COMO CRIAR E USAR TEMPLATE E APPVM NO QUBES: OS ERROS MORTAIS DE USO QUE VOCÊ PRECISA EVITAR

COMO CRIAR E USAR TEMPLATE E APPVM NO QUBES: OS ERROS MORTAIS DE USO QUE VOCÊ PRECISA EVITAR

by Leandro Santos

Applied Sciences & Engineering Computing & Cybersecurity ULJOpen source and other operating systemsULJLLinux
🎙 Leandro Santos 👥 6K 📅 November 3, 2025 ⏱ 91 min 👁 465 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

Qubes OStemplateappVMsecurityXen

Summary

This tutorial by Leandro Santos explains how to create and use templates and appVMs in Qubes OS, emphasizing the security benefits of its compartmentalization architecture. The video begins with an overview of the Qube Manager interface, showing how to list and manage templates and appVMs. The author explains the fundamental concept: templates contain the root filesystem and are always kept offline, while appVMs run as temporary copies, ensuring that any malware affecting the root is destroyed on shutdown. He demonstrates this by installing a browser via apt in an appVM, which disappears after reboot, while user-level installations persist. The tutorial covers installing and reinstalling templates via the dom0 terminal using commands like ‘qvm-template list’ and ‘sudo qubes-dom0-update –action=reinstall’. It also discusses adjusting storage limits for templates and appVMs, noting that appVM limits are constrained by the template’s maximum. The author advises never connecting templates to the internet and mentions an erratum correcting a previous claim about template updates, explaining that templates can be updated offline via a dedicated update VM. The video includes promotional content for the author’s courses and consulting services.

182 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable practical knowledge for Qubes OS users, demonstrating the security model through hands-on examples. The argumentation is clear and logical, explaining why the template/appVM separation enhances security by making root-level changes ephemeral. The author effectively illustrates the persistence of user-level files versus the volatility of system-level changes. However, the presentation is somewhat informal, with occasional digressions and a self-correction (erratum) that could confuse viewers. The technical explanations are sound and based on direct experience, but the video could benefit from a more structured approach.

Scientific Rigor, Source Quality, Title Accuracy

The tutorial is based on the author’s direct experience with Qubes OS, and he references the official Qubes documentation and repository. The erratum demonstrates a commitment to accuracy, as he corrects a previous mistake about template updates. The title accurately reflects the content, focusing on creating and using templates and appVMs. The video includes promotional segments for the author’s courses, which are clearly separated from the technical content. Overall, the scientific rigor is acceptable for a tutorial, though it lacks formal citations and relies on anecdotal evidence.

189 words

Title / Content Match

The title accurately reflects the content, which focuses on creating and using templates and appVMs in Qubes OS, including common usage mistakes.

Quality & Reliability

7/10

The tutorial is technically accurate and demonstrates hands-on experience with Qubes OS, but it contains an erratum acknowledging an earlier mistake about template updates, and the presentation is informal with some digressions.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

  • Qubes OS Documentation — Official documentation confirming the template/appVM architecture and security model.
  • Xen Project — The hypervisor used by Qubes OS, supporting the isolation described.

Contribution & Novelties

The video provides a practical, hands-on tutorial for managing templates and appVMs in Qubes OS, emphasizing the security benefits of its compartmentalization. It clarifies common misconceptions, such as the need to keep templates offline and the volatility of root-level changes. The author’s erratum adds credibility by correcting a previous error. The tutorial is particularly useful for beginners transitioning from traditional Linux to Qubes OS.

Pour aller plus loin :

103 words

Radar Profile

The radar profile shows high scores in quantity of information and technical level, reflecting the detailed tutorial content. Quality and reliability are slightly lower due to the informal presentation and the erratum, but overall the video is a valuable resource for Qubes OS users.

Reliability 7/10