-
-
Notifications
You must be signed in to change notification settings - Fork 48
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Can't attach Yubikey 4 or webcam to any qube after QSB#38 updates #3612
Comments
Duplicate of #3524 |
This appears to be a duplicate of an existing issue. If you believe this is not really a duplicate, please leave a comment briefly explaining why. We'll be happy to take another look and, if appropriate, reopen this issue. Thank you. |
Thanks for your answer and for taking care of this. Just one note: I might be wrong, but I am not sure that this issue is a duplicate of #3524 (even though it might be related). In my case, the problem turned up only after QSB 38 updates: before, either the webcam and my Yubikey were perfectly working and it was possible to attach them to VMs. Thanks. |
I'm not sure that this is a duplicate as well. Yesterday evening I could attach a USB device to a VM without problems, this morning I updated dom0 and the templates with My error is a bit different though, Edit: |
Sounds like a duplicate of a different issue: #3615 (comment) |
Yeah, seems like it could be. Anyway, I edited |
I think this whole issue is caused by the root cause of #3615 ... I added I assume that some of the commits from here or here are responsible, maybe this. |
Actually, when I tried to attach a USB device to a fedora-26 AppVM, it was also necessary to add |
Thanks. On my laptop the solution proposed by @na-- and based on @rustybird 's code seems to solve the problem for the Yubikey (in my case, it has been enough to modify Indeed, if I try to attach the webcam to the voip VM,
|
@n1m1 does it also apply to yubikey after modifying usb-export script? BTW the modification is not needed anymore if you update to qubes-core-agent 4.0.23 |
Oh, you've said that already. Anyway, check with qubes-core-agent updated. |
Hello. I do apologize for the late answer but I've been very busy in the last two days. qubes-core-agent 4.0.23 fixed the problem for Yubikey, but not for the webcam. I am experiencing the same behavior reported above. Actually, I noticed one more detail:
|
Check |
You can also restart that widget and retry: look for process |
Hi, |
Nope, the qubes-core-agent* packages in VM - check in both sys-usb and the VM where you attach the device to. |
Heu ... the original problem is that I cannot attached it (device attached failed) :) What I have done:
When checking in my sys-usb, I can see that all the modifications have been taken into account. |
from the VM I would like to attached my device to ...
|
@ThierryIT do you get anything more useful from sys-usb at that time? |
In firefox u2f is not activated by defaut, you have to "about:config" in the URL and switch "security.webauth.u2f to "True" |
Does it solve the problem? |
Under Windows .... Yes :) |
Fedora? Do you have |
Are you talking about the VM where the device is attached ? If yes, I am running Debian on it ... |
I believe equivalent files on Debian are in Anyway, after plugging it in, check permissions on |
Is it not better to have a look there instead : the device should be "hidraw" (Yubico link) not "usb" (debian link) no ? Anf for the permission, I have to check the template that I have used to build my "sys-usb" ? If yes, I do have for all my "hidraw*" crw-------- root:root |
Both should work.
Try changing to 666 and try with firefox. If that helps, then it is permissions problem, if not - something else. |
There is no |
No, in the VM where you have firefox running, after attaching yubikey there. |
Hi, I'm having a similar issue to the OP. I use a split-gpg setup with private key material stored on a Yubikey 4. When I come to work in the morning I'll boot my laptop, sign into Qubes, open a terminal in dom0 to attach the Yubikey to a VM and go about my work. This has worked well for years now. Yesterday I ran a dom0 update as I typically do, rebooted my computer, and could no longer attach the Yubikey to sys-usb or any other VM.
Versions:
View of USB devices plugged into my Qubes machine from sys-usb
Attempting to attach the Yubikey in dom0
Logs from sys-usb checking "backend side for details" from the error message above.
I'm pretty sure this is the most relevant line from the logs
I'm not entirely sure what argument to pass into sys-usb
Edit:
and that allowed me to progress to
However, it appears that the device does exist.
Double Edit: |
I'm glad you were able to find a workaround, but it sounds like your problem might be different from this issue. |
I have a similar problem with my webcam in certain conditions. Don't know if that's related to update QSB#38 My webcam works fine within a virtualmachine1 (hvm) running fedora32. The pci-usb controller with the webcam is assigned to that virtualmachine1. Once I forward the camera to another virtualmachine2, i.e. personal (pvh) the cam is not working there. journalctl shows this... Mar 18 18:18:28 personal systemd[1851]: Started Virtual filesystem service. Then I switch the camera back to the virtualmachine1 (hvm) and it won't work there either. Hope this helps to trace down the issue. |
Is this still a problem in 4.1? |
I can write what hardware I have and what works and what does not work. Maybe that's all not related to the original topic of this ticket. Conditions have changed since my last post and the behaviour is reproducable now. There is a Logitech webcam connected to a PCI-USB card and the latest qubes updates are installed. (all on fedora 37 templates). The PCI-USB card is assigned to a HVM. What works: Won't work: HMV ---------> PVM(work) ----x----> HVM ----------> PVM(privat) x: not possible Thank you for all the efforts and the good work:-) and I hope that helps. |
This issue is being closed because:
If anyone believes that this issue should be reopened, please leave a comment saying so. |
Qubes OS version:
4.0 rc4
Affected TemplateVMs:
dom0
debian-9 (work-gpg and voip VMs)
fedor-26-minimal (sys-usb)
Steps to reproduce the behavior:
qvm-usb attach work-gpg sys-usb:2-1
Or
qvm-usb attach voip sys-usb:2-8
Expected behavior:
Yubikey is attached to work-gpg and can be used in order to decrypt emails.
Webcam is attached to the voip vm and can be regularly used.
Actual behavior:
Can't attach Yubikey to work-gpg
In dom0 I get this output:
"Device attach failed: No device info received, connection failed, check backend side for details"
In work-gpg I get this output
Can't attach the webcam to a VM
In dom0 I get this error:
"Device attach failed: No device info received, connection failed, check backend side for details"
And in the voip VM I get this error:
General notes:
It has been possible to passthrough Yubikey to work-gpg, or use the webcam, untill the QSB#38 updates.
It is still possible to attach USB mass storage devices to work-gpg and other qubes.
Testing and security-testing repositories are enabled.
Related issues:
The text was updated successfully, but these errors were encountered: