Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-12-22 07:01:33 -05:00
Code
My Scripts for template VMs
512 Commits 1 Branch 0 Tags 9.7 MiB
Shell 100%
ee100b5d22
Go to file
Tommy ee100b5d22
Reword instructions 
Signed-off-by: Tommy <contact@tommytran.io>
2024-11-17 18:08:30 -07:00
.github Ignore SC3040 2024-09-11 18:29:38 -07:00
debian-gnome Typo Fixes 2024-11-12 07:57:33 -07:00
etc Fix IVPN DNS at boot 2024-11-13 22:32:19 -07:00
fedora-gnome Remove extra space 2024-11-16 05:24:06 -07:00
fedora-minimal Simplify SELinux instructions 2024-11-12 06:15:10 -07:00
whonix Rename Whonix scripts 2024-11-12 05:10:10 -07:00
.gitignore Create .gitignore 2023-01-16 00:39:37 -05:00
dom0.sh Fix s0ix suspension 2024-11-14 03:30:59 -07:00
LICENSE Initial commit 2022-02-03 02:57:15 -05:00
README.md Reword instructions 2024-11-17 18:08:30 -07:00

README.md

QubesOS-Scripts

ShellCheck

My scripts for setting up QubesOS.

For each OS, run the script associated with them to trim down the templates provided by Qubes first. For example, for Fedora, run the fedora-gnome.sh script. After the base templates have been trimmed down, run other scripts in templates based on them to create their respective TemplateVMs.

If you want to install Flatpak packages, install them inside of an AppVM as a user Flatpak and enable the update-user-flatpaks.service as a user systemd service for automatic updates.

It is recommended that you follow the docs here to make a prompt for root access on non-minimal VMs. dom0.sh already takes care of dom0 so you only need to worry about the guests. Skip whonix-gateway as it will create an annoying prompt every time a VM attached to it boots.

Laptop Recommendations

Qubes AEM currently still requires legacy boot. Officially, the last generation of Intel CPUs with VBIOS to support legacy boot Coffee Lake. However, I have found that certain Comet Lake Thinkpads still have legacy support.

I recommend that you look though Lenovo's BIOS simulator to find a suitable Comet Lake Thinkpad. These will have the longest remaining support lifecycle. Personally, I use a Thinkpad T14 gen 1.

Lenovo ePrivacy

Lenovo ePrivacy can be controlled through /proc/acpi/ibm/lcdshadow. I use the following shortcuts:

  • F5: sudo bash -c 'echo 1 > /proc/acpi/ibm/lcdshadow'
  • F6: sudo bash -c 'echo 0 > /proc/acpi/ibm/lcdshadow'