How does Qubes OS work?

[fsflover]

@Hack3rcon

Why do you trust Dom0? To harden Linux, it is necessary to enable or disable some parameters in the kernel, some services, and apply some firewall rules.

You harden Linux in order to run something untrusted on it. When you don’t run anything on it, there is no reason to harden it. Also, a lot of software is removed from Fedora in dom0, decreasing the attack surface.

@Hack3rcon

Why did the Qubes OS team choose GNU, not BSD or even Solaris?

If you are talking about operating system in VMs, this choice allows to run any software designed for GNU/Linux in VMs. And you can in principle run BSD. If you are talking about dom0, see this: Change the OS used in dom0 · Issue #1919 · QubesOS/qubes-issues · GitHub.