Yahoo
Skip to main content
Advertisement
Advertisement
Advertisement
Advertisement

Stop believing these myths about Qubes OS. It's much easier than you think

A close-up photograph of a monitor showing a neofetch system information readout beside the Qubes ASCII logo.

If you've heard of Qubes, you've probably heard about its steep hardware requirements or difficulty of use. While there's an element of truth there, the reality is considerably different. One or two hurdles are all that's in your way, and I'll cover some of the misconceptions surrounding this amazing system .

It's difficult to install

No, it's a straightforward, half-hour task

A terminal window displays the output of the xentop command. It lists eleven Xen domains with their memory and CPU usage.

Qubes may have a notorious reputation for being difficult to install and use, and besides wrapping your head around the hardware and how the VM file systems operate, it's not hard at all. If you have a machine you know is compatible, then installing it is as easy as Linux Mint. Yes, it is ! I've done it several times over the years.

You need a lot of RAM

No, 16 GB is all you need, which is common

A Qubes desktop displays a terminal window and a program; both display a list of virtual machines.

Qubes is memory hungry, yes, but that doesn't mean you need 64GB of RAM. I personally require a lot for development work, but 16GB would satisfy most users. I have run with only 16GB for many years, often with 9 VMs active, and only the occasional, manageable problem.

Advertisement
Advertisement

I do find myself at times stopping some VMs to make room, but 95% of the time it's a non-issue. I've heard of people running with 8GB, which is definitely achievable, but a little tight.

A rough profile of my memory usage:

Of these, I find my development domain can balloon up to 10GB if I'm running large and complex software, but that's the case even on Linux. You can expect Chromium to eat up a few more GB if you have many tabs open and when you spread multiple instances across several domains.

The memory profile you see has plenty of spare room for a common system with 16 GB.

Qubes works on all hardware

No, it works on most modern hardware, but not all

Several windows are open on a Qubes desktop related to graphics. Some windows display glxgears, and others display graphics information.

Qubes has very specific requirements, and while most modern hardware supports it, not all do. However, as technology advances, that baseline has become far more common on consumer hardware. Advanced features like VT-d—which isolates your USB and Wi-Fi devices—were once a luxury; now a considerable share of current hardware includes them.

Advertisement
Advertisement

If you're thinking of buying an old ThinkPad , do! These are great laptops, but beware that some aren't up to spec. Any made in the past five years probably are, but don't assume. That goes for brand-new hardware, too. Perform due diligence and seek out the HCL and people's opinions on the Qubes forums.

Qubes is just another distro

No, it's a Xen hypervisor that boots Linux kernels as VMs

A Qubes desktop shows three terminal windows, each running in a different operating system: Qubes, Debian, and Fedora. In these terminal windows, it displays Neofetch information, which includes the distribution icon.

Qubes is technically not a Linux distribution. In fact, it feels a little weird to answer "Qubes" when asked what distro I use. On top of that, it's possible to run Arch, Fedora, and Debian, which makes the response a little ambiguous.

The core of Qubes is a Xen hypervisor—a specialized virtual machine manager. It's not Linux with a bolted-on kernel; it's Xen, which boots a Fedora administration VM. When you use Qubes, it looks and feels like Fedora, because that's the part you interface with. It's built like Linux, and apart from the occasional "Xen" mention or one of its rarely used tools, you won't notice the difference.

Qubes prevents exploitation

No, it merely contains attacks

It's a common misconception that security software stops attacks dead in their tracks. No such tool exists. An antivirus processes network and system behavior with signature checks; intrusion detection systems monitor for heuristics; SELinux and permissions limit the damage an attacker can do; and other methods try to make the environment less predictable. Qubes merely contains an attack, and through proper identity isolation, your high-risk tasks hopefully don't mix with sensitive personal data.

Advertisement
Advertisement

None of these systems are foolproof, but where the others prevent exploitation, Qubes assumes it will inevitably happen and contains them. So, you can still lose information, just probably not the things you care about most. Qubes still requires sensible security best practices. Except for sudo, nobody uses that on Qubes !


It's not too difficult but increasingly necessary

Qubes is not as difficult as people think. The most challenging part is ensuring you choose the correct hardware, but with modern tech and some careful planning, installing Qubes is actually pretty smooth. The resources are manageable too; 16 GB of RAM and 500 GB of SSD are enough.

Qubes is still mysterious to most, and many don't see its value. For a long time, few saw the point of privacy either, but more people are waking up as it's gradually eroding. I think a lot of the hand-waving around Qubes is why it's misunderstood. But as our digital maturity grows, like privacy before it, people will come to appreciate security-focused systems, especially with the scale of modern attacks increasing.

Advertisement
Advertisement
Mobilize your Website
View Site in Mobile | Classic
Share by: