User Documentation
The Basics
Security Information
- Security Center
- Security Pack
- Security Bulletins
- Canaries
- Xen Security Advisory (XSA) Tracker
- Why and How to Verify Signatures
- Qubes PGP Keys
Choosing Your Hardware
Installing & Upgrading Qubes
- Qubes Downloads
- Qubes Download Mirrors
- Installation Guide
- Upgrade Guides
- Why and How to Verify Signatures
- Security Considerations when Installing
- Try Qubes without installing: Qubes Live USB (alpha)
- Supported Versions
- Version Scheme
- Custom Installation
- Testing new releases and updates
Common Tasks
- Copying and Pasting Text Between Domains
- Copying and Moving Files Between Domains
- Copying from (and to) dom0
- Updating Software in dom0
- Updating and Installing Software in VMs
- Backup, Restoration, and Migration
- Using Disposable VMs
- Using and Managing USB Devices
- Recording Optical Discs
- Managing Application Shortcuts
- Enabling Fullscreen Mode
- Tips and Tricks
Managing Operating Systems within Qubes
- TemplateVMs
- Templates: Fedora
- Templates: Fedora Minimal
- Templates: Debian
- Templates: Archlinux
- Templates: Ubuntu
- Templates: Whonix
- Pentesting
- Pentesting: BlackArch
- Pentesting: Kali
- Pentesting: PTF
- Windows: Installing and Using Windows-based AppVMs (Qubes R2 Beta 3 and later)
- Windows: Creating and Using HVM and Windows Domains (Qubes R2+)
- Windows: Advanced options and troubleshooting of Qubes Tools for Windows (R3)
- Windows: Advanced options and troubleshooting of Qubes Tools for Windows (R2)
- Windows: Uninstalling Qubes Tools for Windows 2.x
- Fedora: Upgrading the Fedora 24 Template to Fedora 25
- Fedora: Upgrading the Fedora 23 Template to Fedora 24
- Fedora: Upgrading the Fedora 21 Template to Fedora 23
- Fedora: Upgrading the Fedora 20 Template to Fedora 21
- Fedora: Upgrading the Fedora 18 Template to Fedora 20
- Debian: Upgrading the Debian 8 Template to Debian 9
- How to Reinstall a TemplateVM
- Tips for Using Linux in an HVM
- Creating a NetBSD VM
Security Guides
- Qubes OS Project Security Information
- Security Guidelines
- Understanding Qubes Firewall
- Understanding and Preventing Data Leaks
- Installing Anti Evil Maid
- Using Multi-factor Authentication with Qubes
- Using GPG more securely in Qubes: Split GPG
- How to Set Up a Split Bitcoin Wallet in Qubes
- [Unofficial] Split dm-crypt
- Configuring YubiKey for user authentication
- Note regarding password-less root access in VM
Privacy Guides
- Whonix for Privacy & Anonymity
- Running Tails in Qubes
- Anonymizing your MAC Address
- TorVM
- Martus
- Signal
Configuration Guides
- Configuration Files
- How to set up a ProxyVM as a VPN Gateway
- Storing AppVMs on Secondary Drives
- Multibooting
- Resizing AppVM and HVM Disk Images
- Extending
root.imgSize - Installing ZFS in Qubes
- Mutt Guide
- Postfix Guide
- Fetchmail Guide
- Creating Custom NetVMs and ProxyVMs
- How to make proxy for individual tcp connection from networkless VM
- Make an HTTP Filtering Proxy in a FirewallVM
- Adding Bridge Support to the NetVM (EXPERIMENTAL)
- Assigning PCI Devices to AppVMs
- Enabling TRIM for SSD disks
- Configuring a Network Printer
- Using External Audio Devices
- Booting with GRUB2 and GPT
- Rxvt Guide
- Managing VM kernel
- Salt management stack
- Adding SSD storage cache
Customization Guides
- DispVM Customization
- Customizing Fedora minimal templates
- Customizing Windows 7 templates
- Using KDE in dom0
- Installing XFCE in dom0
- Installing i3 in dom0
- Language Localization
- Dark Theme in Dom0 and DomU
- How to make any file in a TemplateBasedVM persistent using bind-dirs
Troubleshooting
- Home directory is out of disk space error
- Installing on system with new AMD GPU (missing firmware problem)
- How to install an Nvidia driver in dom0
- Nvidia troubleshooting guide
- Lenovo ThinkPad Troubleshooting
- Apple MacBook Troubleshooting
- Getting Sony Vaio Z laptop to work with Qubes
- Troubleshooting UEFI related problems
- Fixing wireless on suspend & resume
- How to remove VMs manually
- Intel Integrated Graphics Troubleshooting
Reference Pages
- Dom0 Command-Line Tools
- DomU Command-Line Tools
- Glossary of Qubes Terminology
- Qubes Service Framework
- Command Execution in VMs (and Qubes RPC)
Presentation Slides
- [PDF] LinuxCon 2014 – Qubes OS R2 Tutorial
- [PDF] LinuxCon 2014 – Qubes OS Keynote
- [PDF] RMLL 2016 – Improving client systems security with Qubes OS
- [PDF] Golem and Friends 2017 – Towards Reasonably Secure Computing in the Decentralized World
Developer Documentation
The Basics
- Developer FAQ
- Report a Security Issue
- Report a Bug
- How to Contribute
- Testing new releases and updates
- Source Code
- Qubes OS License
- Coding Guidelines
- Documentation Guidelines
- Code Signing
- Community-Developed Feature Tracker
- Books for Developers
- Style Guide
- Usability & UX
Security Information
- Security Center
- Security Pack
- Security Bulletins
- Security Bulletin Checklist
- Security Bulletin Template
- Canaries
- Canary Template
- Xen Security Advisory (XSA) Tracker
- Why and How to Verify Signatures
- Qubes PGP Keys
System
- Qubes OS Architecture Overview
- Qubes OS Architecture Spec v0.3 [PDF]
- Security-critical elements of Qubes OS
- Qubes Core Admin
- Qubes Core Admin Client
- Qrexec: command execution in VMs
- Qubes GUI virtualization protocol
- Networking in Qubes
- Implementation of template sharing and updating
- Storage Pools
Services
- Inter-domain file copying (deprecates
qfileexchgd) - Dynamic memory management in Qubes
- Implementation of DisposableVMs
- Article about disposable VMs
- Dom0 secure update mechanism
- VM secure update mechanism (forthcoming)
Debugging
- Profiling python code
- Test environment in separate machine for automatic tests
- Automated tests
- VM-dom0 internal configuration interface
- Debugging Windows VMs
- Safe Remote Dom0 Terminals
Building
- Building Qubes (“API” Details)
- Development Workflow
- Building Qubes OS 3.0 ISO
- Building Qubes Templates
- Building a TemplateVM based on a new OS (ArchLinux example)
- Building the Archlinux Template
- How to compile kernels for dom0