No Internet

I need help setting up my internet access. I have a notebook with an internal WiFi adapter via the USB interface. The WiFi is connected to the router (green computer icon), sys-firewall has “none” under NetVM (status green), sys-usb NetVM “none” (status green) and sys-net NetVM “sys-usb” (status yellow). I cannot connect to the internet with Qubes Personal/Firefox with NetVM “Default (sys-firewall)”. In the Qubes system overview, sys-net is rotating in red text.
I assumed that there is a cascade (Firefox > Firewall > net > usb > Internet) for how apps can access the Internet. However, this does not work when I set it up via NetVM.
Can anyone help me?

Thank you.

From looking at your picture, I believe sys-firewall’s netVM should be set to sys-net.

Pretty much, but more like

Firefox > Firewall > net > Internet
                      | <- sys-net operates adapter passed to it from sys-usb
                     usb

Essentially sys-net must have no network qube and needs network interface devices passed to it, also this


In another word, if you check qvm-ls -t, your network should branch out from sys-net, with sys-usb completely disconnected, like this:

...
sys-net
└─sys-firewall
  └─your-favourite-qube
  └─sys-whonix
    └─sneaky-qube
...
sys-usb
...

And, if you check qvm-usb list (assuming 0cf3:3004_0cf3_3004 is your adapter), it should return a list with:

BACKEND:DEVID  DESCRIPTION                 USED BY
...
sys-usb:4-4    0cf3:3004_0cf3_3004         sys-net
...

That’s how it’s configured when connecting to ethernet:

'sys-usb' - Net qube: none, provide network
'sys-net' - Net qube: none, provide network
'sys-firewall' - Net qube: sys-net, provide network

Dunno about usb network devices, but there was some posts that if you use usb network devices you must have sys-net to provide usb stack and without sys-usb.

Maybe it will work if you attach this wifi device to sys-net.
Or maybe sys-usb must be a set as Net qube: in sys-net.

This is what it looks like at my place now

I receive an error message when I change NetVM in sys-firewall

It’s because sys-net is not working - it have yellow dot. There’s something wrong wit sys-net.
Check it’s settings.
For your settings first sys-usb must be running first, because it runs usb devices.
Then sys-net must run because it make all connections.
Only then sys-firewall can receive anything.

dom0:

journalctl -b |grep -i "sys-net"

I now have an Internet connection via Personnel with the setting NetVM sys-usb. Doesn’t that allow me to bypass the firewall?

in dom0:

lspci |grep "03:00.0"

list pci devices in sys-usb:

$ qvm-device pci list sys-usb
BACKEND:DEVID  DESCRIPTION                                                                    USED BY
dom0:00_0d.0   USB controller: Intel Corporation Alder Lake-P Thunderbolt 4 USB Controller    sys-usb (no-strict-reset=True)
dom0:00_0d.2   USB controller: Intel Corporation Alder Lake-P Thunderbolt 4 NHI #0            sys-usb (no-strict-reset=True)
dom0:00_0d.3   USB controller: Intel Corporation Alder Lake-P Thunderbolt 4 NHI #1            sys-usb (no-strict-reset=True)
dom0:00_14.0   USB controller: Intel Corporation Alder Lake PCH USB 3.2 xHCI Host Controller  sys-usb (no-strict-reset=True)

list pci devices in sys-net:

$ qvm-device pci list sys-net
BACKEND:DEVID  DESCRIPTION                                                              USED BY
dom0:00_14.3   Network controller: Intel Corporation Alder Lake-P PCH CNVi WiFi         sys-net
dom0:00_1f.6   Ethernet controller: Intel Corporation Ethernet Connection (16) I219-LM  sys-net (no-strict-reset=True)
1 Like

On the picture with the return of journalctl -b |grep -i "sys-net" we can see that sys-net fails to start because one of pci devices that it should have is attached to sys-usb. To fix this, check the devices tab in settings of sys-net and sys-usb, there must be no overlapping devices. Be careful if you use usb input devices, you need to shut down sys-usb to change which pci devices are passed to it, this might leave you with no keyboard or mouse input. (Or use suggestion by KitsuneNoBaka, qvm-device pci is the command-line alternative)

Network configuration is correct, but you don’t have any usb devices passed to sys-net. Once you start sys-net, use the devices applet in your panel or qvm-usb attach to pass the usb adapter to sys-net.

With these settings, Firefox works in Personal mode. For whatever reason. How can I be sure that the firewall is working correctly?

In this configuration sys-usb does the job of sys-net. Firewall should work with no issues, test it if you want.

Because network device is attached to sys-usb then if you connect sys-firewall to sys-usb then it will works.
It seems that you have attached one device to two qubes - that don’t work.
Check in settings of sys-usb and sys-net in Devices tab.
Or my terminal commands from earlier

Then remove network device from sys-usb and from now on sys-net should start to work normally.


Strangely enough, I can access the Internet without sys-net being active. However, when I delete the duplicate entries for the WLAN adapter in sys-net, it no longer works, even though it is inactive.
Anyway, thank you very much for your support.
Can anyone tell me how I can automatically dial into the router? At the moment, I always have to enter the password.

No. Delete it from sys-usb
Leave it in sys-net

1 Like

This isn’t strange, sys-net is just a name. Any other qube can do what sys-net does if configured to do so. Based on your previous messages, sys-usb does it now.

This doesn’t look right, do you mean when you delete WLAN adapter from sys-usb?

It is because your sys-usb provides network (it really shouldn’t, but who am I to tell you what to do with your network?) and is a disposable vm. It has no persistency, thus password isn’t saved. This problem is well-explored and has multiple solutions, just search the forum.