Qubes OS

Notes on high-security computing using Xen-based compartmentalization.

🔐 Architecture#

• Dom0: The admin domain and attack surface reduction.
• Templates: Fedora/Debian template management and updates.
• AppVMs: Disposable and persistent domain usage.

⚙️ Configuration#

• Qubes RPC (qrexec): Policy definitions for inter-VM communication.
• Networking: sys-net and sys-firewall chaining.
• Hardware: USB handling and device isolation.

📚 External Resources#

• Qubes OS Documentation - Security architecture and user guides.