Qubes stuff
All files are signed with my Qubes OS Signing key.
You can read about how to get this key, and validate it here
Packages
We provide up to date Qubes packages for Ubuntu 2022.4, Ubuntu 2024.4, and Debian testing, built using Qubes builder v2.
Although you could manually download the packages, it's better to use native package tools, and use the repositories provided.
Using Repositories in Debian based templates
To use a repository, copy the validated key to a template, and install it.
sudo gpg -o /usr/share/keyrings/unman-keyring.gpg --dearmor unman.pub
replacing unman.pub with the path to the key.
Then create a repository definition like this at /etc/apt/sources.list.d/3isec.list:
deb [signed-by=/usr/share/keyrings/unman-keyring.gpg] https://qubes.3isec.org/4.3 trixie main
or:
deb [signed-by=/usr/share/keyrings/unman-keyring.gpg] https://qubes.3isec.org/4.2 noble main
Make sure that the version and definition matches the distribution you want.
Arch
To use the Arch repository you will need to get my Qubes OS signing key, validate it
against sources in this mailing list, or at GitHub, or against different
downloads via Tor.
qvm-copy the key in to the arch template.
Add the key:
sudo pacman-key --add
sudo pacman-key --lsign unman
cd /etc/pacman.d
Then either create a new file, or rename the existing
99-qubes-repository-4.2.conf.disabled
to 99-qubes-repository-4.2.conf
Open the conf file for editing - the contents should be:
[qubes-r4.2]
Server = https://qubes.3isec.org/arch/4.2
Then update:
sudo pacman -Syuu
unman