Re: [qubes-users] TemplateVM Best-Practices?
On 12/01/2016 10:32 PM, Chris Laprise wrote: > One precaution I usually follow is not putting development tools like > compilers in systems that are meant for non-development use. That is the reason it is separated right now :) But in case of the actual Devel AppVM is network enabled (it is in my case) so an attacker free to download any shit - including the missing compilers. So it is only a very thin layer of added security - if any. In contrast I have a huge the upgrade and backup overhead. > If I were to merge any of those categories you listed, it would be Work and > Regular. In my case the work VM contains real work related apps that is only for internal use, coming from an internal repo. So it is no way to mix with any of my other templates. -- Zrubi -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/cff51c52-65f3-0555-53cd-334739dfc403%40zrubi.hu. For more options, visit https://groups.google.com/d/optout. signature.asc Description: OpenPGP digital signature
Re: [qubes-users] TemplateVM Best-Practices?
On 12/01/2016 03:48 AM, Zrubi wrote: On 11/30/2016 02:59 PM, Loren Rogers wrote: Hi all, Are there any recommended strategies for creating and managing TemplateVMs for regular users? I'm having those templates: netVMs, Proxym Firewall, VPN: fedora minimal based regular AppVMs: Fedora, stuffed with all the apps I ever needed. Devel VMs : Fedora, with development focused things. Work : Fedora with work related apps. Still thinking of merging the Devel one with my regular template because of the update overhead. One precaution I usually follow is not putting development tools like compilers in systems that are meant for non-development use. If I were to merge any of those categories you listed, it would be Work and Regular. Chris -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ecaca031-8057-8f5a-f14e-c650ac0652d0%40openmailbox.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] TemplateVM Best-Practices?
On 11/30/2016 02:59 PM, Loren Rogers wrote: > Hi all, > > Are there any recommended strategies for creating and managing > TemplateVMs for regular users? > I'm having those templates: netVMs, Proxym Firewall, VPN: fedora minimal based regular AppVMs: Fedora, stuffed with all the apps I ever needed. Devel VMs : Fedora, with development focused things. Work : Fedora with work related apps. Still thinking of merging the Devel one with my regular template because of the update overhead. -- Zrubi -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e05ce082-80a0-e49a-0198-38a6092bdfd4%40zrubi.hu. For more options, visit https://groups.google.com/d/optout. signature.asc Description: OpenPGP digital signature
[qubes-users] TemplateVM Best-Practices?
Hi all, Are there any recommended strategies for creating and managing TemplateVMs for regular users? I use Qubes as my daily computer for regular tasks, and I'm wondering how I can better manage my installations. For example, I currently have one TemplateVM that I install everything into. (It's a clone of the default, which is still used for system stuff.) It seems to me like this isn't great practice - is there a better way? Or is this totally fine? Thanks -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3607-97de-64aa-dfea-fff80dfb505d%40lorentrogers.com. For more options, visit https://groups.google.com/d/optout.