Hello, I have been using Qubes OS on a Purism Librem Laptop for the last year and a half and I think it is great - I could never go back to using a regular os afterwards.
But I think it still has some issues with stability and maybe even security in extreme cases.
One problem is that sometimes a “phantom” process seems to be using up all the CPU. It happens like this:
-the cpu fan suddenly ramps up to maximum.
-the mouse and the whole system becomes sluggish.
-no vm is above 1% cpu ussage and TOP shows just 2-10% CPU ussage in Dom0.
-I tryed restarting qubes os but the problem persists.
-only fix is to power down the laptop completely and restart the os.
1)Could this be an attack?
2)Is there any way to debug the problem? I can’t seem to find anything in the logs.
Is anyone having similar issues or knows how to debug them?
System: Purism Librem 13 Laptop v3 with disabled the Intel Management engine and coreboot BIOS.
OS: Qubes OS 4.1 (R4.1) Xen 4.14.4
I have noted similar behavior sometimes on my Librem 13 v 3. For me, it seems to happen when coming out of sleep, and it happens about 50 percent of the time. It persists across a restart but a full power down will kill it.
To add insult to injury it slows down the machine enough that powering it down takes a long time. It’s to the point where I have “trained myself” to do a shutdown rather than just closing the lid.
(The fact that it persists even after a reboot tells me this is no process; this is something in the hardware itself.)
I ditched PureOS when I realized I was reluctant to use my laptop any more because it didn’t feel safe. (I’ve been using Qubes on my desktop for a bit over a year now.) It’s now basically a mini-me of the desktop, since I could port the salt files over and re-run them on the laptop with a relatively small number of changes (mostly to do with network hardware…the laptop has no ethernet just for instance). With some care I can even move my e-mail client qube between the two systems though it takes 5-15 minutes to do so.
I disagree. The fans are managed by the BIOS, and they behave wrongly. Faulty BIOS is the cause. Other people in linked threads confirmed that updated systems do not have such problem.
Moreover, BIOS has important security updates which affect the security of Qubes OS (example), so you definitely should update it. I am not sure that it’s sufficient to have latest microcode in the OS. Their update script is quite safe, no complains on the forum that I’ve seen.
As instructed by firstname.lastname@example.org I’ve flashed the [librem_13v2] .rom using the flash option from the boot menu on my Librem Laptop 13 v3.
But somehow I managed to corrupt my QubesOS partition - so always backup your VMs before attempting.
After reinstalling QubesOS everything seems to be working fine…for now.