-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 04/23/18 18:01, [email protected] wrote: > I have a very similar setup of domains as mentioned by Joanna in > the article. What I am missing are the settings of the TemplateVMs > for the mentioned AppVMs. What additional apps are installed in > which TemplateVM and why. > > I understand it is a personal question, but it would help a lot to > see whole picture with reasons for this or that setup. If all the > AppVMs are just used with the preset Templates debian-9, fedora-26 > and whonix, or there are some custom ones. Like Joanna is > mentioning she is using her work-pub AppVM for presentations. Is it > like preparing presentations with Libreoffice installed in a > debian-9 TemplateVM for example, or is there an another TemplateVM > dedicated to this task? If there is, why so?
You can install apps on defaults templates and choice between debian or fedora is more a personal decision (you trust more one than other, you like this for some app since it has a more recent version or it's not available on the other, etc...). You can add more templates cloning the defaults and modifying them, or installing some of the community supported or building one yourself.[1] If you need to install some software not included in the distribution, you should clone the template and use it with the AppVM which need that program. You can also use an StandaloneVM if you only need it for one AppVM. Installing software from official distribution repositories should be considered safe but in some cases you could like to use a cloned template. For example when you want to compile source on some AppVM but don't want to install a lot of libs and dev packages on the main template. Finally is a trade-off between security and hard disk usage. It's unlikely that a template gets compromised but it could happen and in some case it's good idea to split your AppVM on different ones. [1] https://www.qubes-os.org/doc/templates/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEznLCgPSfWTT+LPrmFBMQ2OPtCKUFAlreFycACgkQFBMQ2OPt CKVwwg/+IrLDBWLwmfAJHGDF7B5mtfF8zEHYxohSWTJhHk73qGCxGttShWn6sb2J UZy3KLQvDFLbp7iQiBvmkajYdD4MrdLW02JHfcBd8vjKncTvIrLTLtejOsR3oU9G GuDfxwnnAWHFyhzJas3OdoZ0kT5ow09ci8qLf6M2nBiesxQ2Invjh4TKcO4zzX0C dP2EPBXdw2OYhJObP0kE0ihP9pW6q8cmnvLqjD1finRq9j14U7UL+TGY7zl69c8L 8dl/BPyUYjDer3xhqp2ct2aVyTYDCLGK9PuI831MtXgbc6HmH+jBJNigQeOk9Dgi b4wh9qUWhcsF4W8lqXIfDQu90Pmix9M+Gs0lCRlsw8lXXSU5b8SjWRFFCnkwy9qX ksJRjz3Lky45ctTge4QjSYJFPgNKzCgTezrGDhacGquS42PSlA4LK93LiJbIKFbf 2b6kh2cmNTp4K4q7my71HwPSh3u/YaRzXZbgxyIKd7CPq8630aL6rIt16uyfNVLD 1G1Zcl2eJWBoIX207TpNGVWYoF0Zx16+OapbmQXIGON1isdS9fRDNK/JOSiTJIsb xaHInkqm93ZI3vRqtN4CPBQsD5CSp5gTAZ3IjBgTKL3GkoIBnfXxqlhDOJJ4t4xA dfVXy/EOiaYNVypuffgTojpBrtnFG5Wg3UNs+OiMYfFAq0xEP1U= =l5Zt -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/1f73ef28-f2ec-c321-9d43-0dfe5e1f002f%40riseup.net. For more options, visit https://groups.google.com/d/optout.
