the maddening truth of using Qubes

• qubes-app-linux-usb-proxy

  1 19 5.3 Python

  USBIP over qrexec proxy

  

Regarding USB, yeah, the usb-proxy doesn't have support for all things. I think it comes down to stuff not implemented in Linux USBIP or USB support (I've had issues with some device controllers not actually implementing what they claim to implement).

• podman

  359 21,816 10.0 Go

  Podman: A tool for managing OCI containers and pods.

  

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• flatkvm

  2 113 10.0 Rust

  A tool to easily run flatpak apps isolated inside a VM using QEMU/KVM

  

So basically Flatpak but with stricter permissions? There was also this but sadly it's dead: https://github.com/flatkvm/flatkvm

• Flatseal

  54 1,034 9.1 JavaScript

  Manage Flatpak permissions

What about flatseal then ? https://github.com/tchx84/Flatseal

• genode

  14 8 0.0 C

  Genode OS Framework

Have you looked at Genode? I don't think it's usable day-to-day yet but the concepts seem interesting.

• coreboot

  92 2,075 10.0 C

  Mirror of https://review.coreboot.org/coreboot.git. We don't handle Pull Requests.

  

Coreboot/Libreboot (recently merged with OSboot, so presumably that means the policy problems have been fixed) as far as I know do not benefit from any such standardization and often have to resort to reverse-engineering.

• qubes-issues

  103 524 5.0

  The Qubes OS Project issue tracker

  

Effectively following development on Qubes in general is the closest you'll get. For that there's the news, the mailing lists, the Github repos & issues and the forum to a lesser degree.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• qubes-mirage-firewall

  5 202 7.2 OCaml

  A Mirage firewall VM for QubesOS

  

That's correct. It does mean that the closest to a self-contained program you can run is a unikernel like the mirage-firewall, unfortunately. On the upside, those remain easily portable to essentially anything that can run VMs so long as you adjust the image format.

• manjarno

  601 130 2.3 Svelte

  Why you shouldn't use Manjaro (by EmeraldSnorlax)

I might want to suggest avoiding Manjaro for altogether different reasons.

• scripts

  36 11 4.9 Shell

  various scripts and tools (by xkcd386at)

My solution to that is: https://github.com/xkcd386at/scripts/blob/master/usff -- run firefox under different Unix userids. This way I only have to watch for issues that cause privilege escalation (i.e., an exploit that gives root access). These are pretty rare in general, but even more so if the attackers access is only via a browser

Suggest a related project