How to combine sys-usb with sys-net

[enmus]

@quququbebebe

But it’s less secure than having sys-net and sys-usb separate,

I don’t see the difference but in the name of a qube. If you have separate controller to which is only USB wifi (or USB2eth) device attached, it is irrelevant how you name the qube to which the controller is assigned. Both has to have same prefs and features in order to provide network.

@MarioG

So the InputKeyboard and InputMouse are only if USB mouse/keyboard is used, right?

Yes if on the same controller with USB wifi. But I wouldn’t go with what is suggested.

You could consider something like

Running ethernet sys-net in PVH mode

After several months of learning Qubes, I realized that the ethernet sys-net (not to say wifi) is the weakest link in Qubes, only to find out that it was already been discussed here, which proves what I concluded: I decided to start a new topic due to its visibility and the idea I got, but please merge it with above if you find it more appropriate. Now, after thinking through and reading a lot, these are the facts: Ethernet is safer than internal or external wifi. Ethernet sys-net has t…

This is how would sys-net and sys-usb be truly separated. Just note that it can be either wifi dongle or that adapter.

You can also read from here explained more detailed.

Looking to switch to a ThinkPad from a Librem14 Suggestions welcome

isn’t that an option/default to bind sys-net and sys-usb ? If I remeber well, it’s even suggested during install. trusting Qubes to not suggest a security downgrade T15g gen1; P53; P15 gen1 have a 1GbE RJ45 T15g Gen2; P15 gen2 have a 2,5GbE RJ45