oxeo0/blog-contributions
1
0
Fork 0
mirror of http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/blog-contributions.git synced 2025-07-02 11:56:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Some typo fix

Browse source
This commit is contained in:
prism_breaker 2024-12-16 12:09:04 +00:00
parent 2d96ed01bd
commit a756b0e62d
1 changed files with 5 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

11
opsec/qubesos/index.html
View file

@ -120,9 +120,9 @@ $ sudo blkid
<p>For example my usb is located at /dev/sda, then we use dd to burn the image into usb</p> <p>For example my usb is located at /dev/sda, then we use dd to burn the image into usb</p>
<pre><code class="nim"> <pre><code class="nim">
$ sudo dd if=<Qubes OS install ISO name> of=/dev/sda status=progress $ sudo dd if=file_name.iso of=/dev/sda status=progress
</code></pre> </code></pre>
<p>Warning: dd is a low level too aka data destroyer, check the input parameters carefully and make sure "of" points towards your usb, otherwise it might nuke your computer !!!</p> <p>Warning: dd is a low level tool aka data destroyer, check the parameters carefully and make sure parameters behind "of" points towards your usb, otherwise it might nuke your computer !!!</p>
</div> </div>
</div><!-- /row --> </div><!-- /row -->
</div> <!-- /container --> </div> <!-- /container -->
@ -135,8 +135,8 @@ $ sudo dd if=<Qubes OS install ISO name> of=/dev/sda status=progress
<div class="row"> <div class="row">
<div class="col-lg-8 col-lg-offset-2"> <div class="col-lg-8 col-lg-offset-2">
<h2><b>Install</b></h2> </br> </br> <h2><b>Install</b></h2> </br> </br>
<p>Next thing is to reboot into your computer and BIOS(EFI), this is different for every platform so you should find it out on google.</p> <p>Next thing is to reboot into your computer and enter BIOS(EFI), this is different for every platform so you should find it out on google.</p>
<p>You need to make two changes in BIOS basically, first you need to turn off secure boot(I know this is sad), but unfortunately secure boot and Xen did not work together on most consumer grade machines. I personally recommends only use qubes at home pc, or those so called "Qubes certified" laptops equipped with heads(What is header -> <a href="https://trmm.net/Heads/">https://trmm.net/Heads/</a>) that can protect your boot partition and has anti evil maid features <a href="https://www.qubes-os.org/doc/certified-hardware/">https://www.qubes-os.org/doc/certified-hardware/</a>. </p> <p>You need to make two changes in BIOS basically, first you need to turn off secure boot(I know this is sad), but unfortunately secure boot and Xen did not work together on most consumer grade machines. I personally recommends only use qubes at home pc, or those so called "Qubes certified" laptops equipped with heads(What is heads : <a href="https://trmm.net/Heads/">https://trmm.net/Heads/</a>) that can protect your boot partition and has anti evil maid features <a href="https://www.qubes-os.org/doc/certified-hardware/">https://www.qubes-os.org/doc/certified-hardware/</a>. </p>
<p>Next if you are on UEFI mode you need to enable "CSM". <a href="https://superuser.com/questions/1284392/what-exactly-is-uefi-with-csm-boot-mode">https://superuser.com/questions/1284392/what-exactly-is-uefi-with-csm-boot-mode</a>. You also need to find that in your bios menu, it should usually appear below boot options. This can fix a lot of potential troubles later</p> <p>Next if you are on UEFI mode you need to enable "CSM". <a href="https://superuser.com/questions/1284392/what-exactly-is-uefi-with-csm-boot-mode">https://superuser.com/questions/1284392/what-exactly-is-uefi-with-csm-boot-mode</a>. You also need to find that in your bios menu, it should usually appear below boot options. This can fix a lot of potential troubles later</p>
<p>Final thing is remember to turn on vt-x or cpu virtualization support, since this is needed for Qubes. Check your bios, if there is a setting called IOMMU, you also need to enable that</p> <p>Final thing is remember to turn on vt-x or cpu virtualization support, since this is needed for Qubes. Check your bios, if there is a setting called IOMMU, you also need to enable that</p>
<p>Finally, reboot and choose your usb as a boot device</p> <p>Finally, reboot and choose your usb as a boot device</p>
@ -148,7 +148,6 @@ $ sudo dd if=<Qubes OS install ISO name> of=/dev/sda status=progress
<p>At this step you need to config the disk, click the installation destination</p> <p>At this step you need to config the disk, click the installation destination</p>
<img src="Screenshot From 2024-12-05 16-29-00.png" class="imgRz" style="width: 900px"> <img src="Screenshot From 2024-12-05 16-29-00.png" class="imgRz" style="width: 900px">
<p>If you are installing on a fresh drive just check the three areas on the pictures</p> <p>If you are installing on a fresh drive just check the three areas on the pictures</p>
<img src="Screenshot From 2024-12-05 16-28-40.png" class="imgRz" style="width: 900px">
<p>Next is to choose a disk encryption password, notice this is the password used to encrypt your disk and is the only thing protects you when FBI kicks your door, so make sure it is strong enough</p> <p>Next is to choose a disk encryption password, notice this is the password used to encrypt your disk and is the only thing protects you when FBI kicks your door, so make sure it is strong enough</p>
<img src="Screenshot From 2024-12-05 16-29-12.png" class="imgRz" style="width: 900px"> <img src="Screenshot From 2024-12-05 16-29-12.png" class="imgRz" style="width: 900px">
<p>Select "delete all" and "reclaim space", make sure you backed up everything!</p> <p>Select "delete all" and "reclaim space", make sure you backed up everything!</p>
@ -170,7 +169,7 @@ $ sudo dd if=<Qubes OS install ISO name> of=/dev/sda status=progress
<img src="Screenshot From 2024-12-05 16-40-34.png" class="imgRz" style="width: 900px"> <img src="Screenshot From 2024-12-05 16-40-34.png" class="imgRz" style="width: 900px">
<p>These configs in most situation do not need to be changed, however if you are using wired connection you can make sys-net disposable, this increases your security a little bit.</p> <p>These configs in most situation do not need to be changed, however if you are using wired connection you can make sys-net disposable, this increases your security a little bit.</p>
<p>If you are using wireless network through a usb dongle you might need to choose "Use sys-net qube for both networking and USB devices"</p> <p>If you are using wireless network through a usb dongle you might need to choose "Use sys-net qube for both networking and USB devices"</p>
<p>You can also enable system and template update over tor, but this will become significantly slower for big updates. And there is no need to touch the advanced configuration.</p> <p>You can also enable system and template update over tor, but this will make it significantly slower for big updates. And there is no need to touch the advanced configuration.</p>
<p>Click done and let the scripts run, do not interrupt it by closing your computer</p> <p>Click done and let the scripts run, do not interrupt it by closing your computer</p>
<img src="Screenshot From 2024-12-05 17-40-39.png" class="imgRz" style="width: 900px"> <img src="Screenshot From 2024-12-05 17-40-39.png" class="imgRz" style="width: 900px">
<p>And finally we get our Qubes</p> <p>And finally we get our Qubes</p>