hi, i looked around and searched for threads but didn’t find anything too relevant (not interested in vnc or rdp) can i setup ssh to dom0 from LAN, then use salt or qvm-run to manage appvms from dom0? i don’t need GUI, but shell is nice (qvm-run -p APPVM bash might not be best experience) how risk…

@unman What about e.g. a service running in dom0 that monitors for specific requests generated by the “admin qube” and executing them? Seems simpler to me (assuming one can write the short scripts about it). It can be as simple as a text file in the “admin qube” that dom0 reads periodically. Speak…

Speaking of all that, can you explain or show a link to explanation how exactly dom0 is made network-less? I don’t know what you mean by that, but maybe reverse order of this: #enabling-network-access-in-dom0 [image] How to set up a test bench This guide shows how to set up simple t…

@quber Well, it doesn’t really answer my question but perhaps answers the OP in one more way. :slight_smile:

according to Provide a maintained OpenSSH package in dom0 for those who manually install it · Issue #7493 · QubesOS/qubes-issues · GitHub and GitHub - QubesOS/qubes-openssh: Packaging of openssh · GitHub it should be possible to install openssh-server in dom0, then use qvm-connect-tcp from sys-net t…

You can do this, and you appear to accept any risk. In my opinion it’s a mistake, and not to be encouraged. I never presume to speak for the Qubes team. When I comment in the Forum I speak for myself.

[image] qubist: What about e.g. a service running in dom0 that monitors for specific requests generated by the “admin qube” and executing them? Seems simpler to me (assuming one can write the short scripts about it). Isn’t this what qrexec-daemon is? Unless I misunderstood what you mean

[image] otter2: Isn’t this what qrexec-daemon is? Unless I misunderstood what you mean I have not looked at the code of qrexec-daemon, so I can’t say what it does but I doubt it monitors for any separate/second “admin qube” since one does not exist in default Qubes.

[image] qubist: I doubt it monitors for any separate/second “admin qube” since one does not exist in default Qubes I don’t think it would matter for the daemons as they (1 for each qube) are supposed to handle all qrexec calls. If admin qube (functionally admin, not of class admin) uses qrexe…

[image] qubist: This is the first time I read there can be a second admin VM. [image] How to create an AdminVM in R4.1? General Discussion Following an older post from Joanna https://www.qubes-os.org/news/2017/06/27/qubes-admin-api/ that I invite you to …

[image] Terminology: admin qube, AdminVM, Jargon-ing while we still don’t know / aren’t sure is the goal reachable through [an admin client qube :wink:] as per @fepitre ’s post… I don’t see why not. Forward an SSH port to some-qube, install qubes-core-admin-client in it(s template), and configu…

Ssh to dom0

User Support

qubist July 10, 2026, 6:22pm 62

So, that is what I have been missing in my earlier post and @rustybird is probably right - my idea could work with the existing tools.