Re: [qubes-users] TemplateVM Best-Practices?

2016-12-02 Thread Zrubi
On 12/01/2016 10:32 PM, Chris Laprise wrote:

> One precaution I usually follow is not putting development tools like
> compilers in systems that are meant for non-development use. 

That is the reason it is separated right now :)

But in case of the actual Devel AppVM is network enabled (it is in my
case) so an attacker free to download any shit - including the missing
compilers. So it is only a very thin layer of added security - if any.

In contrast I have a huge the upgrade and backup overhead.


> If I were to merge any of those categories you listed, it would be Work and 
> Regular.

In my case the work VM contains real work related apps that is only for
internal use, coming from an internal repo. So it is no way to mix with
any of my other templates.


-- 
Zrubi

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/cff51c52-65f3-0555-53cd-334739dfc403%40zrubi.hu.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature


Re: [qubes-users] TemplateVM Best-Practices?

2016-12-01 Thread Chris Laprise

On 12/01/2016 03:48 AM, Zrubi wrote:

On 11/30/2016 02:59 PM, Loren Rogers wrote:

Hi all,

Are there any recommended strategies for creating and managing
TemplateVMs for regular users?


I'm having those templates:
netVMs, Proxym Firewall, VPN: fedora minimal based
regular AppVMs: Fedora, stuffed with all the apps I ever needed.
Devel VMs : Fedora, with development focused things.
Work : Fedora with work related apps.

Still thinking of merging the Devel one with my regular template because
of the update overhead.


One precaution I usually follow is not putting development tools like 
compilers in systems that are meant for non-development use. If I were 
to merge any of those categories you listed, it would be Work and Regular.


Chris

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ecaca031-8057-8f5a-f14e-c650ac0652d0%40openmailbox.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] TemplateVM Best-Practices?

2016-12-01 Thread Zrubi
On 11/30/2016 02:59 PM, Loren Rogers wrote:
> Hi all,
> 
> Are there any recommended strategies for creating and managing
> TemplateVMs for regular users?
> 

I'm having those templates:
netVMs, Proxym Firewall, VPN: fedora minimal based
regular AppVMs: Fedora, stuffed with all the apps I ever needed.
Devel VMs : Fedora, with development focused things.
Work : Fedora with work related apps.

Still thinking of merging the Devel one with my regular template because
of the update overhead.


-- 
Zrubi

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e05ce082-80a0-e49a-0198-38a6092bdfd4%40zrubi.hu.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature


[qubes-users] TemplateVM Best-Practices?

2016-11-30 Thread Loren Rogers

Hi all,

Are there any recommended strategies for creating and managing 
TemplateVMs for regular users?


I use Qubes as my daily computer for regular tasks, and I'm wondering 
how I can better manage my installations. For example, I currently have 
one TemplateVM that I install everything into. (It's a clone of the 
default, which is still used for system stuff.) It seems to me like this 
isn't great practice - is there a better way? Or is this totally fine?


Thanks


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3607-97de-64aa-dfea-fff80dfb505d%40lorentrogers.com.
For more options, visit https://groups.google.com/d/optout.