[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qubes-users
Subject:    Re: [qubes-users] Additional USB controllers for a laptop expresscard to PCI-slots
From:       "Taiidan () gmx ! com" <Taiidan () gmx ! com>
Date:       2018-10-27 17:27:23
Message-ID: 59fc7419-0d2b-d27a-056b-61768683fbd8 () gmx ! com
[Download RAW message or body]

On 10/24/2018 01:41 AM, 'awokd' via qubes-users wrote:
> 
> 
> Unman:
> > On Mon, Oct 22, 2018 at 10:40:23AM -0300, Franz wrote:
> > > On Mon, Oct 22, 2018 at 10:29 AM unman <unman@thirdeyesecurity.org>
> > > wrote:
> > > 
> > > > On Mon, Oct 22, 2018 at 09:13:46AM -0300, Franz wrote:
> > > > > On Mon, Oct 22, 2018 at 12:42 AM Taiidan@gmx.com <Taiidan@gmx.com>
> > > > wrote:
> > > > > 
> > > > > > No it won't.
> > > > > > 
> > > > > > Expresscard > PCI-e
> > > > > > 
> > > > > > PCI anything WILL NOT WORK - ALL IN SAME IOMMU GROUP.
> > > > > > 
> > > > > > Save money buy one marketed for egpu gaming for $100 or so from bplus
> > > > > > tech taiwan - expresscard>pci-e then buy a Sonnet Allegro Pro
> > > > > > which is
> > > > 4
> > > > > > separate USB controllers which will work fine AS LONG AS YOUR LAPTOPS
> > > > > > ROOT PORTS SUPPORT ACS otherwise it won't work they will all be the
> > > > same
> > > > > > group. I have no idea what laptops do however.
> > > > > > 
> > > > > > 
> > > > > It seems my processor i7 3520m does not support ACS. So this should
> > > > > mean
> > > > > that even if I use 4 different PCI cards, in the best case scenario
> > > > > they
> > > > > can only be assigned to the same VM.
> > > > > 
> > > > > On the same laptop Lenovo x230 a similar problem was that it has two
> > > > native
> > > > > USB controllers, but there is some connection between them so that
> > > > > they
> > > > can
> > > > > only be assigned to the same VM.
> > > > > 
> > > > 
> > > > Not in my experience with x230. Three controllers, and you can separate
> > > > ports on Left and Right between two usbVM.
> > > > 
> > > 
> > > with 3.2 or 4?
> > > I tried various times with 3.2 and it replies something like that it
> > > does
> > > not want to do that because the two controllers are somehow connected
> > > and
> > > therefore there is a security risk isolating them when they are not
> > > really
> > > isolated.
> > > 
> > > But of course you understand all that much better than me Unman :-)
> > > 
> > 
> > Blind leading the blind, I'm afraid.
> > 
> > This is with 4. I'll try it with 3.2.1 in the morning.
> > 
> @taiidan- I based that from some code I saw in Xen that seemed to
> support classic PCI passthrough. See also the last entry on this page
> for example: https://wiki.xen.org/wiki/Xen_PCI_Passthrough. Agree it's
> not the most secure approach with Qubes, if it works at all.

All of the controllers all be in the same IOMMU group in that case due
to a PCI bridge so pointless for what he wants aka separate usb controllers.

-- 
You received this message because you are subscribed to the Google Groups \
"qubes-users" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-users+unsubscribe@googlegroups.com. To post to this group, \
send email to qubes-users@googlegroups.com. To view this discussion on the web visit \
https://groups.google.com/d/msgid/qubes-users/59fc7419-0d2b-d27a-056b-61768683fbd8%40gmx.com.
 For more options, visit https://groups.google.com/d/optout.


[prev in list] [next in list] [prev in thread] [next in thread]