On Saturday, 20 January 2018 17:48:58 UTC, Marek Marczykowski-Górecki wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On Sat, Jan 20, 2018 at 03:00:08PM +0100, Tom Zander wrote: > > On Saturday, 20 January 2018 03:06:53 CET Marek Marczykowski-Górecki wrote: > > > fedora-26, as default template for AppVMs, contains default user > > > applications, like Firefox, Thunderbird. Shipping a _desktop_ operating > > > system without web browser isn't going to work... > > > > I understand the argument, and I see you make a lot of sense. > > > > On the other hand there are a lot of little practical issues with this. > > For instance; firefox has a 2-monthly releas cycle > > https://wiki.mozilla.org/RapidRelease/Calendar > > which makes any release from Qubes (on DVD) outdated really fast. > > > > I would guess people would suggest new qubes users would need to always > > keep > > up-to-date, by downloading the latest from the internet. > > > > So in reality you end up shipping a firefox and various other large > > packages > > which will be deleted hours after being installed because they are outdated > > and possibly a security risk. > > Actually, Fedora support differential updates (*.drpm, being a binary > diff of packages). So it isn't that much waste of space... > > Also, launching an update (simple action, available from GUI) is > easier than finding what packages you need to install and where.
You could have Qubes's recommended security bundles (sets of packages) to install on top of a minimal. You install Qubes (selecting minimal Fedora or Debian), update, install the "bundle" you want (anonymous browsing, signed emails, pen-tester) in a new template or existing one. > > > For 4.1 it would be nice to have a better process in place, like I > > described > > earlier in this thread. So we can avoid shipping something on valuable DVD > > space that the user will never actually use. > > - -- > Best Regards, > Marek Marczykowski-Górecki > Invisible Things Lab > A: Because it messes up the order in which people normally read text. > Q: Why is top-posting such a bad thing? > -----BEGIN PGP SIGNATURE----- > > iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlpjgN0ACgkQ24/THMrX > 1yx9Jgf/fAEHr9q47cM671y0921mm0msfeVAXeRm+8VfMEeRNWxDT8+pMplJ11Io > jpHvnq4UChdJwOKvOb2m9xrsDXXVXfImDACuXRETmezlG892xqF1Qv51zW2XwcVO > FAByR5CbKg4RNU51t8EknrIm+rA3laadDZ8/UkxRw6f/e3oDErI/7lHqPo5jv4sD > Ub5z4d7wlFPHOguVDEhv/ySyiodq5CNSpX6tC9037BIqiYdJk4V46Y8FfYjS1HqN > frwQqpUrGlZVEgOhZ66KA9uVrQYzr/dzidIvJRjR3FdEyyClPyPNwwNj44YBpumX > OHJ9n0/WlKBrqMe1w1288pgNtHlh0A== > =LYcV > -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To post to this group, send email to qubes-devel@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/2055628b-1e33-43d6-9c10-4f5812493d5f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
