qubes-issues VS qubes-mirage-firewall

Are you using an Nvidia GPU?

https://github.com/QubesOS/qubes-issues/issues/5104

https://github.com/QubesOS/qubes-issues/issues/7591

If not, try this: https://github.com/QubesOS/qubes-issues/issues/6880#issuecom...

There is no tearing on my Librem laptops.

> The gnome desktop will be important for adoption

Gnome is too opinionated to adjust it for Qubes: https://github.com/QubesOS/qubes-issues/issues/1806#issuecom...

However you can easily install KDE.

Are we still getting a second RC for 4.2? I remember originally we were told that we would because of the new Qubes builder tool, but I see the milestone jumped to 96% since last I checked, are we getting a full release at the 100% github milestone? Or what happens when it hits 100? https://github.com/QubesOS/qubes-issues/milestone/26

This project was never stagnant, a lot of things are always happening here: https://github.com/QubesOS/qubes-issues.

Concerning the certified hardware, few vendors try to make the certification, and also coreboot is required: https://www.qubes-os.org/doc/certified-hardware/#hardware-ce...

Not precisely, but a lot is going on in this direction: https://github.com/QubesOS/qubes-issues/issues/1939.

I read that there is a plan to implement per-VM encryption (https://github.com/QubesOS/qubes-issues/issues/1293)

Looks like a fix might be close at hand: This pull request is linked to the issue "Hardware support: Ryzen 7000 series / Zen 4 / AM5."

This bug report indicates that "kernel-latest" will be in the next official build of the Qubes 4.1 install ISO. Thing is on the mirrors the last release of 4.1 (actually 4.1.1) was July 18th 2022, and thus the title of this post.

2) https://github.com/mirage/qubes-mirage-firewall is by far a better firewall for Qubes than OpenBSD ever will be - unikernels are far more secure than a traditional operating system is and you can read all about it on https://mirageos.org/

That's correct. It does mean that the closest to a self-contained program you can run is a unikernel like the mirage-firewall, unfortunately. On the upside, those remain easily portable to essentially anything that can run VMs so long as you adjust the image format.

That sounds similar to a unikernel. There are actual uses for those in seL4 and Qubes OS such as a firewall-qube (in theory unikernel qubes should be able to take far less system resources to run than full Linux+distro qubes).

Here's one that is "production" ready: the Mirage-Firewall microkernel running on Qubes OS.[0]

[0] : https://github.com/mirage/qubes-mirage-firewall

sys-net, sys-firewall and other administrative vms should slowly migrate to unikernels instead of running linux, which should help with ram usage. The mirage.io project seems to build a couple qubes vms, for example https://github.com/mirage/qubes-mirage-firewall is a firewall which they indicate to give 64Mb of ram.