Today I finally put my Qubes disk into the old Thinkpad X230 that is my main base for running Qubes, and that just felt great!
The reason for straying to other OS-es like OSX, Kodachi, Septor and even Windows the past weeks have been a mix of doing video productions, learning more about privacy distros & tools for setting up a tiny privacy business on the ground.
I’ve also built up a server for the new venture(s) with a good workflow for the most common CMS-es, Matomo for analytics and a good, private setup from the ground up using Njalla. (No nefarious plans at all, I just want my stuff private by default!)
Booting back into Qubes now makes me able to do the following for my production phase:
Set up a standalone for ssh and root dev only thus making sure that I won’t mix this level of security & work up with say CMS dev
Use another Qube for panels, backup and other browser work for the server
Continue the work of growing “organic” users as contributors in the CMS-es, essentially separating them with IPs and a mix of VPNs such as Mullvad, RiseupVPN and free ProtonVPN. Each of these will also have portable passwords and other info in Bitwarden which will be accessed from within each Qube
After trying out Kodachi for a while I feel that I could have achieved the same using the default tools, but I’d totally mix some of this up sooner or later
That being said I’ll try to install Kodachi under Qubes too as well as see what tools I can migrate, that Sphere browser with tools for creating bases for fingerprinting seem to be a valuable tool as an example.
Also the complete layout with a dashboard and very complete tools for VPNs combined with Tor is great to work with, I could see myself running a Kodachi Qube for anything involving Tor rather than Whonix actually…
I guess it all comes down to the approach to compartmentalisation which is pure genius!