On Wed, Mar 01, 2017 at 09:56:06PM -0800, [email protected] wrote: > Just as the title says. I wish to create a qubes hidden system in Veracrypt, > but I'm not entirely sure what the process for that would be. Do I run > veracrypt on Dom0, and from there the hidden volume that is created, will be > a clone of the whole OS? How would I run Veracrypt on Dom0? >
I'm pretty sure that Veracrypt documentation says that only Windows system encryption is supported, and I don't recall seeing anyone creating a hidden Linux system using Truecrypt. Probably wrong about that. On the other hand, you can fairly easily find guides on installing a hidden Linux system using LUKS. It isn't particularly easy but it is doable. Then you would want to install Qubes on to the hidden volume. Remember that Qubes uses disk encryption by default. An alternative approach might be to install Veracrypt in dom0 and create hidden volumes in which you store qubes. You could do this by creating base qubes, copying the files from /var/lib/qubes/appvms to the hidden volumes. Then you can use the qubes as normal. When you want the "secret" qube, decrypt the hidden volume and bind mount the qube folder over the folder in /var/lib/qubes/appvms. Could be worth a try, and relatively simple to do. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20170302231502.GA30721%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
