qubes-issues
qubes-issues copied to clipboard
QubesOS
AArch64 support
The problem you're addressing (if any)
Some AArch64 machines nowadays are actually powerful enough to run Qubes OS, but Qubes OS does not support AArch64.
The solution you'd like
Qubes OS should support AArch64.
The value to a user, and who that user might be
Users with AArch64 machines will be able to install Qubes OS on them.
Pinging @andyhhp because this will likely require serious work on the Xen side, mostly in the realm of SMMU support.
Strongly, strongly agree.
aarch64 is the future, whatever comes first with aarch64 is what I'll use, SpectrumOS or Qubes.
There are plenty of development machines available, aarch64 Chromebooks are absolutely wonderful and have everything (Low level Bootloader & EC) open source. Checkout the Cadmium project for supported Linux Mainline aarch64 Chromebooks.
I'm willing to help in anyway I can, though I'm not particularly fond of Xen in 2022.
KVM is receiving a lot more love, anecdotally.
I have an Acer Spin 513 with the MediaTek Kompanio 1380 (Tomato/Cherry), what would the first steps be in getting Xen running with dom0?
I'm currently trying to get vanilla Linux running, this shouldn't be too hard, MediaTek are currently working on mainlining some of the MT8195 patches for display etc.
I'm guessing Fedora would need to support the specific end device, then Qubes can follow?
Unfortunately, Xen does not provide security support for PCI pass-through on AArch64. I suspect this would be a deal-breaker, but that would be up to @marmarek to decide.
Edit: This is being worked on upstream.
I have very little hands-on experience with Xen or virtualization in general, but many newer chips have HW virtualization support, which I expect would improve the feasibility of this considerably. As an example, the rockchip in some Pine64 boards (including the Pinebook Pro and Pinephone Pro) have decent specs, with HW virt.
O suporte AArch64 no Qubes OS representa uma oportunidade significativa para expandir seu alcance e fornecer segurança avançada a um grupo crescente de usuários. Ao superar a limitação atual, o Qubes OS se tornaria uma escolha mais acessível e atraente para aqueles que possuem hardware baseado em AArch64. Dessa forma, o sistema poderia continuar a ser um líder na área de segurança cibernética e manter sua reputação de oferecer um ambiente de computação altamente seguro e isolado.
