How can I use Kargs (Kernel Arguments) and custom parameters by default across all kernels?
I’m thinking of using what’s in this guide, but I’m new to Qubes.
I’d also like to use features like ram-wipe, VMs with ephemeral encryption, and root in read-only mode as described in other topic in forum (topic name: qubes os live mode dom0 in ram non persistent boot ram wipe protection against forensics tails mode hardening dom0 root read only paranoid security ephemeral encryption).
I can’t post the link of the topic.
Please explain it to me step by step (preferably with images), I’m afraid of making a mistake.
Thanks.
Use qvm-prefs QUBE_NAME kernelopts on all your templates (changing QUBE_NAME by the name of the template):
https://dev.qubes-os.org/projects/core-admin-client/en/latest/manpages/qvm-prefs.html#common-properties
If you want to follow such “advanced” topics, I don’t think you will find a step-by-step guide with images.
Being afraid of making a mistake is a good thing, but why do you want to make such a mistake in the first place? Why not stick to the defaults? There is so much to learn while being new to Qubes OS, learn that first, with the official docs.
Fun fact, reading things about the exact link you posted is what led me to leave the hardening mindset for the compartmentalization one:
Do not use Linux (QubesOS is not a Linux distribution).
1 Like