Have usb keyboard working from luks and login screen

Community Guides
1

Lenovo T480 (only usb ports) with diagnosed broken keyboard (even Enter key not working).

I entered the Qubes Rescue by booting the installer thumb drive and managed to unlock the luks and get a chroot.

How can I make the USB keyboard work always? Can I bypass sys-usb? Or what should I turn off so that when I boot, I am able to type the luks password on the USB keyboard as well as the dom0 password on xfce? Thank you!

2

On luks passphrase prompt, it’s not sys-usb which manage the keyboard, sys-usb starts later.
I suggest you search the kernel options to control usb devices on boot and also the dom0 USBguard rules.

Resources :

  • usb-qubes, see the If you wish to use a USB keyboard to enter your LUKS passphrase part
  • USBGuard, Qubes-OS uses it in dom0 to blacklist the devices which are not a keyboard or a mouse.
  • search in this forum : rd.qubes.hide_all_usb, usbcore.authorized_default, USB luks, …
1 Like
3

To type in the luks password, I removed rd.qubes.hide_all_usb from grub.

4

I have tried on Qubes Rescue chroot to change my dom0 user’s password to something that does not use broken keys (as I could click on the xfce button), but passwd gives me command not found.

5

I did it! The caveat is that Qubes Rescue does not chroot me in dom0, it just give me a generic Linux, then I had to decrypt the luks, mount, chroot and I was able to change the user’s password…

indeed physical acccess means game over…