Qubes
From Legoktm
VMs
- DD (km-d10-dev)
- media (km-f32)
- flatpak: handbrake, kdenlive, picard
- personal (km-f32)
- flatpak: Signal, xournalpp, hexchat, runelite, dolphinemu
- fopf (km-f32)
- school (km-f32)
- dev (km-f31-dev)
- wm-ssh (fedora-32)
- firewall only allows ssh to bast4002.wikimedia.org
- gpg (km-f32)
- no network
- vault (km-f32-vault)
- no network
- vault-gpg (fedora-32)
- no network
- sys-riseup-vpn (km-d10-leap)
- see Qubes/riseup-vpn setup guide
Template VMs
- km-d10-dev: fork:
- devscripts git-buildpackage dput-ng command-not-found gitk git-cola gir1.2-vte-2.91 (reportbug-gtk dep) webext-ublock-origin webext-https-everywhere dh-php php-dev lintian-brush lintian (from backports) dh-buildinfo apache2-dev ack
- fedora-32: upstream
- km-f32: fork:
- enabled rpmfusion
- fuse-exfat exfat-utils chromium ffmpeg vlc inkscape pcsc-tools mozilla-privacy-badger hugin filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk
- km-f31-dev:
- enabled codium, pycharm-community
- quassel-client mozilla-https-everywhere mozilla-ublock-origin python3 python3.5 python3.6 python3.8 python3.9 composer php npm tox fish pipenv git-cola gitk podman nano tree ack jq python3-pyside mosh mozilla-privacy-badger ffmpeg php-apcu ruby bind-utils devscripts poetry twine sqlite pycharm-community codium golang toolbox fpaste openssl-devel g++ vlc sqlite-devel php-gmp
- km-f33-vault: (fork of minimal)
- nano keepassxc qubes-gpg-split pinentry-gtk
Config
/etc/qubes-rpc/policy/qubes.InputKeyboard
sys-usb dom0 ask,default_target=dom0
/etc/qubes-rpc/policy/qubes.InputTablet
sys-usb dom0 allow
/etc/qubes-rpc/policy/qubes.Gpg
DD gpg allow
dev gpg allow
personal gpg allow
/etc/qubes-rpc/policy/qubes.GpgImportKey
DD gpg allow
dev gpg allow
personal gpg allow
dom0
/usr/local/bin/vault
, mapped to ctrl+shift+x
#!/bin/sh exec qvm-run vault keepassxc
Clock format: %a %F %r
Redshift, following https://www.bryceguinta.me/install-configure-and-autostart-redshift-on-qubes-40.html