provide GUI mechanism (Qubes Manager, Settings, etc) for enabling USB keyboard

[mfc]

I couldn't find a ticket tracking this. The options available to the user for enabling USB keyboard should be available to the user through a GUI, with appropriate warning.

[jpouellet]

Here's some more wishful thinking:

Even better would be to detect how the keyboard is attached during install and set this automatically. I have had friends reinstall without sys-usb because they were unable to enable it without a working keyboard with which to do so.

Additionally, some informative message could be shown during install or on first boot stating that this is the case on your system, and pointing them to the security warning in the docs about usb keyboards making sys-usb more trusted (or perhaps duplicate the warning directly in a message rather than point them at the docs).

Yes, input from sys-usb is not without danger, but I believe it's in people's best interest to have a system with a high-liability sys-usb (and be informed of that) than to have their initial Qubes install not have any way of giving input to dom0. See also #2736

[mfc]

I would make that a separate ticket.

[marmarta]

So, this is in the new global config tool (no CLI needed), closing this.