Ultimate Guide on Using Trezor on Qubes

Community Guides
89

It works without issues. You can make it work following instruction on Trezor’s official web site: Installing Trezor Suite on Linux plus combine it with findings in this thread here: USBIP protocol errors

You basically need default sys-usb (no need for customized template where we were previously installing trezor-bridge, udev.rules and socat)
The rest of tools will be in template and TrezorSuite AppVM.

This is what I did:

  1. clone whonix-ws > wws17-ts and install trezor package in it
  2. create TrezorSuite appVM on updated template in step 1
  3. download and transfer TrezorSuite*.AppImage and udev.rules (51-trezor.rules) to created appVM
  4. open terminal in TrezorSuite
  • move 51-trezor.rules to /rw/config/
  • create /rw/config/trezord.service with following content:
[Unit]
Description=Trezor Bridge
After=network.target

[Service]
Type=simple
ExecStart=/home/user/squashfs-root/resources/bin/bridge/trezord -r=false
User=user
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target
  • modify /rw/config/rc.local with this content:
modprobe vhci-hcd # Only if AppVM is running as PVH
cp /rw/config/51-trezor.rules /etc/udev/rules.d/51-trezor.rules
cp /rw/config/trezord.service /etc/systemd/system/trezord.service
systemctl enable --now trezord
  • In case you were using trezor-bridge in sys-usb there was file /etc/qubes-rpc/policy/trezord-service in dom0 which is not needed any more (remove it).
  • and that should be all you need
  • restart TrezorSuite appVM
  • unlock your HWW
  • attach it to TrezorSuite appVM
  • you should be now able to work with HWW in TrezorSuite application
  • profit!

share as you like and :zap: me a coffee @ smrtak@fountain.fm :slight_smile:

3 Likes