Qubes server?

[Manuel Amador (Rudd-O)]

Hello!

I want to roll my own Qubes server — software-defined networking, remote
VM management, all the goodies that come with Qubes like volatile VMs
and VM templates — but I have had real trouble writing code to "undo"
some of the features of Qubes that make routing and firewalling
essentially client-only.

Is there someone working on this, on upstreaming the improvements, and
on remote management?

I can see there's a market for it, and I certainly need it. I would
hate to roll-my-own based on, say, Fedora or Debian, and having to redo
all the work that Qubes has done w.r.t. securing machines.

Thanks.

--
Rudd-O
http://rudd-o.com/

[Iestyn Best]

Hi,

I have been interested in an idea like that as I could see it beneficial for many organisations but currently I have had no actual driving need for it at this time.

I would be interested in hearing of something like this is happening or even possible.

Appreciate all the work the Qubes team has been doing.

Regards,
Iestyn Best

[Andrew]

Iestyn Best:

Not exactly the subject at hand, but this might be relevant to your
interests: https://github.com/kbrn/qubes-app-dom0-shell

You can use this to SSH into some Qubes AppVM, use the RPC service to
get a Dom0 shell, and from there jump into some other VM shell, or do
whatever you need.

Andrew

[Manuel Amador (Rudd-O)]

I wrote something like that years ago:

https://github.com/Rudd-O/ansible-qubes

It was meant to power Ansible configuration of VMs, but the base program
is basically an inter-VM SSH clone.

--
Rudd-O
http://rudd-o.com/

[Manuel Amador (Rudd-O)]

On 07/31/2016 12:04 AM, Manuel Amador (Rudd-O) wrote:
> Hello!
>
> I want to roll my own Qubes server — software-defined networking, remote
> VM management, all the goodies that come with Qubes like volatile VMs
> and VM templates — but I have had real trouble writing code to "undo"
> some of the features of Qubes that make routing and firewalling
> essentially client-only.
>
> Is there someone working on this, on upstreaming the improvements, and
> on remote management?

For people coming through search engines:

https://github.com/Rudd-O/qubes-network-server


--
Rudd-O
http://rudd-o.com/