Operating System Update Qubes 4.0.2, using virtualization for application isolation

A year after the last release published operating system update Qubes 4.0.2, implementing the idea of using a hypervisor for strict isolation of applications and OS components (each class of applications and system services runs in separate virtual machines). For installation, prepared the installation image is 4.6 GB. For operation, a system with 4 GB of RAM and a 64-bit Intel or AMD CPU with support for VT-x with EPT/AMD-v with RVI and VT-d/AMD IOMMU is required, preferably with an Intel GPU (NVIDIA and AMD GPUs are not adequately tested). The new release only notes updates for the software versions that make up the base system environment (dom0). Templates are available for creating virtual environments based on Fedora 30, Debian 10, and a system with 4 GB of RAM and a 64-bit Intel or AMD CPU with support for VT-x with EPT / AMD-v with RVI and VT-d / AMD IOMMU; the presence of Intel GPU is preferred (NVIDIA and AMD GPUs are not well tested).

An update for the Qubes operating system has been created.

In this release, the versions of the software that form the basic system environment (dom0) have been updated, including a transition to the Linux kernel 4.19 (previously, kernel 4.14 was used). The templates
for creating virtual environments have been updated to Fedora 30, Debian 10, and Applications in Qubes are categorized based on the importance of the data processed and the tasks solved; each class of applications, as well as system services (network subsystem, storage management, etc.). When a user launches an application from the menu, that application starts in a specific virtual machine, which runs a separate X server, a simplified window manager, and a placeholder video driver that streams the output to the management environment in composite mode. Applications are seamlessly available within a single desktop and are highlighted with different window border colors for visual distinction. Each environment has read access to the underlying root file system and local storage, which does not overlap with the storage of other environments. The user interface is based on Xfce..

Source: opennet.ru