Qubes OS

Notes on high-security computing using Xen-based compartmentalization.

🔐 Architecture#

  • Dom0: The admin domain and attack surface reduction.
  • Templates: Fedora/Debian template management and updates.
  • AppVMs: Disposable and persistent domain usage.

⚙️ Configuration#

  • Qubes RPC (qrexec): Policy definitions for inter-VM communication.
  • Networking: sys-net and sys-firewall chaining.
  • Hardware: USB handling and device isolation.

📚 External Resources#