[qubes-users] yggdrasil & qubes netvm question

Mailing Lists qubes-users
1

1) Has anyone succeeded in enabling the yggdrasil network in NetVM qube?
I'm thinking about Qubes standalone PC as a server machine with the
ability to use NetVM as a shell box via yggdrasil IP.

2) BTW: it should open an attack surface on the NetVM. Is it right
that this will open the attack surface to the NetVM only or yggdrasils
multicast announces are about to interfere with other qubes?

2

I suggest not running the server in sys-net if possible, and instead
running it in a qube attached to sys-net. sys-net has lots of attack
surface against the hypervisor via the PCI devices attached to it.

- --
Sincerely,
Demi Marie Obenour (she/her/hers)
Invisible Things Lab