QubesOS vs OpenBSD Security

[fiftyfourthparallel]

Why not both? @unman uses OpenBSD as his sys-net, since sys-net can be considered one of the weakest links in a Qubes system.

Someday I’ll figure out how to use OpenBSD VMs without setting my computer, my house, and/or myself on fire----someday.

Use OpenBSD as NetVM

Is sys-net the weak link in our systems' security?

An XSA in the most recent QSB* reminded me to ask about the vulnerability of sys-net and whether there should be increased efforts to make this particular sys-VM run from a unikernel, microkernel, or something else with a minimal attack surface, especially since it really only does one simple job (I think). In brief: My gut feeling since before this QSB has been that sys-net presents the most accessible target for a remote attacker who might want to compromise the whole system as it isn’t (can’…

P.S. Also, I remember there was talk somewhere about a Qubes-like system built around OpenBSD called something French like Bastille.