MirageOS as NetVM

55 views
Skip to first unread message

miragenetvm@mail2tor

unread,
Apr 21, 2019, 7:37:54 PM4/21/19
to qubes...@googlegroups.com
Faq:

Can I install Qubes OS on a system without VT-d?

Yes. You can even run a NetVM, but you will not benefit from DMA
protection for driver domains. On a system without VT-d, everything should
work in the same way, except there will be no real security benefit to
having a separate NetVM, as an attacker could always use a simple DMA
attack to go from the NetVM to Dom0. Nonetheless, all of Qubes’ other
security mechanisms, such as qube separation, work without VT-d.
Therefore, a system running Qubes will still be significantly more secure
than one running Windows, Mac, or Linux, even if it lacks VT-d.

Since I only have 3GB RAM on my libreboot laptop, can I use Mirage to
function as a NetVM to save memory?

awokd

unread,
Apr 23, 2019, 5:02:50 AM4/23/19
to qubes...@googlegroups.com
miragenetvm@mail2tor:
A laptop without VT-d and only 3GB RAM will not give you a very
enjoyable Qubes experience. That said, you could probably hack it to get
it to function, but you'd only be able to run one or two VMs at a time
besides your system ones even with Mirage as one of them.
Reply all
Reply to author
Forward
0 new messages