Are there any risks involved in installing DWM in DOM0, even if everything else remains unchanged? Perhaps I’m too fixated on the purity of the Qubes OS architecture, but as I understand it, DWM will generate more trusted code and more packages. Are there any risks associated with this, aside from configuration issues?
Window borders with distinct markings are important. QubesOS tests Xfce, KDE and i3 on OpenQA, so we know that to some extent, they are working. There are some bugs on i3 related to border coloring appearing the same as dom0, which nobody has been working on. What I mean is, DWM is not tested, we don’t know if it works in all cases, and you will be trusting a third party for code that you will run in dom0.
If you just want a stacking window manager, go for something shipped by QubesOS repos, which is i3.
Possibly related topic because the question is somewhat analogous: Does installing KDE increase the attack surface?
After also having contacted a consultant at Nitrokey it is my understanding that changing desktop environments in dom0 does not introduce security risks as long as the new DE’s codebase is trustworthy.
Which is really nice TBH.
i didnt know about that bugs exist on i3.
i uses i3 since qubes r4.0 and everything seems fine to me.
Bugs exists in every WM, even the supported ones. What I meant to say with my comment above is that you are better of using a WM that is more tested on Qubes CI and by many users than an external one that is not well tested.