New user guide: How to organize your qubes

[fsflover]

@tanky0u

how many different templates do I really need? Do I really need a singular TemplateVM per program/app

@Sven

There are some folks however who do see the advantage in running things
as compartmentalized as possible. For example: should I ever
accidentally attempt to open a PDF in my mail qube, nothing bad can
happen because there is nothing installed that could open it.

I strive to come as close as workable to a 1 qube per app/domain,
because that is obviously safer. What’s not there can’t be exploited or
exfiltrated or even shared/leaked by mistake.

But:

@system

The appropriate amount depends on your temperament, time, patience, experience, risk tolerance, and expertise. In short, there can be such a thing as too much compartmentalization!

@system

remember that you’ve already reaped the vast majority of the security benefit simply by using Qubes OS in the first place