Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-11-21 09:21:34 -05:00
Code
My Scripts for template VMs
492 Commits 1 Branch 0 Tags 9.7 MiB
Shell 100%
cae56433cd
Go to file
Tommy cae56433cd
Note to skip sudo prompt on whonix gateway
2024-11-12 04:37:10 -07:00
.github Ignore SC3040 2024-09-11 18:29:38 -07:00
debian-gnome Fix Debian adw-gtk3 2024-11-12 01:49:00 -07:00
etc Add lokinet-dns-fix.service 2024-05-24 21:08:50 -07:00
fedora-gnome Remove Hakuneko 2024-11-12 03:11:06 -07:00
fedora-minimal Add qubes-core-agent-dom0-updates to sys-net 2024-11-12 04:27:31 -07:00
whonix Add fwupd-qubes-vm 2024-11-12 04:15:49 -07:00
.gitignore Create .gitignore 2023-01-16 00:39:37 -05:00
dom0.sh Add dom0 config for sudo prompts 2024-11-12 03:48:24 -07:00
LICENSE Initial commit 2022-02-03 02:57:15 -05:00
README.md Note to skip sudo prompt on whonix gateway 2024-11-12 04:37:10 -07:00

README.md

QubesOS-Scripts

ShellCheck

My scripts for setting up QubesOS.

Running these scripts should be very straight forward. For the default Fedora template, run fedora-gnome.sh to trim it down first.

After you are done running those scripts, any other script can be used in a different template based on those trimmed down templates to create their respective virtual machines.

If you want to install Flatpak packages, install them inside of an AppVM as a user Flatpak and enable the update-user-flatpaks.service as a user systemd service for automatic updates.

It is recommended that you follow the docs here to make a prompt for root access on non-minimal VMs. dom0.sh already takes care of dom0 so you only need to worry about the guests. Skip whonix-gateway as it will create an annoying prompt every time a VM attached to it boots.

Laptop Recommendations

Qubes AEM currently still requires legacy boot. Officially, the last generation of Intel CPUs with VBIOS to support legacy boot Coffee Lake. However, I have found that certain Comet Lake Thinkpads still have legacy support.

I recommend that you look though Lenovo's BIOS simulator to find a suitable Comet Lake Thinkpad. These will have the longest remaining support lifecycle. Personally, I use a Thinkpad T14 gen 1.

Lenovo ePrivacy

Lenovo ePrivacy can be controlled through /proc/acpi/ibm/lcdshadow. I use the following shortcuts:

  • F5: sudo bash -c 'echo 1 > /proc/acpi/ibm/lcdshadow'
  • F6: sudo bash -c 'echo 0 > /proc/acpi/ibm/lcdshadow'