Non-free packages in Qubes and which are safe to remove?

Qubes R4.1 Dom0 packages reported unsatisfactory by vrms (Virtual Richard Stallman):

# vrms-rpm 
1136 free packages (98.0% of total)
24 non-free packages (2.0% of total)
 - gobject-introspection
 - kernel
 - kernel
 - kernel
 - kernel-qubes-vm
 - kernel-qubes-vm
 - kernel-qubes-vm
 - linux-firmware
 - linux-firmware-whence
 - microcode_ctl
 - qubes-artwork
 - qubes-artwork-anaconda
 - qubes-artwork-plymouth
 - qubes-libvchan-xen
 - qubes-mgmt-salt
 - qubes-mgmt-salt-admin-tools
 - qubes-mgmt-salt-base
 - qubes-mgmt-salt-base-config
 - qubes-mgmt-salt-base-topd
 - qubes-mgmt-salt-config
 - qubes-mgmt-salt-dom0
 - qubes-mgmt-salt-dom0-qvm
 - qubes-mgmt-salt-dom0-update
 - qubes-mgmt-salt-dom0-virtual-machines

Can I remove linux-firmware if I require no proprietary firmware?
Looks like several of these are false positives.


None reported.


# vrms-rpm 
666 free packages (99.5% of total)
4 non-free packages (0.5% of total)
 - gobject-introspection
 - grubby-dummy
 - qubes-core-agent-systemd
 - qubes-libvchan-xen

Linux-firmware is the only one I would try. Definitely don’t try the kernel* packages. Microcode_ctl has spectre/meltdown fixes for Intel CPU. You can remove it if you have AMD CPU, but there should be a similar package for that which will probably have the same issue. A lot of the qubes-packages sound important too. If that tool is just looking at the license, you should reconsider. Stallman is really picky about licensing.

I strongly recommend against removing any packages from a minimal template, since it’s already minimal. Doing so will almost certainly break things. If you want to know which packages you can remove from a non-minimal template, you should probably just take the opposite approach instead: Start with a minimal template and add only the packages you want.

1 Like

I disagree. Of course you should never remove anything when you don’t know what you are doing, but, for example, if your hardware supports FLOSS, you should be able to remove every proprietary firmware without any negative consequences.