Have I gotten a valid Qubes Installation Iso?

User Support Help, I think I've been hacked
1

Hello Everyone,

I’ve tried to install Qubes now several times, but I think I have always installed a manipulated version unfortunately. I tried to download the ISO from several different PCs, but I noticed on all PCs strange behaviors, so I am guessing there is something wrong with my installation. Anyways I tried to install one version I got recently,
where I had some trust in it.

However, I noticed quite some things:

  • After choosing the verify installation medium and install screen, I got the following log messages:
    • Unknown device “/dev//run/install/repo//images/install.img”: no such device
    • Unknown device “/sys/”: No such device
  • During installation the installation of the templates took about 35 minutes for debian and whonix, which seems quite much, as I have an up to date Laptop in the middle to upper price range
  • when booting, a message appears, that says something like “…dom0 unrestricted…”
  • At the first boot into the system there are several errors and audits inside the logs, see attached pastebins
  • The first update for the debian template failed, with the message that it failed to connect to the repos
  • The other templates had this message as well, but suddenly they could download packages

Here is the dom0 log: System.log - Pastebin.com
And here is the log from the Update: Updating debian-12-xfceRefreshing package infoRefreshing packages.Fail to - Pastebin.com

As I am new to Qubes I do not know, what should be a normal log output after a successfull installation. Therefor I am posting here, to get some insight, if this is normal and I am going crazy, or if my suspicion is right. Thanks in advance for your help and all the best!

Kind Regards,
VerifyingQubesInstal

2

Hi, for verifying an iso you can follow the full-guide from qubes before installing it so you can see if it is modified, in case of doubt you can format and reinstall

I can’t answer all but I will do to what I can

This is quite normal, nothing to worry about, that is one of the slowest parts.

Did you read something about USB in that error? If it is, this appears to be because you didn’t set up a sys-usb meaning every usb conected to the pc will have access to dom0 instead to the qube sys-usb (qubes has this page for further and more information USB qubes | Qubes OS)

If you get to update this can be normal as some errors can always happen (and they can come from qubes as can come from the distributions you may use, as fedora or debian as examples), maybe this happened because sys-net was still trying to connect, this can have as many origins as possibe. Moreover the logs show a 500 HTTP error so it is coming from the server (which one seems legit at first sight).

Hope I can help!