aronowski

> Especially since most Windows devices have randomized hostnames set at install time, random hostnames will be less suspicious in a PCAP One can configure their workstation so ultimately `sys-net`...

@mithro @umarcor There already are free rebuilds of RHEL 8 and 9 like [EuroLinux](https://en.euro-linux.com/eurolinux/what-is/). Would it be possible to use it as a base?

@umarcor I'd still be opting for EuroLinux - the company has a way faster release cycle than Rocky. We can compare them on Distrowatch: - https://distrowatch.com/table.php?distribution=eurolinux Feature | 9.0 |...

- Clicking on the qui-domains widget and selecting the "Run Terminal" option spawns xterm instead of ptyxis - Ptyxis isn't allowlisted as a menu entry - proposed solution: https://github.com/QubesOS/qubes-builder-rpm/pull/139 -...

@bennyvasquez, I'd definitely add some sort of verification method to ensure the downloaded CA certificate is legitimate. Back then I wasn't sure, if and how often it would be rotated...

> Does Mesa 24.2.x fix this? Initial tests in an `archlinux` template-based AppVM show that things look OK: ``` $ pacman -Q mesa mesa 1:24.2.2-1 ``` Though I'd still keep...

I'd recommend gathering a bit of debug information, so as to make sure it's indeed a Xen-related regression, rather than [trying to load an unsupported graphics driver of the VMware...

An attempt from today's laboratory session. > 1. Sign grubx64.efi with a dedicated key. I left this out as of today, since to make our desired chain work as intended...

Last week I did some work regarding shim-unsigned for Qubes OS, so GRUB2 works fine with the shim_lock protocol. Please fork my [qubes-shim-unsigned repository](https://github.com/aronowski/qubes-shim-unsigned), add the Qubes CA certificate there...

> but `decode-dimms` likely still doesn't have support for DDR5. Looking through mailing lists I see some mentions that there needs to be support added for DDR5 to this tool...