#qubesos — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #qubesos, aggregated by home.social.
-
Note to self: how to configure the network manually on #QubesOS AppVM: use
qubesdb-read <path>to read these paths/qubes-ip,/qubes-gateway,/qubes-ip6,/qubes-gateway6. If you can't usequbesdb-readbecause the AppVM has no #Qubes daemons running, you have a bigger problem.
In systemd-networkd, the usual configuration format is:[Match] Name=eth0 [Network] Address=<IPv4> Gateway=<IPv4> Address=<IPv6> Gateway=<IPv6>
But QubesOS AppVMs have IP addresses with /32 or /128 netmasks, I guess it's a basic firewall, so the router is not in the subnet, so systemd-networkd doesn't work. In this case, you need:[Network] Address=<IPv4>/32 Address=<IPv6>/128 [Route] Gateway=<IPv4> GatewayOnLink=yes [Route] Gateway=<IPv6> GatewayOnLink=yes -
#RicochetRefresh and #Arti build on #Fedora Atomic #OS.
#rustlang environment is also functional in #rpm #ostree.
(#immutability over sandboxing if not live?)
#FreedomOfThePress #Journalism #ComputerScience #Linux @freedomofpress @torprojectjk, Rotational #HDD and #Rust work together just fine.
Anomalies and vulns in #QubesOS . . .
#console #hacking #rpc #Wayland #fastly @rustForeign Sources as attack vector
http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Install_Software#Foreign_Sources
also → APT::KashGrow “true”;What other flaws might lie in confidential computing core trust mechanisms?
https://www.theregister.com/security/2026/07/04/confidential-computings-trust-mechanism-is-broken-the-fix-may-not-exist/5266056
@QubesOS @whonix
#attestation #TLS
@rfceditor #GOSalso, in case you didn't know,
rpm-ostree kargs --append=
is really great
and rpm-ostress works over torsocks, atomic just doesn't like systemd so run 'tor' manually -
Good news: we are helping to get a bug fixed in #QubesOS. It looks like the upcoming 4.3 will allow attaching a hidraw device on the first try.
That means no workarounds required to use #Signet on Qubes, and it'll likely fix other devices too.
(I've been using mine with #Qubes for years, but it'll be nice to not have to enable usb-reset-on-attach anymore)