4 ms·

I think at this point you are solving a wrong problem. Getting root access through X zero days exploits is not so hard. And if you uninstall `sudo` and `su`, an

I think at this point you are solving a wrong problem. Getting root access through X zero days exploits is not so hard. And if you uninstall `sudo` and `su`, and only login as root on dedicated TTY, you have very similar security. I use Qubes OS for stuff like this. Way better security, no need to juggle tokens, dedicated lans and so on. Only real problem is no graphical acceleration in browser (Google Earth...)

chaxor 3y ago
Doesn't Qubes require like 32GB of RAM just to run? I would love to use it, but most of the use cases I would like to try it for are much more in the realm of SBCs with 2-8GB of RAM for running services locally. It would be great to have that extra security, but the cost is really really high.
- tureu92 3y ago
  systemd-nspawn...
- colejohnson66 3y ago
  > Doesn't Qubes require like 32GB of RAM just to run? 32 GB minimum, but 16 GB recommended.[0] I think that's backwards, so I'd say it's actually 16, not 32 required. But yes, that's more than a typical SBC will have. The Pi 4, for example, has a maximum configuration of 8 GB, but some have modded it to have 16 GB.[1] [0]: https://www.qubes-os.org/doc/system-requirements/ https://www.qubes-os.org/doc/system-requirements/ [1]: https://www.techradar.com/news/a-raspberry-pi-4-with-16gb-its-been-done-but-theres-a-big-catch https://www.techradar.com/news/a-raspberry-pi-4-with-16gb-it...
  - bazodedo 3y ago
    I was curios about that 16GB pi. (I want to have one myself :) Unfortunately, it looks like soldering the 16gb ram chip onto the pi did not increase the usable memory due to other hardware limitations. [1] https://forums.raspberrypi.com/viewtopic.php?t=350514 https://forums.raspberrypi.com/viewtopic.php?t=350514
  - idkyall 3y ago
    > 32 GB minimum, but 16 GB recommended.[0]. I see Memory: 6 GB RAM under Minimum
    - colejohnson66 3y ago
      I'm dumb. I read the 32 GB minimum from the "storage" line. Yes, 6 GB RAM is the minimum.

chaxor 3y ago

Doesn't Qubes require like 32GB of RAM just to run? I would love to use it, but most of the use cases I would like to try it for are much more in the realm of SBCs with 2-8GB of RAM for running services locally. It would be great to have that extra security, but the cost is really really high.

tureu92 3y ago
systemd-nspawn...
colejohnson66 3y ago
> Doesn't Qubes require like 32GB of RAM just to run? 32 GB minimum, but 16 GB recommended.[0] I think that's backwards, so I'd say it's actually 16, not 32 required. But yes, that's more than a typical SBC will have. The Pi 4, for example, has a maximum configuration of 8 GB, but some have modded it to have 16 GB.[1] [0]: https://www.qubes-os.org/doc/system-requirements/ https://www.qubes-os.org/doc/system-requirements/ [1]: https://www.techradar.com/news/a-raspberry-pi-4-with-16gb-its-been-done-but-theres-a-big-catch https://www.techradar.com/news/a-raspberry-pi-4-with-16gb-it...
- bazodedo 3y ago
  I was curios about that 16GB pi. (I want to have one myself :) Unfortunately, it looks like soldering the 16gb ram chip onto the pi did not increase the usable memory due to other hardware limitations. [1] https://forums.raspberrypi.com/viewtopic.php?t=350514 https://forums.raspberrypi.com/viewtopic.php?t=350514
- idkyall 3y ago
  > 32 GB minimum, but 16 GB recommended.[0]. I see Memory: 6 GB RAM under Minimum
  - colejohnson66 3y ago
    I'm dumb. I read the 32 GB minimum from the "storage" line. Yes, 6 GB RAM is the minimum.