Why doesn't QubesOS use OpenBSD for its admin vm instead of linux?

I don’t have a lot of background in this topic, so I apologise in advance if this is a dumb question.

Right now QubesOS uses an admin vm for system management. This vm is running fedora linux and is given the highest level of trust out of any vms on the machine. While fedora is secure as far as linux distros go it will inevitably have way more vulnerabilites than an os like OpenBSD, which is insanely secure, so why not use OpenBSD instead since the philosophy of QubesOS is to increase security as much as possible? Is there some reason OpenBSD isn’t capable of handling the tasks demanded by QubesOs? If thats the case, what would it take to get OpenBSD to that point? Also, would switching to OpenBSD even give any significant advantages compared to running linux?

2 Likes

I’m no expert on this, but there are two reasons I see. Lack of hardware compatibility, OpenBSD does not support as wide of a range of hardware as linux. And, it doesn’t seem like OpenBSD supports being dom0. Doing a quick search, the ai overview says it is not supported. There is only limited support for being a xen guest (domu).

Edit: grammar

2 Likes

The security of dom0 (as all the other vms’ security) is not dependent on the distro/OS installed there; it is instead based on isolation.

4 Likes

See also:

2 Likes

13 years ago, it has been said that someone earlier “liked” Fedora and as of today that is still the only info we have regarding distro choice, alongside the general reluctance of the team to discuss fundamental choices. So, take it cum grano salis, considering also:

1 Like

I don’t have a lot of background in this topic, so I apologise in advance if this is a dumb question.

Right now QubesOS uses an admin vm for system management. This vm is running fedora linux and is given the highest level of trust out of any vms on the machine. While fedora is secure as far as linux distros go it will inevitably have way more vulnerabilites than an os like OpenBSD, which is insanely secure, so why not use OpenBSD instead since the philosophy of QubesOS is to increase security as much as possible? Is there some reason OpenBSD isn’t capable of handling the tasks demanded by QubesOs? If thats the case, what would it take to get OpenBSD to that point? Also, would switching to OpenBSD even give any significant advantages compared to running linux?

OpenBSD has an interesting history with virtualisation. As Theo said:

Virtualization seems to have a lot of security benefits.

You’ve been smoking something really mind altering, and I think you
should share it.

x86 virtualization is about basically placing another nearly full
kernel, full of new bugs, on top of a nasty x86 architecture which
barely has correct page protection. Then running your operating system
on the other side of this brand new pile of shit.

You are absolutely deluded, if not stupid, if you think that a worldwide
collection of software engineers who can’t write operating systems or
applications without security holes, can then turn around and suddenly
write virtualization layers without security holes.

You’ve seen something on the shelf, and it has all sorts of pretty
colours, and you’ve bought it.

That’s all x86 virtualization is.

It’s feasible to run Xen on OpenBSD, but there is significant effort in
porting Qubes over.

As to your question, I think it’s already been answered.

3 Likes

Just in case anyone is thinking @unman has had a hiccup - there is a problem of formatting…

Most of that post is a quote of Theo de Raadt. (see here, for ex.)

Unman starts writing at “It’s feasible”.

(apologies to Unman, but I think the formatting is not visible on email)

4 Likes