mirror of
https://github.com/QubesOS/qubes-doc.git
synced 2025-12-14 23:45:07 -05:00
Describe new autolgon feature for QWT 4.2.2
This commit is contained in:
Dr. Gerhard Weck
GitHub
parent
84a327f7e1
commit
ca823d01a6
1 changed files with 40 additions and 36 deletions
|
|
@ -13,7 +13,9 @@ Qubes Windows Tools (QWT) are a set of programs and drivers that provide integra
|
|||
|
||||
- **Qubes GUI Agent** - video driver and GUI agent that enable the seamless GUI mode that integrates Windows apps onto the common Qubes trusted desktop (currently only for Windows 7 and, in a preliminary experimental version, for Windows 10 and 11).
|
||||
|
||||
- **Disable UAC** - User Account Control may interfere with QWT and doesn't really provide any additional benefits in Qubes environment
|
||||
- **Configure autologon** - To start a Windows qube without a prompt for user name and password, autologon is defined, using a random hidden password which cannot be extracted from the registry.
|
||||
|
||||
- **Disable UAC** - User Account Control may interfere with QWT and doesn't really provide any additional benefits in the Qubes environment
|
||||
|
||||
- **Clipboard sender/receiver** - Support for :doc:`secure clipboard copy/paste </user/how-to-guides/how-to-copy-and-paste-text>` between the Windows VM and other AppVMs
|
||||
|
||||
|
|
@ -75,6 +77,14 @@ Below is a breakdown of the feature availability depending on the Windows versio
|
|||
- y
|
||||
- y
|
||||
- y
|
||||
* - Disable UAC
|
||||
- y
|
||||
- n
|
||||
- n
|
||||
* - Configure autologon
|
||||
- n
|
||||
- y
|
||||
- y
|
||||
* - Clipboard Copy/Paste
|
||||
- y
|
||||
- y
|
||||
|
|
@ -116,10 +126,17 @@ Qubes Windows Tools are open source and are distributed under a GPL license.
|
|||
|
||||
|
||||
|
||||
Installing Windows OS as a Qubes VM
|
||||
-----------------------------------
|
||||
|
||||
|
||||
Please refer to :doc:`this page </user/templates/windows/qubes-windows>` for instructions on how to install Windows in a Qubes VM.
|
||||
|
||||
|
||||
|
||||
Preparation
|
||||
-----------
|
||||
|
||||
|
||||
Before proceeding with the installation, we need to disable the Windows mechanism that allows only signed drivers to be installed, because currently, the drivers provided as part of the Windows Tools are not digitally signed with a publicly recognizable certificate. To do that:
|
||||
|
||||
1. Start the command prompt as Administrator, i.e., right-click on the Command Prompt icon (All Programs -> Accessories) and choose "Run as administrator".
|
||||
|
|
@ -143,12 +160,24 @@ If script execution is blocked, it must be allowed using the following PowerShel
|
|||
|
||||
PS C:\> Set-ExecutionPolicy Unrestricted
|
||||
|
||||
**Warning:** It is strongly suggested to enable autologon for any Windows HVMs that will have Qubes Tools installed. To do so, in Windows 7, run the ``netplwiz`` command from the :kbd:`Win-R` "execute" prompt, and uncheck the *Users must enter a user name and password to use this computer* option. In Windows 10 and 11, autologon can be configured later on during Qubes Windows Tools installation.
|
||||
|
||||
|
||||
**Warning:** It is recommended to increase the default value of the Windows VM’s ``qrexec_timeout`` property from 60 (seconds) to, for example, 300. During one of the first reboots after Windows Tools installation, Windows user profiles are moved onto the private VM’s virtual disk (private.img), and this operation can take some time. Moving profiles and, later on, updating a Windows installation, is performed in an early boot phase when ``qrexec`` is not yet running, so a timeout may occur with the default value. To change the property use this command in ``dom0``: *(where* ``<VMname>`` *is the name of your Windows VM)*
|
||||
|
||||
.. code:: console
|
||||
|
||||
[user@dom0 ~]$ qvm-prefs <VMNAME> qrexec_timeout 7200
|
||||
|
||||
To enable file copy operations to a Windows VM, the ``default_user`` property of this VM should be set to the ``<USERNAME>`` that you use to log in to the Windows VM. This can be done via the following command on a ``dom0`` terminal (where ``<VMNAME>`` is the name of your Windows VM):
|
||||
|
||||
.. code:: console
|
||||
|
||||
[user@dom0 ~]$ qvm-prefs <VMNAME> default_user <USERNAME>
|
||||
|
||||
|
||||
**Warning:** If this property is not set or set to a wrong value, files copied to this VM are stored in the folder :file:`C:\Windows\System32\config\systemprofile\Documents\QubesIncoming\{<source_VM>}`. If the target VM is an AppVM, this has the consequence that the files are stored in the corresponding TemplateVM and so are lost on AppVM shutdown.
|
||||
|
||||
**For Windows 10 and 11:** From the Windows command line, disable hibernation in order to avoid an incomplete Windows shutdown, which may lead to corruption of the VM's disk.
|
||||
|
||||
1. Start the command prompt as Administrator, i.e., right-click on the Command Prompt icon :menuselection:`All Programs --> Accessories` and select :guilabel:`Run as administrator`
|
||||
|
|
@ -173,17 +202,6 @@ or
|
|||
The solution is to disable hibernation in Windows with this command. (That command is included in QWT’s setup, but it’s necessary to run it manually in order to be able to open QWT’s setup ISO/CD-ROM in Windows).
|
||||
|
||||
|
||||
|
||||
Installing Windows OS as a Qubes VM
|
||||
-----------------------------------
|
||||
|
||||
|
||||
Please refer to :doc:`this page </user/templates/windows/qubes-windows>` for instructions on how to install Windows in a Qubes VM.
|
||||
|
||||
**Warning:** It is strongly suggested to enable autologon for any Windows HVMs that will have Qubes Tools installed. To do so, run the ``netplwiz`` command from the :kbd:`Win-R` "execute" prompt, and uncheck the *Users must enter a user name and password to use this computer* option.
|
||||
|
||||
|
||||
|
||||
Installing Qubes Windows Tools (QWT) in a Windows VM
|
||||
----------------------------------------------------
|
||||
|
||||
|
|
@ -209,7 +227,7 @@ Installing the Qubes Windows Tools on Windows 7, 10, and 11, both as a Standalon
|
|||
|
||||
After downloading, copy the file to `dom0` as described in `How to copy from dom0 <https://www.qubes-os.org/doc/how-to-copy-from-dom0/#copying-to-dom0>`__ and install it via ``sudo dnf install PATH_TO_RPMFILE``.
|
||||
|
||||
**Caution:** Installation of one of these QWT versions will remove the other one, if it is installed.
|
||||
**Caution:** Installing one of these QWT versions will remove the other if it is installed.
|
||||
|
||||
**Warning:** In Windows 7, the older version of Qubes Windows Tools will be replaced during the next ``dom0`` update by the current dummy version 4.1.70-1. This can be inhibited by appending the line ``exclude=qubes-windows-tools`` to the file ``/etc/dnf/dnf.conf`` in ``dom0``.
|
||||
|
||||
|
|
@ -225,7 +243,7 @@ Installing the Qubes Windows Tools on Windows 7, 10, and 11, both as a Standalon
|
|||
|
||||
3. Install Qubes Windows Tools by starting the setup program (logged in as administrator), optionally selecting the ``Xen PV disk drivers``.
|
||||
|
||||
**Caution:** The Qubes graphics driver is still in experimental development. It may work or not, possibly depending on your hardware. So, in Windows 10 and 11, it may be less risky to install Qubes Windows Tools without selecting this driver, and later on, to try it in a clone of your Windows VM by re-running the installation in change mode.
|
||||
**Caution:** For Windows 7, the installation of the graphics driver in the first step will probably break the Windows qube, causing it to show only a black window and become unresponsive; the graphics driver has to be installed later on in a second step described below. For Windows 10 and 11, the Qubes graphics driver is still in experimental development. It may work or not, possibly depending on your hardware. So, in Windows 10 and 11, it may be less risky to install Qubes Windows Tools without selecting this driver, and later on, to try it in a clone of your Windows VM by re-running the installation in change mode.
|
||||
|
||||
**Warning:** The installation of the PV disk drivers may lead Windows to declare that the hardware has changed and that, in consequence, the activation is no longer valid, possibly complaining that the use of the software is no longer lawful. It should be possible to reactivate the software if a valid product key is provided.
|
||||
|
||||
|
|
@ -259,7 +277,7 @@ Installing the Qubes Windows Tools on Windows 7, 10, and 11, both as a Standalon
|
|||
|
||||
- Reboot the VM.
|
||||
|
||||
- It may be necessary to start the GUI manually, by typing `qvm-start-gui VMNAME``` in dom0.
|
||||
- It may be necessary to start the GUI manually, by typing ``qvm-start-gui VMNAME`` in dom0.
|
||||
|
||||
- The device “Qubes Video Driver” may show up as deactivated. In this case, you can now activate it again.
|
||||
|
||||
|
|
@ -267,23 +285,7 @@ Installing the Qubes Windows Tools on Windows 7, 10, and 11, both as a Standalon
|
|||
|
||||
- Shut down the Windows VM.
|
||||
|
||||
5. Qubes will automatically detect that the tools have been installed in the VM and will set appropriate properties for the VM, such as ``qrexec_installed``, ``guiagent_installed``, and ``default_user``. This can be verified (but is not required) using the ``qvm-prefs`` command (where ``<VMNAME>`` is the name of your Windows VM):
|
||||
|
||||
.. code:: console
|
||||
|
||||
[user@dom0 ~]$ qvm-prefs <VMNAME>
|
||||
|
||||
|
||||
To enable file copy operations to a Windows VM, the ``default_user`` property of this VM should be set to the ``<USERNAME>`` that you use to log in to the Windows VM. This can be done via the following command on a ``dom0`` terminal (where ``<VMNAME>`` is the name of your Windows VM):
|
||||
|
||||
.. code:: console
|
||||
|
||||
[user@dom0 ~]$ qvm-prefs <VMNAME> default_user <USERNAME>
|
||||
|
||||
|
||||
**Warning:** If this property is not set or set to a wrong value, files copied to this VM are stored in the folder :file:`C:\Windows\System32\config\systemprofile\Documents\QubesIncoming\{<source_VM>}`. If the target VM is an AppVM, this has the consequence that the files are stored in the corresponding TemplateVM and so are lost on AppVM shutdown.
|
||||
|
||||
6. It is advisable to set some other parameters in order to enable audio and USB block device access, synchronize the Windows clock with the Qubes clock, and so on:
|
||||
5. It is advisable to set some other parameters in order to enable audio and USB block device access, synchronize the Windows clock with the Qubes clock, and so on:
|
||||
|
||||
.. code:: console
|
||||
|
||||
|
|
@ -303,11 +305,11 @@ Installing the Qubes Windows Tools on Windows 7, 10, and 11, both as a Standalon
|
|||
|
||||
With the value ``localtime`` the dom0 ``timezone`` will be provided to virtual hardware, effectively setting the Windows clock to that of Qubes. With a digit value (negative or positive) the guest clock will have an offset (in seconds) applied relative to UTC.
|
||||
|
||||
7. Reboot Windows. If the VM starts, but does not show any window, then shut down Windows from the Qube manager, wait until it has **really** stopped, and reboot Windows once more.
|
||||
6. Reboot Windows. If the VM starts, but does not show any window, then shut down Windows from the Qube manager, wait until it has **really** stopped, and reboot Windows once more.
|
||||
|
||||
8. Now the system should be up, with QWT running correctly.
|
||||
7. Now the system should be up, with QWT running correctly.
|
||||
|
||||
9. **Windows 7 only:** Optionally enable seamless mode on VM startup. This can be done by setting appropriate values in the Windows registry:
|
||||
8. **Windows 7 only:** Optionally enable seamless mode on VM startup. This can be done by setting appropriate values in the Windows registry:
|
||||
|
||||
- Start the command prompt as administrator, i.e., right click on the Command Prompt icon (All Programs -> Accessories) and choose “Run as administrator”
|
||||
|
||||
|
|
@ -670,6 +672,8 @@ If there is a drive ``D:`` from this earlier installation of Qubes Windows Tools
|
|||
|
||||
- In the Apps and Features display, check again if the Xen drivers are removed. A Xen Bus Package may remain and cannot be removed, but it does not cause harm. Any other Xen drivers should have disappeared.
|
||||
|
||||
In order to avoid Qubes stopping Windows VMs forcefully after QWT was uninstalled, it is advisable to undefine the qrexec control for these VMs. This can be done using the command ``qvm-features <VMNAME> qrexec ""``.
|
||||
|
||||
After successful uninstallation of the PV disk drivers, the disks will appear as QEMU ATA disks.
|
||||
|
||||
**Warning:** The uninstallation of the PV disk drivers may lead Windows to declare that the hardware has changed and that, in consequence, the activation is no longer valid, possibly complaining that the use of the software is no longer lawful. It should be possible to reactivate the software if a valid product key is provided.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue