John Mitchell:
On Wednesday, November 7, 2018 at 10:48:34 PM UTC+1, Achim Patzner wrote:
Am Mittwoch, den 07.11.2018, 13:17 -0800 schrieb John Mitchell:
TL;DR: Yes, but from a security point of view it's not a good idea.
I sense the qubes team isn't really interested and I would be better off using
Debian for my primary OS.
I've had this vision since the 90's of booting a qubes like OS and then running
various OSes in VMs however this is all useless
without GPU passthrough.
Well, Qubes is not exactly a clone of SteamOS and definitely not a
replacement for IBM's LPAR.
Security is great but not when it gets in the way of being useful.
From my point of view that's plain wrong. It was already wrong when a
sweating Balmer was shouting at us in Redmont: "Is it security the
customer wants? No! He doesn't! He wants easy of use!". Spitting at the
people in the first row...
To paraphrase Benjamin Franklin: "They that can give up essential
security to obtain a little playing computer games deserve neither
security nor computer games."
I need useful or I have to buy two separate computers systems. I believe the
risks are acceptable using PCI passthrough.
You are welcome to use a systm that fits your needs
Those that need more security don't have to use PCI passthrough.
And this is exactly the place where such creatures dwell. The first few
sentences on the Qubes home page might have tld you so.
One less qubes user saying how great it is.
Wow. Aren't we a bit passive-aggressive here?
Achim
My last reply. Since I will not feed the anger.
Rather than attack the messenger maybe you should stop and consider what I
wrote. I am not a fan of Stevie B. or M$. And you were not helpful in my
opinion.
If you really want security then you should power down the system and bury it
where only you can find it and then maybe it would be secure but I doubt it.
;)
Cheers!
John
Hi,
Let's not fight. Can't we all get along?
Anyways, my understanding is that gpu passthrough in qubes is possible
but very challenging (use an amd card not nvidia). I've never tried to
get it working tho.
To address the security vs convenience discussion, it's always a
tradeoff. It's just a matter of deciding how much security you need and
how much inconvenience you can put up with. Qubes users are going to
fall closer to the security end of the scale, but there's a lot of
variation among qubes users too. Some need maximum security even if that
means a high level of inconvenience and doing without nifty features,
and some really want the nifty features and don't have time to
troubleshoot a lot of problems and so are willing to accept a somewhat
lower level of security. Both are ok.
Anyways, if you really need gpu passthrough, i'd try to get it working
in qubes if possible, if you have a lot of time for troubleshooting at
least. Using gpu passthrough in qubes would present a security risk
(compared to qubes with no gpu passthrough), but it would still be a lot
better from a security perspective than using debian.
Also maybe qubes-users list would be a better place to discuss this? Gpu
passthrough is a pretty low priority for the qubes devs for obvious reasons.
--
Jackie
--
You received this message because you are subscribed to the Google Groups
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-devel/5721bd00-3ab9-0fc4-b8ee-f2e782802d28%40bitmessage.ch.
For more options, visit https://groups.google.com/d/optout.
