Git-Mirrors/tommytran732-QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts.git synced 2024-12-25 23:29:32 -05:00
Code Issues Packages Projects Releases Wiki Activity
Scripts for setting up QubesOS
161 Commits 1 Branch 0 Tags 9.8 MiB
Shell 100%
ec601e30b3
Go to file
Tommy ec601e30b3
Update minimal-vault-gpg.sh
2022-05-26 00:31:27 -04:00
debian Update debian.sh 2022-05-25 23:44:30 -04:00
fedora Update fedora.sh 2022-05-26 00:17:30 -04:00
fedora-minimal Update minimal-vault-gpg.sh 2022-05-26 00:31:27 -04:00
dom0.sh Update dom0.sh 2022-05-25 22:55:49 -04:00
LICENSE Initial commit 2022-02-03 02:57:15 -05:00
README.md Update README.md 2022-05-25 04:27:15 -04:00

README.md

QubesOS-Scripts

My scripts for setting up QubesOS. Read the scripts and adjust them to your needs, don't just blindly run them.

  1. Run dom0.sh script to set up dom0
  2. Download the Fedora Minimal template and use the fedora-minimal.sh script to do basic configuration. Then, create TemplateVMs based on it. The most important thing here is that you replace sys-net and sys-firewall with a minimal version for attack surface reduction. I have been trying to create a minimal template for ProtonVPN, but haven't been able to so far. Any help with this would be appreciated.
  3. Run the fedora.sh script to trim down the default Fedora template and do basic configuration. The script includes a systemd user timer update-user-flatpaks.timer that you can manually enable on AppVMs. Firefox is also replaced with Brave. Other TemplateVMs should be based on the trimmed down Fedora template.
  4. Run the whonix_hardening.sh script on both the Whonix Gateway and Workstation templates to enable experimental hardening features.