On Sat, Jan 16, 2021 at 12:41:04AM +0100, Ulrich Windl wrote: > Hi! > > I have a question about installing additional software (e.g. GIMP in > debian-10): > The options I see are: > 1) Install it in some AppVM based on debian-10 > 2) Clone debian-10 template and install software there. Create some AppVM > based on that template > > I'd guess 1) needs less space, but for 2) I'm not sure what happens when > updates are applied to both, the template and the AppVM. > > Regards, > Ulrich >
1. needs less space, but at the expense of security, since all AppVMs based on that template will have a large number of applications/libraries which may be ripe for exploit. I'm not altogether clear on what you mean here. You then have two templates which will need updating - unless you are using a caching proxy instead of the standard tinyproxy, this is going to take time and suck up bandwidth. You can, naturally, update the AppVM separately from the template, as usual, but updates will be lost on reboot. (I do this sometimes when I am checking on updates/installs or configuration changes: one of the great things about Qubes.) -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20210116001058.GA5320%40thirdeyesecurity.org.
