How to properly build a Networking Template (sys-net) from debian-12-minimal?

[cocil001]

Goal: > I want to replace my default sys-net with a new one based on debian-12-minimal for better security and minimal footprint.
​My Hardware:
​CPU: Intel i7-14700Kf
​Ethernet: Realtek RTL8125 2.5GbE (requires firmware-realtek)
​The Question:
What is the minimal list of packages I need to install in the debian-12-minimal base template to make it function correctly as a sys-net template?
​Currently, I plan to:
​Clone debian-12-minimal to deb-12-min-net.
​Install: qubes-core-agent-networking, qubes-menus, network-manager, firmware-realtek.
​Are there any other mandatory packages? (e.g., for AppArmor or specific PCI backend support on Intel 14th gen/B760 platforms?)
​Also, what is the best way to handle the PCI reset issue for RTL8125? Should I use no-strict-reset=True during the initial setup, or is there a persistent way to define this in the template’s configuration?
​Thanks for any expert advice! thanks

[cocil001]

How to operate？thanks

[parulin]

Why Use Minimal Templates?

Why Use Minimal Templates? Even though minimal templates are, ceteris paribus, more secure, I contend that most novice users shouldn’t try to use them. Why not? Because many novice users end up tying themselves in knots, breaking their own installations, and probably decreasing their own security through excessive tinkering. These users should first focus on learning the basics. For some reason, minimal templates seem to be fetishized. That is, the amount of attention they receive, and the f…

If you are concerned about security my suggestion is to use a full template. If you are concerned about footprint, enable the minimal-netvm service.

[cocil001]

thanks