25 views
Skip to first unread message

Patrick Lea

unread,
Jul 15, 2014, 7:22:55 AM7/15/14
to qubes...@googlegroups.com
If I install Qubes OS on to an existing Win 7 laptop, I have to install Win 7 again on Qubes OS to make Windows VMs work?

Sorry for such a question as I've actually not that familiar with Linux. Been trying to get an alternative to Win 7 that is secure.

Attila Horvath

unread,
Jul 15, 2014, 7:35:01 AM7/15/14
to Patrick Lea, qubes...@googlegroups.com
Not necessary to delete host Win7 install. I've successfully installed qubes on USB drive so both systems are available.



On Tue, Jul 15, 2014 at 7:22 AM, Patrick Lea <idiotjo...@gmail.com> wrote:
If I install Qubes OS on to an existing Win 7 laptop, I have to install Win 7 again on Qubes OS to make Windows VMs work?

Sorry for such a question as I've actually not that familiar with Linux. Been trying to get an alternative to Win 7 that is secure.

--
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com.
To post to this group, send email to qubes...@googlegroups.com.
Visit this group at http://groups.google.com/group/qubes-users.
For more options, visit https://groups.google.com/d/optout.

Zrubecz Laszlo

unread,
Jul 15, 2014, 7:55:56 AM7/15/14
to Patrick Lea, qubes...@googlegroups.com
On 15 July 2014 13:22, Patrick Lea <idiotjo...@gmail.com> wrote:
> If I install Qubes OS on to an existing Win 7 laptop, I have to install Win
> 7 again on Qubes OS to make Windows VMs work?

Yes, instructions are documented in our wiki:
http://qubes-os.org/trac/wiki/WindowsAppVms

But your win7 will not be more secure this way.

The Qubes security is based on separation.

You should read this first:
http://theinvisiblethings.blogspot.hu/2011/03/partitioning-my-digital-life-into.html


--
Zrubi

Axon

unread,
Jul 15, 2014, 9:44:42 AM7/15/14
to Patrick Lea, qubes...@googlegroups.com
Patrick Lea:
Yes, that is correct.

signature.asc

Axon

unread,
Jul 15, 2014, 9:47:24 AM7/15/14
to Attila Horvath, Patrick Lea, qubes...@googlegroups.com
Attila Horvath:
> Not necessary to delete host Win7 install. I've successfully installed
> qubes on USB drive so both systems are available.
>

In this case, he's asking about "making Windows VMs work" (inside of
Qubes) which would be different from booting Qubes from a USB drive.
signature.asc

Attila Horvath

unread,
Jul 15, 2014, 9:51:57 AM7/15/14
to Axon, Patrick Lea, qubes...@googlegroups.com
I was just pointing out that qubes can be installed on USB drive leaving host/os in tact thereby dual-boot option. 

Of course, win7 needs to be installed in qubes as hvm afterwards.

Axon

unread,
Jul 15, 2014, 9:55:23 AM7/15/14
to Zrubecz Laszlo, Patrick Lea, qubes...@googlegroups.com
Zrubecz Laszlo:
> On 15 July 2014 13:22, Patrick Lea <idiotjo...@gmail.com> wrote:
>> If I install Qubes OS on to an existing Win 7 laptop, I have to install Win
>> 7 again on Qubes OS to make Windows VMs work?
>
> Yes, instructions are documented in our wiki:
> http://qubes-os.org/trac/wiki/WindowsAppVms
>
> But your win7 will not be more secure this way.
>
> The Qubes security is based on separation.
>

Just to clarify what Zrubi is saying here:

Windows VMs inside of Qubes are, in themselves, just as (in)secure as
all other Windows machines. Qubes doesn't magically make Windows itself
more secure. Rather, the main benefit of using Windows VMs inside of
Qubes is that you can have Windows (and other OS) VMs which are securely
isolated from each other, such that if one of your VMs gets compromised,
your other VMs won't thereby also be compromised.
signature.asc

Andrew B

unread,
Jul 15, 2014, 10:06:59 AM7/15/14
to qubes...@googlegroups.com
On 07/15/14 15:51, Attila Horvath wrote:
> I was just pointing out that qubes can be installed on USB drive leaving host/os in tact thereby dual-boot option.
>
> Of course, win7 needs to be installed in qubes as hvm afterwards.
>
>
>
> On Tue, Jul 15, 2014 at 9:47 AM, Axon <ax...@openmailbox.org <mailto:ax...@openmailbox.org>> wrote:
>
> Attila Horvath:
> > Not necessary to delete host Win7 install. I've successfully installed
> > qubes on USB drive so both systems are available.
> >
>
> In this case, he's asking about "making Windows VMs work" (inside of
> Qubes) which would be different from booting Qubes from a USB drive.
>
> >
> > On Tue, Jul 15, 2014 at 7:22 AM, Patrick Lea <idiotjo...@gmail.com <mailto:idiotjo...@gmail.com>>
> > wrote:
> >
> >> If I install Qubes OS on to an existing Win 7 laptop, I have to install
> >> Win 7 again on Qubes OS to make Windows VMs work?
> >>
> >> Sorry for such a question as I've actually not that familiar with Linux.
> >> Been trying to get an alternative to Win 7 that is secure.
> >>
> >> --
> >> You received this message because you are subscribed to the Google Groups
> >> "qubes-users" group.
> >> To unsubscribe from this group and stop receiving emails from it, send an
> >> email to qubes-users...@googlegroups.com <mailto:qubes-users%2Bunsu...@googlegroups.com>.
> >> To post to this group, send email to qubes...@googlegroups.com <mailto:qubes...@googlegroups.com>.
> >> Visit this group at http://groups.google.com/group/qubes-users.
> >> For more options, visit https://groups.google.com/d/optout.
> >>
> >
>
>
>
> --
> You received this message because you are subscribed to the Google Groups "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com <mailto:qubes-users...@googlegroups.com>.
> To post to this group, send email to qubes...@googlegroups.com <mailto:qubes...@googlegroups.com>.
> Visit this group at http://groups.google.com/group/qubes-users.
> For more options, visit https://groups.google.com/d/optout.

Just a reminder: depending on the threat model, dual-booting Qubes and another OS is not necessarily a good idea. If a skilled attacker infiltrates the other OS, they can theoretically backdoor the Qubes disk or PC hardware and destroy any security benefit Qubes provides.

(Of course the same does not apply to Windows VMs inside Qubes--unless you attach a device or the Qubes / or /boot partitions to the Windows VM).

Andrew
0xB364F63E.asc
signature.asc

Zrubecz Laszlo

unread,
Jul 15, 2014, 10:08:56 AM7/15/14
to qubes...@googlegroups.com
On 15 July 2014 15:55, Axon <ax...@openmailbox.org> wrote:

> Just to clarify what Zrubi is saying here:
>
> Windows VMs inside of Qubes are, in themselves, just as (in)secure as
> all other Windows machines. Qubes doesn't magically make Windows itself
> more secure. Rather, the main benefit of using Windows VMs inside of
> Qubes is that you can have Windows (and other OS) VMs which are securely
> isolated from each other, such that if one of your VMs gets compromised,
> your other VMs won't thereby also be compromised.


Thanks for expanding my words ;)



--
Zrubi

Doug

unread,
Jul 15, 2014, 2:59:53 PM7/15/14
to qubes...@googlegroups.com

On 07/15/2014 09:51 AM, Attila Horvath wrote:
> I was just pointing out that qubes can be installed on USB drive
> leaving host/os in tact thereby dual-boot option.
>
> Of course, win7 needs to be installed in qubes as hvm afterwards.
>
>
I had thought I got an answer to this a week or two ago that indicated
that a Window installation on the same disk could be
used "as-is" by qubes. I have a large number of apps installed in
Windows 7, some of the most important of which are
paid-for apps, with install serial numbers and one-install permission.
It would not be logical for me to have to install a new
raw version of Windows in qubes and buy new apps. Installing qubes under
that condition would be just plain stupid--I
will just dual boot Linux, like I do now.
If there is no provision to link an existing OS into qubes, I see no
advantage to using it at all. It would only use up extra
disk space, since nobody would be fool enough to erase the original $80+
working Windows OS with all its paid apps!

Franz

unread,
Jul 16, 2014, 12:03:39 PM7/16/14
to Doug, qubes...@googlegroups.com
Most licenses do not allow double installation, but do allow to reinstall the application when you change computer. This may work for windows os too. At least it worked for me in some cases.

Otherwise it may even be possible to backup you old windows installation are restore it in the Qubes windows VM.

Best
 
--
You received this message because you are subscribed to the Google Groups "qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscribe@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages