my recommendation would be: boot a live OS (pure os maybe?..) and do it there, while your qubes is encrypted, and not tainting the dom0.
my recommendation would be: boot a live OS (pure os maybe?..) and do it there, while your qubes is encrypted, and not tainting the dom0.