Merge branch 'patch-23' of https://github.com/deeplow/qubes-doc into deeplow-patch-23

This commit is contained in:
Andrew David Wong 2021-07-10 11:33:47 -07:00
commit 0309e79ca8
No known key found for this signature in database
GPG Key ID: 8CE137352A019A17

View File

@ -44,14 +44,14 @@ significant troubleshooting. You may also find it helpful to consult the
Even on supported hardware, you must ensure that [IOMMU-based
virtualization](https://en.wikipedia.org/wiki/Input%E2%80%93output_memory_management_unit#Virtualization)
is activated in the BIOS. Without it, Qubes OS won't be able to enforce
is activated in the BIOS/UEFI. Without it, Qubes OS won't be able to enforce
isolation. For Intel-based boards, this setting is called Intel Virtualization
for Directed I/O (**Intel VT-d**) and for AMD-based boards, it is called AMD
I/O Virtualization Technology (or simply **AMD-Vi**). This parameter should be
activated in your computer's BIOS, alongside the standard Virtualization
activated in your computer's BIOS/UEFI, alongside the standard Virtualization
(**Intel VT-x**) and AMD Virtualization (**AMD-V**) extensions. This [external
guide](https://web.archive.org/web/20200112220913/https://www.intel.in/content/www/in/en/support/articles/000007139/server-products.html)
made for Intel-based boards can help you figure out how to enter your BIOS to
made for Intel-based boards can help you figure out how to enter your BIOS/UEFI to
locate and activate those settings. If those settings are not nested under the
Advanced tab, you might find them under the Security tab.
@ -132,10 +132,32 @@ settings.
### Getting to the boot screen
Just after you power on your machine, make the Qubes OS medium available to the
computer by inserting your DVD or USB drive. Shortly after the Power-on
self-test (POST) is completed, you should be greeted with the Qubes OS boot
screen.
Booting is the process of starting your computer. In this case instead of
booting the computer normally, we'll want to tell it to boot from the USB
drive to which you just burned the Qubes installer. So just plug the USB
drive into a USB port and follow the next steps.
Then you'll need to power on the computer and immediately press a specific key to
enter a special menu of your computer called the "BIOS" or "UEFI"
(depending on your computer model).
The key to press varies from brand to brand. `Esc`, `Del` and `F10` are
common ones. If you're not sure about the key to press you'll have to view in the
machine's user guide or serch the web for `accessing BIOS/UEFI <COMPUTER_MODEL>`
(replacing with your specific computer model).
The menu will look something like this:
| BIOS (older systems) | UEFI (modern systems) |
|----------------------|-----------------------|
| ![picture of BIOS image of Thinkpad T430](/attachment/doc/Thinkpad-t430-bios-main.jpg) | ![UEFI menu picure](/attachment/doc/uefi.jpeg)|
Within this you'll have to navigate to the boot menu. It can be of two types:
* (a) **a list of devices to boot (starting) from** - in this case you select your USB drive (if you have multiple USB-looking devices, try them all until one works)
* (b) **a list of devices in order** - here you order the boot devices in such a way that the USB drive is the first one.
Then save the configurations and restart your computer. If you're successful in this step after a few seconds you'll be presented with the installer screen:
![Boot screen](/attachment/doc/boot-screen.png)
@ -165,12 +187,6 @@ If **Windows 10** is installed on your machine, you may need to follow specific
instructions to change the boot order. This may require an [advanced
reboot](https://support.microsoft.com/en-us/help/4026206/windows-10-find-safe-mode-and-other-startup-settings).
After the POST, you may have a chance to choose a boot device. You may wish to
select the USB drive or DVD drive as a temporary boot option so that the next
time you boot, your internal storage device will be selected first.
![Boot order](/attachment/doc/boot-order.png)
### The installer home screen
On the first screen, you are asked to select the language that will be used
@ -184,7 +200,7 @@ IOMMU-virtualization is active or not. If the test fails, a window will pop up.
![Unsupported hardware detected](/attachment/doc/unsupported-hardware-detected.png)
Do not panic. It may simply indicate that IOMMU-virtualization hasn't been
activated in the BIOS. Return to the [hardware
activated in the BIOS / UEFI. Return to the [hardware
requirements](#hardware-requirements) section to learn how to activate it. If
the setting is not configured correctly, it means that your hardware won't be
able to leverage some Qubes security features, such as a strict isolation of