Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-11-23 18:11:35 -05:00
Code
My Scripts for template VMs
505 Commits 1 Branch 0 Tags 9.7 MiB
Shell 100%
a20b69f516
Go to file
Tommy a20b69f516
Fix umask for hardened-chromium script
2024-11-12 08:58:24 -07:00
.github Ignore SC3040 2024-09-11 18:29:38 -07:00
debian-gnome Typo Fixes 2024-11-12 07:57:33 -07:00
etc Add lokinet-dns-fix.service 2024-05-24 21:08:50 -07:00
fedora-gnome Fix umask for hardened-chromium script 2024-11-12 08:58:24 -07:00
fedora-minimal Simplify SELinux instructions 2024-11-12 06:15:10 -07:00
whonix Rename Whonix scripts 2024-11-12 05:10:10 -07:00
.gitignore Create .gitignore 2023-01-16 00:39:37 -05:00
dom0.sh Move post install instructions to the bottom of the scripts 2024-11-12 05:16:46 -07:00
LICENSE Initial commit 2022-02-03 02:57:15 -05:00
README.md Note to skip sudo prompt on whonix gateway 2024-11-12 04:37:10 -07:00

README.md

QubesOS-Scripts

ShellCheck

My scripts for setting up QubesOS.

Running these scripts should be very straight forward. For the default Fedora template, run fedora-gnome.sh to trim it down first.

After you are done running those scripts, any other script can be used in a different template based on those trimmed down templates to create their respective virtual machines.

If you want to install Flatpak packages, install them inside of an AppVM as a user Flatpak and enable the update-user-flatpaks.service as a user systemd service for automatic updates.

It is recommended that you follow the docs here to make a prompt for root access on non-minimal VMs. dom0.sh already takes care of dom0 so you only need to worry about the guests. Skip whonix-gateway as it will create an annoying prompt every time a VM attached to it boots.

Laptop Recommendations

Qubes AEM currently still requires legacy boot. Officially, the last generation of Intel CPUs with VBIOS to support legacy boot Coffee Lake. However, I have found that certain Comet Lake Thinkpads still have legacy support.

I recommend that you look though Lenovo's BIOS simulator to find a suitable Comet Lake Thinkpad. These will have the longest remaining support lifecycle. Personally, I use a Thinkpad T14 gen 1.

Lenovo ePrivacy

Lenovo ePrivacy can be controlled through /proc/acpi/ibm/lcdshadow. I use the following shortcuts:

  • F5: sudo bash -c 'echo 1 > /proc/acpi/ibm/lcdshadow'
  • F6: sudo bash -c 'echo 0 > /proc/acpi/ibm/lcdshadow'