How to install /boot partition and GRUB on USB

[xsad...@sigaint.org]

Hello.

First of all, thank you to the devs for creating such an awesome OS.

I only have one computer, and I can't run Qubes exclusively. So I need to
dual boot. I know this is not optimal, but I have to, and as such I need
to take all the precautions I can, which means I have to make sure that
neither of the OSes can access the other on disk. To do this I need 100%
disk encryption, so I need to install my boot partition+GRUB on USB
sticks.

I know how to do this on my non-Qubes OS, but I cannot for the life of me
figure out how to do this in the Qubes installer. I've searched and
searched with no luck.

Could someone give me a step-by-step guide to doing this in the Qubes
installer? I find it really, really confusing.

(The only problem I have is using the Qubes installer itself - I
understand how partition tables work and all that).

Thank you :-)

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

The installer really isn't changed much (if at all) from vanilla Fedora.
(After you install, there's an initial setup process that is specific to Qubes.)
Since you're familiar with how partition tables work, I assume you're
comfortable managing them from the command line with fdisk, parted, or something
similar. In that case, you can simply switch to a virtual console (e.g., ctrl +
alt + F2) while you're in the GUI installer, create your partitions manually,
then select those existing partitions once you get to that step of the GUI
installer. This is somewhat similar (and a possible subtask) to the
process described here:

https://www.qubes-os.org/doc/encryption-config/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=rZra
-----END PGP SIGNATURE-----