Improve Qubes OS security

tozi · April 14, 2024, 3:33pm

Hello, I am looking to improve the security of Qubes OS, I found some guides and I would like to know if they are still up to date ?

github.com

unman/notes/blob/master/openBSD_as_netvm

Install OpenBSD as HVM Template 
Create netvm "openFW" using OpenBSD as template.
Set openFW virt_mode to HVM
Attach network device to openFW.

Create netvm - fw

Make sure that fw does not have netvm set:
qvm-prefs fw netvm none

Set fw as netvm for openFW.
qvm-prefs openFW netvm fw

Note IP address of openFW from 'qvm-ls -n openFW' 
Here address is 10.137.0.6

Start fw and openFW.

On fw netvm:
Identify vif to openFW -

This file has been truncated. show original

palainp · April 15, 2024, 4:54am

For the first two links, you can find help with a working solution in the discussion thread Combination of OpenBSD sys-net + MirageFW .