Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  login

The wise shepherd never trusts his flock to a smiling wolf.

rocksolid / Linux / How To Freeze Your Qubes 4.12 with Qubes 4.2RC4 Templates

o How To Freeze Your Qubes 4.12 with Qubes 4.2RC4 TemplatesAnonymous

How To Freeze Your Qubes 4.12 with Qubes 4.2RC4 Templates
From: (Anonymous)
Newsgroups: rocksolid.shared.linux
Subject: How To Freeze Your Qubes 4.12 with Qubes 4.2RC4 Templates
Date: Mon, 20 Nov 2023 18:53:19 +0000
Organization: RetroBBS
Message-ID: <>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
logging-data="1568105"; mail-complaints-to="";
User-Agent: Rocksolid Light
X-Rslight-Site: $2y$10$iQFXXj6iM0SuLzFjbKKlQOGmZ/4SrIXFbr9PhKOTxeOwZiwDXJmW6
X-Rslight-Posting-User: 2eb1d57a13b3a7a8ae4e6b2918bc98bad23e42ee
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on
Xref: rslight2 rocksolid.shared.linux:328
 by: Anonymous - Mon, 20 Nov 2023 18:53 UTC

How To Freeze Your Qubes 4.12 with Qubes 4.2RC4 Templates

If you are an experienced Qubes user behind protected hardware such as hardware firewall, server, traffic analysis etc. don't waste your time with this posting.



All of my machines except a test one are currently frozen. That means that there are not any updates or software install to Qubes dom0 or official templates. I did not give out a tricked dom0 that I use for this freeze but I did tested against a brand new install of 4.1.2 (not kernel latest). If you have the previous template posted on i2p G-deb-11 which supports a USB-GPS clock you should be hard to penetrate.

Do NOT update any of the templates or you will be pawned. If you want to do your independent test I recommend you use StandAlone VMs based on the template. WhoNix Gateway works only with disposables so you can clone your debian-11-dvm into gw17-dvm and switch the template to gw17.

The debian 12 minimal has OpenSnitch and should be used for sys-net and sys-firewall. If you have a wired connection you should DENY ALL. The teplate also has GUFW which should be set to DENY-DENY.

All the templates have no Qubes file manager which is a major flaw. The WhoNix ones have a guix pack that includes Caja. The terminal command would be /gp/opt/gnu/bin/caja
For ungoogled chromium is /gp/opt/gnu/bin/chromium --incognito --no-sandbox --proxy-server="socks5://"

To restore the templates use Qubes Restore from backup. The password is: a

If Qubes will go back to a more decent state, I will let you know. The situation is very sad out there.


rocksolid light 0.9.1
clearnet tor