home.social

#qubesos — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #qubesos, aggregated by home.social.

  1. #Qubes zerfickt meinen Kopf. Ich hab gerade ernsthaft daeüber nachgedacht, einen Qube, also eine VM, nur für Zeitsynchronisatiom zu erstellen. #qubesos #paranoid #paranoia

  2. Note to self: how to configure the network manually on #QubesOS AppVM: use qubesdb-read <path> to read these paths /qubes-ip, /qubes-gateway, /qubes-ip6, /qubes-gateway6. If you can't use qubesdb-read because the AppVM has no #Qubes daemons running, you have a bigger problem.

    In systemd-networkd, the usual configuration format is:

    [Match]
    Name=eth0
    [Network]
    Address=<IPv4>
    Gateway=<IPv4>
    Address=<IPv6>
    Gateway=<IPv6>

    But QubesOS AppVMs have IP addresses with /32 or /128 netmasks, I guess it's a basic firewall, so the router is not in the subnet, so systemd-networkd doesn't work. In this case, you need:
    [Network]
    Address=<IPv4>/32
    Address=<IPv6>/128
    [Route]
    Gateway=<IPv4>
    GatewayOnLink=yes
    [Route]
    Gateway=<IPv6>
    GatewayOnLink=yes

  3. #RicochetRefresh and #Arti build on #Fedora Atomic #OS.
    #rustlang environment is also functional in #rpm #ostree.
    (#immutability over sandboxing if not live?)
    #FreedomOfThePress #Journalism #ComputerScience #Linux @freedomofpress @torproject

    jk, Rotational #HDD and #Rust work together just fine.
    Anomalies and vulns in #QubesOS . . .
    #console #hacking #rpc #Wayland #fastly @rust

    Foreign Sources as attack vector
    dds6qkxpwdeubwucdiaord2xgbbeyd
    also → APT::KashGrow “true”;

    What other flaws might lie in confidential computing core trust mechanisms?
    theregister.com/security/2026/
    @QubesOS @whonix
    #attestation #TLS
    @rfceditor #GOS

    also, in case you didn't know,
    rpm-ostree kargs --append=
    is really great
    and rpm-ostress works over torsocks, atomic just doesn't like systemd so run 'tor' manually

    #Karg #Kernel

  4. @Greguti Slt et merci ;) j'utilise #Qubesos, un systeme de virtualisation de type 1, fonctionne par isolation et #parrotos une sous distribution de debian et toi?

  5. Good news: we are helping to get a bug fixed in #QubesOS. It looks like the upcoming 4.3 will allow attaching a hidraw device on the first try.

    That means no workarounds required to use #Signet on Qubes, and it'll likely fix other devices too.

    (I've been using mine with #Qubes for years, but it'll be nice to not have to enable usb-reset-on-attach anymore)