Skip to content

Instantly share code, notes, and snippets.

View tlaurion's full-sized avatar

Thierry Laurion tlaurion

112 followers · 282 following
View GitHub Profile
@tlaurion
tlaurion / kicksecure_sysmode_v540tu.log
Created August 19, 2026 23:35
kicksecure_sysmode_v540tu.log (journalctl --boot 0) for linuxboot/heads#2188
Aug 19 22:35:41 localhost kernel: Linux version 6.12.95+deb13-amd64 (debian-kernel@lists.debian.org) (x86_64-linux-gnu-gcc-14 (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44) #1 SMP PREEMPT_DYNAMIC Debian 6.12.95-1 (2026-07-04)
Aug 19 22:35:41 localhost kernel: Command line: rd.live.overlay.overlayfs=1 boot=live components splash live-config.hostname=localhost rd.live.image root=live:CDLABEL=kicksecure rd.live.dir=live rd.live.squashimg=filesystem.squashfs mitigations=auto,nosmt nosmt=force spectre_v2=on spectre_bhi=on kpti=1 pti=on spec_store_bypass_disable=on ssbd=force-on l1tf=full,force kvm-intel.vmentry_l1d_flush=always mds=full,nosmt tsx=off tsx_async_abort=full,nosmt kvm.nx_huge_pages=force l1d_flush=on mmio_stale_data=full,nosmt retbleed=auto,nosmt kvm.mitigate_smt_rsb=1 gather_data_sampling=force reg_file_data_sampling=on indirect_target_selection=force vmscape=force slab_nomerge slab_debug=FZ init_on_alloc=1 init_on_free=1 page_alloc.shuffle=1 randomize_kstack_offset=on vsyscall=non
@tlaurion
tlaurion / PrivacyBeast_Restore_Qubes_from_Tails
Last active January 18, 2022 15:36
PrivacyBeast script to restore to deployed OEM disk state
#!/bin/bash
#
#GENERAL PATHS
INSTALL_DISK="/dev/sda"
WYNG_BACKUPS_ARCHIVE_DIR="/media/wyng-backups/home/user/wyng-backups/wyng.backup"
QUBES_VM_POOL="/dev/qubes_dom0"
OEM_MOUNT="/media/wyng-backups/home/user/"
GPG_OEM_KEY="/media/wyng-backups/home/user/Insurgo_2022-06-15.asc"
@tlaurion
tlaurion / Docker-on-qubes.md
Last active October 5, 2025 14:00 — forked from xahare/Docker-on-qubes.md
How to run docker on Qubes-OS

Docker on Qubes

As of qubes 4.x and docker 19+, the below method now works again. Debian-10 added with bind-dir hack works out of the box again. Dont know about other templates.

(Docker)[https://www.docker.com] a software container platform. You may have heard of it.

(Qubes-OS)[https://www.qubes-os.org] "A Reasonably Secure Operating System"

It takes a little work to get Docker running on qubes because you have to modify a templatevm. But, once you do it, you have the ease of compartmentalization qubes is famous for.

@tlaurion
tlaurion / qvm-portfwd-iptables
Created November 20, 2018 15:54 — forked from Joeviocoe/qvm-portfwd-iptables
Qubes-os port forwarding to allow external connections
#!/bin/sh
# Inspired by https://gist.github.com/daktak/f887352d564b54f9e529404cc0eb60d5
# Inspired by https://gist.github.com/jpouellet/d8cd0eb8589a5b9bf0c53a28fc530369
ip() { qvm-prefs -g -- "$1" ip; }
netvm() { qvm-prefs -g -- "$1" netvm; }
forward() {
local from_domain=$1
local to_domain=$2
@tlaurion
tlaurion / qvm-port-forward.sh
Created November 15, 2018 20:56 — forked from Ashaman-/qvm-port-forward.sh
Forwards a specified port to a specified VM, auto-detecting its NetVM chain. (Qubes OS)
#!/bin/sh
# Inspired by https://gist.github.com/daktak/f887352d564b54f9e529404cc0eb60d5
ip() { qvm-ls --fields ip --raw-data -- "$1"; }
netvm() { qvm-prefs -g -- "$1" netvm; }
forward() {
local from_domain=$1
local to_domain=$2