Feature request: disabling all clearnet update checks during installation process

[solene]

[Workshop] Block traffic from sys-net and sys-firewall but allow NAT

Hi Seems there is a real need from users, I’d like to figure a solution that would block the network traffic emitted by sys-firewall and sys-net, but let qubes below sys-firewall to have network. The point would be to allow someone using sys-whonix or a VPN to have no leak. This can’t come with any guarantee of course, a gateway device providing the network should be used as a firewall if someone really needed to ensure there will never be any leak. So far, I figured a simple command to block…