Replace FreeBSD with HardenedBSD (For PCI Passthrough VMs)

BawdyAnarchist / quBSD

A FreeBSD jails and bhyve wrapper; which emulates a Qubes-like containerization schema

138 stars 11 forks source link

Replace FreeBSD with HardenedBSD (For PCI Passthrough VMs) #4

Open 0xc1c4da opened 1 year ago

0xc1c4da commented 1 year ago

Bhyve is used to isolate hardware (such as nivm and usb) and quBSD currently downloads FreeBSD-13.0-RELEASE-amd64-bootonly.iso, since these VMs deal with the hostile world. It might be beneficial to replace it with the equivalent HardenedBSD bootonly iso

0xc1c4da commented 1 year ago

Infact dom0 should also be the case, assuming we want to sacrifice Linuxulator, which might be better to just run a Linux VM