Guide to build a "sys-mini" template for all service-qubes

[WhiteShadow]

@Timewulf

Follow this doc (Minimal templates — Qubes OS Documentation) to install

• passwordless-root
• xfce4-terminal, thunar and qubes-core-agent-thunar (mostly for convenience)

According your guide all services qubes will work without selinux or apparmor.
I prefer to think twice before drop extra layer of protection from sys-usb and sys-net, better to clean up xfce\gnome template with already function apparmor\selinux from unnecessary content.

@Timewulf

Changing the system

• Rename sys-net to “sys-net-old”, “sys-firewall” to “sys-firewall-old” and “sys-usb” to “sys-usb-old”.
• Untap the “autostart”-setting of each.
• Stop “sys-net-new”, “sys-firewall-new” and “sys-usb-new” and rename them to “sys-usb”, “sys-firewall” and “sys-usb”
• Tap the “autostart”-setting of each.
• If needed, open the settings of “sys-firewall” and change network to “sys-net”.
• Restart the new service qubes, now correctly named.
• Check and change the network settings of all qubes, maybe they actually use “sys-firewall-old”?!

Navigate to start menu, Qubes tools → Template switcher, use it to switch templates.
As more advanced user you can perform same process with CLI in fail save way for sys-usb:

Attempting to restart sys-usb in a script disables the usb keyboard and mouse and also the laptop keyboard and touchpad, but not at the command line

Do you mean you have different result when you press Enter key to execute the script in dom0 terminal on laptop keyboard and on USB keyboard? Maybe the pressed Enter key on the USB keyboard when you shut down the sys-usb is causing some issue. Try to change the script to this: #!/bin/bash sleep 3; date; qvm-shutdown --wait sys-usb; date; qvm-prefs sys-usb template default-dvm; date; sleep 3; date; qvm-start sys-usb; date And don’t press any keys on the USB keyboard after pressing and releas…