$50 XMR BOUNTY sys-net is controlling usbs no sys-usb, HELP how to create a sys-usb

User Support
1

Ive been trying now for about a week to troubleshoot this and figure it out, somewhere along my qubes install i opted for sys-net to also control my usbs. But I cant do that this is a critical security risk I dont want to be taking. When i make a sys-usb and add the usb controllers too it they dont run off sys-usb they continute to run off sys-net. And to remove them from sys-net so they run under usb it wont allow me because when i shutdown sys-net it also disconnects and makes my keyboard and mouse stop working so i cant even remove the controllers. HELP PLS!

2

Looks like you installed QubesOS recently and accidentially checked “sys-net” for USB devices?
You can reinstall QubesOS again and do the sys-usb check correct, or simply follow these steps here.

3

Did you try the following:

  • Reboot the computer.
  • When the grub screen appears, press ‘e’
  • Use the up and down arrow keys to find the line beginning with
    module2 /vmlinuz
  • Go to the end of the line, using the left and right arrow keys. The line is quite long.
  • Add on a space, followed by qubes.skip_autostart
  • If you have some item to prevent USB devices from being seen by Dom0, then delete it. It may look like rd.qubes.hide_all_usb, but I am not sure if others exist.
  • Press F10, and login as usual. Normally your USB keyboard and mouse can be used.

None of the usual qubes will start. It should be possible to change the PCI devices attached to sys-net.

[Edited to add more details about navigating the grub entry]

4

You can try moving these actions (qvm-shutdown, qvm-start) to a shell script in dom0, so that sys-usb starts up with the usb controllers after sys-net shuts down, and restores your keyboard/mouse access. You may need to enable the access in Qubes Global Config first.

5

The steps don’t work for me because of Dom0 Configurations failing so it wont even work from the steps even qubes has listened. I assume i will need to reinstall QubesOS. What are the steps to “factory reset” and or do a fresh reinstall

6

Did you try the qubes.skip_autostart trick above?

I used it yesterday, and I am interested to know if I forgot any steps in the procedure…

7

What I would do in this situtaion (just what I would do, there is probably a more “right” answer) is

  • create a new DispVM qube with template default-dvm and name it sys-usb.
  • use Qube Manager to adjust Settings of sys-net, tab Devices, then remove the USB controller.
  • use Qube Manager to adjust Settings of sys-usb, tab Advanced, set Mode to HVM.
    • tab Devices, add the USB controller to the right-hand side column.
  • use Qubes Global Config, side-tab USB Devices, set USB Qube to sys-usb.
  • use Qube Manager to adjust Settings of sys-net, tab Advanced, set Mode to PVH.
8

You will need to USB drives.

  1. Download torrent of Qubes. Check hash of iso using GTK hash. Make sure Hash values are provided by Qubes team and not elite hacking gang by verifying hash values using Kleopatra and Qubes signing keys. Burn iso to USB drive 1
  2. Use Backup feature to backup all Qubes VMs with data to USB drive 2. Use complex password like IloveQubes so no 1337 haxors can get in
  3. restart computer, plug in USB 1 with Qubes, boot to USB, reinstall all of Qubes
  4. During the reinstall, there’s a point where you check off how you want to handle your usb devices. Read that part and select what you want
  5. Restore your Qubes from the backup feature from USB 2
  6. Download Monero-GUI wallet and install based on community guides
  7. Send me all your XMR
  8. Go to Step 1

i am joking, but @qubenud did this work? or did any other advice work? did you ever get qubes installed?

1 Like