I’ve played around briefly with multiple sys-gui-vnc qubes for a machine that is stationary and remotely accessible, and matches your first paragraph. But this is a different use case than local, physical multi-user.
The qube structure is as follows:
- gui-user1 [configured “like” a sys-gui-vnc]
- user1-work qube
- user1-personal qube
- gui-user2 [configured “like” a sys-gui-vnc]
- user2-work qube
- user2-personal qube
It was necessary to make sure the
guivm preference for the user[X]-qubes were set appropriately. Then run
gui-userX to get them to show up in the menu.
I left default_guivm set to dom0. As long as a user can remotely access gui-userX over VNC, that allows them to interact with userX-qubes, though in a limited fashion. Changing of netvm or template cannot be done unless the respective qubes have their
guivm also set appropriately.
The only difficulties I’ve had were in the secure copy + paste mechanism, and needing to set a login password at boot via rc.local.