Create the sys-usb DisposableVM
- Create the
[user@dom0 ~]$ qvm-create --template <disposablevm-template-name> --class DispVM --label red disp-sys-usb
- Set the
disp-sys-usb virtualization mode to hvm:
[user@dom0 ~]$ qvm-prefs disp-sys-usb virt_mode hvm
disp-sys-usb NetVM to none:
[user@dom0 ~]$ qvm-prefs disp-sys-usb netvm ""
- List all available PCI devices:
[user@dom0 ~]$ qvm-pci
- Attach the USB controller to the
Note: Most of the commonly used USB controllers (all Intel integrated controllers) require the
-o no-strict-reset=True option to be set. Instructions detailing how this option is set can be found here.
[user@dom0 ~]$ qvm-pci attach --persistent disp-sys-usb <backined>:<bdf>
disp-sys-usb to auto-start when Qubes boots:
[user@dom0 ~]$ qvm-prefs disp-sys-usb autostart true
(recommended) Disable the
appmenus-dispvm feature, as disp-sys-usb is not itself a DisposableVM template (Note: this is only necessary if you enabled the
appmenus-dispvm feature for the DisposableVM template):
[user@dom0 ~]$ qvm-features disp-sys-usb appmenus-dispvm ''
- Users should now follow instructions on How to hide USB controllers from dom0.
- At this point, your mouse may not work. Edit the
qubes.InputMouse policy file in dom0, which is located here:
Add a line like this to the top of the file:
disp-sys-usb dom0 allow,user=root
Your pci device like usb and keyboard is connected through this vm, if you delete this sys-usb that mean you need to detach usb device like keyboard or mouse and attach it back to dom0, while your keyboard doesn’t work you can’t attach it right ? that’s why you need to reboot.