 0x3000024 (0/0)
 XDestroyWindow 0x3000024
cannot lookup 0x3000024 in wid2windowdata
cannot lookup 0x3000024 in wid2windowdata
cannot lookup 0x3000024 in wid2windowdata
cannot lookup 0x3000024 in wid2windowdata
cannot lookup 0x3000024 in wid2windowdata
cannot lookup 0x3000024 in wid2windowdata
cannot lookup 0x3000024 in wid2windowdata
cannot lookup 0x3000024 in wid2windowdata
cannot lookup 0x3000024 in wid2windowdata
Created 0x3000028(0x1800391) parent 0x0(0x131) ovr=1
invalid PResizeInc for 0x3000028 (0/0)
 XDestroyWindow 0x3000028
cannot lookup 0x3000028 in wid2windowdata
cannot lookup 0x3000028 in wid2windowdata
cannot lookup 0x3000028 in wid2windowdata
cannot lookup 0x3000028 in wid2windowdata
cannot lookup 0x3000028 in wid2windowdata
cannot lookup 0x3000028 in wid2windowdata
cannot lookup 0x3000028 in wid2windowdata
cannot lookup 0x3000028 in wid2windowdata
cannot lookup 0x3000028 in wid2windowdata
close for 0x3000013
 XDestroyWindow 0x3000022
 XDestroyWindow 0x3000023
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000022 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
cannot lookup 0x3000023 in wid2windowdata
 XDestroyWindow 0x3000012
 XDestroyWindow 0x3000013
 XDestroyWindow 0x3000014
cannot lookup 0x3000012 in wid2windowdata
 XDestroyWindow 0x3000018
cannot lookup 0x3000012 in wid2windowdata
cannot lookup 0x3000012 in wid2windowdata
cannot lookup 0x3000012 in wid2windowdata
cannot lookup 0x3000012 in wid2windowdata
cannot lookup 0x3000012 in wid2windowdata
cannot lookup 0x3000012 in wid2windowdata
cannot lookup 0x3000012 in wid2windowdata
cannot lookup 0x3000012 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000013 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000014 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
cannot lookup 0x3000018 in wid2windowdata
pacat exited with 256 status
XIO:  fatal IO error 4 (Interrupted system call) on X server ":0.0"

      after 589 requests (589 known processed) with 0 events remaining.

The final log, /var/log/qubes/qrexec.3.log was empty (while I was waiting for the AppVM to appear - which lasted 3 minutes, by which time I fired up the Work AppVM - which made the personal AppVM *immediately* appear!

Seems that something is keeping the AppVM from launching, and launching another AppVM unblocks it...

Any ideas how to further troubleshoot this?

Thanks

Joanna Rutkowska

unread,
Apr 29, 2013, 4:43:47 AM4/29/13
to ix4...@gmail.com, qubes...@googlegroups.com
On 04/29/13 10:28, ix4...@gmail.com wrote:
>>> > > 3. How is it possible to install non-rpm applications like TrueCrypt? A
>>> > > universal and a domain-specific way would be useful.
>> >
>> > Yes, same as in other linux distributions. If you want install such
>> > software
>> > in dom0 (which is bad idea in most cases), you need to copy file there in
>> > the
>> > first place:
>> > http://wiki.qubes-os.org/trac/wiki/CopyToDomZero
>> >
>> >
> I agree it's a bad idea to install stuff on Dom0. What I am trying to do is
> install a non-rpm application in, say, the Personal domain. If I install
> TrueCrypt (which is delivered as a .tar.gz and installs a couple of
> binaries in /usr/bin), next time I start the domain's VM, truecrypt is not
> there. The binaries are gone. Same with the template VM - if I unstall
> TrueCrypt from its tar.gz, next time I start any AppVM, or the TemplateVM
> itself, TrueCrypt binaries are no longer there.
>
>

Anything you install in an AppVM (specifically in any directory other
than /home or /usr/local) will be discard on the next AppVM reboot:

http://wiki.qubes-os.org/trac/wiki/SoftwareUpdateVM


On a side note: I'm curious why do you want to install TC in one of your
AppVMs? If you would like to use it for "additional" encryption of the
AppVM's filesystem, then I'm afraid it's not a good idea. On the other
hand, if you want to use for creating encrypted USB disks, then it's
quite sensible.

joanna.

signature.asc

ix4...@gmail.com

unread,
May 7, 2013, 8:47:39 AM5/7/13
to qubes...@googlegroups.com
On 29 April 2013 09:43, Joanna Rutkowska <joa...@invisiblethingslab.com> wrote:
On 04/29/13 10:28, ix4...@gmail.com wrote:
>>> > > 3. How is it possible to install non-rpm applications like TrueCrypt? A
>>> > > universal and a domain-specific way would be useful.
>> >
>> > Yes, same as in other linux distributions. If you want install such
>> > software
>> > in dom0 (which is bad idea in most cases), you need to copy file there in
>> > the
>> > first place:
>> > http://wiki.qubes-os.org/trac/wiki/CopyToDomZero
>> >
>> >
> I agree it's a bad idea to install stuff on Dom0. What I am trying to do is
> install a non-rpm application in, say, the Personal domain. If I install
> TrueCrypt (which is delivered as a .tar.gz and installs a couple of
> binaries in /usr/bin), next time I start the domain's VM, truecrypt is not
> there. The binaries are gone. Same with the template VM - if I unstall
> TrueCrypt from its tar.gz, next time I start any AppVM, or the TemplateVM
> itself, TrueCrypt binaries are no longer there.
>
>

Anything you install in an AppVM (specifically in any directory other
than /home or /usr/local) will be discard on the next AppVM reboot:

http://wiki.qubes-os.org/trac/wiki/SoftwareUpdateVM
 

What I have been saying is that for some reason I'm seeing a regression from the documented behaviour. Installing truecrypt on the TemplateVM, shutting it down, and then starting the template VM results in truecrypt binaries disappearing.

I have since blown away that Qubes installation so can't currently test as I ran out of test hardware that's powerful enough.

On a side note: I'm curious why do you want to install TC in one of your
AppVMs? If you would like to use it for "additional" encryption of the
AppVM's filesystem, then I'm afraid it's not a good idea. On the other
hand, if you want to use for creating encrypted USB disks, then it's
quite sensible.


I use TC file containers as vaults for password files, personal documents etc synchronised across machines with Dropbox.
 
joanna.

Alex

Joanna Rutkowska

unread,
May 7, 2013, 2:05:42 PM5/7/13
to ix4...@gmail.com, qubes...@googlegroups.com
On 05/07/13 14:47, ix4...@gmail.com wrote:
>> Anything you install in an AppVM (specifically in any directory other
>> > than /home or /usr/local) will be discard on the next AppVM reboot:
>> >
>> > http://wiki.qubes-os.org/trac/wiki/SoftwareUpdateVM
>> >
>> >
> What I have been saying is that for some reason I'm seeing a regression
> from the documented behaviour. Installing truecrypt on the TemplateVM,
> shutting it down, and then starting the template VM results in truecrypt
> binaries disappearing.

That's certainly not how the things should be. You 100% sure it was a
template VM indeed?

j.

signature.asc

ix4...@gmail.com

unread,
May 18, 2013, 10:59:41 AM5/18/13
to qubes...@googlegroups.com, Joanna Rutkowska
Yes - but note this was not an RPM-based software package, it was TC's binary installer which RPM/yum know nothing about.

On a sidenote, I reinstalled Qubes on my Dell 6320 and I'm once more having problems with power management. Suspend to RAM works inconsistently (sometimes puts the laptop to sleep, sometimes not). When it does work and the laptop goes to sleep, restoring usually fails - which lands us in a state of limbo - pushing the power button for 5 seconds is the only way "out". XFCE tends to be a bit better than KDE in that suspending usually works, restore still usually fails. Dom0 and templateVM updates did not help. Ubuntu 12.04 works flawlessly on the same hardware, so I'm assumming it's not the kernel, rather the Fedora power management scripts? Any help troubleshooting appreciated as inability to suspend to RAM is a bit of a showstopper.

Thanks

Alex
Reply all
Reply to author
Forward
0 new messages