Re: [qubes-users] Help with setting up qubes domains structure

[donoban]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 04/23/18 18:01, qubes-...@tutanota.com wrote:
> I have a very similar setup of domains as mentioned by Joanna in
> the article. What I am missing are the settings of the TemplateVMs
> for the mentioned AppVMs. What additional apps are installed in
> which TemplateVM and why.
> 
> I understand it is a personal question, but it would help a lot to
> see whole picture with reasons for this or that setup. If all the
> AppVMs are just used with the preset Templates debian-9, fedora-26
> and whonix, or there are some custom ones. Like Joanna is
> mentioning she is using her work-pub AppVM for presentations. Is it
> like preparing presentations with Libreoffice installed in a
> debian-9 TemplateVM for example, or is there an another TemplateVM
> dedicated to this task? If there is, why so?

You can install apps on defaults templates and choice between debian
or fedora is more a personal decision (you trust more one than other,
you like this for some app since it has a more recent version or it's
not available on the other, etc...).

You can add more templates cloning the defaults and modifying them, or
installing some of the community supported or building one yourself.[1]

If you need to install some software not included in the distribution,
you should clone the template and use it with the AppVM which need
that program. You can also use an StandaloneVM if you only need it for
one AppVM.

Installing software from official distribution repositories should be
considered safe but in some cases you could like to use a cloned
template. For example when you want to compile source on some AppVM
but don't want to install a lot of libs and dev packages on the main
template.

Finally is a trade-off between security and hard disk usage. It's
unlikely that a template gets compromised but it could happen and in
some case it's good idea to split your AppVM on different ones.

[1] https://www.qubes-os.org/doc/templates/
-BEGIN PGP SIGNATURE-
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=l5Zt
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1f73ef28-f2ec-c321-9d43-0dfe5e1f002f%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

[qubes-users] Help with setting up qubes domains structure

[qubes-fan]

Hi, I went carefully through the 
https://blog.invisiblethings.org/2011/03/13/partitioning-my-digital-life-into.html
 

 article and would like to get more insight. I am trying to set my structure of 
cubes up, and looking for the inputs and ideas. Also I know the thread modeling 
is a key every time and there is no fit-for-all layout, but the logic behind 
would be nice to see.

I have a very similar setup of domains as mentioned by Joanna in the article. 
What I am missing are the settings of the TemplateVMs  for the mentioned 
AppVMs. What additional apps are installed in which TemplateVM and why. 

I understand it is a personal question, but it would help a lot to see whole 
picture with reasons for this or that setup. If all the AppVMs are just used 
with the preset Templates debian-9, fedora-26 and whonix, or there are some 
custom ones. 
Like Joanna is mentioning she is using her work-pub AppVM for presentations. Is 
it like preparing presentations with Libreoffice  installed in a debian-9 
TemplateVM for example, or is there an another TemplateVM dedicated to this 
task? If there is, why so?

Maybe some more experienced user could clear this more for me? 

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/LAnEFi2--3-0%40tutanota.com.
For more options, visit https://groups.google.com/d/optout.