ledger Ledger Metamask QubesOS

[buzzkillb]

How to get Ledger and Metamask running on QubesOS.

A reference to all of this. https://www.whonix.org/wiki/Ledger_Hardware_Wallet

The idea is to install chromium on a clean Debian, I like to clone an original templatevm so clone debian-10 to debian-10-crypto
go to debian-10-crypto terminal
sudo apt update
sudo apt upgrade
sudo apt chromium

then we want to edit a rules file

sudo adduser user plugdev
sudo nano /etc/udev/rules.d/20-hw1.rules

and paste this in

SUBSYSTEMS=="usb", ATTRS{idVendor}=="2581", ATTRS{idProduct}=="1b7c", MODE="0660", OWNER="user", GROUP="plugdev"
SUBSYSTEMS=="usb", ATTRS{idVendor}=="2581", ATTRS{idProduct}=="2b7c", MODE="0660", OWNER="user", GROUP="plugdev"
SUBSYSTEMS=="usb", ATTRS{idVendor}=="2581", ATTRS{idProduct}=="3b7c", MODE="0660", OWNER="user", GROUP="plugdev"
SUBSYSTEMS=="usb", ATTRS{idVendor}=="2581", ATTRS{idProduct}=="4b7c", MODE="0660", OWNER="user", GROUP="plugdev"
SUBSYSTEMS=="usb", ATTRS{idVendor}=="2581", ATTRS{idProduct}=="1807", MODE="0660", OWNER="user", GROUP="plugdev"
SUBSYSTEMS=="usb", ATTRS{idVendor}=="2581", ATTRS{idProduct}=="1808", MODE="0660", OWNER="user", GROUP="plugdev"
SUBSYSTEMS=="usb", ATTRS{idVendor}=="2c97", ATTRS{idProduct}=="0000", MODE="0660", OWNER="user", GROUP="plugdev"
SUBSYSTEMS=="usb", ATTRS{idVendor}=="2c97", ATTRS{idProduct}=="0001", MODE="0660", OWNER="user", GROUP="plugdev"

KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0660", OWNER="user", GROUP="plugdev", ATTRS{idVendor}=="2c97"
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0660", OWNER="user", GROUP="plugdev", ATTRS{idVendor}=="2581"

shutdown debian-10-crypto completely

Create AppVM (This is where you will run Ledger Live, Metamask and Chromium)

Go to Qube Manager -> Qube -> Create new qube

Name: ledger-VM
Type: Qube based on a template (AppVM)
Template: debian-10-crypto
networking: default (sys-firewall) or sys-whonix, or a vpn if you setup a vpn network qube
checkmark: launch settings after creation
Give this a color

In settings, I give some more hard drive space, also go to applications tab and bring the chromium app into the right so its easier to load

Run Chromium from this new appVM, type in metamask.io and download the chromium plugin. Setup metamask like usual with new seed or import seed.

In metamask you want to get to the menu that says Connect Hardware Wallet. Go there and click the Ledger Icon. Now plug your Ledger in and go to Ethereum app on the device. Pass the usb ledger device through to ledger-VM. I just use the Qubes Devices icon at the top right . Wait about 10 seconds or so and then click connect in metamask. You should see your addresses pop up to use.

An easy way to use Ledger Live in this same Qube is by downloading the app from Ledger https://www.ledger.com/ledger-live/download, go into terminal to the Downloads folder and chmod +x the appimage and run that. Do similar as above to connect but instead of going to Ethereum on the device, just stay on the main screen. I would unplug Ledger from usb, plug back in, go to main screen, then pass the USB through to ledger-VM. If wanting to use Metamask after. I unplugged device from USB, plug back in and go into Ethereum app and then pass the USB through.

Don't forget to checkout https://ari.finance/ and enable smart contracts on your Ledger.

[wtf72]

Got this to work for the most part.  For some reason it sees the ledger when trying to add accounts in ledger live but then goes back to the connect a ledger device.  It loads the app I want to add into live but then looses communication or something with the ledger.  Anyone else run across this?

[buzzkillb]

8 hours ago, wtf72 said:

Got this to work for the most part.  For some reason it sees the ledger when trying to add accounts in ledger live but then goes back to the connect a ledger device.  It loads the app I want to add into live but then looses communication or something with the ledger.  Anyone else run across this?

Ledger is just a pita on Qubes. I know some will say its easy, But I found I had to pay attention to how its connecting and follow the same steps so it wouldn't do what you are saying. I know not helpful yet, but about to set this up on a clean install to try this out again and see if I run into that issue.