Please let your fancy AIs scan my Qubes-Snitch code to find bugs

[ephile]

@kuhbs

I saw LittleSnitch on a macbook once and loved the idea to do that live. Qubes-Snitch does exactly that - just in a much smaller codebase, and specifically designed for Qubes OS.

I can relate… Have you looked at the following? The opensnitch daemon is relatively lightweight and the linked contribution provides the opensnitch nodes implementation for Qubes OS.

Build OpenSnitch v1.8.0 RPMs for Fedora with Per-VM Identity Patch (Fixing the "Identity Crisis")

Some time ago, I posted a workaround for running OpenSnitch across multiple VMs called Split-OpenSnitch with Per-VM Identity. There is now a much better way to solve this natively! I have submitted a PR to the upstream OpenSnitch project that solves the node identity problem by using node_id as the canonical remote node identity. The PR is still pending, but I have successfully tested it on a Fedora 43 VM running the UI alongside 4 daemon nodes. GitHub PR: Use ClientConfig.node_id as canonica…