Patrick Schleizer

VirtualBox host software compatibility

6

Could you please consider either, **A)** introducing a loader which sets the required lkrg module parameters to be compatible with the VirtualBox host software Example loader: https://github.com/Whonix/lkrg/blob/old-master/debian/lkrg-loader OR, **B)** a...

sign git tag v0.9.0 (or commit)

4

Could you please sign git tag `v0.9.0` and or that commit pointing at `v0.9.0`? Commits of previous releases were signed.

mount /tmp /var/tmp /dev/shm with nodev nosuid noexec

3

These folders are user writable. Similar to * https://github.com/QubesOS/qubes-issues/issues/5263 * https://github.com/tasket/Qubes-VM-hardening/issues/41

http://forums.whonix.org/t/msgdispatcher-bug-delete-wrapper/8034/1 Related source files: * https://github.com/Whonix/msgcollector/blob/master/usr/lib/msgcollector/msgdispatcher * https://github.com/Whonix/msgcollector/blob/master/usr/lib/msgcollector/msgdispatcher_delete_wrapper * https://github.com/Whonix/msgcollector/blob/master/etc/xdg/autostart/msgdispatcher.desktop * https://github.com/Whonix/msgcollector/blob/master/lib/systemd/system/msgcollector.service * https://github.com/Whonix/msgcollector/blob/master/usr/lib/msgcollector/msgdispatcher_init * https://github.com/Whonix/msgcollector/blob/master/etc/xdg/autostart/msgdispatcher.desktop

port to plain Debian (non-Qubes)

10

Wondering if this could be useful for Debian too. (Not only Debian TemplateBased AppVMs in Qubes. I mean "normal" Debian systems without Qubes.) More operating system compatibility could get more...

run after qubes-mount-dirs.service for code simplification?

2

* https://github.com/tasket/Qubes-VM-hardening/blob/master/vm-boot-protect.service ``` [Unit] After=qubes-sysinit.service Before=qubes-mount-dirs.service ``` * https://github.com/QubesOS/qubes-core-agent-linux/blob/master/vm-systemd/qubes-mount-dirs.service ``` After=qubes-sysinit.service dev-xvdb.device DefaultDependencies=no Before=local-fs.target rw.mount home.mount qubes-gui-agent.service ``` * https://github.com/QubesOS/qubes-core-agent-linux/blob/master/vm-systemd/mount-dirs.sh The issue with `mount-dirs.sh` is that it calls `/usr/lib/qubes/init/bind-dirs.sh` which...

dracut support

8

Could you add dracut support please? https://packages.debian.org/dracut

ARM support

3

Could you please add support for creating VM images with ARM platform support?

random-seed - security issue?

2

random-seeds have probably not been though through yet? Files such as... - /var/lib/random-seed - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - others? Those should not be included in images for security reasons. Especially...

supplying packages list by command line or env var rather than packages file

5

I find the need for the packages file not so pretty. Could you provide an option please for a command line or environment variable that contains a space (or w/e)...