./policy/qubes.InputKeyboard has sys-usb dom0 allow,user=root.
I haven’t checked qubes.InputMouse, but Keyboard is the essential part anyway.
I followed Locked myself out after creating Sys-USB - #14 by lenis_machines but stopped after 10 because there was nothing to change.
I wasn’t sure about the user=root part, but I left it.
I can only suggest you to boot from some LiveUSB or Qubes OS installer ISO and mount your disk there so you can check the logs in dom0 for errors or related messages.
The only log file that meant anything to me was /var/log/boot.log.
It’s all green.
The last entries are:
Starting Qubes VM MyVM1
Starting Qubes VM MyVM2
Starting Qubes VM sys-firewall
Starting Qubes VM sys-net
Starting Qubes VM sys-whonix
Starting Permit User Sessions
Finished Permit User Sessions
Started Command Scheduler
Starting Hold until boot process finished up
Starting Terminate Plymouth Boot Screen
There are a bunch of entries related to USB. I summarized them below. There were also a few errors that seem unrelated, but I added them anyway:
…
usbcore: registered new interface driver usb_hid
usb_hid: USB HID core driver
usb usb1: New USB device found, …
usb usb2: New USB device found, …
usb usb3: New USB device found, …
usb usb5: We don’t know the algorithm for LPM for this host, disabling LPM
…
usb usb8: New USB device found, …
…
usb 1-3.3: Manufacturer Logitech (my mouse)
usb 1-6: Manufacturer Cherry GmbH (my keyboard)
…
/usr/lib/systemd/usbguard.service:15 PIDFILE= …
…
A bunch of the following errors. They seem to be related to Qubes I deleted a while ago:
libvirtd[2473]: unsupported configuration: unknown OS type ‘pvh’
libvirtd[2473]: Failed to load config for domain ‘salt-test-vm’
…
systemd[1]: udisk2.service: Failed with result ‘exit-code’ (127)
systemd[1]: Failed to start Disk Manager.
…
kernel: usb 1-3.3: USB disconnect, device number 4
…
kernel: usb 1-6: USB disconnect
…
usb 1-6: Manufacturer Cherry GmbH
kernel: input: Cherry GmbH CHERRY Corded Device as device/pci0000:00/,…
kernel: mtb-probe[7941]: checking bus 1, device 10 … usb1/1-6
kernel: mtb-probe[7941]: … was not an MTB device
qrexec-policy-daemon[7993]: flatpack:symbol lookup error: /lib64/libappstream-glib.so:8: undefined symbol: rpmvercmp
After this last line, the log starts showing the shutdown procedure after I pressed the power button.
Check the Command line: from journal to see that you don’t have rd.qubes.hide_all_usb there.
Is there any related info before USB disconnect message?
What if you disconnect and connect your keyboard USB cable on login prompt? Will it show any USB messages in journal?
Sorry, the “disconnect” was from me removing and re-inserting mouse and keyboard after I discovered it doesn’t work.
I did a clean startup also with qubes.skip_autostart
The only occurence is:
dracut-cmdline: Warning: USB in dom0 is not restricted. Consider rd.qubes.hide_all_usb or usbcore.authorized_default=0
I saw this message popping up before the upgrade for a split-second on startup.