Civil Rights
Movements, leaders, victories and the continuing fight for equality.
q2K BHP
Black History Portal
THE BHP WIRE —
HIDDEN TRUTHS
What's New!
Explore the people, places, events, achievements, struggles and stories that shaped our journey.
Movements, leaders, victories and the continuing fight for equality.
Innovation, patents, science, technology and world-changing contributions.
Pioneers, champions, Negro Leagues, records, activism and excellence.
Meet the people whose lives, choices and achievements shaped the journey.
Black towns, communities, institutions and places where history happened.
Moments that changed communities, movements, institutions and the nation.
Katherine Johnson’s mathematical calculations helped guide some of America’s most important early space missions while she confronted the racial and gender barriers faced by Black women in twentieth-century America.
MORE →Reflects the personal views, recollections, and perspective of the author, Mike Davis.
This is a personal recollection on the Move fire on May 13, 1985
| Qubes OS | |
|---|---|
 | |
 | |
| Developer | The Qubes OS Project
Invisible Things Labs Joanna Rutkowska |
| OS family | Linux (Unix-like) |
| Working state | Current |
| Source model | Open source with proprietary blobs,[1][2] |
| Initial release | September 3, 2012[3] |
| Latest release | 4.3.2[4]  / 2 October 2026 |
| Marketing target | security by compartmentalization, desktop, laptop |
| Available in | Multilingual |
| Update method | DNF (PackageKit) |
| Package manager | RPM Package Manager |
| Supported platforms | x86-64 |
| Kernel type | Microkernel (Xen Hypervisor running minimal Linux-based OSes and others) |
| Userland | GNU[a] |
| Default user interface | Xfce |
| License | Free software licenses (mainly GPL v2[7]) |
| Official website |
|
| Tagline | A Reasonably Secure Operating System |
Qubes OS is a security-focused desktop operating system that aims to provide security through compartmentalization.[9] Compartmentalization is provided through the use of virtualization technology. This allows the segmentation of applications into secure virtual machines called qubes. Virtualization services in Qubes OS are provided by the Xen hypervisor.
The runtimes of individual qubes are generally based on a unique system of underlying Operating system templates. Templates provide a single, immutable root file system which can be shared by multiple qubes. This approach has two major benefits. First, updates to a given template are automatically "inherited" by all qubes based on it. Second, shared templates can dramatically reduce storage requirements compared to separate VMs with a full operating install per secure domain.
The base installation of Qubes OS provides a number of officially supported templates based on the Fedora and Debian Linux distributions. Alternative community-supported templates include Whonix, Ubuntu, Arch Linux, CentOS, and Gentoo.[10] Users may also create their own templates.
Operating Systems like Qubes OS are referred to in academia as Converged Multi-Level Secure (MLS) Systems.[11] Other proposals of similar systems have surfaced[12][13] and SecureView and VMware vSphere are commercial competitors.[citation needed]
Qubes implements a Security by Isolation approach.[14] The assumption is that there can be no perfect, bug-free desktop environment: such an environment counts millions of lines of code and billions of software/hardware interactions. One critical bug in any of these interactions may be enough for malicious software to take control of a machine.[15][16]
To secure a desktop using Qubes OS, the user takes care to isolate various environments, so that if one of the components gets compromised, the malicious software would get access to only the data inside that environment.[17]
In Qubes OS, the isolation is provided in two dimensions: hardware controllers can be isolated into functional domains (e.g. network domains, USB controller domains), whereas the user's digital life is divided into security domains with different levels of trust.
For instance: work domain (most trusted), shopping domain, random domain (less trusted).[18] Each of these domains is run in a separate qube.
The qubes have passwordless root access (e.g. passwordless sudo) by default.[19] UEFI Secure Boot is not supported out of the box. The Qubes OS team does not consider this a major security issue.[20] Qubes is not a multiuser system.[21]
As a desktop-focused operating system, Qubes OS targets personal computer hardware. This market is dominated by laptops running Intel and AMD processors and chipsets.
The minimum base system requirements[22] for Qubes OS are:
Users interact with Qubes OS in much the same manner that they interact with any standard graphical desktop operating systems with some key differences:
 | This section needs more citations. (December 2023) |
The Xen hypervisor provides strong isolation between its hosted virtual machines, called domains in Xen terminology.
The first domain started by Xen is the privileged administrative domain referred to as domain zero or more commonly dom0.
As of Qubes OS 4.1.2, the operating system running in dom0 is Fedora Linux running a paravirtualized Linux kernel. It is the Linux kernel in dom0 that controls and brokers access to all the physical system hardware, via standard Linux kernel device drivers.
The operating system hosts the user's graphical desktop and controls most hardware devices. This includes the graphics device, USB ports, storage and input devices, such as the keyboard and mouse. The base graphical desktop is composed of the X server, the Xfwm window manager and the Xfce desktop.
By design, dom0 has the least possible direct interaction with the qubes in order to minimize the possibility of an attack originating from there.[26][27]
Updates to the dom0 operating system and the included Template OS images are performed via a special mechanism which does not require dom0 operating system to connect directly to a network.
An app qube (an instance of a qube) provides secure, compartmentalized execution of standard user applications such as a web browser, an email client or a text editor.
Operation of app qubes is controlled by the Qube Manager. It launches the discrete app qubes and presents their applications on the desktop of dom0 as normal process windows.
This mechanism follows the idea of a sandbox. After running the application, viewing the document, etc., the whole disposable will be destroyed on shutdown.[28]
Qubes OS integrates all of the app qubes into a single common desktop environment. The identity of each app qube for a given process is provided by an unforgeable, colored window border which is defined in the properties of the app qube.
Disk usage in dom0 is minimized by allowing multiple app qubes to share a common "template" root file system image maintained in read-only mode. Additional disk storage is only used for userʼs applications, data and per-VM settings.
The network mechanism is the most exposed to security attacks. To circumvent this, it is isolated in a separate, unprivileged qube, named the net qube.
Another firewall Domain is used to house the Linux-kernel-based firewall, so that even if the network domain is compromised, the firewall is still isolated and protected (as it is running in a separate Linux kernel in a separate VM).[29]
Security and privacy experts such as Edward Snowden, Daniel J. Bernstein, and Christopher Soghoian have publicly praised the project.[30]
Jesse Smith wrote a review of Qubes OS 3.1 for DistroWatch Weekly:[31]
I had a revelation though on the second day of my trial when I realized I had been using Qubes incorrectly. I had been treating Qubes as a security enhanced Linux distribution, as though it were a regular desktop operating system with some added security. This quickly frustrated me as it was difficult to share files between domains, take screen shots or even access the Internet from programs I had opened in Domain Zero. My experience was greatly improved when I started thinking of Qubes as being multiple, separate computers which all just happened to share a display screen. Once I began to look at each domain as its own island, cut off from all the others, Qubes made a lot more sense. Qubes brings domains together on one desktop in much the same way virtualization lets us run multiple operating systems on the same server.
Kyle Rankin from Linux Journal reviewed Qubes OS in 2016:[32]
I'm sure you already can see a number of areas where Qubes provides greater security than you would find in a regular Linux desktop.
In 2014, Qubes was selected as a finalist of Access Innovation Prize 2014 for Endpoint Security, run by the international human rights organization Access Now.[33]
| General | |||
|---|---|---|---|
| Software packages | |||
| Community | |||
| Organisations | |||
| Licenses |
| ||
| Challenges | |||
| Related topics | |||
Source: Wikipedia. Article content is retrieved live through the MediaWiki API.
Qubes OS is a security-focused desktop operating system that aims to provide security through compartmentalization. Compartmentalization is provided through the use of virtualization technology. This allows the segmentation of applications into secure virtual machines called qubes. Virtualization services in Qubes OS are provided by the Xen hypervisor. The runtimes of individual qubes are generally based on a unique system of underlying Operating system templates. Templates provide a single, immutable root file system which can be shared by multiple qubes. This approach has two major benefits. First, updates to a given template are automatically "inherited" by all qubes based on it. Second, shared templates can dramatically reduce storage requirements compared to separate VMs with a full operating install per secure domain. The base installation of Qubes OS provides a number of officially supported templates based on the Fedora and Debian Linux distributions. Alternative community-supported templates include Whonix, Ubuntu, Arch Linux, CentOS, and Gentoo. Users may also create their own templates. Operating Systems like Qubes OS are referred to in academia as Converged Multi-Level Secure (MLS) Systems. Other proposals of similar systems have surfaced and SecureView and VMware vSphere are commercial competitors.
Anaconda is a free and open-source system installer for Linux distributions. Anaconda is used by Red Hat Enterprise Linux, Oracle Linux, Scientific Linux, Rocky Linux, AlmaLinux, CentOS, MIRACLE LINUX, Qubes OS, Fedora, Sabayon Linux, Bazzite Linux and BLAG Linux and GNU, also in some less known and discontinued distros like Progeny Componentized Linux, Asianux, Foresight Linux, Rpath Linux and VidaLinux.
Joanna Rutkowska (born 1981) is a Polish computer security researcher, primarily known for her research on low-level security and stealth malware, and as founder of the Qubes OS security-focused desktop operating system.
CLIP OS is a Linux-based operating system created by ANSSI, the National Cybersecurity Agency of France. The aim is to produce a hardened operating system to secure sensitive information which meets the needs of the French Administration.
Before the 1921 destruction of Tulsa’s Greenwood District, Black residents had created a remarkable center of business and community life. The district included stores, professional offices, entertainment venues and homes owned by Black citizens. Understanding Greenwood means learning what was built—not only what was burned.
MORE →Madam C.J. Walker
