Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-12-03 06:41:32 -05:00
Code
My Scripts for template VMs
491 Commits 1 Branch 0 Tags 9.7 MiB
Shell 100%
a734aa26a0
Go to file
Tommy a734aa26a0
Add qubes-core-agent-dom0-updates to sys-net
2024-11-12 04:27:31 -07:00
.github Ignore SC3040 2024-09-11 18:29:38 -07:00
debian-gnome Fix Debian adw-gtk3 2024-11-12 01:49:00 -07:00
etc Add lokinet-dns-fix.service 2024-05-24 21:08:50 -07:00
fedora-gnome Remove Hakuneko 2024-11-12 03:11:06 -07:00
fedora-minimal Add qubes-core-agent-dom0-updates to sys-net 2024-11-12 04:27:31 -07:00
whonix Add fwupd-qubes-vm 2024-11-12 04:15:49 -07:00
.gitignore Create .gitignore 2023-01-16 00:39:37 -05:00
dom0.sh Add dom0 config for sudo prompts 2024-11-12 03:48:24 -07:00
LICENSE Initial commit 2022-02-03 02:57:15 -05:00
README.md Add dom0 config for sudo prompts 2024-11-12 03:48:24 -07:00

README.md

QubesOS-Scripts

ShellCheck

My scripts for setting up QubesOS.

Running these scripts should be very straight forward. For the default Fedora template, run fedora-gnome.sh to trim it down first.

After you are done running those scripts, any other script can be used in a different template based on those trimmed down templates to create their respective virtual machines.

If you want to install Flatpak packages, install them inside of an AppVM as a user Flatpak and enable the update-user-flatpaks.service as a user systemd service for automatic updates.

It is recommended that you follow the docs here to make a prompt for root access on non-minimal VMs. dom0.sh already takes care of dom0 so you only need to worry about the guests.

Laptop Recommendations

Qubes AEM currently still requires legacy boot. Officially, the last generation of Intel CPUs with VBIOS to support legacy boot Coffee Lake. However, I have found that certain Comet Lake Thinkpads still have legacy support.

I recommend that you look though Lenovo's BIOS simulator to find a suitable Comet Lake Thinkpad. These will have the longest remaining support lifecycle. Personally, I use a Thinkpad T14 gen 1.

Lenovo ePrivacy

Lenovo ePrivacy can be controlled through /proc/acpi/ibm/lcdshadow. I use the following shortcuts:

  • F5: sudo bash -c 'echo 1 > /proc/acpi/ibm/lcdshadow'
  • F6: sudo bash -c 'echo 0 > /proc/acpi/ibm/lcdshadow'