Change default usb qube

[Blacklight447]

I recently installed qubes on my new laptop, but i think i accidently ticked the box which configure qubes to use sysnet as usb qube, does someone know i can revert this and usb a normal usb qube instead?

Cheers,
Blacklight447

[awokd]

On Wed, January 10, 2018 10:10 am, 'Blacklight447' via qubes-users wrote:
> I recently installed qubes on my new laptop, but i think i accidently
> ticked the box which configure qubes to use sysnet as usb qube, does
> someone know i can revert this and usb a normal usb qube instead?

Look through this link on how to set up a USB Qube manually. Since yours
is a recent install, it might be quickest and easiest to just rerun the
installer.

https://www.qubes-os.org/doc/usb/

[Blacklight447]

Well i seen to be kinda stuck there.
Do i simply assign all usb to the new usb qube?



-------- Original Message --------

[awokd]

On Wed, January 10, 2018 11:07 am, 'Blacklight447' via qubes-users wrote:
> Well i seen to be kinda stuck there.
> Do i simply assign all usb to the new usb qube?
>
>
> -------- Original Message --------

> On Jan 10, 2018, 11:18 AM, awokd wrote:
>
>
>> On Wed, January 10, 2018 10:10 am, 'Blacklight447' via qubes-users
>> wrote: > I recently installed qubes on my new laptop, but i think i
>> accidently > ticked the box which configure qubes to use sysnet as usb
>> qube, does > someone know i can revert this and usb a normal usb qube
>> instead? Look through this link on how to set up a USB Qube manually.
>> Since yours is a recent install, it might be quickest and easiest to
>> just rerun the installer. https://www.qubes-os.org/doc/usb/

Yes, and remove them from your sys-net.

[Sven Semmler]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 01/10/2018 04:10 AM, 'Blacklight447' via qubes-users wrote:
> I recently installed qubes on my new laptop, but i think i
> accidently ticked the box which configure qubes to use sysnet as
> usb qube, does someone know i can revert this and usb a normal usb
> qube instead?

I didn't try this right now, but based on previous experience I would
suggest the following sequence should work:

1. shutdown all qubes

2. use qubes manager to remove all your USB controllers from sys-net

3. dom0: check /etc/qubes-rpc/policy/qubes.InputKeyboard and
/etc/qubes-rpc/policy/qubes.InputMouse and rename any mention of
"sys-net" into "sys-usb"

4. dom0: sudo qubesctl top.enable qvm.sys-usb

5. dom0: sudo qubesctl state.highstate

That should be all!

/Sven


-----BEGIN PGP SIGNATURE-----
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=zzyL
-----END PGP SIGNATURE-----

[Unman]

On Thu, Jan 11, 2018 at 05:03:22PM -0600, Sven Semmler wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On 01/10/2018 04:10 AM, 'Blacklight447' via qubes-users wrote:
> > I recently installed qubes on my new laptop, but i think i
> > accidently ticked the box which configure qubes to use sysnet as
> > usb qube, does someone know i can revert this and usb a normal usb
> > qube instead?
>
> I didn't try this right now, but based on previous experience I would
> suggest the following sequence should work:
>
> 1. shutdown all qubes
>
> 2. use qubes manager to remove all your USB controllers from sys-net
>
> 3. dom0: check /etc/qubes-rpc/policy/qubes.InputKeyboard and
> /etc/qubes-rpc/policy/qubes.InputMouse and rename any mention of
> "sys-net" into "sys-usb"
>
> 4. dom0: sudo qubesctl top.enable qvm.sys-usb
>
> 5. dom0: sudo qubesctl state.highstate
>
> That should be all!
>
> /Sven
>

It isn't necessary to shutdown all qubes, if you want to shutdown
sys-net.
If you are connected through sys-firewall or similar, then it is
sufficient to set the netvm of sys-firewall to none. Then close down
sys-net, remove the USB controllers, and start it up again.
Once started re-attach the fw/vpn/directly attached qubes.

Note that you may not be able to start sys-usb with the newly attached
USB controllers. This is a security feature. If you come up against it,
then the simplest thing to do is to reboot. When Qubes restart you should
find the controllers attached to sys-usb.

unman

[Sven Semmler]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 01/11/2018 06:25 PM, Unman wrote:
> If you are connected through sys-firewall or similar, then it is
> sufficient to set the netvm of sys-firewall to none.

Oh wow! Thank you! You just gave me back so much future time...

/Sven
-----BEGIN PGP SIGNATURE-----
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=Pvhf
-----END PGP SIGNATURE-----