I've put up a repository for Qubes packages, which you can add to the
sources list in your xenial or zesty templates, or HVMs. 3.2 only for
now, 4.0 to follow.
To use it in xenial create a file /etc/apt/sources.list.d/qubes-r3.list with this
content:
deb
http://qubes.3isec.org/3.2 xenial main
The repo currently contains packages for xenial and zesty.
You'll also need to get a copy of my Qubes OS signing key. It's linked
from
http://qubes.3isec.org.
pub 4096R/C8C0C2EF 2016-06-25
Key fingerprint = 4B1F 400D F256 51B5 3C41 41B3 8B3F 30F9 C8C0 C2EF
uid unman (Qubes OS signing key) <
un...@thirdeyesecurity.org>
There's good advice at
www.qubes-os.org/security/verifying-signatures/
Once you are satisfied you have the right key, copy it to the Template
and add it to the keyring using 'apt-key add'. Then update as normal.
As you may know Qubes doesn't provide official pre-built Templates for
Ubuntu, because of licensing concerns - details at
www.qubes-os.org/doc/templates/ubuntu
It is relatively simple to build templates using Qubes Builder, but some
people find it quite daunting. If you want to try this, follow the
instructions at
www.qubes-os.org/doc/building-archlinux-template/ but
select "builder-debian" plugin and the distribution you want.
For any one who wants to try out Xenial or Zesty, I've put some minimal
templates online too. They are pretty vanilla, except I have stopped
the automatic search for updates. The templates are signed with my
key.
If you use these versions you'll have to add the repository in the
template as described above. I'll fix this when I have some time.
You will, of course, have to trust me (and my key). If you're not happy
doing this, then build the templates and packages yourself using Qubes
Builder.
unman