Install Qubes OS with boot partition and a detached LUKS header on USB

[apparatus]

I’ve created separate topic:

How to make sure that USB storage firmware is not compromised

The original question: Continue discussion from here: If I get the question correctly then my answer would be: Make sure that the USB storage you get your hands on is not malicious initially. You can be certain of this if you’ll use some open hardware and open source firmware USB storage for which you can build and flash the firmware yourself. Maybe such devices are already available but otherwise it’ll be cumbersome to make and use but possible. Or you can protect yourself from a targe…