Kicksecure Qubes Template Development - Qubes Integration

Patrick · November 11, 2024, 8:15pm

Kicksecure template

opened 08:07PM - 11 Nov 24 UTC

P: default C: Kicksecure community template

### The problem you're addressing (if any) A Kicksecure Qubes Template is unava…ilable. The only way to use Kicksecure in Qubes is [Distribution Morphing](https://www.kicksecure.com/wiki/Qubes#Distribution_Morphing). ### The solution you'd like Provide a Kicksecure Qubes template that can be installed using: qvm-template install --enablerepo=qubes-templates-community kicksecure-17 ### The value to a user, and who that user might be Easily installable Kicksecure Template that does not come with issue https://github.com/QubesOS/qubes-issues/issues/7447, requires no lengthy distribution morphing instructions, comes security hardened by default. (Should also come with in-VM kernel enabled by default. (https://github.com/QubesOS/qubes-issues/issues/9570)) Users that indicated interest for a Kicksecure Qubes Template: * https://forum.qubes-os.org/search?q=kicksecure%20in%3Atitle * https://github.com/QubesOS/qubes-issues/issues?q=is%3Aissue+kicksecure+in%3Atitle * https://forums.kicksecure.com/search?q=qubes%20in%3Atitle ### Qubes Template source code https://github.com/Kicksecure/qubes-template-kicksecure <s>Untested.</s> Update: Tested. ### Related non-duplicates * https://github.com/QubesOS/qubes-issues/issues/9332 (ticket isn't about Kicksecure) (is a ticket about default use of a hardened Template) ### Completion criteria checklist (This section is for developer use only. Please do not modify it.)

Qubes Template

Patrick · November 12, 2024, 6:27am

A post was split to a new topic: Minimal Kicksecure Qubes Template

Patrick · April 26, 2025, 10:25am

Build command:

Build in progress:

github.com/QubesOS/updates-status

qubes-template-kicksecure-17 4.2.0-202504261018 (r4.2)

opened 10:18AM - 26 Apr 25 UTC

fepitre-bot

r4.2-building

Template kicksecure-17 4.2.0-202504261018 for Qubes OS r4.2, see comments below …for details and build status. If you're release manager, you can issue GPG-inline signed command (depending on template): * `Upload-template r4.2 kicksecure-17 4.2.0-202504261018 templates-itl` (available 5 days from now) * `Upload-template r4.2 kicksecure-17 4.2.0-202504261018 templates-community` (available 5 days from now) Above commands will work only if package in testing repository isn't superseded by newer version. For more information on how to test this update, please take a look at https://www.qubes-os.org/doc/testing/#updates.

Patrick · May 7, 2025, 4:22am

github.com/QubesOS/qubes-issues

always built Templates for Qubes stable and development version?

opened 04:21AM - 07 May 25 UTC

adrelanos

P: default

### Qubes OS release R4.2 R4.3 ### Brief summary Kicksecure; and Qubes-Whonix… Templates are built for Qubes stable version (R4.2 at time of writing) only by me. ### Steps to reproduce n/a ### Expected behavior Some people may expect the Templates to also be available for Qubes development version (R4.3 at time of writing). In response to my [announcement of availability of Qubes Kicksecure Template for testers](https://forum.qubes-os.org/t/kicksecure-17-template/31893/11), @alimirjamali said: > Would it be possible to trigger a template build for r4.3 as well? For testing users who are on R4.3 alpha. ### Actual behavior Templates are built for Qubes stable version only. ### Additional information Why not simply always build for stable and development version of Qubes? I don't know if there are computational and/or storage restraints by Qubes build servers. related: * https://github.com/QubesOS/qubes-issues/issues/9573 ### Desired outcome of this ticket A Qubes core team member expressing the policy. Potential replies: * > No problem, it is OK and wanted to always build Templates for Qubes stable and Qubes development version. * > Qubes development Templates should be built on demand or when deemed necessary, but some sort of restraint would be desirable to save disk space. ### Potential outcome I'd modify [dm-qubes-templates-official-build-commands](https://github.com/Kicksecure/developer-meta-files/blob/master/usr/bin/dm-qubes-templates-official-build-commands) to add either a reminder or automation to build Templates also for Qubes development version.

Patrick · May 18, 2025, 11:25am

github.com/QubesOS/updates-status

qubes-template-kicksecure-17 4.2.0-202505131900 (r4.2)

opened 07:00PM - 13 May 25 UTC

fepitre-bot

r4.2-testing

Template kicksecure-17 4.2.0-202505131900 for Qubes OS r4.2, see comments below …for details and build status. If you're release manager, you can issue GPG-inline signed command (depending on template): * `Upload-template r4.2 kicksecure-17 4.2.0-202505131900 templates-itl` (available 5 days from now) * `Upload-template r4.2 kicksecure-17 4.2.0-202505131900 templates-community` (available 5 days from now) Above commands will work only if package in testing repository isn't superseded by newer version. For more information on how to test this update, please take a look at https://www.qubes-os.org/doc/testing/#updates.

Patrick · May 24, 2025, 5:03pm

Template kicksecure-17-4.2.0-202505131900 was uploaded to templates-community repository.