Installing Windows 10 behind sys-whonix as NetVM using Qubes Windows Tool

[WhiteShadow]

1+2 you can read here about IP leaks:

Prevent Qubes OS clearnet leaks

Introduction This setup is only useful for people who want to block non-VPN / non-Tor traffic. By default, Qubes OS checks for updates of qube’s templates using running qubes themselves generating traffic through their current netvm. To some people, this can be seen as a privacy issue because queries Qubes OS’s packages repository, which immediately flag the user as a Qubes OS user. Even if you use sys-whonix or a VPN qube for all your qubes, there are 3 qubes that could leak netwo…

What are the Privacy Implications of NTP Requests (time sync) and how to mitigate them?

Continuing the discussion from Prevent Qubes OS clearnet leaks: Of course. I set clockVM as downstream qube,(if at all), and block update checks from sys-net and sy-firewall. I also set the firewall to block any traffic originating from those infrastructure qubes. I never presume to speak for the Qubes team. When I comment in the Forum I speak for myself.

3+4, included in documentation:

How to install Windows qubes in Qubes OS

Qubes Windows Tools (QWT)