Qubes stuff

All files are signed with my Qubes OS Signing key.
You can read about how to get this key, and validate it here

Packages

We provide up to date Qubes packages for Ubuntu 2022.4, Ubuntu 2024.4, and Debian testing, built using Qubes builder v2.
Although you could manually download the packages, it's better to use native package tools, and use the repositories provided.

Using Repositories in Debian based templates

To use a repository, copy the validated key to a template, and install it.

sudo gpg -o /usr/share/keyrings/unman-keyring.gpg --dearmor  unman.pub

replacing unman.pub with the path to the key.

Then create a repository definition like this at /etc/apt/sources.list.d/3isec.list:

deb [signed-by=/usr/share/keyrings/unman-keyring.gpg] https://qubes.3isec.org/4.3 trixie main

or:

deb [signed-by=/usr/share/keyrings/unman-keyring.gpg] https://qubes.3isec.org/4.2 noble main

Make sure that the version and definition matches the distribution you want.

Arch

To use the Arch repository you will need to get my Qubes OS signing key, validate it against sources in this mailing list, or at GitHub, or against different downloads via Tor.
qvm-copy the key in to the arch template.
Add the key:

sudo pacman-key --add 
sudo pacman-key --lsign unman
cd /etc/pacman.d

Then either create a new file, or rename the existing

99-qubes-repository-4.2.conf.disabled

99-qubes-repository-4.2.conf

Open the conf file for editing - the contents should be:

[qubes-r4.2]
Server = https://qubes.3isec.org/arch/4.2

Then update:

sudo pacman -Syuu

unman