Group items tagged

Isn't Qubes just another Linux distribution after all? Well, if you really want to call it a distribution, then we're more of a "Xen distribution", rather then a Linux one. But Qubes is much more than just Xen packaging -- it has its own VM management infrastructure, with support for template VMs, centralized VM updating, etc, and also its very unique GUI virtualization infrastructure. What is the main concept behind Qubes? To build security on the "Security by Isolation" principle. Key architecture features:Based on a secure bare-metal hypervisor (Xen)Networking code sand-boxed in an unprivileged VM (using IOMMU/VT-d)No networking code in the privileged domain (dom0)All user applications run in "AppVMs", lightweight VMs based on LinuxCentralized updates of all AppVMs based on the same templateQubes GUI virtualization presents applications like if they were running locallyQubes GUI provides isolation between apps sharing the same desktopStorage drivers and backends sand-boxed in an unprivileged virtual machine(*)Secure system boot based on Intel TXT(*)

Spacewalk is an open source (GPLv2) Linux systems management solution. It is the upstream community project for Red Hat Network Satellite. Its capabilities include: * Inventory your systems (hardware and software information) * Install and update software on your systems * Collect and distribute your custom software packages into manageable groups * Provision (kickstart) your systems * Manage and deploy configuration files to your systems * Monitor your systems * Provision virtual guests * Start/stop/configure virtual guests * Distribute content across multiple geographical sites in an efficient manner

netboot.me is a service that allows you to boot nearly any operating system or utility on any computer with a wired internet connection - without having to know ahead of time what you'll want to boot. Once you can netboot.me, you never need to update your boot disk again! In order for your computer to know where to find the netboot servers, you need to change your DHCP settings to return some extra information. The two relevant pieces of information: next-server, which should be "tftp.netboot.me", and "filename", which should be "netbootme.kpxe". How to set these settings depends on your DHCP server. For dhcpd, simply add the following to the relevant 'subnet' section of your configuration: next-server "tftp.netboot.me" filename "netbootme.kpxe" For dnsmasq, the following line in /etc/dnsmasq.conf will achieve the same effect: dhcp-boot=netbootme.kpxe,tftp.netboot.me netboot.me works through the magic of netbooting. There are a number of ways to boot a computer with netboot.me. The simplest is to download a bootable image and burn it to a CD, USB memory stick, or floppy disk. Boot off it on any networked computer, and it will automatically fetch the latest boot options from netboot.me and let you choose from dozens of installation, recovery, testing, portable desktop and other tools. You can also start netboot.me from any computer running gPXE, or from any netbootable computer with some simple tweaks to your DHCP server.

'That's it.' Right, because that was just a walk in the park.