From a756b0e62dd4e1f7732eabcadb650eedf7d09ad5 Mon Sep 17 00:00:00 2001 From: prism_breaker Date: Mon, 16 Dec 2024 12:09:04 +0000 Subject: [PATCH] Some typo fix --- opsec/qubesos/index.html | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/opsec/qubesos/index.html b/opsec/qubesos/index.html index b28b796..d50a19d 100644 --- a/opsec/qubesos/index.html +++ b/opsec/qubesos/index.html @@ -120,9 +120,9 @@ $ sudo blkid

For example my usb is located at /dev/sda, then we use dd to burn the image into usb


-$ sudo dd if= of=/dev/sda status=progress
+$ sudo dd if=file_name.iso of=/dev/sda status=progress
-

Warning: dd is a low level too aka data destroyer, check the input parameters carefully and make sure "of" points towards your usb, otherwise it might nuke your computer !!!

+

Warning: dd is a low level tool aka data destroyer, check the parameters carefully and make sure parameters behind "of" points towards your usb, otherwise it might nuke your computer !!!

@@ -135,8 +135,8 @@ $ sudo dd if= of=/dev/sda status=progress

Install



-

Next thing is to reboot into your computer and BIOS(EFI), this is different for every platform so you should find it out on google.

-

You need to make two changes in BIOS basically, first you need to turn off secure boot(I know this is sad), but unfortunately secure boot and Xen did not work together on most consumer grade machines. I personally recommends only use qubes at home pc, or those so called "Qubes certified" laptops equipped with heads(What is header -> https://trmm.net/Heads/) that can protect your boot partition and has anti evil maid features https://www.qubes-os.org/doc/certified-hardware/.

+

Next thing is to reboot into your computer and enter BIOS(EFI), this is different for every platform so you should find it out on google.

+

You need to make two changes in BIOS basically, first you need to turn off secure boot(I know this is sad), but unfortunately secure boot and Xen did not work together on most consumer grade machines. I personally recommends only use qubes at home pc, or those so called "Qubes certified" laptops equipped with heads(What is heads : https://trmm.net/Heads/) that can protect your boot partition and has anti evil maid features https://www.qubes-os.org/doc/certified-hardware/.

Next if you are on UEFI mode you need to enable "CSM". https://superuser.com/questions/1284392/what-exactly-is-uefi-with-csm-boot-mode. You also need to find that in your bios menu, it should usually appear below boot options. This can fix a lot of potential troubles later

Final thing is remember to turn on vt-x or cpu virtualization support, since this is needed for Qubes. Check your bios, if there is a setting called IOMMU, you also need to enable that

Finally, reboot and choose your usb as a boot device

@@ -148,7 +148,6 @@ $ sudo dd if= of=/dev/sda status=progress

At this step you need to config the disk, click the installation destination

If you are installing on a fresh drive just check the three areas on the pictures

-

Next is to choose a disk encryption password, notice this is the password used to encrypt your disk and is the only thing protects you when FBI kicks your door, so make sure it is strong enough

Select "delete all" and "reclaim space", make sure you backed up everything!

@@ -170,7 +169,7 @@ $ sudo dd if= of=/dev/sda status=progress

These configs in most situation do not need to be changed, however if you are using wired connection you can make sys-net disposable, this increases your security a little bit.

If you are using wireless network through a usb dongle you might need to choose "Use sys-net qube for both networking and USB devices"

-

You can also enable system and template update over tor, but this will become significantly slower for big updates. And there is no need to touch the advanced configuration.

+

You can also enable system and template update over tor, but this will make it significantly slower for big updates. And there is no need to touch the advanced configuration.

Click done and let the scripts run, do not interrupt it by closing your computer

And finally we get our Qubes