Im a big fan of Qubes OS but im not where i would need to and furthermore the hardware isent compatible wiht my current pc.
i have it on my older one but qubes with a 8 year old HDD just isent it.
So im trying to atleast somewhat emulate a kind of security through compartmentalization formular.
Bonus u get to switch things up.
Currently i just have one M2 SSD as drive
i Run Fedora KDE :
with LUKS system encryption , Boot tampering protection and a Password for Bios.
On That Fedora KDE Participation i have a browser,Drivers and thats it,
I Then have a Big AES Encrypted Participation Via VeraCrypt.
Inside Are a Few Folders and the VMs , the Virtual Drives and ISO files and all the other little bits and pieces of ot.
then i have 2 Ubuntu lightweight Distros as VMs i use one for Banking and some Wallets. the otherone for Important Mails and some Files (yes in a Vault)
one Debian as VM as a "workhorse or so " and the Center i guess
the other 2 "Normal" VMs are PoP_OS and the lighter distro of ParrotOS (dont ask my why idfk either).
and then the 2 VMs which form Whoenix.
Appart From the Debian they are all encrypted aswell and the sensitive Data is always in Vaults in each VM etc.
I Run Mullvad on Host with Double HOP
and on the VMs i use IVPN or OBSCURA. i use Mullvad Browser and LibertyFox as Browsers etc the basic privcy shit in each VM.
now of course i dont have my Banking VM opened while the Whoenix one is open aswell.
YES I KNOW ITS AN ABSOLUTE MESS AND SHITSHOW but also kinda fun since u hop arround.
only thing is that i use different Aliases in the 3 Big VMs and also multiple other mails so if u forgot smthing : " oh well gotta hop into that VM"
i also know that i am missing a Physicall seperation between my Modem and my PC thats my next Objective.
Oh and to clean this mess up and mby settle for another kind of thing thats not as chaotic or mby not.
i have it on my older one but qubes with a 8 year old HDD just isent it.
So im trying to atleast somewhat emulate a kind of security through compartmentalization formular.
Bonus u get to switch things up.
Currently i just have one M2 SSD as drive
i Run Fedora KDE :
with LUKS system encryption , Boot tampering protection and a Password for Bios.
On That Fedora KDE Participation i have a browser,Drivers and thats it,
I Then have a Big AES Encrypted Participation Via VeraCrypt.
Inside Are a Few Folders and the VMs , the Virtual Drives and ISO files and all the other little bits and pieces of ot.
then i have 2 Ubuntu lightweight Distros as VMs i use one for Banking and some Wallets. the otherone for Important Mails and some Files (yes in a Vault)
one Debian as VM as a "workhorse or so " and the Center i guess
the other 2 "Normal" VMs are PoP_OS and the lighter distro of ParrotOS (dont ask my why idfk either).
and then the 2 VMs which form Whoenix.
Appart From the Debian they are all encrypted aswell and the sensitive Data is always in Vaults in each VM etc.
I Run Mullvad on Host with Double HOP
and on the VMs i use IVPN or OBSCURA. i use Mullvad Browser and LibertyFox as Browsers etc the basic privcy shit in each VM.
now of course i dont have my Banking VM opened while the Whoenix one is open aswell.
YES I KNOW ITS AN ABSOLUTE MESS AND SHITSHOW but also kinda fun since u hop arround.
only thing is that i use different Aliases in the 3 Big VMs and also multiple other mails so if u forgot smthing : " oh well gotta hop into that VM"
i also know that i am missing a Physicall seperation between my Modem and my PC thats my next Objective.
Oh and to clean this mess up and mby settle for another kind of thing thats not as chaotic or mby not.