How to make your Qubes OS more secure (Best Practices)

[wind.gmbh]

@Scumbag

For Whonix and Debian VM’s, this is made real easy by Whonix(note that Whonix recommends using a VM kernel, but for me it works fine with the default kernel supplied by dom0):

Since you mentioned Debian and Whonix: I tend to run any Debian-based stuff in a Kicksecure AppVM, which includes the Linux Kernel Runtime Guard.

[Sven]

I do too, but it seems I had to explicitly install it following the
guide linked earlier in this thread. Just did.