I just got my Librem14! Should I run PureOS or CubesOS?

Thanks Purism! I am loving my new privacy focused laptop. I got it for helping me manage some small time crypto assets as I am becoming a fan and collector/investor.

I have a question though, what would be more private and secure if I was only using public encrypted (assuming this is even a thing) wifi as needed . . . PureOS running VMs for special use cases or CubesOS which already has the VMs built in.

I am seeking to compartmentalize my operation, both in hardware and software form by using various devices, all FOSS hardware and softwares, and isolated assossiated hardware and softwares.

I am under the impression that our future encryption technology is at stake with the current bills running around the world seeking to dismantle privacy and security features. I am sure I cannot be the only one who is concerned. I have to consider this for future use, how would a hypothetical PureOS vs CubesOS configuration compare when providing security and privacy for mentioned purpose?

I appreciate any help, tips, advice you may have. I attest that I am not breaking any laws, and only seek to protect my assets and my privacy as I step out and away from the World Central Bank.

3 Likes

If you understand qubes, that is your most secure solution. The compartmentalised nature of this system makes it the best solution available.

If you are not familiar with qubes then it may take some learning, but its absolutely doable. Personally I’ve gone across to qubes as my daily driver and I love it.

4 Likes

Thanks for the verification.

Anyother question, how well would CubesOS isolate from Intel ME or AMD PSP if it was istalled on a typical HP/Gateway/Dell/Toshiba laptop with ME or PSP?

Maybe read up on how qubes works will help you. Qubes is built on a hypervisor so is unique.

Maybe others can answer this as to what difference the hypervisor aspect makes here.

The 3rd edition of the magazine has a pretty good article about qubes that you may find useful.

https://unredactedmagazine.com/

1 Like

notice: dont install packages from the internet (via qvm-move from one vm to template), especially proprietary ones in template VMs (as the article states about a zoom app.)

(mentioning that only because thread and user is relatively new to qubes)

1 Like

I am. I have not used this OS before, I even spelled it wrong. I have been familiarizing my self with Linux in the past few years, so it is time I step up the game. I am aware that Qubes is more advanced of a Linux system, and that there is alot to learn. As far as I understood, Qubes itself is a Hypervisor engine, rather than a Linux distro with a Hypervisor installed. Correct me if I am wrong please but you state that the Linux is installed on a Hypervisor. I just want to understand what I am doing before I do it. Thanks for the resources!

I appreciate the highlighted tip. Thank you. I am not planning to install anything that is not FOSS. :slight_smile:

My two cents would say PureOS if you want simplicity and easier use. QubesOS if you want security and compartmentalization. Not everything works well on Qubes, (some hardware accessories, some software) while you may have an easier time getting some things to work on PureOS.

The only show stopping issue I had with Qubes is the graphics performance is awful. When you want to just relax and stream a video or something you have to deal with tons of tearing and the like. It is stuck on xorg with no compositer and no hardware acceleration, which just makes the overall visual experience pretty lackluster compared to any other system and the CPU has to work very hard to do simple graphic tasks, which in turn kicks up the fans from the heat generated. I’m hoping the GUI domain they have been working on helps out with these issues and then I would happily go back.

Agree. The graphics are a shocker.

1 Like