| ```qvm-run --pass-io <src-vm> 'cat /path/to/file_in_src_domain' > /path/to/file_name_in_dom0```
| ```
qvm-run --pass-io <src-vm> 'cat /path/to/file_in_src_domain' > /path/to/file_name_in_dom0
```
|
```qvm-run --pass-io fedora-43 'cat /home/user/Downlods/firefox.sls' > firefox.sls```
Then do ```sudo mv (name of the file) /srv/salt/```
| ```
qvm-run --pass-io fedora-43 'cat /home/user/Downlods/firefox.sls' > firefox.sls
```
Then do
```
sudo mv (name of the file) /srv/salt/
```
|
In dom0 open a terminal and do ```sudo qubesctl state.apply librewolf``` (**don't put "sls" at the end of the command**) ```sudo qubesctl state.apply x``` where x = the name of the file in /srv/salt/
| In dom0 open a terminal and do
```
sudo qubesctl state.apply librewolf
```
(**don't put "sls" at the end of the command**)
```
sudo qubesctl state.apply x
```
where x = the name of the file in /srv/salt/
|
| :white_check_mark: Kernel hardening from Tails & Secureblue
:white_check_mark: Selinux automatic installation & enabled
|
| To get the fedora version [go on my codeberg repo](https://codeberg.org/dkzkz/apparmor-qubes/src/branch/main/install/salt/fedora/fedora)
| To get the fedora version [go on my codeberg repo](https://codeberg.org/dkzkz/apparmor-qubes/src/branch/main/install/salt/fedora/fedora)
To get the fedora Selinux version [go on my codeberg repo](https://codeberg.org/dkzkz/apparmor-qubes/src/branch/main/install/salt/fedora-selinux)
|
1. Update the original template , shutdown the original template clone the template
| 1. Update the original template , shutdown the original template clone the template , install packages and config inside the cloned template , shutdown the cloned template , create dvm
|
5. Debian andd kicksecure is using the unstable version of apparmor [because of this issue](https://gitlab.com/apparmor/apparmor/-/issues/592)
| 5. Debian and kicksecure is using the unstable version of apparmor [because of this issue](https://gitlab.com/apparmor/apparmor/-/issues/592)
|
8. IMCP request will not work due to the qvm-firewall rules i applied
9. In debian template i removed xterm in favor of Alacritty terminal
| 8. IMCP request will not work due to the qvm-firewall rules i applied (90% of software doesn't need it anyway)
9. In debian template i removed xterm in favor of Alacritty terminal because xterm is ugly , slow , and hard to deal with. But you can remove alacritty in the installation process if you want
|
| :x: I didn't enable selinux for fedora to avoid any problem for users. Fedora-43 seems unstable for now nautilus doesn't launch properly. I replaced nautilus by thunar for fedora
:x: Hostname anonymize feature doesn't work on fedora i will need help for make the script work in fedora
| |
| :x: I'm not really sure if the qvm-features anon-timezone 1 is properly working in my testing i get the same issue as https://forum.qubes-os.org/t/anon-timezone-doesnt-work-for-me/39539 i enabled anon-timezone 1 for every salt file but my timezone didn't change when i tested on website like https://browserleaks.com/
| :x: I'm not really sure if the qvm-features anon-timezone 1 is properly working in my testing i get the same issue as https://forum.qubes-os.org/t/anon-timezone-doesnt-work-for-me/39539 i enabled anon-timezone 1 for every salt file but my timezone didn't change when i tested on website like https://browserleaks.com/
|