Qubes: Difference between revisions
From Legoktm
(→Config: DPI scaling guide) |
|||
(23 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
Note: after restoring from a backup make sure to recreate the templates from the base again to save disk space because of copy-on-write. |
|||
== VMs == |
== VMs == |
||
* DD ( |
* DD (km-d11) |
||
* media (km- |
* media (km-f34) |
||
** flatpak: |
** flatpak: handbrake, kdenlive, picard |
||
* personal (km- |
* personal (km-f34) |
||
** flatpak: Signal |
** flatpak: Signal, xournalpp, hexchat, runelite, dolphinemu |
||
* fopf (km- |
* fopf (km-f34) |
||
* school (km- |
* school (km-f34) |
||
* dev (km- |
* dev (km-f33-dev) |
||
* |
* gpg (km-f34) |
||
** firewall only allows ssh to bast4002.wikimedia.org |
|||
* gpg (km-fedora-30) |
|||
** no network |
** no network |
||
* vault (km- |
* vault (km-f34-vault) |
||
** no network |
** no network |
||
* vault-gpg (fedora- |
* vault-gpg (fedora-34) |
||
** no network |
** no network |
||
* sys-mullvad-vpn (fedora-34) |
|||
** see [https://micahflee.com/2019/11/using-mullvad-in-qubes/ Micah's setup guide] |
|||
== Template VMs == |
== Template VMs == |
||
* |
* km-d11: fork: |
||
** (from backports) devscripts git-buildpackage dput-ng |
|||
* debian-10: modified: |
|||
** |
** command-not-found gitk git-cola webext-ublock-origin webext-https-everywhere dh-php php-dev lintian-brush dh-buildinfo apache2-dev ack webext-privacy-badger ubuntu-dev-tools pkg-kde-tools dh-python cython3 python3-setuptools neomutt vlc gnome-system-monitor curl php-mbstring php-intl php-sqlite3 php-apcu python3-isort python3-sphinx |
||
* fedora- |
* fedora-34: upstream |
||
* |
* km-f34: fork: |
||
* km-fedora-30: fork: |
|||
** enabled rpmfusion |
** enabled rpmfusion |
||
*** <code>sudo dnf config-manager --set-enabled rpmfusion-free</code> |
|||
** nextcloud-client-nautilus mozilla-https-everywhere mozilla-ublock-origin nano tree ack libgnome-keyring libreoffice quassel-client shotwell filezilla hugin mozilla-privacy-badger keepassxc pcsc-tools ffmpeg vlc |
|||
*** <code>sudo dnf config-manager --set-enabled rpmfusion-free-updates</code> |
|||
* km-fedora-30-dev: |
|||
** enabled pycharm-community, vscodium |
|||
** ack atom composer docker-ce fish git-cola gitk jq mosh mozilla-https-everywhere mozilla-privacy-badger mozilla-ublock-origin nano netxcloud-client-nautilus npm php pipenv podman pycharm-community python3-pyside python3-tox python34 python35 python36 python38 quassel-client tree |
|||
** fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.5 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community vscodium |
|||
* km-f34-vault: (fork of minimal) |
|||
** nano keepassxc qubes-gpg-split pinentry-gtk |
|||
== Config == |
== Config == |
||
Line 43: | Line 47: | ||
** <code>dev gpg allow</code> |
** <code>dev gpg allow</code> |
||
** <code>personal gpg allow</code> |
** <code>personal gpg allow</code> |
||
Follow https://github.com/Qubes-Community/Contents/blob/master/docs/customization/dpi-scaling.md for getting it to work with my 4k display. |
|||
== dom0 == |
|||
Appearance -> Style -> Adwaita-dark |
|||
In <code>/etc/qubes/guid.conf</code>: |
|||
<pre> |
|||
secure_copy_sequence = "Mod4-c"; |
|||
secure_paste_sequence = "Mod4-v"; |
|||
</pre> |
|||
== Helper scripts == |
|||
<code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x |
<code>/usr/local/bin/vault</code>, mapped to ctrl+shift+x |
||
<pre> |
<pre> |
||
Line 50: | Line 63: | ||
exec qvm-run vault keepassxc |
exec qvm-run vault keepassxc |
||
</pre> |
</pre> |
||
Clock format: <code>%a %F %r</code> |
|||
Redshift, following https://www.bryceguinta.me/install-configure-and-autostart-redshift-on-qubes-40.html, except place the config file at <code>~/redshift.conf</code> so it gets included in dom0 backups and use Settings -> Session and Startup to add the autostart entry. |
Revision as of 07:04, 27 December 2021
Note: after restoring from a backup make sure to recreate the templates from the base again to save disk space because of copy-on-write.
VMs
- DD (km-d11)
- media (km-f34)
- flatpak: handbrake, kdenlive, picard
- personal (km-f34)
- flatpak: Signal, xournalpp, hexchat, runelite, dolphinemu
- fopf (km-f34)
- school (km-f34)
- dev (km-f33-dev)
- gpg (km-f34)
- no network
- vault (km-f34-vault)
- no network
- vault-gpg (fedora-34)
- no network
- sys-mullvad-vpn (fedora-34)
Template VMs
- km-d11: fork:
- (from backports) devscripts git-buildpackage dput-ng
- command-not-found gitk git-cola webext-ublock-origin webext-https-everywhere dh-php php-dev lintian-brush dh-buildinfo apache2-dev ack webext-privacy-badger ubuntu-dev-tools pkg-kde-tools dh-python cython3 python3-setuptools neomutt vlc gnome-system-monitor curl php-mbstring php-intl php-sqlite3 php-apcu python3-isort python3-sphinx
- fedora-34: upstream
- km-f34: fork:
- enabled rpmfusion
sudo dnf config-manager --set-enabled rpmfusion-free
sudo dnf config-manager --set-enabled rpmfusion-free-updates
- enabled pycharm-community, vscodium
- fuse-exfat exfat-utils chromium ffmpeg vlc pcsc-tools mozilla-privacy-badger filezilla shotwell youtube-dl libreoffice libgnome-keyring tree ack nano mozilla-https-everywhere mozilla-ublock-origin nextcloud-client-nautilus quassel-client mosh mono-core mono-devel mono-locale-extras mediainfo curl transmission-gtk fish python3 python3.5 python3.6 python3.7 python3.8 python3.9 python3.10 composer php-cli php-mysqli git-cola gitk podman pycharm-community vscodium
- enabled rpmfusion
- km-f34-vault: (fork of minimal)
- nano keepassxc qubes-gpg-split pinentry-gtk
Config
/etc/qubes-rpc/policy/qubes.InputKeyboard
sys-usb dom0 ask,default_target=dom0
/etc/qubes-rpc/policy/qubes.InputTablet
sys-usb dom0 allow
/etc/qubes-rpc/policy/qubes.Gpg
DD gpg allow
dev gpg allow
personal gpg allow
/etc/qubes-rpc/policy/qubes.GpgImportKey
DD gpg allow
dev gpg allow
personal gpg allow
Follow https://github.com/Qubes-Community/Contents/blob/master/docs/customization/dpi-scaling.md for getting it to work with my 4k display.
dom0
Appearance -> Style -> Adwaita-dark
In /etc/qubes/guid.conf
:
secure_copy_sequence = "Mod4-c"; secure_paste_sequence = "Mod4-v";
/usr/local/bin/vault
, mapped to ctrl+shift+x
#!/bin/sh exec qvm-run vault keepassxc
Clock format: %a %F %r
Redshift, following https://www.bryceguinta.me/install-configure-and-autostart-redshift-on-qubes-40.html, except place the config file at ~/redshift.conf
so it gets included in dom0 backups and use Settings -> Session and Startup to add the autostart entry.