qubes-doc/installing/installation-guide.md
2018-05-21 21:48:01 -07:00

7.4 KiB

layout title permalink redirect_from
doc Installation Guide /doc/installation-guide/
/en/doc/installation-guide/
/doc/InstallationGuide/
/wiki/InstallationGuide/
/doc/InstallationGuideR1/
/doc/InstallationGuideR2B1/
/doc/InstallationGuideR2B2/
/doc/InstallationGuideR2B3/
/doc/InstallationGuideR2rc1/
/doc/InstallationGuideR2rc2/
/doc/InstallationGuideR3.0rc1/
/doc/InstallationGuideR3.0rc2/

Installation Guide

Warnings

There is a set of known upstream bugs in the Fedora installer that affect Qubes 3.2 (Bug 1170803, Bug 1374983, and Bug 1268700; tracked in Qubes issue #2835). This issue is fixed in Qubes 4.0. On Qubes 3.2, because of these bugs, the installer will try to access all existing disk partitions, run fsck on them, and mount them. Therefore, we strongly recommended that, prior to starting the Qubes installer, you physically disconnect all disks that you do not want to be modified. Furthermore, if you are installing Qubes on a potentially compromised system, we strongly recommended that you wipe your target installation disk before starting the installer.

In new installations of Qubes, the following steps may need to be applied in dom0 and Fedora 26 TemplateVMs in order to receive updates (see #3737).

Steps for dom0 updates:

  1. Open the Qubes Menu by clicking on the "Q" icon in the top-left corner of the screen.

  2. Select Terminal Emulator.

  3. In the window that opens, enter this command:

    sudo nano /etc/yum.repos.d/qubes-dom0.repo
    
  4. This opens the nano text editor. Change all four instances of http to https.

  5. Press CTRL+X, then Y, then ENTER to save changes and exit.

  6. Check for updates normally.

Steps for Fedora 26 TemplateVM updates:

  1. Open the Qubes Menu by clicking on the "Q" icon in the top-left corner of the screen.

  2. Select Template: fedora-26, then fedora-26: Terminal.

  3. In the window that opens, enter the command for your version:

    [Qubes 3.2] sudo gedit /etc/yum.repos.d/qubes-r3.repo
    [Qubes 4.0] sudo gedit /etc/yum.repos.d/qubes-r4.repo
    
  4. This opens the gedit text editor in a window. Change all four instances of http to https.

  5. Click the "Save" button in the top-right corner of the window.

  6. Close the window.

  7. Check for updates normally.

  8. Shut down the TemplateVM.

Hardware Requirements

Please see the system requirements and Hardware Compatibility List pages for more information on required and recommended hardware.

Note: We don't recommend installing Qubes in a virtual machine! It will likely not work. Please don't send emails asking about it. You can, however, install it on an external USB hard drive (at least 32 GB) and run from it, at least for testing. Bear in mind, however, that such disks are typically orders of magnitude slower than even the slowest internal hard drives.

Downloading the ISO

See the downloads page for ISO downloads. Remember, we have absolutely no control over those servers, so you should be assuming that they might be compromised, or just be serving compromised ISOs because their operators decided so, for whatever reason. Always verify the digital signature on the downloaded ISO. Make sure to read our guide on verifying signatures for more info about how to download and verify our PGP keys and verify the downloaded ISO.

Note: The Qubes R4.0 ISO is large, so if you are using R3.2 to download it you may need to increase the private storage available to the AppVM.

Copying the ISO onto the installation medium

Once you verify this is an authentic ISO, you should copy it onto the installation medium of your choice, such as a DVD or a USB drive. (Please note that there are important security considerations to keep in mind when choosing an installation medium.)

If you prefer to use a USB drive, then you just need to copy the ISO onto the USB device, e.g. using dd:

dd if=Qubes-R3-x86_64.iso of=/dev/sdX bs=1048576 && sync

Change Qubes-R3-x86_64.iso to the filename of the version you're installing, and change /dev/sdX to the correct target device (e.g., /dev/sdc). Warning: Choosing the wrong device could result in data loss. Make sure to write to the entire device (e.g., /dev/sdc) rather than just a single partition (e.g., /dev/sdc1).

On Windows, you can use the Rufus tool. Be sure to select "DD image" mode (you need to do that after selecting the Qubes ISO):

Warning: If you do that on Windows 10, you can only install Qubes without MediaTest, which isn't recommended.

Before proceeding with the installation, you are encouraged to first read all the information on this page. When you're ready, boot your system from the installation source and follow the on-screen instructions. The installer is very simple and asks very few questions. (It's actually easier to install Qubes right now than most other Linux distributions!)

The installer loads Xen right at the beginning, so chances are high that if you can see the installer's graphical screen and you pass the compatibility check that runs immediately after that, Qubes will work on your system. :)

Installing to a USB drive

Installing an operating system onto a USB drive can be a convenient and secure method of ensuring that your data is protected. Be advised that a minimum storage of 32 GB is required on the USB drive. This installation process may take longer than an installation on a standard hard disk. The installation process is identical to using a hard disk in conjunction with two exceptions:

  • Select the USB as the storage location for the OS.

  • Leave the option checked to “Automatically configure my Qubes installation to the disk(s) I selected and return me to the main menu”.

Upgrading

For instructions in upgrading an existing installation, please see the Release Notes of the version to which you want to upgrade. All of these release notes are available from the main downloads page.

Getting Help

  • We work very hard on making the documentation accurate, comprehensive, and useful. We urge you to read it! It may very well contain the answers to your questions. (Since the documentation is a community effort, we'd also greatly appreciate your help in improving it!)

  • If you don't find your answer in the documentation, it may be time to consult the mailing lists, as well as the many other available sources of help.

  • Please do not email individual developers (Marek, Joanna, etc.) with questions about installation or other problems. Please send all such questions to the appropriate mailing list.