Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-11-21 09:21:34 -05:00
Code
My Scripts for template VMs
487 Commits 1 Branch 0 Tags 9.7 MiB
Shell 100%
77f9bcf704
Go to file
Tommy 77f9bcf704
Add laptop recommendation
2024-11-12 02:24:45 -07:00
.github Ignore SC3040 2024-09-11 18:29:38 -07:00
debian-gnome Fix Debian adw-gtk3 2024-11-12 01:49:00 -07:00
etc Add lokinet-dns-fix.service 2024-05-24 21:08:50 -07:00
fedora-gnome Add missing new line 2024-11-12 00:53:59 -07:00
fedora-minimal Use download command everywhere 2024-11-11 16:54:18 -07:00
whonix Fix Debian scripts 2024-11-12 01:36:55 -07:00
.gitignore Create .gitignore 2023-01-16 00:39:37 -05:00
dom0.sh Change PCR 5 to 10 2024-11-12 01:49:20 -07:00
LICENSE Initial commit 2022-02-03 02:57:15 -05:00
README.md Add laptop recommendation 2024-11-12 02:24:45 -07:00

README.md

QubesOS-Scripts

ShellCheck

My scripts for setting up QubesOS.

Running these scripts should be very straight forward. For the default Fedora template, run fedora-gnome.sh to trim it down first.

After you are done running those scripts, any other script can be used in a different template based on those trimmed down templates to create their respective virtual machines.

If you want to install Flatpak packages, install them inside of an AppVM as a user Flatpak and enable the update-user-flatpaks.service as a user systemd service for automatic updates.

It is recommended that you follow the docs here to make a prompt for root access on non-minimal VMs. dom0.sh already takes care dom dom0 so you only need to worry about the guests.

Laptop Recommendations

Qubes AEM currently still requires legacy boot. Officially, the last generation of Intel CPUs with VBIOS to support legacy boot Coffee Lake. However, I have found that certain Comet Lake Thinkpads still have legacy support.

I recommend that you look though Lenovo's BIOS simulator to find a suitable Comet Lake Thinkpad. These will have the longest remaining support lifecycle. Personally, I use a Thinkpad T14 gen 1.

Lenovo ePrivacy

Lenovo ePrivacy can be controlled through /proc/acpi/ibm/lcdshadow. I use the following shortcuts:

  • F5: sudo bash -c 'echo 1 > /proc/acpi/ibm/lcdshadow'
  • F6: sudo bash -c 'echo 0 > /proc/acpi/ibm/lcdshadow'