Wow, a shopping list for qubes, what to improve:
1.0 Wizzards/Gui
1.1 Gui for internal network of qubes with virtual switches, routing and so on.
openvswitch is your friend and one needs to look for a softswitch gui in python
1.1.1 DHCP&TFTP server configurable for install of guest systems using PXE method.
Cool: PXE boot a disposable VM like tails, or some install like OpenbSD
Support for PXE menue art and orgy
1.1.2 VPN wizzard embedded with openvswitch/dhcp/tftpd
1.1x executive summary: have a virtual raspi pi to control a virtual vlan switch
2.0 Grub and Uncle XEN
have xen configurable using grub. Select different xen hypervisors with different features (nested vtd/hypervisors (proxmox, genymotion guests) / not so strict level 1 to n, so old CPUs can be used, )
boot parameter wizzard in sub menue
2.1 Grub: ship memtest86, pci bus scanner, kali RAMdisk-edition to clean up smoking debris
2.2 Airport mode: Default if you dont enter a password or hit a special configurable key at boot time (bios reads track0, head0, sector0).
Grub boots qubes with airport mode args as default so you see a windows you provide and have sys-usb and sys-net “debugging” it the clandestine way.
3.0 Boot up
3.0 Boot up: disk mantra: ship screen keyboard that moves buttons every time so one can mix keyboard and screen touch/mouse for mantra entry so a kbd sniffer does not get it all.
3.1 airport mode: boot up a native VM with windows XP, Windows 8 and hide Qubes, sys-usb sniffs everything, also sys-net is promiscious and nosy. Maybe, we find interesting blobs.
2&3 Executive summary: make bootstrapping great again.
- forensics mode for qubes manager or a special “forensics console”
4.1 freezing a running qube on button press
4.2 dumping RAM and storage of frozen VM into tarball
4.3 sniff traffic at VM and dump into pcap file named qubename_traffic_starttime_stoptime_interfacename.pcap. This sniffing is started and stopped by pressing a button in qubes-manager or “forensics console”
All forensics “evidence” is stored into dom0 into a forensics folder