mirror of
https://github.com/QubesOS/qubes-doc.git
synced 2024-10-01 01:25:40 -04:00
Fix and improve installation guide (#1172)
- Improve language - Fix image links - Explain BIOS and UEFI, provide links - Fill in missing steps and information gaps - Standardize grammar and punctuation - Improve formatting - Clarify instructions and explanations
This commit is contained in:
Andrew David Wong
parent
0309e79ca8
commit
380e7b43b9
@ -33,7 +33,8 @@ functional and secure.
|
||||
<b>Warning:</b> Qubes has no control over what happens on your computer
|
||||
before you install it. No software can provide security if it is installed on
|
||||
compromised hardware. Do not install Qubes on a computer you don't trust.
|
||||
See <a href="/doc/install-security/">installation security</a> for more information.
|
||||
See <a href="/doc/install-security/">installation security</a> for more
|
||||
information.
|
||||
</div>
|
||||
|
||||
Qubes OS has very specific [system requirements](/doc/system-requirements/). To
|
||||
@ -44,16 +45,17 @@ significant troubleshooting. You may also find it helpful to consult the
|
||||
|
||||
Even on supported hardware, you must ensure that [IOMMU-based
|
||||
virtualization](https://en.wikipedia.org/wiki/Input%E2%80%93output_memory_management_unit#Virtualization)
|
||||
is activated in the BIOS/UEFI. Without it, Qubes OS won't be able to enforce
|
||||
is activated in the BIOS or UEFI. Without it, Qubes OS won't be able to enforce
|
||||
isolation. For Intel-based boards, this setting is called Intel Virtualization
|
||||
for Directed I/O (**Intel VT-d**) and for AMD-based boards, it is called AMD
|
||||
I/O Virtualization Technology (or simply **AMD-Vi**). This parameter should be
|
||||
activated in your computer's BIOS/UEFI, alongside the standard Virtualization
|
||||
(**Intel VT-x**) and AMD Virtualization (**AMD-V**) extensions. This [external
|
||||
activated in your computer's BIOS or UEFI, alongside the standard
|
||||
Virtualization (**Intel VT-x**) and AMD Virtualization (**AMD-V**) extensions.
|
||||
This [external
|
||||
guide](https://web.archive.org/web/20200112220913/https://www.intel.in/content/www/in/en/support/articles/000007139/server-products.html)
|
||||
made for Intel-based boards can help you figure out how to enter your BIOS/UEFI to
|
||||
locate and activate those settings. If those settings are not nested under the
|
||||
Advanced tab, you might find them under the Security tab.
|
||||
made for Intel-based boards can help you figure out how to enter your BIOS or
|
||||
UEFI to locate and activate those settings. If those settings are not nested
|
||||
under the Advanced tab, you might find them under the Security tab.
|
||||
|
||||
<div class="alert alert-warning" role="alert">
|
||||
<i class="fa fa-exclamation-circle"></i>
|
||||
@ -117,9 +119,9 @@ mode (*after* selecting the Qubes ISO):
|
||||
without MediaTest, which is not recommended.
|
||||
</div>
|
||||
|
||||
|
||||
[](/attachment/doc/rufus-menu.png)
|
||||
|
||||
|
||||
[](/attachment/doc/rufus-dd-image-mode.png)
|
||||
|
||||
If you are an advanced user, and you would like to customize your installation,
|
||||
please see [custom installation](/doc/custom-install/). Otherwise, follow the
|
||||
@ -132,34 +134,59 @@ settings.
|
||||
|
||||
### Getting to the boot screen
|
||||
|
||||
Booting is the process of starting your computer. In this case instead of
|
||||
booting the computer normally, we'll want to tell it to boot from the USB
|
||||
drive to which you just burned the Qubes installer. So just plug the USB
|
||||
drive into a USB port and follow the next steps.
|
||||
"Booting" is the process of starting your computer. When a computer boots up,
|
||||
it first runs low-level software before the main operating system. Depending on
|
||||
the computer, this low-level software is may be called the
|
||||
["BIOS"](https://en.wikipedia.org/wiki/BIOS) or
|
||||
["UEFI"](https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface).
|
||||
|
||||
Then you'll need to power on the computer and immediately press a specific key to
|
||||
enter a special menu of your computer called the "BIOS" or "UEFI"
|
||||
(depending on your computer model).
|
||||
Since you're installing Qubes OS, you'll need to access your computer's BIOS or
|
||||
UEFI menu so that you can tell it to boot from the USB drive to which you just
|
||||
copied the Qubes installer ISO.
|
||||
|
||||
The key to press varies from brand to brand. `Esc`, `Del` and `F10` are
|
||||
common ones. If you're not sure about the key to press you'll have to view in the
|
||||
machine's user guide or serch the web for `accessing BIOS/UEFI <COMPUTER_MODEL>`
|
||||
(replacing with your specific computer model).
|
||||
To begin, power off your computer and plug the USB drive into a USB port, but
|
||||
don't press the power button yet. Right after you press the power button,
|
||||
you'll have to immediately press a specific key to enter the BIOS or UEFI menu.
|
||||
The key to press varies from brand to brand. `Esc`, `Del`, and `F10` are common
|
||||
ones. If you're not sure, you can search the web for `<COMPUTER_MODEL> BIOS
|
||||
key` or `<COMPUTER_MODEL> UEFI key` (replacing `<COMPUTER_MODEL>` with your
|
||||
specific computer model) or look it up in your computer's manual.
|
||||
|
||||
The menu will look something like this:
|
||||
Once you know the key to press, press your computer's power button, then
|
||||
repeatedly press that key until you've entered your computer's BIOS or UEFI
|
||||
menu. To give you and idea of what you should be looking for, we've provided a
|
||||
couple of example photos below.
|
||||
|
||||
| BIOS (older systems) | UEFI (modern systems) |
|
||||
|----------------------|-----------------------|
|
||||
|  | |
|
||||
Here's an example of what the BIOS menu looks like on a ThinkPad T430:
|
||||
|
||||
[](/attachment/doc/Thinkpad-t430-bios-main.jpg)
|
||||
|
||||
Within this you'll have to navigate to the boot menu. It can be of two types:
|
||||
* (a) **a list of devices to boot (starting) from** - in this case you select your USB drive (if you have multiple USB-looking devices, try them all until one works)
|
||||
* (b) **a list of devices in order** - here you order the boot devices in such a way that the USB drive is the first one.
|
||||
And here's an example of what a UEFI menu looks like:
|
||||
|
||||
Then save the configurations and restart your computer. If you're successful in this step after a few seconds you'll be presented with the installer screen:
|
||||
[](/attachment/doc/uefi.jpeg)
|
||||
|
||||
|
||||
Once you access your computer's BIOS or UEFI menu, you'll want to go to the
|
||||
"boot menu," which is where you tell your computer which devices to boot from.
|
||||
The goal is to tell the computer to boot from your USB drive so that you can
|
||||
run the Qubes installer. If your boot menu lets you select which device to boot
|
||||
from first, simply select your USB drive. (If you have multiple entries that
|
||||
all look similar to your USB drive, and you're not sure which one is correct,
|
||||
one option is just to try each one until it works.) If, on the other hand, your
|
||||
boot menu presents you with a list of boot devices in order, then you'll want
|
||||
to move your USB drive to the top so that the Qubes installer runs before
|
||||
anything else.
|
||||
|
||||
Once you're done on the boot menu, save your changes. How you do this depends
|
||||
on your BIOS or UEFI, but the instructions should be displayed right there on
|
||||
the screen or in a nearby tab. (If you're not sure whether you've saved your
|
||||
changes correctly, you can always reboot your computer and go back into the
|
||||
boot menu to check whether it still reflects your changes.) Once your BIOS or
|
||||
UEFI is configured the way you want it, reboot your computer. This time, don't
|
||||
press any special keys. Instead, let the BIOS or UEFI load and let your
|
||||
computer boot from your USB drive. If you're successful in this step, after a
|
||||
few seconds you'll be presented with the Qubes installer screen:
|
||||
|
||||
[](/attachment/doc/boot-screen.png)
|
||||
|
||||
<div class="alert alert-info" role="alert">
|
||||
<i class="fa fa-info-circle"></i>
|
||||
@ -192,15 +219,15 @@ reboot](https://support.microsoft.com/en-us/help/4026206/windows-10-find-safe-mo
|
||||
On the first screen, you are asked to select the language that will be used
|
||||
during the installation process. When you are done, select **Continue**.
|
||||
|
||||
|
||||
[](/attachment/doc/welcome-to-qubes-os-installation-screen.png)
|
||||
|
||||
Prior to the next screen, a compatibility test runs to check whether
|
||||
IOMMU-virtualization is active or not. If the test fails, a window will pop up.
|
||||
|
||||
|
||||
[](/attachment/doc/unsupported-hardware-detected.png)
|
||||
|
||||
Do not panic. It may simply indicate that IOMMU-virtualization hasn't been
|
||||
activated in the BIOS / UEFI. Return to the [hardware
|
||||
activated in the BIOS or UEFI. Return to the [hardware
|
||||
requirements](#hardware-requirements) section to learn how to activate it. If
|
||||
the setting is not configured correctly, it means that your hardware won't be
|
||||
able to leverage some Qubes security features, such as a strict isolation of
|
||||
@ -227,7 +254,7 @@ The Installation summary screen allows you to change how the system will be
|
||||
installed and configured, including localization settings. At minimum, you are
|
||||
required to select the storage device on which Qubes OS will be installed.
|
||||
|
||||
|
||||
[](/attachment/doc/installation-summary-not-ready.png)
|
||||
|
||||
### Localization
|
||||
|
||||
@ -237,23 +264,23 @@ press "Add". If you want it be your default language, select the "German" entry
|
||||
in the list and press the arrow button. Click on "Done" in the upper left
|
||||
corner, and you're ready to go!
|
||||
|
||||
|
||||
[](/attachment/doc/keyboard-layout-selection.png)
|
||||
|
||||
The process to select a new language is similar to the process to select a new
|
||||
keyboard layout. Follow the same process in the "Language Support" entry.
|
||||
|
||||
|
||||
[](/attachment/doc/language-support-selection.png)
|
||||
|
||||
You can have as many keyboard layout and languages as you want. Post-install,
|
||||
you will be able to switch between them and install others.
|
||||
|
||||
Don't forget to select your time and date by clicking on the Time & Date entry.
|
||||
|
||||
|
||||
[](/attachment/doc/time-and-date.png)
|
||||
|
||||
### Software
|
||||
|
||||
|
||||
[](/attachment/doc/add-ons.png)
|
||||
|
||||
On the software selection tab, you can choose which software to install in
|
||||
Qubes OS. Two options are available:
|
||||
@ -314,7 +341,7 @@ USB drive, just select the USB device as the target installation device. Bear
|
||||
in mind that the installation process is likely to take longer than it would on
|
||||
an internal storage device.
|
||||
|
||||
|
||||
[](/attachment/doc/select-storage-device.png)
|
||||
|
||||
<div class="alert alert-success" role="alert">
|
||||
<i class="fa fa-check-circle"></i>
|
||||
@ -333,11 +360,11 @@ finished, press **Done**.
|
||||
recover it.
|
||||
</div>
|
||||
|
||||
|
||||
[](/attachment/doc/select-storage-passphrase.png)
|
||||
|
||||
When you're ready, press **Begin Installation**.
|
||||
|
||||
|
||||
[](/attachment/doc/installation-summary-ready.png)
|
||||
|
||||
### Create your user account
|
||||
|
||||
@ -350,7 +377,7 @@ Select **User Creation** to define a new user with administrator privileges and
|
||||
a password. Just as for the disk encryption, this password should be complex.
|
||||
The root account is deactivated and should remain as such.
|
||||
|
||||
|
||||
[](/attachment/doc/account-name-and-password.png)
|
||||
|
||||
When the installation is complete, press **Reboot**. Don't forget to remove the
|
||||
installation medium, or else you may end up seeing the installer boot screen
|
||||
@ -363,24 +390,24 @@ again.
|
||||
If the installation was successful, you should now see the GRUB menu during the
|
||||
boot process.
|
||||
|
||||
|
||||
[](/attachment/doc/grub-boot-menu.png)
|
||||
|
||||
Just after this screen, you will be asked to enter your encryption passphrase.
|
||||
|
||||
|
||||
[](/attachment/doc/unlock-storage-device-screen.png)
|
||||
|
||||
### Initial Setup
|
||||
|
||||
You're almost done. Before you can start using Qubes OS, some configuration is
|
||||
needed.
|
||||
|
||||
|
||||
[](/attachment/doc/initial-setup-menu.png)
|
||||
|
||||
By default, the installer will create a number of qubes (depending on the
|
||||
options you selected during the installation process). These are designed to
|
||||
give you a more ready-to-use environment from the get-go.
|
||||
|
||||
|
||||
[](/attachment/doc/initial-setup-menu-configuration.png)
|
||||
|
||||
Let's briefly go over the options:
|
||||
|
||||
@ -415,11 +442,11 @@ system.
|
||||
After the configuration is done, you will be greeted by the login screen. Enter
|
||||
your password and log in.
|
||||
|
||||
|
||||
[](/attachment/doc/login-screen.png)
|
||||
|
||||
Congratulations, you are now ready to use Qubes OS!
|
||||
|
||||
|
||||
[](/attachment/doc/desktop-menu.png)
|
||||
|
||||
## Next steps
|
||||
|
||||
|
||||
Loading…
Reference in New Issue
Block a user