Windows support in Qubes

hackerfactor · June 28, 2021, 9:29pm

I’m willing to help! Where can I find the QWT source code and build instructions?

unman · June 29, 2021, 4:37pm

Look on GitHub - Qubes OS Project · GitHub
But if you look at past posts and in the discussions under issues you
will see other efforts - check those to avoid duplication.

hackerfactor · June 29, 2021, 10:07pm

Hi @unman,

Buried within those 6 pages of github projects, I think I see 8 different github projects for Windows.

Is that all of them, or are there more?

Do they have to be built/installed in a particular order?

Is there one all-encompasing github project, or is Windows support really fractured into a bunch of independent projects? (There’s only one “Windows support”, so having 8 separate packages in order to build QWT seems like a maintenance nightmare.)

unman · June 30, 2021, 12:05am

I hope you didn’t go wading through those pages - that’s what the search
tool is for.

I think you should try to understand how the Qubes build process works,
and how the elements work together.
It isn’t that support is “fractured” but that there are different parts
to the Qubes packaging. (Compare windows to the standard Linux build.)
qubes-builder-windows will build in the right order, and create
installer.

hackerfactor · June 30, 2021, 1:57am

I’m hoping you can provide a little more assistance than telling me to learn the build process. For example, where is the build process documented? Is there a URL or a README that is up to date?

marmarek · June 30, 2021, 2:15am

GitHub - tabit-pro/qubes-windows-tools-cross: Qubes Windows Tools build with mingw, wine and qubes-builder - this collects all the needed pieces together. Testing is greatly appreciated. I think @jevank may say few more words about it (see also comment at Windows support in Qubes - #5 by jevank).

jevank · June 30, 2021, 6:22pm

I`ve added README with build instructions, hope it helps. While testing it have found incorrect submodule link, fixed now

@elliotkillick if you have R4.1 test machine we could make your amazing tool compatible with this version of QWT. Msi package instead of exe is core difference I hope.

@hackerfactor USB support is not a part of QWT project, but it almost ready for testing repos. Follow the update-status github repository.

hackerfactor · June 30, 2021, 7:35pm

Ah… you’re cross-compiling from wine! I bet the cross-compiling no longer works with Win10!

hackerfactor · June 30, 2021, 7:37pm

@jevank Your comment that USB support is not a part of QWT seems to contradict the documentation. The documentation at Contents/windows-tools.md at master · Qubes-Community/Contents · GitHub explicitly says that USB is supported on Win10.

jevank · July 1, 2021, 4:46am

I don’t know why it has such description, perhaps it is about common feature status - implemented, but not release yet.

hackerfactor · July 1, 2021, 12:39pm

Hi @jevank,

I don’t believe the documentation is a mistake.

With Win7, the QWT installation does provide Windows USB support. (Win7 is so old that Microsoft ended support in January 2020. But when that page was written, it did work.)

I haven’t tested Win8, but it should be like Win7. (Win8 lost mainstream support in 2018, and will be completely end-of-life in 2023.)

When Win10 first came out (2015), it was mostly backwards compatible with Win7/8. However, the 1607 update (2016) changed that and created a split between the installers. This is about the time that cross-compiling installers from Wine to Win10 stopped working. This is about the same time that you start seeing forum postings where people are complaining that Qubes USB support isn’t working in Win10.

When Microsoft ended Win7 support in 2020, people were forced to switch to Win10. This coincides with a large increase in forum complaints that QWT isn’t working for Win10.

In 2020, Wine received a major update in years to fix compatibility with Win10. I don’t know if the QWT developers are using the latest Wine or something older; but it doesn’t really matter: Win10 received a major patch (1903 in 2019) that hardened the application sandbox. While these Wine updates permit Win10 apps to run in Wine, they lack some of the sandbox requirements for making a proper installer for Win10. (Win10 to Wine mostly works. Wine to Win10 mostly fails.)

As far as I can tell, the only problem with the QWT for Win10 code is in the installer scripts. If you run the installer and then look for where it placed the new files, you will see that it failed to install any of the dll and sys files. This is because the Win7 installer no longer works under Win10. If you manually copy the DLL files to the right locations, then they work. The same goes for the Xen tools for Win10; they fail to copy required dll files during the installation.

To reiterate: I really think the problem is in the QWT installer (exe) and not in the DLL, SYS, or qrexec service executables.

I managed to get USB for thumb drives working on Win10 after manually copying dll files. However, I could not get support for generic USB devices working. I’m only manually copying two dll files; I’m certain that I’m missing other required dll and sys files. Unfortunately, there is no documentation that says what files are needed (dll, sys, exe, etc.), where they belong, or what registry changes are required.

If someone could provide the what files / where do they go / what registry changes, then I could complete the manual installation on Win10 and test whether full USB support works.

jevank · July 1, 2021, 3:03pm

With Win7, the QWT installation does provide Windows USB support.

That is not correct. USB storage devices could be attached based on block device support not USB communication

hackerfactor · July 1, 2021, 7:53pm

Hi @marmarek,

I’ve tried following the instructions at GitHub - tabit-pro/qubes-windows-tools-cross: Qubes Windows Tools build with mingw, wine and qubes-builder, and step 3 appears to fail.

I started with a brand new Fedora VM.
Typed in step 1 (get build environment). Everything installed. (Surprisingly fast – maybe a minute for everything.)
Typed in step 2 (get sources and binaries). Everything retrieved, including some binaries from archive.org that are over 12 years old. (The build process has dependencies that pre-date Win10 by five years!)
Typed in step 3 (build iso). Failed. The error: sudo: unrecognized option ‘–define’.

marmarek · July 1, 2021, 8:09pm

Check if you have “mock” package installed.

hackerfactor · July 1, 2021, 8:43pm

rpm -qa | grep -i mock

Nope, nothing found.

marmarek · July 1, 2021, 9:00pm

That’s the issue then. Install it. The message indeed is very unfriendly
(so to say…) in that case.

hackerfactor · July 1, 2021, 9:14pm

sudo dns install mock # works

Then I run step 3 to build the iso. New error:

ERROR: call ‘make install-deps’ to install missing dependencies

jevank · July 1, 2021, 9:18pm

update README to require mock, thanks!

make install-deps
make remount

was it succesful on first step?

GWeck · July 2, 2021, 11:48am

I went through the installation steps and managed to create the iso without problems. The resulting msi file could be installed in Windows 10 as well as in Windows 7 and, at first look behaves just like the QWT version 4.1-65 that I tested earlier this year. qrexec seems to work, too, as I could copy files from both Windows VMs to other VMs.

So there is now a working build environment for QWT based on wine. Congratulations!!!

marmarek · July 2, 2021, 12:25pm

Thanks for testing @GWeck !
Can you confirm GUI working in Windows 7, either as (resizeable) full screen window, or individual windows? The GUI agent and its driver is the most fragile part of the build, so I’m worried that it could be misbehaving.
Also, have you installed it on a fresh Windows VM, or updated from previous QWT version?