I have a few years experience with some Linux Distros such as Mint.
So I assume I am between a noob and an intermediate user.
I want to increase my knowledge of Linux so here I am.
I tried Qemu/KVM and Virtualbox and didn’t care for them.
So I thought that I would tackle the best, QubesOS.
I was able to install QubesOS with Whonix, however not without a big headache.
Updates worked okay and included Whonix as well. No errors whatdoever.
Now I am totally lost as to what to do and how to use the O/S properly.
When looking through the forums there are so many mentions of specific softwares,
that I an unfamiliar with, that I become totally lost.
So after installing and updating what needed steps should I now take?
Such as hardening, security, firewall settings, whonix settings, do I have to
install TOR, etc.
You shouldn’t have to worry about the specific pieces of software that others mention, since they might just be asking for their own personal use cases, which may not align with yours.
“Hardening guides” are usually for general-purpose operating systems that don’t focus on security. Since Qubes is a security-oriented operating system, most of the “hardening” is already designed into the architecture of the system. I’d recommend against tinkering too much too quickly and suggest instead first understanding how the system is intended to be used. The rest of the documentation is great for this:
Since you mentioned that you already have Whonix, then no, you don’t have have to install Tor. Whonix already includes Tor. The Whonix project has their own documentation on using Whonix inside of Qubes:
Try to learn how to move things (text and files) between qubes, maybe install software, use a USB device, etc. As long as you avoid messing with dom0, you’re good. You can clone your templates and every qube to make some tests. It is perfect to learn things about Linux.
Welcome to the club! You made a good decision. Although your questions are practically answered by the last posts here’s my 2 cents (in addition).
Since Qubes OS is “all about security” it helped me a lot to tackle the new topic of “threat modeling”. I never heard about it before, but it made instantaneously sense to me to take care of it and mitigate risks evolving from my personal threat model with Qubes OS!
I learned so much and I’m still learning and having fun! Thanks to Qubes. It was a real eye-opener ro me. So have fun on your journey!
I’d suggest that you do nothing to start with other than get used to
using Qubes as installed. Dont install new software; dont try to
“harden” the system; dont begin by loading in your most sensitive data.
Instead, get used to using disposables, learn about copy and pasting
text, and how to move files between qubes. You can also start creating new
qubes, and seeing how they can have different networking paths by
setting their netvm…
It wont take long before you get a feel for Qubes and can then think
about how to start using it in earnest, and what qubes you might like to
use to separate out your activities.
By default Qubes is reasonably secure, and provides security through
compartmentalisation. That’s all it does. It’s for you to decide how you
want to use those compartments, and how to use the tools that Qubes
provides. You cant do this until you have a feel for how it hangs
together.
Enjoy.
I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.
