Minimizing the TCB in dom0?

[qubist]

How to minimize dom0?

Hi, It seems dom0 is not as optimal (minimal) as it could be. Here is an example: root@dom0:~ # dnf list --installed *firmware* | sed -r 's/ {2,}.*//g' Installed Packages alsa-sof-firmware.noarch amd-gpu-firmware.noarch intel-gpu-firmware.noarch linux-firmware.noarch linux-firmware-whence.noarch nvidia-gpu-firmware.noarch I have no NVIDIA or AMD hardware, yet this firmware (which IIUC is certainly proprietary) is there by default (not installed by me explicitly). This is quite concerning in …

Potential to minimize dom0