want to install liteqube, dont want dom0 hacked (there proballey no intentional malware but the download culd be comprimised)

how do you safely install from github to dom0?

all 6 comments

sorted by: hot top controversial new old
[–] 4 points 3 weeks ago* (last edited 3 weeks ago) (1 child)

You don't, is the short answer. Especially when the thing from github is unmaintained and unsupported on the current version of qubes:

Please note I currently do not have time to maintain Liteqube, it is not updated to support Qubes 4.2.

If you're just using qubes for funsies though and safety/security doesn't really matter, the qubes docs provide a very hacky method for copying files to dom0 (prefaced with a long "you really shouldn't do this" warning): https://doc.qubes-os.org/en/latest/user/how-to-guides/how-to-copy-from-dom0.html#copying-to-dom0

  • source
  • hideshow 1 child comment
  • [–] 2 points 3 weeks ago* (last edited 3 weeks ago)

    You don't safely install from github to dom0 full stop.

    If you want to unsafely install the project you mentioned, try following their instructions. If you fail, try to explain as detailed as possible what you did when asking for help.

  • source
  • [–] 1 point 3 weeks ago (2 children)

    Audit the software and trust the developer. You could install it in a qube and monitor it for network requests.

  • source
  • hideshow 2 child comments
  • [–] [S] 1 point 2 weeks ago (1 child)

    ok thx how to audit and monitor it

    (i dont have a brain)

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 weeks ago

    It's just reviewing it for exploits. If you see hashed functions then that's a red flag. Track changes from the old version to the new one.

    If you have it run in a qube then check for network requests. If everything seems fine then you can move it to dom0.

    It really just comes down to trusting the software.

  • source
  • parent