What is the best way to install kali on QubesOS?

What is the most recommended method? I tried to make a kali vm from an iso file before but it was too slow to be useful.

Is there a template? I thought there was, either officially or from unman?


Increase Dom0 size by running the following in Dom0 terminal:

sudo lvresize --size 50G /dev/mapper/qubes_dom0-root
sudo resize2fs /dev/mapper/qubes_dom0-root

Then run:

qvm-template install --enablerepo=qubes-templates-community-testing kali

Then check how to update the keyring, so you can update Kali. See:


Since no one has linked to it in this thread yet, I’ll just point out that this exists in the community docs (haven’t tried it myself):

1 Like

Thank you. I was able to install it very easily thanks to the method you gave me. :smiley:
But the keyring? I can’t update it as it is, even though the qubes update tool is notifying me of the update?

If you have installed from qubes-templates-community-testing, that
template is woefully out of date, and was built off Debian bullseye.

You will need to edit the sources files in /etc/apt/sources.list and
/etc/apt/sources.list.d , and make sure
that any reference to bullseye is replaced with bookworm.
To do this adapt the documented procedure for upgrading

You would be advised to mark Qubes packages on hold. If you do not then
it is extremely likely that you will break the template during an
update process. At a minimum you want to hold qubes-core-agent,
qubes-core-agent-networking and qubes-gui-agent.

I explain the process here

I don’t understand what this means - did you read the linked post? What
went wrong?

I never presume to speak for the Qubes team. When I comment in the Forum or in the mailing lists I speak for myself.

I read. But I couldn’t understand.
I ran the command that oijawyuh gave me and was able to install the kali template, so I thought I could use it normally now, but I’m confused because it says I can’t update it. I don’t really understand what a keyring is.

First of all, the kali template I was able to install was old, so I edited /etc/apt/sources.list and /etc/apt/sources.list.d to change it from bullseye to bookworm.
And I can run fullupgrade from the terminal within the kali template?

Also, I have no idea what you mean by putting the Qubes package on hold. I’d appreciate it if you could tell me.

I just installed Qubes and haven’t used Linux much.

Please let me know what /etc/apt/sources.list and /etc/apt/sources.list.d should be rewritten to.

I just installed QubesOS about 10 days ago and am new to it. I am not a computer educated person, and although I have used Linux, I have only used the GUI and a little terminal, so I don’t really know what I’m doing.
I don’t understand why I could install the template but need to do something else. I would appreciate it if you could explain the situation a little more.

I understand that the kali template I installed is debian11 and old and I need to upgrade to debian12.
But what is a keyring and what does it have to do with the update?
I don’t understand what the repository needs to be rewritten to.
I am just now getting overwhelmed by the complexity of implementing a template.

Dont do it.

You’ve only driven family cars, you’ve just acquired a supercar, and
you’re trying to bolt on a turbocharger.
There’s every chance you will end up on YouTube for people to laugh at
with your supercar fail.

Take a step back.
Unless there’s some extremely pressing reason you must have Kali,
don’t. (By must, I mean, your life or your job depends on it.)
Spend some time using Qubes, understanding how it works, and what you
can do with it. Look to see how you can split up your activities between
different qubes.
Read the fine documentation, and practice.

Once you are more familiar with Qubes generally, then you will find that
things become easier.
In particular you will find that many problems that people have in Qubes
are actually not Qubes specific.
You will find many guides online to help you, and you will better
understand what parts will be Qubes specific, and how to deal with them.

I never presume to speak for the Qubes team. When I comment in the Forum or in the mailing lists I speak for myself.

Thanks, I really want to use kali with QubesOS.
Everyone seems to have a hard time with kali.
But I think this is a good opportunity to understand about QubesOS.

Out of curiosity, why do you have such a strong desire to use Kali right away? Do you believe it will bring you specific benefits that the default templates will not?

That is because I think it is safe to use kali within QubesOS.
I want to study kali, but I feel it is not safe to install and use it with liveUSB.
I can’t be sure of the safety of the softwares installed in kali, but I feel safe within QubesOS.
Is this paranoia?