How to pass Yubikey to AppVM

Attempt #2. I accidentally deleted my last post. The trash button is conveniently hidden right under the “show more” ellipsis button.

I have searched for other issues and could not find a relevant issue with answers.

I want to use a yubikey to open my keepass database in my vault qube.

Here’s what I tried:

  1. Opened vault’s Devices and looked for my yubikey. Couldn’t find it.
  2. Went to dom0 terminal, ran lsusb and took a note of my yubikey’s device ID, then searched for that ID in Devices. Couldn’t find it.
  3. Did research. Found a reddit article referencing this page, took a mental note of the warning that says “This page is intended for advanced users” and proceeded any way because I have no idea what advanced user means and I just want to fix my issue, then ran sudo qubesctl state.sls qvm.usb-keyboard and was locked out of my OS (usb input stopped working).

I am a little frustrated with using QubesOS because it feels like there aren’t always simple solutions to simple problems and are locked behind intimidating documentation. Something as simple as viewing your disks in dom0 in a modern, easy to use interface like Gnome Disks, or passing a USB device through to an appVM without need of a terminal.

I also had an issue connecting my external SSD to the vault qube, and I would have shared the screenshot of the error I got but I don’t know how to transfer files out of dom0, and I looked for the “send file to x qube” option in the right click menu but couldn’t find one.

Thanks.

There is a tray icon for devices where you can attach them to appVM’s

That icon doesn’t list my yubikey.

Both of these are simple to do, as has been explained in recent posts.
If you find the documentation intimidating help us to improve it by
proposing changes.
If you find the existing tools inadequate (eg not being able to pass
through a USB device using the devices widget), this may be a bug. We
can only decide if you provide more details of your system, what you
have done, and what has failed to work. And I mean details.

This is documented

I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.

@unman

Both of these are simple to do, as has been explained in recent posts.

In replies to my linked post or in other discussions? Please reference the post where this is explained.

If you find the documentation intimidating help us to improve it by
proposing changes.

If I can find the time, I will.

If you find the existing tools inadequate (eg not being able to pass
through a USB device using the devices widget), this may be a bug. We
can only decide if you provide more details of your system, what you
have done, and what has failed to work. And I mean details .

Kindly point me in the right direction. What details do you want me to provide?

Yubikey NFC, about 6 years old. Connected to my monitor (via USB cable), which is connected to my Intel NUC via USB-C. The monitor gets video output via the same USB-C cable. This might be part of the problem, so to test it I will try connecting the yubikey directly to the PC and connect monitor with HDMI.

I don’t know what other details to provide.

This is documented

I really think there needs to be a way to do this directly in the thunar file manager. Having to open a terminal and enter a command every time I need to transfer files out of dom0 is really quite a headache.

transfering files out/to dom0 requires you to use the terminal.

That is sort of by design. There are valid use-cases of course, but this is not something you should be doing often. Once your system is set up to your liking, you should very, very, very rarely create a file or need to read a file in dom0.

You can try:

qvm-copy-to-vm <destination-vm> <file-path>

Then you will have the file in the destination VM, in ~/QubesIncoming/dom0/

{deleted}

That is sort of by design. There are valid use-cases of course, but this is not something you should be doing often. Once your system is set up to your liking, you should very, very, very rarely create a file or need to read a file in dom0.

What would you do if you wanted to share a screenshot of your screen? Is there some other way to share screenshots besides using PRTSC and copying the file out of dom0 with terminal?