--
I found my notes - basically a print out of the install document Bazzell provided on his website, IIRC. I printed it from an editor that provided line numbers (notepad++ ?). I also used info from the 7th edition of his book, which is earlier than the one you're using IIRC.
I don't see any notes regarding issues with python3-pip or
installing Python in general. I used the Qubes generic Debian 10
template and cloned it before making the mods.
I do see a note about needing a git account (which I do not have,
I don't think) for EyeWitness. My notes indicate I reached a
section of Bazzells notes that involved git cloning - Sublist3r,
Photon, theHarvester - when I apparently stopped. Huh. My template
shows EyeWitness installed, but it does not run. Maybe that one
did not need an account. Looking at some of the time stamps in the
template it's been over a year since I worked with the template
and almost as long with the test case VM. In fact, there are
enough of the apps I did install that now do not work that leads
me to think I may have an issue with the template. I use Qubes as
my daily driver for everything unless I absolutely need a
proprietary Windows app. Everything else is working.
My notes indicate I stopped after the install of "amass" - whatever that is.
I also did not do any of the steps in his Updates section. Based solely on the numbered lines of the printout, there are approximately 100 install steps, of which I did ~80% before stopping. The steps do NOT include anything related to installing an actual OS (Ubuntu in this case), but does include tweaking Firefox. It does not include any steps from the Updates: section. In my 7th Ed version, there do appear to be some apps that are actually initially installed in the Updates: section - Skiptracer, Sherlock and a couple of crawlers.
I found the Firefox stuff and his scripts to be useful when
working the test case. I was working with known current data, so I
had some insight. I also had data dumps from commercial databases
as well for comparison. As I stated, it has been awhile since I
played with the OSINT VM, but these tools require more hands on
that what I have given them. I also did not have any occasion to
use, other than to test, many of the tools Bazzell recommended.
That said, these are useful tools and OSINT has a place in an
investigators toolbox. Bazzell has done an excellent job of
sharing his knowledge and experience.
My *nix background is limited, especially in the desktop area. I dealt with servers, hypervisors and appliances. Some of the replies from far more knowledgeable and experienced Qubes users have been on point, detailed and educational. Qubes is a natural for OSINT I think, but most of the world runs on standalone installs or relatively uncomplicated virtualization solutions that mostly just work.
You have sparked my interest in acquiring the most current edition of his book. In my experience, Bazzell really puts a lot of work into his editions. His Privacy books are excellent. It's also timely in that my upcoming OSINT CE (continuing education) course begins in a couple of weeks. Be interesting for me to compare and contrast.
Regarding browsers, Firefox is mostly sufficient, but I prefer
others, and they are not based on Chrome. It's a question of whom
do you trust. And what browser supported the required extensions.
Regarding video CODECs, my issue is that the Firefox in Fedora didn't have them installed. Firefox ESR in Debian plays everything I've needed without installing any CODECS. In fact, I've been using a Debian VM a lot more for daily work because it just works. YMMV.
I'm giving serious thought to a fresh install of Qubes on much
larger drives. Space has become an issue and I'd like to do a
couple of things different this time.
--
Regarding Debian vs Fedora, one consideration I made that I had
forgotten about is that Ubuntu is a Debian derivative.