Long Wiki Edits Thread

[torjunkie]

@mig5

The docs look pretty good. A couple of suggestions/notes however:

All fixed.

@Patrick

Microcode needs to be installed on the host.

• Not the default in Linux, Debian? dpkg -l | grep microcode
• Default in Qubes? dom0: dnf list | grep microcode

I didn’t add that to that Firmware section. You want those steps there somewhere?

@Algernon

Small nitpick: ARM is less affected and the processor in the rpi is not affected at all. In case your processor is affected you should always install patches on the host/bare metal.

Fixed.

@Patrick

Assumption is too quick here. Virtualizers are very different. KVM is inside Linux kernel and Qubes (Xen) is a microkernel. A good pointer for research very much so indeed.

And not widely known in community / explained in wiki (much). Hence why Xen only has low 100s in identified bugs, where Linux / Microsoft is through the roof. Will note & add that link to microkernel research i.e. you’re screwed on normal Linux platform by comparison.

Yet another reason to run Qubes, and have a small target at the core of your system.