Installation halted libxenlight domain sys-net

Necessary Hardware info :
Msi b760m mortar max wifi with intel wifi 6E chipset
Intel i9-13900es1(q0d8) cpu
Crucial 48gb x 2 ddr5 memory
Crucial p5 2tb ssd

I’m currently struggling with my installation of qubes os, i’m attempting again and again to install but always stuck on the message :

Qube Status: sys-net
Qube sys-net has failed to start: internal error: libxenlight failed to create new domain ‘sys-net’

Problem always happen on ‘setup networking’ process, and after the error message installation process is being halted. So, i can see the qubes with working dom0, but i cannot execute any kind of application inside the qubes, when i attempted refreshing the qubes they started properly, but it didn’t give me any applications, so i cannot use backup qubes.

Once i started to search how to restart the installation process manually, but there are no document that is enoughly accessible(i cannot find it) via search. I once heard that if i disable wifi card then i can boot, but the io shield where card is located is cannot be removed. So i think i need to know how to disable the pcie device on the grub before installation process, or i need to (at least) know how to manually accomplish the configuration.

Intel VT-d enabled. I suspect that due to my processor(which is an engineering sample, extremely cheap with limited functionality), chances are the virtualization doesn’t work properly, but i think it’s rather not likely.

Any solutions or recommendations?

Try to install Qubes OS with kernel-latest. There is a separate GRUB menu entry for this in the Qubes OS installer:


You can check the log to see the reason for sys-net failing in the /var/log/libvirt/libxl/libxl-driver.log in dom0.

You can uncheck the creation of the qubes (sys-net/sys-firewall/etc) in the Initial Setup and create them manually later:


You can also create the default qubes later using salt:

2 Likes

Thanks for providing me such a bunch of help! I’ll try it tomorrow.

Today i attempted to reinstall the qubes os regarding your guideline.
When i started installation with sys-net and sys-firewall disabled, i encountered the message that indicates there was an error installing default-dvm…

So i manually installed things. Template is properly installed, salt formula works well, but i cannot start any qubes at all.

I double-checked whether virtualization options are enabled, it is alright… I think my problem is my engineering sample cpu. I cannot find a legitimate information, but i saw some search result at reddit displayed in search engine, indicating intel engineering sample cpu doesn’t necessarily support virtualization.

You can try to install some general Linux OS and passthrough some PCI device to the KVM guest OS for a test.

I’ll test it out, but first i’ll attempt another methods before installing anything via network(i think my network is compromised)
I updated the bios and now following these guidelines >> Nvidia Troubleshooting Guide

My vault qubes itself boot well(although i cannot sync the application), which means lack of virtualization is not a problem but i can’t use neither sys-net nor sys-usb. Since i cannot boot sys-usb, if i add usb device to sys-usb qube and reboot it disables the keyboard/mouse input. Sys-usb and sys-net are both qubes using “provides network to other qubes”.

Chances are my dual nvidia p40 graphics are problem, i’m currently learning how to follow the guidelines but they are pretty hard to follow… I’ll come back soon.

Now i’m reading this :
Boot failure after GRUB menu / System freezes followed by reboot
Lack of video output during Nvidia driver installation

Especially lack of video output seems my problem, after i type sudo nano /boot/efi/EFI/qubes/xen.cfg i see literally nothing.

I encountered some sys-net writing error, but it was a mere sudo permission error.

VT-x could be working, but VT-d (that is needed for PCI passthrough) could be not working. This could be the reason for sys-net and sys-usb failing to start since they have PCI devices attached to them.

I don’t think it’s related.

You don’t have video output? I thought you only have an issue with the sys-net/sys-usb failing to start.

That part of the guide is outdated, you need to edit the Xen config GRUB_CMDLINE_XEN_DEFAULT in the GRUB file /etc/default/grub and then regenerate grub config with:

sudo grub2-mkconfig -o /boot/grub2/grub.cfg
1 Like

It seems i need to embrace that my engineering sample cpu does not support VT-d tech…

Thanks for providing such help.

Short question, today i turned on and off intel virtualization technology and vt-d options…
When i turn of one of them, installation process let me know that i’m using unsupported hardware.
Message pop up like “vt-x disabled” or “vt-d disabled” or etc.

Does qubes has an ability to identify whether bios option is turned on?
Or it maybe the problem of iommu?

I guess it can detect if virtualization/iommu is available in the system. But whether it works or not is another question.
I still suggest you to check if you can passthrough the PCI device to a VM in some other OS using KVM/VirtualBox/etc to rule out some Qubes OS specific issue.


Claude suggested these commands, and it responded :
Iommu is present but seems to be disabled for graphics
“Dmar : skip iommu disabling for graphics”
Ommu is active : “iommu : default domain type : translated”
Vt-d is active for GFX Access : “VTd active for gfx access”

Cpu virtualization support :
Grep command for vmx|svm in /proc/cpuinfo returned no result.
Iommu group :
The command to find iommu groups returned no results, suggesting iommu groups are not properly set up.
Kernel command line:
Output shows a placeholder, but doesn’t include any iommu-related parameters.
Iommu module status :
Cat command for the intel_iommu parameters returns a korean message wgich translates to “the file or directory doed not exist”
Virt-host-validate : no visible output

Conclusions :
Vt-d appears to be active, at least partially
Iommu is present but may not be fullt enabled or cobfigured
Cpu virtualization flags are not detected, which is concerning.
Iommu groups are not properly set up.

I’ll add “intel_iommu=on” and "iommu=pt"tomy kernel parameter, in /etc/default/grub. With the line starting GRUB_CMDLINE_XEN_DEFAULT.
And typing
grub2-mkconfig -o /boot/grub2/grub.cfg





This is example of journalctl, it seems the problem of /usr/lib64/security/pam.sss.so is constantly repeating…

It’s not related and should be harmless:

Check the content of this file in dom0 to see the reason for sys-net start failing:

sudo cat /var/log/libvirt/libxl/libxl-driver.log


I’m reading this thread to know how to resolve the peoblem, same happens in my computer.

libxl: libxl_dm.c:2857:stubdom_xswait_cb:domain 5:Stubdom 6 for 5 startup: startup timed out.
libxl_create.c:1975:domcreate_devmodel_started: Domain 5:device model did not start: -9

Check /var/log/xen/console/guest-sys-net-dm.log log.







qemu: -append only allowed with -kernel option

Seems to be the same problem with kernel as described in the github issue.
Try to reinstall the Qubes OS and make sure to test the media before install to make sure that it’s not corrupted.

I tried more than 10 times installing qubes os, veryfied iso with both .asc and .digests fils, tried installation with other computer(whoch worked well)… I cannot figure out does it helps…anyway, i’ll try again.

Did you test the media before install to make sure that your ISO was written correctly on your installation media?

I guess you can report the issue here so it’ll be reopened and try to debug it further there:

For future reference, this issue is caused by wrong system time:

So update the system time (e.g. in BIOS) to fix it.

1 Like