Proposed procedure for using untrusted USB drives

[qubicrm]

i have not tried the “minimal” distributions yet

there is a thread on the forum that is very useful as a starting point:

Debian-10-minimal Configuration

Strictly for the browser you need: * qubes-core-agent-networking obviously * pulseaudio-qubes assuming you want to consume audio/video * firefox-esr If you’d like to have the nautilus file manager in addition to interact with downloaded files via GUI instead of “just” XTerm: * nautilus * qubes-core-agent-nautilus for Qubes specific functionality * zenity if you want to see the progress dialog while sending files to other qubes And then, if you plan on mounting encrypted drives: * gnome-k…

so you can give it a try. I thinh this is a very good approach for sys-net, sys-usb, sys-firewall …