this post was submitted on 15 Jun 2026
32 points (94.4% liked)

Linux

66074 readers
373 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago
MODERATORS
 

This has always been a thought of mine. I wanted to replace/remove any non-free kernels with a libre kernel that doesn't provide non-free binaries. I know some people say it does not matter, but I think it would be a cool idea.

I was thinking about hardening QubesOS by possibly using a deblobbed version of the Kicksecure kernel on all VMs. It would also come with Javascript disabled entirely on all VMs, all non-free binaries removed, everything run over Tor by default, maybe creating a custom repo with only free software, etc.

This would be inclined towards people who use Libreboot/Canoeboot, specifically those that use systems like OptiPlex 9020 and T440p, that run only 100% free software in the BIOS.

I've never attempted it, but I would like to know if anyone would be interested.

you are viewing a single comment's thread
view the rest of the comments
[–] moonpiedumplings@programming.dev 22 points 2 weeks ago (1 children)

Absolutely, this is an admirable project.

But the first thing you should know is that QubeOS is not based on Linux, but is actually a different kernel, Xen. The Xen kernel virtualizes Linux, and all Linux runs under it.

Networking and hardware access is done by certain VM's having devices (like the ethernet card or monitor/keyboard) passed through them, where Linux then handles the hardware access with it's drivers.

This is important to understand that, because QubeOS is not a Linux distro. Really, it's just that they selected Linux (it was either Debian or Fedora IIRC) as their management VMs.

But once you understand that it's absolutely feasible to adjust the VM's. It's probably easier to modify a LInux distro (or create your own) and use that for all the VM's, and then to reuse Qube's management related software. That way you could do something like ship a version of debian that disables non-free software and firmware in the debian repos. Doing that is probably easier than creating your own distro entirely from scratch.

Another interesting thing about Qubes is that you are not limited to Linux. Of course, using Linux will be easiest. But the management VM's can technically be any OS that supports it.

[–] sp0rk@lemmy.dbzer0.com 1 points 1 week ago

Further to this: Debian libre already exists and is exactly this. Probably the best way to start. That gives you Libre Qubes v0.0.1 nearly for free.

Then, for hardening: since Kicksecure is also just a hardened flavour of Debian, you could reduce your work to integrating the hardened config and kernel build of Kicksecure into Debian Libre.

Finally: it is worth considering whether you want to be attempting to deblob Xen - if that is necessary. It may make the project unviable as a one-man side-project.