diff --git a/user/downloading-installing-upgrading/installation-guide.md b/user/downloading-installing-upgrading/installation-guide.md index ce983150..0b20a83a 100644 --- a/user/downloading-installing-upgrading/installation-guide.md +++ b/user/downloading-installing-upgrading/installation-guide.md @@ -4,390 +4,389 @@ layout: doc permalink: /doc/installation-guide/ redirect_from: - /en/doc/installation-guide/ -- /doc/installationguide/ -- /wiki/installationguide/ -- /doc/installationguider1/ -- /doc/installationguider2b1/ -- /doc/installationguider2b2/ -- /doc/installationguider2b3/ -- /doc/installationguider2rc1/ -- /doc/installationguider2rc2/ -- /doc/installationguider3.0rc1/ -- /doc/installationguider3.0rc2/ +- /doc/InstallationGuide/ +- /wiki/InstallationGuide/ +- /doc/InstallationGuideR1/ +- /doc/InstallationGuideR2B1/ +- /doc/InstallationGuideR2B2/ +- /doc/InstallationGuideR2B3/ +- /doc/InstallationGuideR2rc1/ +- /doc/InstallationGuideR2rc2/ +- /doc/InstallationGuideR3.0rc1/ +- /doc/InstallationGuideR3.0rc2/ - /doc/live-usb/ ref: 153 -title: installation guide +title: Installation Guide --- -welcome to the qubes os installation guide! this guide will walk you through -the process of installing qubes. please read it carefully and thoroughly, as it -contains important information for ensuring that your qubes os installation is +Welcome to the Qubes OS installation guide! This guide will walk you through +the process of installing Qubes. Please read it carefully and thoroughly, as it +contains important information for ensuring that your Qubes OS installation is functional and secure. -## pre-installation +## Pre-installation -### hardware requirements +### Hardware requirements -qubes os has very specific [system requirements](/doc/system-requirements/). to -ensure compatibility, we strongly recommend using [qubes-certified -hardware](/doc/certified-hardware/). other hardware may require you to perform -significant troubleshooting. you may also find it helpful to consult the -[hardware compatibility list](/hcl/). +Qubes OS has very specific [system requirements](/doc/system-requirements/). To +ensure compatibility, we strongly recommend using [Qubes-certified +hardware](/doc/certified-hardware/). Other hardware may require you to perform +significant troubleshooting. You may also find it helpful to consult the +[Hardware Compatibility List](/hcl/). -even on supported hardware, you must ensure that [iommu-based -virtualization](https://en.wikipedia.org/wiki/input%e2%80%93output_memory_management_unit#virtualization) -is activated in the bios. without it, qubes os won't be able to enforce -isolation. for intel-based boards, this setting is called intel virtualization -for directed i/o (**intel vt-d**) and for amd-based boards, it is called amd -i/o virtualization technology (or simply **amd-vi**). this parameter should be -activated in your computer's bios, alongside the standard virtualization -(**intel vt-x**) and amd virtualization (**amd-v**) extensions. this [external +Even on supported hardware, you must ensure that [IOMMU-based +virtualization](https://en.wikipedia.org/wiki/Input%E2%80%93output_memory_management_unit#Virtualization) +is activated in the BIOS. Without it, Qubes OS won't be able to enforce +isolation. For Intel-based boards, this setting is called Intel Virtualization +for Directed I/O (**Intel VT-d**) and for AMD-based boards, it is called AMD +I/O Virtualization Technology (or simply **AMD-Vi**). This parameter should be +activated in your computer's BIOS, alongside the standard Virtualization +(**Intel VT-x**) and AMD Virtualization (**AMD-V**) extensions. This [external guide](https://web.archive.org/web/20200112220913/https://www.intel.in/content/www/in/en/support/articles/000007139/server-products.html) -made for intel-based boards can help you figure out how to enter your bios to -locate and activate those settings. if those settings are not nested under the -advanced tab, you might find them under the security tab. +made for Intel-based boards can help you figure out how to enter your BIOS to +locate and activate those settings. If those settings are not nested under the +Advanced tab, you might find them under the Security tab. -### copying the iso onto the installation medium +### Copying the ISO onto the installation medium -start by [downloading](/downloads/) a qubes iso. +Start by [downloading](/downloads/) a Qubes ISO. -once the iso has been verified as authentic, you should copy it onto the -installation medium of your choice, such as a dual-layer dvd, a blu-ray disc, -or a usb drive. the size of each qubes iso is available on the +Once the ISO has been verified as authentic, you should copy it onto the +installation medium of your choice, such as a dual-layer DVD, a Blu-ray disc, +or a USB drive. The size of each Qubes ISO is available on the [downloads](/downloads/) page by hovering over the download button. -if you choose to use a usb drive, copy the iso onto the usb device, e.g. using +If you choose to use a USB drive, copy the ISO onto the USB device, e.g. using `dd`: ``` -$ sudo dd if=qubes-rx-x86_64.iso of=/dev/sdy status=progress bs=1048576 && sync +$ sudo dd if=Qubes-RX-x86_64.iso of=/dev/sdY status=progress bs=1048576 && sync ``` -change `qubes-rx-x86_64.iso` to the filename of the version you're installing, -and change `/dev/sdy` to the correct target device e.g., `/dev/sdc`). make sure +Change `Qubes-RX-x86_64.iso` to the filename of the version you're installing, +and change `/dev/sdY` to the correct target device e.g., `/dev/sdc`). Make sure to write to the entire device (e.g., `/dev/sdc`) rather than just a single partition (e.g., `/dev/sdc1`). -on windows, you can use the [rufus](https://rufus.akeo.ie/) tool to write the -iso to a usb key. mediatest is not recommended. be sure to select "dd image" -mode (*after* selecting the qubes iso): +On Windows, you can use the [Rufus](https://rufus.akeo.ie/) tool to write the +ISO to a USB key. MediaTest is not recommended. Be sure to select "DD image" +mode (*after* selecting the Qubes ISO): -![rufus menu](/attachment/doc/rufus-menu.png) +![Rufus menu](/attachment/doc/rufus-menu.png) -![rufus dd image mode](/attachment/doc/rufus-dd-image-mode.png) +![Rufus DD image mode](/attachment/doc/rufus-dd-image-mode.png) -if you are an advanced user, and you would like to customize your installation, -please see [custom installation](/doc/custom-install/). otherwise, follow the +If you are an advanced user, and you would like to customize your installation, +please see [custom installation](/doc/custom-install/). Otherwise, follow the instructions below. -## installation +## Installation -this section will demonstrate a simple installation using mostly default +This section will demonstrate a simple installation using mostly default settings. -### getting to the boot screen +### Getting to the boot screen -just after you power on your machine, make the qubes os medium available to the -computer by inserting your dvd or usb drive. shortly after the power-on -self-test (post) is completed, you should be greeted with the qubes os boot +Just after you power on your machine, make the Qubes OS medium available to the +computer by inserting your DVD or USB drive. Shortly after the Power-on +self-test (POST) is completed, you should be greeted with the Qubes OS boot screen. -![boot screen](/attachment/doc/boot-screen.png) +![Boot screen](/attachment/doc/boot-screen.png) -from here, you can navigate the boot screen using the arrow keys on your -keyboard. pressing the "tab" key will reveal options. you can choose one of +From here, you can navigate the boot screen using the arrow keys on your +keyboard. Pressing the "Tab" key will reveal options. You can choose one of three options: -* install qubes os -* test this media and install qubes os -* troubleshooting +* Install Qubes OS +* Test this media and install Qubes OS +* Troubleshooting -select the option to test this media and install qubes os. +Select the option to test this media and install Qubes OS. -if the boot screen does not appear, there are several options to troubleshoot. -first, try rebooting your computer. if it still loads your currently installed +If the boot screen does not appear, there are several options to troubleshoot. +First, try rebooting your computer. If it still loads your currently installed operating system or does not detect your installation medium, make sure the -boot order is set up appropriately. the process to change the boot order varies +boot order is set up appropriately. The process to change the boot order varies depending on the currently installed system and the motherboard manufacturer. -if **windows 10** is installed on your machine, you may need to follow specific -instructions to change the boot order. this may require an [advanced +If **Windows 10** is installed on your machine, you may need to follow specific +instructions to change the boot order. This may require an [advanced reboot](https://support.microsoft.com/en-us/help/4026206/windows-10-find-safe-mode-and-other-startup-settings). -after the post, you may have a chance to choose a boot device. you may wish to -select the usb drive or dvd drive as a temporary boot option so that the next +After the POST, you may have a chance to choose a boot device. You may wish to +select the USB drive or DVD drive as a temporary boot option so that the next time you boot, your internal storage device will be selected first. -![boot order](/attachment/doc/boot-order.png) +![Boot order](/attachment/doc/boot-order.png) -### the installer home screen +### The installer home screen -on the first screen, you are asked to select the language that will be used -during the installation process. when you are done, select **continue**. +On the first screen, you are asked to select the language that will be used +during the installation process. When you are done, select **Continue**. ![welcome](/attachment/doc/welcome-to-qubes-os-installation-screen.png) -prior to the next screen, a compatibility test runs to check whether -iommu-virtualization is active or not. if the test fails, a window will pop up. +Prior to the next screen, a compatibility test runs to check whether +IOMMU-virtualization is active or not. If the test fails, a window will pop up. -![unsupported hardware detected](/attachment/doc/unsupported-hardware-detected.png) +![Unsupported hardware detected](/attachment/doc/unsupported-hardware-detected.png) -do not panic. it may simply indicate that iommu-virtualization hasn't been -activated in the bios. return to the [hardware -requirements](#hardware-requirements) section to learn how to activate it. if +Do not panic. It may simply indicate that IOMMU-virtualization hasn't been +activated in the BIOS. Return to the [hardware +requirements](#hardware-requirements) section to learn how to activate it. If the setting is not configured correctly, it means that your hardware won't be -able to leverage some qubes security features, such as a strict isolation of -the networking and usb hardware. +able to leverage some Qubes security features, such as a strict isolation of +the networking and USB hardware. -if the test passes, you will reach the installation summary screen. the -installer loads xen right at the beginning. if you can see the installer's +If the test passes, you will reach the installation summary screen. The +installer loads Xen right at the beginning. If you can see the installer's graphical screen, and you pass the compatibility check that runs immediately -afterward, qubes os is likely to work on your system! +afterward, Qubes OS is likely to work on your system! -like fedora, qubes os uses the anaconda installer. those that are familiar with -rpm-based distributions should feel at home. +Like Fedora, Qubes OS uses the Anaconda installer. Those that are familiar with +RPM-based distributions should feel at home. -### installation summary +### Installation summary -the installation summary screen allows you to change how the system will be -installed and configured, including localization settings. at minimum, you are -required to select the storage device on which qubes os will be installed. +The Installation summary screen allows you to change how the system will be +installed and configured, including localization settings. At minimum, you are +required to select the storage device on which Qubes OS will be installed. -![installation summary not ready](/attachment/doc/installation-summary-not-ready.png) +![Installation summary not ready](/attachment/doc/installation-summary-not-ready.png) -### localization +### Localization -let's assume you wish to add a german keyboard layout. go to keyboard layout, -press the "plus" symbol, search for "german" as indicated in the screenshot and -press "add". if you want it be your default language, select the "german" entry -in the list and press the arrow button. click on "done" in the upper left +Let's assume you wish to add a German keyboard layout. Go to Keyboard Layout, +press the "Plus" symbol, search for "German" as indicated in the screenshot and +press "Add". If you want it be your default language, select the "German" entry +in the list and press the arrow button. Click on "Done" in the upper left corner, and you're ready to go! -![keyboard layout selection](/attachment/doc/keyboard-layout-selection.png) +![Keyboard layout selection](/attachment/doc/keyboard-layout-selection.png) -the process to select a new language is similar to the process to select a new -keyboard layout. follow the same process in the "language support" entry. +The process to select a new language is similar to the process to select a new +keyboard layout. Follow the same process in the "Language Support" entry. -![language support selection](/attachment/doc/language-support-selection.png) +![Language support selection](/attachment/doc/language-support-selection.png) -you can have as many keyboard layout and languages as you want. post-install, +You can have as many keyboard layout and languages as you want. Post-install, you will be able to switch between them and install others. -don't forget to select your time and date by clicking on the time & date entry. +Don't forget to select your time and date by clicking on the Time & Date entry. -![time and date](/attachment/doc/time-and-date.png) +![Time and date](/attachment/doc/time-and-date.png) -### software +### Software -![add-ons](/attachment/doc/add-ons.png) +![Add-ons](/attachment/doc/add-ons.png) -on the software selection tab, you can choose which software to install in -qubes os. two options are available: +On the software selection tab, you can choose which software to install in +Qubes OS. Two options are available: -* **debian:** select this option if you would like to use - [debian](/doc/templates/debian/) qubes in addition to the default fedora +* **Debian:** Select this option if you would like to use + [Debian](/doc/templates/debian/) qubes in addition to the default Fedora qubes. -* **whonix:** select this option if you would like to use - [whonix](/doc/whonix/) qubes. whonix allows you to use - [tor](https://www.torproject.org/) securely within qubes. +* **Whonix:** Select this option if you would like to use + [Whonix](/doc/whonix/) qubes. Whonix allows you to use + [Tor](https://www.torproject.org/) securely within Qubes. -whonix lets you route some or all of your network traffic through tor for -greater privacy. depending on your threat model, you may need to install whonix +Whonix lets you route some or all of your network traffic through Tor for +greater privacy. Depending on your threat model, you may need to install Whonix templates right away. -regardless of your choices on this screen, you will always be able to install -these and other [templates](/doc/templates/) later. if you're short on disk +Regardless of your choices on this screen, you will always be able to install +these and other [templates](/doc/templates/) later. If you're short on disk space, you may wish to deselect these options. -by default, qubes os comes preinstalled with the lightweight xfce4 desktop -environment. other desktop environments will be available to you after the +By default, Qubes OS comes preinstalled with the lightweight Xfce4 desktop +environment. Other desktop environments will be available to you after the installation is completed, though they may not be officially supported (see -[advanced topics](/doc/#advanced-topics)). +[Advanced Topics](/doc/#advanced-topics)). -press **done** to go back to the installation summary screen. +Press **Done** to go back to the installation summary screen. -### installation destination +### Installation destination -under the system section, you must choose the installation destination. select -the storage device on which you would like to install qubes os. +Under the System section, you must choose the installation destination. Select +the storage device on which you would like to install Qubes OS. -your installation destination can be an internal or external storage drive, -such as an ssd, hdd, or usb drive. the installation destination must have a -least 32 gib of free space available. +Your installation destination can be an internal or external storage drive, +such as an SSD, HDD, or USB drive. The installation destination must have a +least 32 GiB of free space available. -installing an operating system onto a usb drive can be a convenient way to try -qubes. however, usb drives are typically much slower than internal ssds. we -recommend a very fast usb 3.0 drive for decent performance. please note that a -minimum storage of 32 gib is required. if you want to install qubes os onto a -usb drive, just select the usb device as the target installation device. bear +Installing an operating system onto a USB drive can be a convenient way to try +Qubes. However, USB drives are typically much slower than internal SSDs. We +recommend a very fast USB 3.0 drive for decent performance. Please note that a +minimum storage of 32 GiB is required. If you want to install Qubes OS onto a +USB drive, just select the USB device as the target installation device. Bear in mind that the installation process is likely to take longer than it would on an internal storage device. -![select storage device](/attachment/doc/select-storage-device.png) +![Select storage device](/attachment/doc/select-storage-device.png) -as soon as you press **done**, the installer will ask you to enter a passphrase -for disk encryption. the passphrase should be complex. make sure that your -keyboard layout reflects what keyboard you are actually using. when you're -finished, press **done**. +As soon as you press **Done**, the installer will ask you to enter a passphrase +for disk encryption. The passphrase should be complex. Make sure that your +keyboard layout reflects what keyboard you are actually using. When you're +finished, press **Done**. -![select storage passhprase](/attachment/doc/select-storage-passphrase.png) +![Select storage passhprase](/attachment/doc/select-storage-passphrase.png) -when you're ready, press **begin installation**. +When you're ready, press **Begin Installation**. -![installation summary ready](/attachment/doc/installation-summary-ready.png) +![Installation summary ready](/attachment/doc/installation-summary-ready.png) -### create your user account +### Create your user account -while the installation process is running, you can create your user account. -this is what you'll use to log in after disk decryption and when unlocking the -screen locker. this is a purely local, offline account in dom0. by design, -qubes os is a single-user operating system, so this is just for you. +While the installation process is running, you can create your user account. +This is what you'll use to log in after disk decryption and when unlocking the +screen locker. This is a purely local, offline account in dom0. By design, +Qubes OS is a single-user operating system, so this is just for you. -select **user creation** to define a new user with administrator privileges and -a password. just as for the disk encryption, this password should be complex. -the root account is deactivated and should remain as such. +Select **User Creation** to define a new user with administrator privileges and +a password. Just as for the disk encryption, this password should be complex. +The root account is deactivated and should remain as such. -![account name and password](/attachment/doc/account-name-and-password.png) +![Account name and password](/attachment/doc/account-name-and-password.png) -when the installation is complete, press **reboot**. don't forget to remove the +When the installation is complete, press **Reboot**. Don't forget to remove the installation medium, or else you may end up seeing the installer boot screen again. -## post-installation +## Post-installation -### first boot +### First boot -if the installation was successful, you should now see the grub menu during the +If the installation was successful, you should now see the GRUB menu during the boot process. -![grub boot menu](/attachment/doc/grub-boot-menu.png) +![Grub boot menu](/attachment/doc/grub-boot-menu.png) -just after this screen, you will be asked to enter your encryption passphrase. +Just after this screen, you will be asked to enter your encryption passphrase. -![unlock storage device screen](/attachment/doc/unlock-storage-device-screen.png) +![Unlock storage device screen](/attachment/doc/unlock-storage-device-screen.png) -### initial setup +### Initial Setup -you're almost done. before you can start using qubes os, some configuration is +You're almost done. Before you can start using Qubes OS, some configuration is needed. -![initial setup menu](/attachment/doc/initial-setup-menu.png) +![Initial setup menu](/attachment/doc/initial-setup-menu.png) -by default, the installer will create a number of qubes (depending on the -options you selected during the installation process). these are designed to +By default, the installer will create a number of qubes (depending on the +options you selected during the installation process). These are designed to give you a more ready-to-use environment from the get-go. -![initial setup menu configuration](/attachment/doc/initial-setup-menu-configuration.png) +![Initial setup menu configuration](/attachment/doc/initial-setup-menu-configuration.png) -let's briefly go over the options: +Let's briefly go over the options: -* **create default system qubes:** - these are the core components of the system, required for things like +* **Create default system qubes:** + These are the core components of the system, required for things like internet access. -* **create default application qubes:** - these are how you compartmentalize your digital life. there's nothing special - about the ones the installer creates. they're just suggestions that apply to - most people. if you decide you don't want them, you can always delete them +* **Create default application qubes:** + These are how you compartmentalize your digital life. There's nothing special + about the ones the installer creates. They're just suggestions that apply to + most people. If you decide you don't want them, you can always delete them later, and you can always create your own. -* **create whonix gateway and workstation qubes:** - if you want to use whonix, you should select this option. - * **enabling system and template updates over the tor anonymity network using whonix:** - if you select this option, then whenever you install or update software in - dom0 or a template, the internet traffic will go through tor. -* **create usb qube holding all usb controllers:** - just like the network qube for the network stack, the usb qube isolates the - usb controllers. - * **use sys-net qube for both networking and usb devices:** - you should select this option if you rely on a usb device for network access, - such as a usb modem or a usb wi-fi adapter. +* **Create Whonix Gateway and Workstation qubes:** + If you want to use Whonix, you should select this option. + * **Enabling system and template updates over the Tor anonymity network using Whonix:** + If you select this option, then whenever you install or update software in + dom0 or a template, the internet traffic will go through Tor. +* **Create USB qube holding all USB controllers:** + Just like the network qube for the network stack, the USB qube isolates the + USB controllers. + * **Use sys-net qube for both networking and USB devices:** + You should select this option if you rely on a USB device for network access, + such as a USB modem or a USB Wi-Fi adapter. * **Do not configure anything:** This is for very advanced users only. If you select this option, you'll have to set everything up manually afterward. @@ -452,8 +451,8 @@ report](/doc/hcl/#generating-and-submitting-new-reports). ### Get Started -See [How to Get Started](/doc/how-to-get-started/) with Qubes, check out the -[How-to Guides](/doc/#how-to-guides), and learn about +Find out [How to Get Started](/doc/how-to-get-started/) with Qubes, check out +the other [How-to Guides](/doc/#how-to-guides), and learn about [Templates](/doc/#templates). ## Getting help